# Flog Txt Version 1
# Analyzer Version: 3.1.2
# Analyzer Build Date: Oct 28 2019 11:51:53
# Log Creation Date: 02.01.2020 10:04:25.694

Process:
	id = "1"
	image_name = "xsfpbk.exe"
	filename = "c:\\users\\fd1hvy\\desktop\\xsfpbk.exe"
	page_root = "0x7b80e000"
	os_pid = "0xcf0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\xsfpbk.exe\" "
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0xcec

	[0096.633] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x75e90000
	[0096.634] GetProcAddress (hModule=0x75e90000, lpProcName="WriteFile") returned 0x75eff180
	[0096.635] GetProcAddress (hModule=0x75e90000, lpProcName="WriteConsoleW") returned 0x75eff500
	[0096.635] GetProcAddress (hModule=0x75e90000, lpProcName="WaitForSingleObject") returned 0x75efeca0
	[0096.635] GetProcAddress (hModule=0x75e90000, lpProcName="VirtualQuery") returned 0x75ea6a70
	[0096.635] GetProcAddress (hModule=0x75e90000, lpProcName="VirtualFree") returned 0x75ea69d0
	[0096.635] GetProcAddress (hModule=0x75e90000, lpProcName="VirtualAlloc") returned 0x75ea6970
	[0096.635] GetProcAddress (hModule=0x75e90000, lpProcName="SwitchToThread") returned 0x75ea6790
	[0096.635] GetProcAddress (hModule=0x75e90000, lpProcName="SetWaitableTimer") returned 0x75efec60
	[0096.635] GetProcAddress (hModule=0x75e90000, lpProcName="SetUnhandledExceptionFilter") returned 0x75ea6720
	[0096.636] GetProcAddress (hModule=0x75e90000, lpProcName="SetProcessPriorityBoost") returned 0x75ea83d0
	[0096.636] GetProcAddress (hModule=0x75e90000, lpProcName="SetEvent") returned 0x75efec50
	[0096.636] GetProcAddress (hModule=0x75e90000, lpProcName="SetErrorMode") returned 0x75ea6500
	[0096.636] GetProcAddress (hModule=0x75e90000, lpProcName="SetConsoleCtrlHandler") returned 0x75eff4d0
	[0096.636] GetProcAddress (hModule=0x75e90000, lpProcName="LoadLibraryA") returned 0x75ea5a80
	[0096.636] GetProcAddress (hModule=0x75e90000, lpProcName="LoadLibraryW") returned 0x75ea5ae0
	[0096.636] GetProcAddress (hModule=0x75e90000, lpProcName="GetSystemInfo") returned 0x75ea54d0
	[0096.636] GetProcAddress (hModule=0x75e90000, lpProcName="GetStdHandle") returned 0x75ea5330
	[0096.636] GetProcAddress (hModule=0x75e90000, lpProcName="GetQueuedCompletionStatus") returned 0x75ea52e0
	[0096.637] GetProcAddress (hModule=0x75e90000, lpProcName="GetProcessAffinityMask") returned 0x75ee3230
	[0096.637] GetProcAddress (hModule=0x75e90000, lpProcName="GetProcAddress") returned 0x75ea51b0
	[0096.637] GetProcAddress (hModule=0x75e90000, lpProcName="GetEnvironmentStringsW") returned 0x75ea4eb0
	[0096.637] GetProcAddress (hModule=0x75e90000, lpProcName="GetConsoleMode") returned 0x75eff450
	[0096.637] GetProcAddress (hModule=0x75e90000, lpProcName="FreeEnvironmentStringsW") returned 0x75ea4c20
	[0096.637] GetProcAddress (hModule=0x75e90000, lpProcName="ExitProcess") returned 0x75ea3cb0
	[0096.637] GetProcAddress (hModule=0x75e90000, lpProcName="DuplicateHandle") returned 0x75efeac0
	[0096.637] GetProcAddress (hModule=0x75e90000, lpProcName="CreateThread") returned 0x75ea46b0
	[0096.637] GetProcAddress (hModule=0x75e90000, lpProcName="CreateIoCompletionPort") returned 0x75ea4530
	[0096.638] GetProcAddress (hModule=0x75e90000, lpProcName="CreateEventA") returned 0x75efeb00
	[0096.638] GetProcAddress (hModule=0x75e90000, lpProcName="CloseHandle") returned 0x75efeab0
	[0096.638] GetProcAddress (hModule=0x75e90000, lpProcName="AddVectoredExceptionHandler") returned 0x77bd5d20
	[0096.638] LoadLibraryA (lpLibFileName="winmm.dll") returned 0x744f0000
	[0096.638] GetProcAddress (hModule=0x744f0000, lpProcName="timeEndPeriod") returned 0x744fd030
	[0096.638] GetProcAddress (hModule=0x744f0000, lpProcName="timeBeginPeriod") returned 0x744f4350
	[0096.638] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x746a0000
	[0096.639] GetProcAddress (hModule=0x746a0000, lpProcName="WSAGetOverlappedResult") returned 0x746b39f0
	[0096.639] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x19ff60 | out: lpflOldProtect=0x19ff60*=0x2) returned 1
	[0097.624] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0x19ff60 | out: lpflOldProtect=0x19ff60*=0x4) returned 1
	[0097.625] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x75e90000
	[0097.625] GetProcAddress (hModule=0x75e90000, lpProcName="AddDllDirectory") returned 0x7500bbb0
	[0097.626] GetProcAddress (hModule=0x75e90000, lpProcName="AddVectoredContinueHandler") returned 0x77c628c0
	[0097.626] GetProcAddress (hModule=0x75e90000, lpProcName="GetQueuedCompletionStatusEx") returned 0x75ea5300
	[0097.626] GetProcAddress (hModule=0x75e90000, lpProcName="LoadLibraryExW") returned 0x75ea5ac0
	[0097.626] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x761b0000
	[0098.584] GetProcAddress (hModule=0x761b0000, lpProcName="SystemFunction036") returned 0x746729e0
	[0098.584] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77bb0000
	[0098.585] GetProcAddress (hModule=0x77bb0000, lpProcName="NtWaitForSingleObject") returned 0x77c21d30
	[0098.585] GetProcAddress (hModule=0x77bb0000, lpProcName="wine_get_version") returned 0x0
	[0098.585] SetErrorMode (uMode=0x2) returned 0x0
	[0098.585] SetErrorMode (uMode=0x8003) returned 0x2
	[0098.585] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x44aec0) returned 0x7e7360
	[0098.586] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x44aed0) returned 0x0
	[0098.587] SetConsoleCtrlHandler (HandlerRoutine=0x44aee0, Add=1) returned 1
	[0098.587] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0098.589] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x19fe8c, lpSystemAffinityMask=0x19fe88 | out: lpProcessAffinityMask=0x19fe8c, lpSystemAffinityMask=0x19fe88) returned 1
	[0098.590] GetSystemInfo (in: lpSystemInfo=0x19fec8 | out: lpSystemInfo=0x19fec8*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) 
	[0098.590] SetProcessPriorityBoost (hProcess=0xffffffff, bDisablePriorityBoost=1) returned 1
	[0098.671] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x700000
	[0098.671] VirtualAlloc (lpAddress=0x0, dwSize=0x10220000, flAllocationType=0x2000, flProtect=0x4) returned 0xda0000
	[0098.678] VirtualAlloc (lpAddress=0x800000, dwSize=0x20400000, flAllocationType=0x2000, flProtect=0x4) returned 0x0
	[0098.678] VirtualAlloc (lpAddress=0x0, dwSize=0x20400000, flAllocationType=0x2000, flProtect=0x4) returned 0x10fc0000
	[0098.737] VirtualFree (lpAddress=0x10fc0000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0098.737] VirtualAlloc (lpAddress=0x11000000, dwSize=0x20000000, flAllocationType=0x2000, flProtect=0x4) returned 0x11000000
	[0098.751] VirtualAlloc (lpAddress=0x11000000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0x11000000
	[0098.821] VirtualAlloc (lpAddress=0xda0000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0xda0000
	[0098.822] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x30000
	[0098.823] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x750000
	[0098.824] SystemFunction036 (in: RandomBuffer=0x6b4f40, RandomBufferLength=0x40 | out: RandomBuffer=0x6b4f40) returned 1
	[0098.825] GetEnvironmentStringsW () returned 0x7e8c28*
	[0098.827] FreeEnvironmentStringsW (penv=0x7e8c28) returned 1
	[0098.829] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x19fea4, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x19fea4*=0x114) returned 1
	[0098.829] VirtualQuery (in: lpAddress=0x19feb4, lpBuffer=0x19feb4, dwLength=0x1c | out: lpBuffer=0x19feb4*(BaseAddress=0x19f000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0098.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x110281c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118
	[0098.831] CloseHandle (hObject=0x118) returned 1
	[0098.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11028380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118
	[0098.832] CloseHandle (hObject=0x118) returned 1
	[0098.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11028540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118
	[0098.833] CloseHandle (hObject=0x118) returned 1
	[0098.834] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x118
	[0098.834] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0098.961] LoadLibraryExW (lpLibFileName="kernel32.dll", hFile=0x0, dwFlags=0x800) returned 0x75e90000
	[0098.962] GetProcAddress (hModule=0x75e90000, lpProcName="GetStdHandle") returned 0x75ea5330
	[0098.962] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0098.963] GetProcAddress (hModule=0x75e90000, lpProcName="SetHandleInformation") returned 0x75efeae0
	[0098.963] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0098.963] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0098.963] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0098.963] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0098.963] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0098.965] LoadLibraryExW (lpLibFileName="ws2_32.dll", hFile=0x0, dwFlags=0x800) returned 0x746a0000
	[0098.965] GetProcAddress (hModule=0x746a0000, lpProcName="WSAStartup") returned 0x746a5b40
	[0098.966] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x11024e2c | out: lpWSAData=0x11024e2c) returned 0
	[0098.981] GetProcAddress (hModule=0x75e90000, lpProcName="CancelIoEx") returned 0x75ea42b0
	[0098.983] GetProcAddress (hModule=0x75e90000, lpProcName="SetFileCompletionNotificationModes") returned 0x75ee50d0
	[0098.984] GetProcAddress (hModule=0x746a0000, lpProcName="WSAEnumProtocolsW") returned 0x746bb2f0
	[0098.984] WSAEnumProtocolsW (in: lpiProtocols=0x11062f90, lpProtocolBuffer=0x11062f98, lpdwBufferLength=0x11062f8c | out: lpProtocolBuffer=0x11062f98, lpdwBufferLength=0x11062f8c) returned 4
	[0099.380] SetEvent (hEvent=0x150) returned 1
	[0099.380] GetProcAddress (hModule=0x75e90000, lpProcName="GetConsoleMode") returned 0x75eff450
	[0099.380] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0x11067f88 | out: lpMode=0x11067f88) returned 0
	[0099.381] SetEvent (hEvent=0x134) returned 1
	[0099.381] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x10fc0000
	[0099.382] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0x11067f88 | out: lpMode=0x11067f88) returned 0
	[0099.382] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0x11067f88 | out: lpMode=0x11067f88) returned 0
	[0099.382] GetProcAddress (hModule=0x75e90000, lpProcName="GetCommandLineW") returned 0x75ea4cc0
	[0099.382] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\xsfpbk.exe\" "
	[0099.389] GetProcAddress (hModule=0x75e90000, lpProcName="GetEnvironmentVariableW") returned 0x75ea4fb0
	[0099.389] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11090000, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0099.390] GetProcAddress (hModule=0x75e90000, lpProcName="GetFileAttributesExW") returned 0x75efef00
	[0099.390] GetFileAttributesExW (in: lpFileName="sc.com" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.com"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.391] GetProcAddress (hModule=0x75e90000, lpProcName="CreateFileW") returned 0x75efed10
	[0099.391] CreateFileW (lpFileName="sc.com" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.391] GetFileAttributesExW (in: lpFileName="sc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.exe"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.391] CreateFileW (lpFileName="sc.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.391] GetFileAttributesExW (in: lpFileName="sc.bat" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.bat"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.392] CreateFileW (lpFileName="sc.bat" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.392] GetFileAttributesExW (in: lpFileName="sc.cmd" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.cmd"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.392] CreateFileW (lpFileName="sc.cmd" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.392] GetFileAttributesExW (in: lpFileName="sc.vbs" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.vbs"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.392] CreateFileW (lpFileName="sc.vbs" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.393] GetFileAttributesExW (in: lpFileName="sc.vbe" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.vbe"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.393] CreateFileW (lpFileName="sc.vbe" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.393] GetFileAttributesExW (in: lpFileName="sc.js" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.js"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.393] CreateFileW (lpFileName="sc.js" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.393] GetFileAttributesExW (in: lpFileName="sc.jse" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.jse"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.394] CreateFileW (lpFileName="sc.jse" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.394] GetFileAttributesExW (in: lpFileName="sc.wsf" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.wsf"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.394] CreateFileW (lpFileName="sc.wsf" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.394] GetFileAttributesExW (in: lpFileName="sc.wsh" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.wsh"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.394] CreateFileW (lpFileName="sc.wsh" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.394] GetFileAttributesExW (in: lpFileName="sc.msc" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.msc"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.394] CreateFileW (lpFileName="sc.msc" (normalized: "c:\\users\\fd1hvy\\desktop\\sc.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.395] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x110900d0, nSize=0x64 | out: lpBuffer="") returned 0xbc
	[0099.395] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x11096000, nSize=0xbc | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0099.396] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.com" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.com"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.408] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.com" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.416] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.exe"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.483] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.493] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.bat" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.bat"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.504] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.bat" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.513] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.cmd" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.cmd"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.928] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.cmd" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.938] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.vbs" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.vbs"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0099.947] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.vbs" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0099.959] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.vbe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.vbe"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0100.050] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.vbe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0100.059] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.js" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.js"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0100.068] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.js" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0100.158] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.jse" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.jse"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0100.169] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.jse" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0100.179] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.wsf" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.wsf"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0100.188] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.wsf" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0100.260] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.wsh" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.wsh"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0100.270] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.wsh" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0100.279] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.msc" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.msc"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0100.290] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\sc.msc" (normalized: "c:\\programdata\\oracle\\java\\javapath\\sc.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0100.406] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\sc.com" (normalized: "c:\\windows\\system32\\sc.com"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0100.407] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\sc.com" (normalized: "c:\\windows\\system32\\sc.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0100.407] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\sc.exe" (normalized: "c:\\windows\\system32\\sc.exe"), fInfoLevelId=0x0, lpFileInformation=0x110679ec | out: lpFileInformation=0x110679ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc7e8a3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6fc7e8a3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6fc7e8a3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec00)) returned 1
	[0100.409] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x110901a0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0100.409] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\sc.exe" (normalized: "c:\\windows\\system32\\sc.exe"), fInfoLevelId=0x0, lpFileInformation=0x110678ec | out: lpFileInformation=0x110678ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc7e8a3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6fc7e8a3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6fc7e8a3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec00)) returned 1
	[0100.409] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0100.410] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x11067c28 | out: lpMode=0x11067c28) returned 0
	[0100.410] GetProcAddress (hModule=0x75e90000, lpProcName="CreatePipe") returned 0x75ea4590
	[0100.410] CreatePipe (in: hReadPipe=0x11067c6c, hWritePipe=0x11067c70, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x11067c6c*=0x15c, hWritePipe=0x11067c70*=0x160) returned 1
	[0100.413] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x11067c44 | out: lpMode=0x11067c44) returned 0
	[0100.413] GetConsoleMode (in: hConsoleHandle=0x160, lpMode=0x11067c44 | out: lpMode=0x11067c44) returned 0
	[0100.413] CreatePipe (in: hReadPipe=0x11067c6c, hWritePipe=0x11067c70, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x11067c6c*=0x164, hWritePipe=0x11067c70*=0x168) returned 1
	[0100.413] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x11067c44 | out: lpMode=0x11067c44) returned 0
	[0100.413] GetConsoleMode (in: hConsoleHandle=0x168, lpMode=0x11067c44 | out: lpMode=0x11067c44) returned 0
	[0100.413] GetProcAddress (hModule=0x75e90000, lpProcName="GetEnvironmentStringsW") returned 0x75ea4eb0
	[0100.414] GetEnvironmentStringsW () returned 0x7f03e0*
	[0100.416] GetProcAddress (hModule=0x75e90000, lpProcName="FreeEnvironmentStringsW") returned 0x75ea4c20
	[0100.416] FreeEnvironmentStringsW (penv=0x7f03e0) returned 1
	[0100.416] GetProcAddress (hModule=0x75e90000, lpProcName="GetCurrentProcess") returned 0x75efea10
	[0100.417] GetCurrentProcess () returned 0xffffffff
	[0100.417] GetProcAddress (hModule=0x75e90000, lpProcName="DuplicateHandle") returned 0x75efeac0
	[0100.417] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x154, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1104e4a0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1104e4a0*=0x16c) returned 1
	[0100.417] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x160, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1104e4a4, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1104e4a4*=0x170) returned 1
	[0100.417] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x168, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1104e4a8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1104e4a8*=0x174) returned 1
	[0100.418] GetProcAddress (hModule=0x75e90000, lpProcName="CreateProcessW") returned 0x75ea4610
	[0100.418] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\sc.exe", lpCommandLine="sc queryex type= service", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x110ba000, lpCurrentDirectory=0x0, lpStartupInfo=0x11067bf4*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x16c, hStdOutput=0x170, hStdError=0x174), lpProcessInformation=0x11067bd0 | out: lpCommandLine="sc queryex type= service", lpProcessInformation=0x11067bd0*(hProcess=0x17c, hThread=0x178, dwProcessId=0xc48, dwThreadId=0xa84)) returned 1
	[0101.113] SetEvent (hEvent=0x150) returned 1
	[0101.113] GetProcAddress (hModule=0x75e90000, lpProcName="CloseHandle") returned 0x75efeab0
	[0101.114] CloseHandle (hObject=0x178) returned 1
	[0101.114] CloseHandle (hObject=0x174) returned 1
	[0101.114] CloseHandle (hObject=0x170) returned 1
	[0101.114] CloseHandle (hObject=0x16c) returned 1
	[0101.115] CloseHandle (hObject=0x154) returned 1
	[0101.115] CloseHandle (hObject=0x160) returned 1
	[0101.115] CloseHandle (hObject=0x168) returned 1
	[0101.115] SetEvent (hEvent=0x12c) returned 1
	[0101.115] GetProcAddress (hModule=0x75e90000, lpProcName="WaitForSingleObject") returned 0x75efeca0
	[0101.116] WaitForSingleObject (hHandle=0x17c, dwMilliseconds=0xffffffff) returned 0x0
	[0112.262] GetProcAddress (hModule=0x75e90000, lpProcName="GetExitCodeProcess") returned 0x75ea3c60
	[0112.271] GetExitCodeProcess (in: hProcess=0x17c, lpExitCode=0x11067d2c | out: lpExitCode=0x11067d2c*=0x0) returned 1
	[0112.272] GetProcAddress (hModule=0x75e90000, lpProcName="GetProcessTimes") returned 0x75ea5280
	[0112.272] GetProcessTimes (in: hProcess=0x17c, lpCreationTime=0x1100e240, lpExitTime=0x1100e248, lpKernelTime=0x1100e250, lpUserTime=0x1100e258 | out: lpCreationTime=0x1100e240, lpExitTime=0x1100e248, lpKernelTime=0x1100e250, lpUserTime=0x1100e258) returned 1
	[0112.272] CloseHandle (hObject=0x17c) returned 1
	[0112.273] SetEvent (hEvent=0x134) returned 1
	[0112.274] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x5) returned 0x102
	[0112.441] SetEvent (hEvent=0x134) returned 1
	[0112.705] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x31790000
	[0113.093] VirtualAlloc (lpAddress=0x0, dwSize=0xafc7c, flAllocationType=0x3000, flProtect=0x4) returned 0x317d0000
	[0114.009] VirtualAlloc (lpAddress=0x11400000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0x11400000
	[0114.247] VirtualAlloc (lpAddress=0xde1000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0xde1000
	[0114.261] SetEvent (hEvent=0x134) returned 1
	[0114.261] SetEvent (hEvent=0x12c) returned 1
	[0114.262] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0114.525] SetEvent (hEvent=0x150) returned 1
	[0114.526] SetEvent (hEvent=0x124) returned 1
	[0114.526] SetEvent (hEvent=0x12c) returned 1
	[0114.526] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0114.883] SetEvent (hEvent=0x134) returned 1
	[0114.883] SetEvent (hEvent=0x12c) returned 1
	[0114.883] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0115.030] SetEvent (hEvent=0x124) returned 1
	[0115.030] SetEvent (hEvent=0x12c) returned 1
	[0115.030] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0115.205] SetEvent (hEvent=0x134) returned 1
	[0115.210] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0115.253] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0115.254] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x7c0000
	[0115.254] SetEvent (hEvent=0x134) returned 1
	[0115.255] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0115.301] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0115.322] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x110120d0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0115.322] GetFileAttributesExW (in: lpFileName="vssadmin.com" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.com"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.333] CreateFileW (lpFileName="vssadmin.com" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.334] GetFileAttributesExW (in: lpFileName="vssadmin.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.exe"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.334] CreateFileW (lpFileName="vssadmin.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.412] GetFileAttributesExW (in: lpFileName="vssadmin.bat" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.bat"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.412] CreateFileW (lpFileName="vssadmin.bat" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.412] GetFileAttributesExW (in: lpFileName="vssadmin.cmd" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.413] CreateFileW (lpFileName="vssadmin.cmd" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.413] GetFileAttributesExW (in: lpFileName="vssadmin.vbs" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.413] CreateFileW (lpFileName="vssadmin.vbs" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.413] GetFileAttributesExW (in: lpFileName="vssadmin.vbe" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.vbe"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.414] CreateFileW (lpFileName="vssadmin.vbe" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.414] GetFileAttributesExW (in: lpFileName="vssadmin.js" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.js"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.414] CreateFileW (lpFileName="vssadmin.js" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.414] GetFileAttributesExW (in: lpFileName="vssadmin.jse" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.jse"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.415] CreateFileW (lpFileName="vssadmin.jse" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.415] GetFileAttributesExW (in: lpFileName="vssadmin.wsf" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.wsf"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.415] CreateFileW (lpFileName="vssadmin.wsf" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.415] GetFileAttributesExW (in: lpFileName="vssadmin.wsh" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.wsh"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.415] CreateFileW (lpFileName="vssadmin.wsh" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.416] GetFileAttributesExW (in: lpFileName="vssadmin.msc" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.msc"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.416] CreateFileW (lpFileName="vssadmin.msc" (normalized: "c:\\users\\fd1hvy\\desktop\\vssadmin.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.416] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x110121a0, nSize=0x64 | out: lpBuffer="") returned 0xbc
	[0115.416] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x112f4000, nSize=0xbc | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0115.416] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.com" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.com"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.430] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.com" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.439] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.exe"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.518] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.529] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.bat" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.bat"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.538] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.bat" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.549] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.cmd" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.cmd"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.865] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.cmd" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.875] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.vbs" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.884] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.vbs" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.894] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.vbe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.vbe"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0116.001] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.vbe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0116.011] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.js" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.js"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0116.020] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.js" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0116.029] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.jse" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.jse"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0116.091] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.jse" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0116.101] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.wsf" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.wsf"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0116.109] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.wsf" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0116.187] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.wsh" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.wsh"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0116.199] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.wsh" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0116.209] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.msc" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.msc"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0116.225] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.msc" (normalized: "c:\\programdata\\oracle\\java\\javapath\\vssadmin.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0116.285] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.com" (normalized: "c:\\windows\\system32\\vssadmin.com"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0116.287] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\vssadmin.com" (normalized: "c:\\windows\\system32\\vssadmin.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0116.287] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.exe" (normalized: "c:\\windows\\system32\\vssadmin.exe"), fInfoLevelId=0x0, lpFileInformation=0x1105ba4c | out: lpFileInformation=0x1105ba4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6c03f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6b6c03f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6b6c03f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ae00)) returned 1
	[0116.301] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x11012a90, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0116.302] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.exe" (normalized: "c:\\windows\\system32\\vssadmin.exe"), fInfoLevelId=0x0, lpFileInformation=0x1105b984 | out: lpFileInformation=0x1105b984*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6c03f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6b6c03f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6b6c03f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ae00)) returned 1
	[0116.302] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x17c
	[0116.303] GetConsoleMode (in: hConsoleHandle=0x17c, lpMode=0x1105bcc0 | out: lpMode=0x1105bcc0) returned 0
	[0116.304] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0116.304] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x1105bca4 | out: lpMode=0x1105bca4) returned 0
	[0116.304] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x15c
	[0116.304] GetConsoleMode (in: hConsoleHandle=0x15c, lpMode=0x1105bca4 | out: lpMode=0x1105bca4) returned 0
	[0116.304] GetEnvironmentStringsW () returned 0x7f03e0*
	[0116.305] FreeEnvironmentStringsW (penv=0x7f03e0) returned 1
	[0116.305] GetCurrentProcess () returned 0xffffffff
	[0116.305] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x17c, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1142fb80, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1142fb80*=0x168) returned 1
	[0116.305] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x164, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1142fb84, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1142fb84*=0x160) returned 1
	[0116.305] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x15c, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1142fb88, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x1142fb88*=0x154) returned 1
	[0116.306] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\vssadmin.exe", lpCommandLine="vssadmin delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x1140ec00, lpCurrentDirectory=0x0, lpStartupInfo=0x1105bc8c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x168, hStdOutput=0x160, hStdError=0x154), lpProcessInformation=0x1105bc68 | out: lpCommandLine="vssadmin delete shadows /all /quiet", lpProcessInformation=0x1105bc68*(hProcess=0x170, hThread=0x16c, dwProcessId=0x824, dwThreadId=0xd30)) returned 1
	[0117.139] SetEvent (hEvent=0x150) returned 1
	[0117.139] CloseHandle (hObject=0x16c) returned 1
	[0117.140] CloseHandle (hObject=0x154) returned 1
	[0117.140] CloseHandle (hObject=0x160) returned 1
	[0117.140] CloseHandle (hObject=0x168) returned 1
	[0117.140] CloseHandle (hObject=0x17c) returned 1
	[0117.140] CloseHandle (hObject=0x164) returned 1
	[0117.140] CloseHandle (hObject=0x15c) returned 1
	[0117.140] SetEvent (hEvent=0x12c) returned 1
	[0117.149] CreateFileW (lpFileName="Z:\\" (normalized: "z:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.150] GetProcAddress (hModule=0x75e90000, lpProcName="FindFirstFileW") returned 0x75efedf0
	[0117.151] FindFirstFileW (in: lpFileName="Z:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.157] CreateFileW (lpFileName="A:\\" (normalized: "a:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.340] FindFirstFileW (in: lpFileName="A:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.346] CreateFileW (lpFileName="N:\\" (normalized: "n:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.347] FindFirstFileW (in: lpFileName="N:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.353] CreateFileW (lpFileName="O:\\" (normalized: "o:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.353] FindFirstFileW (in: lpFileName="O:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.359] CreateFileW (lpFileName="P:\\" (normalized: "p:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.360] FindFirstFileW (in: lpFileName="P:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.365] CreateFileW (lpFileName="Q:\\" (normalized: "q:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.367] FindFirstFileW (in: lpFileName="Q:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.372] CreateFileW (lpFileName="R:\\" (normalized: "r:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.372] FindFirstFileW (in: lpFileName="R:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.377] CreateFileW (lpFileName="S:\\" (normalized: "s:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.582] FindFirstFileW (in: lpFileName="S:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.587] CreateFileW (lpFileName="H:\\" (normalized: "h:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.587] FindFirstFileW (in: lpFileName="H:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.592] CreateFileW (lpFileName="D:\\" (normalized: "d:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.593] FindFirstFileW (in: lpFileName="D:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.598] CreateFileW (lpFileName="E:\\" (normalized: "e:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.599] FindFirstFileW (in: lpFileName="E:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.604] CreateFileW (lpFileName="F:\\" (normalized: "f:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.605] FindFirstFileW (in: lpFileName="F:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.610] CreateFileW (lpFileName="G:\\" (normalized: "g:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.611] FindFirstFileW (in: lpFileName="G:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.616] CreateFileW (lpFileName="J:\\" (normalized: "j:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.879] FindFirstFileW (in: lpFileName="J:\\*", lpFindFileData=0x1102dbd8 | out: lpFindFileData=0x1102dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.879] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0118.273] SetEvent (hEvent=0x134) returned 1
	[0118.275] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20
	[0118.276] GetProcAddress (hModule=0x75e90000, lpProcName="SetFileAttributesW") returned 0x75eff100
	[0118.276] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", dwFileAttributes=0x20) returned 1
	[0118.279] LoadLibraryExW (lpLibFileName="kernel32.dll", hFile=0x0, dwFlags=0x800) returned 0x75e90000
	[0118.279] GetProcAddress (hModule=0x75e90000, lpProcName="MoveFileExW") returned 0x75ea4370
	[0118.280] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.tl30z" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.tl30z"), dwFlags=0x1) returned 1
	[0120.919] SetEvent (hEvent=0x150) returned 1
	[0120.919] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.tl30z" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
	[0121.106] GetConsoleMode (in: hConsoleHandle=0x164, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0121.108] ReadFile (in: hFile=0x164, lpBuffer=0x1139a000, nNumberOfBytesToRead=0xa6b2, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1139a000*, lpNumberOfBytesRead=0x11022e18*=0xa6b2, lpOverlapped=0x0) returned 1
	[0121.284] SetEvent (hEvent=0x160) returned 1
	[0121.284] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x761b0000
	[0121.285] GetProcAddress (hModule=0x761b0000, lpProcName="CryptAcquireContextW") returned 0x761cfa40
	[0121.287] CryptAcquireContextW (in: phProv=0x1104e084, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x1104e084*=0x7de7b0) returned 1
	[0127.425] SetEvent (hEvent=0x160) returned 1
	[0127.624] GetProcAddress (hModule=0x761b0000, lpProcName="CryptGenRandom") returned 0x761d0730
	[0127.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113561e0 | out: pbBuffer=0x113561e0) returned 1
	[0127.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11364168 | out: pbBuffer=0x11364168) returned 1
	[0127.626] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113d8802 | out: pbBuffer=0x113d8802) returned 1
	[0127.626] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113d8841 | out: pbBuffer=0x113d8841) returned 1
	[0127.629] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113641b0 | out: pbBuffer=0x113641b0) returned 1
	[0127.637] GetProcAddress (hModule=0x75e90000, lpProcName="GetFileType") returned 0x75efef60
	[0127.638] GetFileType (hFile=0x164) returned 0x1
	[0127.638] GetProcAddress (hModule=0x75e90000, lpProcName="SetFilePointerEx") returned 0x75eff130
	[0127.638] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0127.638] WriteFile (in: hFile=0x164, lpBuffer=0x11188000*, nNumberOfBytesToWrite=0xa6b2, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11188000*, lpNumberOfBytesWritten=0x1133ddfc*=0xa6b2, lpOverlapped=0x1133de08) returned 1
	[0127.640] GetFileType (hFile=0x164) returned 0x1
	[0127.641] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa6b2, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0127.641] GetFileType (hFile=0x164) returned 0x1
	[0127.641] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0127.641] WriteFile (in: hFile=0x164, lpBuffer=0x11122a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11122a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x233, lpOverlapped=0x1133de08) returned 1
	[0127.642] GetFileType (hFile=0x164) returned 0x1
	[0127.642] SetFilePointerEx (in: hFile=0x164, liDistanceToMove=0xa6b2, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0127.642] CloseHandle (hObject=0x164) returned 1
	[0127.650] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.tl30z" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.tl30z")) returned 0x20
	[0127.650] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.tl30z", dwFileAttributes=0x21) returned 1
	[0127.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364170 | out: pbBuffer=0x11364170) returned 1
	[0127.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113d8b02 | out: pbBuffer=0x113d8b02) returned 1
	[0127.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364230 | out: pbBuffer=0x11364230) returned 1
	[0127.652] GetFileType (hFile=0x154) returned 0x1
	[0127.653] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11377de0 | out: lpNewFilePointer=0x0) returned 1
	[0127.653] WriteFile (in: hFile=0x154, lpBuffer=0x113e0c00*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x11377dfc, lpOverlapped=0x11377e08 | out: lpBuffer=0x113e0c00*, lpNumberOfBytesWritten=0x11377dfc*=0x28, lpOverlapped=0x11377e08) returned 1
	[0127.653] GetFileType (hFile=0x154) returned 0x1
	[0127.653] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x11377de0 | out: lpNewFilePointer=0x0) returned 1
	[0127.653] GetFileType (hFile=0x154) returned 0x1
	[0127.654] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11377de0 | out: lpNewFilePointer=0x0) returned 1
	[0127.654] WriteFile (in: hFile=0x154, lpBuffer=0x11123180*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x11377dfc, lpOverlapped=0x11377e08 | out: lpBuffer=0x11123180*, lpNumberOfBytesWritten=0x11377dfc*=0x21e, lpOverlapped=0x11377e08) returned 1
	[0127.898] GetFileType (hFile=0x154) returned 0x1
	[0127.898] SetFilePointerEx (in: hFile=0x154, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x11377de0 | out: lpNewFilePointer=0x0) returned 1
	[0127.898] CloseHandle (hObject=0x154) returned 1
	[0127.901] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.tl30z" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.tl30z")) returned 0x20
	[0127.901] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.tl30z", dwFileAttributes=0x21) returned 1
	[0127.902] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0130.587] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0130.751] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0132.442] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0132.894] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0133.093] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0133.468] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0133.986] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0136.121] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0136.421] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0137.117] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0139.782] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0139.931] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0140.668] SetEvent (hEvent=0x160) returned 1
	[0140.668] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0140.724] SetEvent (hEvent=0x160) returned 1
	[0140.724] SetEvent (hEvent=0x12c) returned 1
	[0140.724] CloseHandle (hObject=0x170) returned 1
	[0140.724] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028" (normalized: "c:\\588bce7c90097ed212\\1028"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x573fbb89, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x573fbb89, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0140.725] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\" (normalized: "c:\\588bce7c90097ed212\\1029"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0140.726] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2330
	[0140.728] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0140.728] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0140.728] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0140.728] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0140.728] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0140.729] FindClose (in: hFindFile=0x7f2330 | out: hFindFile=0x7f2330) returned 1
	[0140.729] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1
	[0140.729] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0140.730] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1
	[0140.731] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1029\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0140.981] SetEvent (hEvent=0x150) returned 1
	[0140.982] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0140.982] WriteFile (in: hFile=0x184, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0140.984] CloseHandle (hObject=0x184) returned 1
	[0141.092] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029" (normalized: "c:\\588bce7c90097ed212\\1029"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x57d2a53e, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x57d2a53e, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0142.673] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\" (normalized: "c:\\588bce7c90097ed212\\1030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0142.674] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1f30
	[0142.677] FindNextFileW (in: hFindFile=0x7f1f30, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0142.678] FindNextFileW (in: hFindFile=0x7f1f30, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0142.678] FindNextFileW (in: hFindFile=0x7f1f30, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0142.678] FindNextFileW (in: hFindFile=0x7f1f30, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0142.678] FindNextFileW (in: hFindFile=0x7f1f30, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0142.678] FindClose (in: hFindFile=0x7f1f30 | out: hFindFile=0x7f1f30) returned 1
	[0142.678] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1
	[0142.679] SetEvent (hEvent=0x160) returned 1
	[0142.679] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0142.680] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1
	[0142.680] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1030\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0142.793] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0142.793] WriteFile (in: hFile=0x16c, lpBuffer=0x113fc000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x113fc000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0142.797] CloseHandle (hObject=0x16c) returned 1
	[0142.867] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030" (normalized: "c:\\588bce7c90097ed212\\1030"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x59243b77, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x59243b77, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0144.427] SetEvent (hEvent=0x150) returned 1
	[0144.428] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\" (normalized: "c:\\588bce7c90097ed212\\1031"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0144.429] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f23f0
	[0144.505] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0144.505] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0144.505] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0144.505] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0144.505] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0144.505] FindClose (in: hFindFile=0x7f23f0 | out: hFindFile=0x7f23f0) returned 1
	[0144.506] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1
	[0144.506] SetEvent (hEvent=0x134) returned 1
	[0144.506] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0144.507] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1
	[0144.507] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1031\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0144.514] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0144.514] WriteFile (in: hFile=0x184, lpBuffer=0x110d2000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x110d2000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0144.518] CloseHandle (hObject=0x184) returned 1
	[0144.522] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031" (normalized: "c:\\588bce7c90097ed212\\1031"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x5999d914, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x5999d914, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0144.522] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\" (normalized: "c:\\588bce7c90097ed212\\1032"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0144.522] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2070
	[0144.524] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0144.524] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0144.524] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0144.524] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0144.524] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0144.524] FindClose (in: hFindFile=0x7f2070 | out: hFindFile=0x7f2070) returned 1
	[0144.524] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1
	[0144.525] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1
	[0144.525] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1
	[0144.526] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1032\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0144.530] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0144.531] WriteFile (in: hFile=0x184, lpBuffer=0x110d2000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x110d2000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0144.560] CloseHandle (hObject=0x184) returned 1
	[0144.563] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032" (normalized: "c:\\588bce7c90097ed212\\1032"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x599c70cc, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x599c70cc, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0144.564] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\" (normalized: "c:\\588bce7c90097ed212\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0144.564] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1eb0
	[0145.195] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0145.195] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0145.195] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0145.196] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0145.196] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0145.196] FindClose (in: hFindFile=0x7f1eb0 | out: hFindFile=0x7f1eb0) returned 1
	[0145.196] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1
	[0145.330] SetEvent (hEvent=0x1b0) returned 1
	[0145.331] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1
	[0145.331] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1
	[0145.331] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1033\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0145.472] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0145.472] WriteFile (in: hFile=0x1c8, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0145.475] CloseHandle (hObject=0x1c8) returned 1
	[0145.614] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033" (normalized: "c:\\588bce7c90097ed212\\1033"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x5a4d71a0, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x5a4d71a0, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0145.871] SetEvent (hEvent=0x150) returned 1
	[0145.871] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\" (normalized: "c:\\588bce7c90097ed212\\1035"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0145.871] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1fb0
	[0145.872] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0145.873] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0145.873] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0145.873] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0145.873] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0145.873] FindClose (in: hFindFile=0x7f1fb0 | out: hFindFile=0x7f1fb0) returned 1
	[0145.873] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1
	[0145.874] SetEvent (hEvent=0x134) returned 1
	[0145.874] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0145.874] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1
	[0145.874] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1035\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0146.114] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0146.114] WriteFile (in: hFile=0x1c8, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0146.117] CloseHandle (hObject=0x1c8) returned 1
	[0146.194] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035" (normalized: "c:\\588bce7c90097ed212\\1035"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x5abbea5d, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x5abbea5d, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0146.708] SetEvent (hEvent=0x150) returned 1
	[0146.708] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\" (normalized: "c:\\588bce7c90097ed212\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0146.708] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22f0
	[0146.729] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.729] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0146.729] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0146.729] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0146.729] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0146.729] FindClose (in: hFindFile=0x7f22f0 | out: hFindFile=0x7f22f0) returned 1
	[0146.730] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1
	[0146.730] SetEvent (hEvent=0x1b0) returned 1
	[0146.730] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0146.730] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1
	[0146.731] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1036\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0146.735] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0146.735] WriteFile (in: hFile=0x1b4, lpBuffer=0x11272000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x11272000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0146.738] CloseHandle (hObject=0x1b4) returned 1
	[0146.739] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036" (normalized: "c:\\588bce7c90097ed212\\1036"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x5aecd5a0, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x5aecd5a0, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0146.739] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\" (normalized: "c:\\588bce7c90097ed212\\1037"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0146.739] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f20b0
	[0146.740] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.740] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0146.740] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0146.740] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0146.740] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0146.740] FindClose (in: hFindFile=0x7f20b0 | out: hFindFile=0x7f20b0) returned 1
	[0146.741] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1
	[0146.800] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0147.062] SetEvent (hEvent=0x1b0) returned 1
	[0147.062] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0151.457] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0151.595] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0151.689] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0152.165] SetEvent (hEvent=0x134) returned 1
	[0152.165] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0152.195] SetEvent (hEvent=0x134) returned 1
	[0152.195] SetEvent (hEvent=0x160) returned 1
	[0152.195] SetEvent (hEvent=0x12c) returned 1
	[0152.195] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0152.374] SwitchToThread () returned 1
	[0152.462] SwitchToThread () returned 1
	[0152.511] SetEvent (hEvent=0x134) returned 1
	[0152.511] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0152.558] SetEvent (hEvent=0x134) returned 1
	[0152.558] SetEvent (hEvent=0x12c) returned 1
	[0152.558] ReadFile (in: hFile=0x1c8, lpBuffer=0x11396000, nNumberOfBytesToRead=0xfed6, lpNumberOfBytesRead=0x11318e18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x11318e18*=0xfed6, lpOverlapped=0x0) returned 1
	[0152.635] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364110 | out: pbBuffer=0x11364110) returned 1
	[0152.635] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1131e802 | out: pbBuffer=0x1131e802) returned 1
	[0152.636] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364140 | out: pbBuffer=0x11364140) returned 1
	[0152.638] GetFileType (hFile=0x1c8) returned 0x1
	[0152.638] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0152.638] WriteFile (in: hFile=0x1c8, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0xfed6, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x1133ddfc*=0xfed6, lpOverlapped=0x1133de08) returned 1
	[0152.639] GetFileType (hFile=0x1c8) returned 0x1
	[0152.639] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xfed6, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0152.640] GetFileType (hFile=0x1c8) returned 0x1
	[0152.640] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0152.640] WriteFile (in: hFile=0x1c8, lpBuffer=0x1132ea80*, nNumberOfBytesToWrite=0x23f, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1132ea80*, lpNumberOfBytesWritten=0x1133ddfc*=0x23f, lpOverlapped=0x1133de08) returned 1
	[0152.640] GetFileType (hFile=0x1c8) returned 0x1
	[0152.641] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xfed6, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0152.641] CloseHandle (hObject=0x1c8) returned 1
	[0152.645] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.tl30z")) returned 0x20
	[0152.646] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0152.646] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80
	[0152.646] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0152.647] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0155.122] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0155.122] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0155.122] ReadFile (in: hFile=0x1c8, lpBuffer=0x11360000, nNumberOfBytesToRead=0xdda, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11360000*, lpNumberOfBytesRead=0x11316e18*=0xdda, lpOverlapped=0x0) returned 1
	[0155.187] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113642c0 | out: pbBuffer=0x113642c0) returned 1
	[0155.188] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1131f202 | out: pbBuffer=0x1131f202) returned 1
	[0155.188] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113642f0 | out: pbBuffer=0x113642f0) returned 1
	[0155.189] GetFileType (hFile=0x1c8) returned 0x1
	[0155.189] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0155.189] WriteFile (in: hFile=0x1c8, lpBuffer=0x110c6000*, nNumberOfBytesToWrite=0xdda, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110c6000*, lpNumberOfBytesWritten=0x1133ddfc*=0xdda, lpOverlapped=0x1133de08) returned 1
	[0155.190] GetFileType (hFile=0x1c8) returned 0x1
	[0155.190] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xdda, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0155.190] GetFileType (hFile=0x1c8) returned 0x1
	[0155.190] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0155.190] WriteFile (in: hFile=0x1c8, lpBuffer=0x1132f880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1132f880*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0155.191] GetFileType (hFile=0x1c8) returned 0x1
	[0155.191] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xdda, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0155.191] CloseHandle (hObject=0x1c8) returned 1
	[0155.194] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.tl30z")) returned 0x20
	[0155.194] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0155.195] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80
	[0155.195] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0155.195] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0156.490] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0156.491] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0156.491] ReadFile (in: hFile=0x1c8, lpBuffer=0x110b6c00, nNumberOfBytesToRead=0xbe6, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x110b6c00*, lpNumberOfBytesRead=0x1131ae18*=0xbe6, lpOverlapped=0x0) returned 1
	[0156.502] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113645b0 | out: pbBuffer=0x113645b0) returned 1
	[0156.502] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c4702 | out: pbBuffer=0x113c4702) returned 1
	[0156.502] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c4746 | out: pbBuffer=0x113c4746) returned 1
	[0156.503] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113645e0 | out: pbBuffer=0x113645e0) returned 1
	[0156.504] GetFileType (hFile=0x1c8) returned 0x1
	[0156.504] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0156.504] WriteFile (in: hFile=0x1c8, lpBuffer=0x112b4000*, nNumberOfBytesToWrite=0xbe6, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112b4000*, lpNumberOfBytesWritten=0x1133ddfc*=0xbe6, lpOverlapped=0x1133de08) returned 1
	[0156.504] GetFileType (hFile=0x1c8) returned 0x1
	[0156.505] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xbe6, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0156.505] GetFileType (hFile=0x1c8) returned 0x1
	[0156.505] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0156.505] WriteFile (in: hFile=0x1c8, lpBuffer=0x11447500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11447500*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0156.505] GetFileType (hFile=0x1c8) returned 0x1
	[0156.505] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xbe6, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0156.506] CloseHandle (hObject=0x1c8) returned 1
	[0156.507] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.tl30z")) returned 0x20
	[0156.507] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0156.509] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80
	[0156.509] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0156.509] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0158.381] SetEvent (hEvent=0x150) returned 1
	[0158.382] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0158.494] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0158.495] ReadFile (in: hFile=0x1b4, lpBuffer=0x111fc000, nNumberOfBytesToRead=0x80b5, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x111fc000*, lpNumberOfBytesRead=0x11425e18*=0x80b5, lpOverlapped=0x0) returned 1
	[0158.561] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364750 | out: pbBuffer=0x11364750) returned 1
	[0158.561] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11364748 | out: pbBuffer=0x11364748) returned 1
	[0158.562] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c5202 | out: pbBuffer=0x113c5202) returned 1
	[0158.563] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364780 | out: pbBuffer=0x11364780) returned 1
	[0158.566] GetFileType (hFile=0x1b4) returned 0x1
	[0158.566] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0158.566] WriteFile (in: hFile=0x1b4, lpBuffer=0x1123a000*, nNumberOfBytesToWrite=0x80b5, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1123a000*, lpNumberOfBytesWritten=0x1133ddfc*=0x80b5, lpOverlapped=0x1133de08) returned 1
	[0158.567] GetFileType (hFile=0x1b4) returned 0x1
	[0158.567] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x80b5, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0158.568] GetFileType (hFile=0x1b4) returned 0x1
	[0158.568] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0158.568] WriteFile (in: hFile=0x1b4, lpBuffer=0x11214380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11214380*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0158.568] GetFileType (hFile=0x1b4) returned 0x1
	[0158.568] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x80b5, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0158.569] CloseHandle (hObject=0x1b4) returned 1
	[0158.575] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.tl30z")) returned 0x20
	[0158.575] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0158.576] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80
	[0158.576] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0158.576] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0159.654] SetEvent (hEvent=0x150) returned 1
	[0159.654] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0159.752] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0159.752] ReadFile (in: hFile=0x1b4, lpBuffer=0x11266000, nNumberOfBytesToRead=0xe63, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11266000*, lpNumberOfBytesRead=0x1131ce18*=0xe63, lpOverlapped=0x0) returned 1
	[0159.758] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364900 | out: pbBuffer=0x11364900) returned 1
	[0159.758] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113648f8 | out: pbBuffer=0x113648f8) returned 1
	[0159.758] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c5c02 | out: pbBuffer=0x113c5c02) returned 1
	[0159.758] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c5c43 | out: pbBuffer=0x113c5c43) returned 1
	[0159.758] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c5ca5 | out: pbBuffer=0x113c5ca5) returned 1
	[0159.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364930 | out: pbBuffer=0x11364930) returned 1
	[0159.760] GetFileType (hFile=0x1b4) returned 0x1
	[0159.760] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0159.760] WriteFile (in: hFile=0x1b4, lpBuffer=0x1127c000*, nNumberOfBytesToWrite=0xe63, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1127c000*, lpNumberOfBytesWritten=0x1133ddfc*=0xe63, lpOverlapped=0x1133de08) returned 1
	[0159.760] GetFileType (hFile=0x1b4) returned 0x1
	[0159.760] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xe63, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0159.761] GetFileType (hFile=0x1b4) returned 0x1
	[0159.761] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0159.761] WriteFile (in: hFile=0x1b4, lpBuffer=0x11215180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11215180*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0159.762] GetFileType (hFile=0x1b4) returned 0x1
	[0159.762] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xe63, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0159.762] CloseHandle (hObject=0x1b4) returned 1
	[0159.764] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.tl30z")) returned 0x20
	[0159.764] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0159.765] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80
	[0159.765] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0159.765] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0161.083] SetEvent (hEvent=0x150) returned 1
	[0161.084] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0161.253] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0161.255] ReadFile (in: hFile=0x1b4, lpBuffer=0x1119a000, nNumberOfBytesToRead=0x7f50, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1119a000*, lpNumberOfBytesRead=0x11425e18*=0x7f50, lpOverlapped=0x0) returned 1
	[0161.265] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0161.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0161.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11129202 | out: pbBuffer=0x11129202) returned 1
	[0161.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11129231 | out: pbBuffer=0x11129231) returned 1
	[0161.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0161.269] SetEvent (hEvent=0x12c) returned 1
	[0161.274] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0161.417] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0161.420] SetEvent (hEvent=0x12c) returned 1
	[0161.421] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0161.743] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0161.744] GetFileType (hFile=0x1b4) returned 0x1
	[0161.744] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0161.745] WriteFile (in: hFile=0x1b4, lpBuffer=0x1125e000*, nNumberOfBytesToWrite=0x7f50, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x1125e000*, lpNumberOfBytesWritten=0x11255dfc*=0x7f50, lpOverlapped=0x11255e08) returned 1
	[0161.745] GetFileType (hFile=0x1b4) returned 0x1
	[0161.745] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7f50, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0161.746] GetFileType (hFile=0x1b4) returned 0x1
	[0161.746] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0161.746] WriteFile (in: hFile=0x1b4, lpBuffer=0x11446000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x11446000*, lpNumberOfBytesWritten=0x11255dfc*=0x233, lpOverlapped=0x11255e08) returned 1
	[0161.747] GetFileType (hFile=0x1b4) returned 0x1
	[0161.747] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7f50, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0161.747] CloseHandle (hObject=0x1b4) returned 1
	[0161.898] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.tl30z")) returned 0x20
	[0161.899] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0161.913] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0166.725] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0167.343] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80
	[0167.343] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0167.344] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0168.056] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0168.057] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11027e08 | out: lpMode=0x11027e08) returned 0
	[0168.057] ReadFile (in: hFile=0x1b4, lpBuffer=0x112ba000, nNumberOfBytesToRead=0x18a5, lpNumberOfBytesRead=0x11027e18, lpOverlapped=0x0 | out: lpBuffer=0x112ba000*, lpNumberOfBytesRead=0x11027e18*=0x18a5, lpOverlapped=0x0) returned 1
	[0168.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e290 | out: pbBuffer=0x1142e290) returned 1
	[0168.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e288 | out: pbBuffer=0x1142e288) returned 1
	[0168.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1110d302 | out: pbBuffer=0x1110d302) returned 1
	[0168.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2c0 | out: pbBuffer=0x1142e2c0) returned 1
	[0168.154] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0168.177] SetEvent (hEvent=0x150) returned 1
	[0168.177] SetEvent (hEvent=0x160) returned 1
	[0168.178] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0168.220] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0168.220] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0168.356] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0168.356] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0168.420] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0168.420] SetEvent (hEvent=0x150) returned 1
	[0168.421] SetEvent (hEvent=0x12c) returned 1
	[0168.421] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0168.544] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0168.545] GetFileType (hFile=0x1b4) returned 0x1
	[0168.545] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0168.545] WriteFile (in: hFile=0x1b4, lpBuffer=0x11438000*, nNumberOfBytesToWrite=0x18a5, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x11438000*, lpNumberOfBytesWritten=0x11255dfc*=0x18a5, lpOverlapped=0x11255e08) returned 1
	[0168.545] GetFileType (hFile=0x1b4) returned 0x1
	[0168.546] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0168.546] GetFileType (hFile=0x1b4) returned 0x1
	[0168.546] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0168.546] WriteFile (in: hFile=0x1b4, lpBuffer=0x112d4000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x112d4000*, lpNumberOfBytesWritten=0x11255dfc*=0x22a, lpOverlapped=0x11255e08) returned 1
	[0168.546] GetFileType (hFile=0x1b4) returned 0x1
	[0168.546] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0168.546] CloseHandle (hObject=0x1b4) returned 1
	[0168.548] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.tl30z")) returned 0x20
	[0168.548] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0168.550] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0168.550] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0168.550] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11330802 | out: pbBuffer=0x11330802) returned 1
	[0168.550] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113308eb | out: pbBuffer=0x113308eb) returned 1
	[0168.552] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0168.553] GetFileType (hFile=0x1cc) returned 0x1
	[0168.553] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0168.554] WriteFile (in: hFile=0x1cc, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0xed90, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x11255dfc*=0xed90, lpOverlapped=0x11255e08) returned 1
	[0168.554] GetFileType (hFile=0x1cc) returned 0x1
	[0168.554] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0168.555] GetFileType (hFile=0x1cc) returned 0x1
	[0168.555] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0168.555] WriteFile (in: hFile=0x1cc, lpBuffer=0x112d4e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x112d4e00*, lpNumberOfBytesWritten=0x11255dfc*=0x233, lpOverlapped=0x11255e08) returned 1
	[0168.555] GetFileType (hFile=0x1cc) returned 0x1
	[0168.555] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0168.555] CloseHandle (hObject=0x1cc) returned 1
	[0168.559] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.tl30z")) returned 0x20
	[0168.559] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0168.560] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0172.502] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0172.549] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0172.722] SetEvent (hEvent=0x134) returned 1
	[0172.722] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 0x80
	[0172.722] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", dwFileAttributes=0x80) returned 1
	[0172.724] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.tl30z"), dwFlags=0x1) returned 1
	[0174.719] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0174.719] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11027e08 | out: lpMode=0x11027e08) returned 0
	[0174.720] ReadFile (in: hFile=0x1cc, lpBuffer=0x1117c000, nNumberOfBytesToRead=0x988a, lpNumberOfBytesRead=0x11027e18, lpOverlapped=0x0 | out: lpBuffer=0x1117c000*, lpNumberOfBytesRead=0x11027e18*=0x988a, lpOverlapped=0x0) returned 1
	[0174.780] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113646e0 | out: pbBuffer=0x113646e0) returned 1
	[0174.780] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11188702 | out: pbBuffer=0x11188702) returned 1
	[0174.780] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111887d7 | out: pbBuffer=0x111887d7) returned 1
	[0174.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364710 | out: pbBuffer=0x11364710) returned 1
	[0174.786] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0174.851] SetEvent (hEvent=0x150) returned 1
	[0174.852] SetEvent (hEvent=0x1c4) returned 1
	[0174.852] SetEvent (hEvent=0x1b0) returned 1
	[0174.852] GetFileType (hFile=0x1cc) returned 0x1
	[0174.852] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0174.852] WriteFile (in: hFile=0x1cc, lpBuffer=0x1148a000*, nNumberOfBytesToWrite=0x988a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1148a000*, lpNumberOfBytesWritten=0x1133ddfc*=0x988a, lpOverlapped=0x1133de08) returned 1
	[0174.853] GetFileType (hFile=0x1cc) returned 0x1
	[0174.853] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x988a, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0174.854] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0174.906] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0174.907] SetEvent (hEvent=0x12c) returned 1
	[0174.907] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0174.973] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0174.973] GetFileType (hFile=0x1cc) returned 0x1
	[0174.973] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0174.974] WriteFile (in: hFile=0x1cc, lpBuffer=0x11330000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11330000*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0174.974] GetFileType (hFile=0x1cc) returned 0x1
	[0174.975] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x988a, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0174.975] CloseHandle (hObject=0x1cc) returned 1
	[0174.979] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.tl30z")) returned 0x20
	[0174.980] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0174.980] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 0x80
	[0174.980] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", dwFileAttributes=0x80) returned 1
	[0174.981] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.tl30z"), dwFlags=0x1) returned 1
	[0182.079] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0182.272] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11255e08 | out: lpMode=0x11255e08) returned 0
	[0182.272] ReadFile (in: hFile=0x1cc, lpBuffer=0x112d8000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x11255e18, lpOverlapped=0x0 | out: lpBuffer=0x112d8000*, lpNumberOfBytesRead=0x11255e18*=0x37e, lpOverlapped=0x0) returned 1
	[0182.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0182.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e4802 | out: pbBuffer=0x112e4802) returned 1
	[0182.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e4808 | out: pbBuffer=0x112e4808) returned 1
	[0182.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e48e4 | out: pbBuffer=0x112e48e4) returned 1
	[0182.511] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0182.511] GetFileType (hFile=0x1cc) returned 0x1
	[0182.511] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0182.511] WriteFile (in: hFile=0x1cc, lpBuffer=0x110e8000*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x110e8000*, lpNumberOfBytesWritten=0x11255dfc*=0x37e, lpOverlapped=0x11255e08) returned 1
	[0182.512] GetFileType (hFile=0x1cc) returned 0x1
	[0182.512] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0182.512] GetFileType (hFile=0x1cc) returned 0x1
	[0182.512] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0182.513] WriteFile (in: hFile=0x1cc, lpBuffer=0x112d8e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x112d8e00*, lpNumberOfBytesWritten=0x11255dfc*=0x230, lpOverlapped=0x11255e08) returned 1
	[0182.513] GetFileType (hFile=0x1cc) returned 0x1
	[0182.513] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0182.513] CloseHandle (hObject=0x1cc) returned 1
	[0182.700] SetEvent (hEvent=0x150) returned 1
	[0182.700] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.tl30z")) returned 0x20
	[0182.700] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0182.850] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0182.978] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0183.138] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0183.805] SetEvent (hEvent=0x1b0) returned 1
	[0183.805] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 0x80
	[0183.805] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico", dwFileAttributes=0x80) returned 1
	[0183.806] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.tl30z"), dwFlags=0x1) returned 1
	[0188.011] SetEvent (hEvent=0x150) returned 1
	[0188.011] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0188.017] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0188.018] ReadFile (in: hFile=0x16c, lpBuffer=0x1126e900, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1126e900*, lpNumberOfBytesRead=0x11023e18*=0x47e, lpOverlapped=0x0) returned 1
	[0188.023] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e940 | out: pbBuffer=0x1104e940) returned 1
	[0188.023] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e938 | out: pbBuffer=0x1104e938) returned 1
	[0188.023] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11269d02 | out: pbBuffer=0x11269d02) returned 1
	[0188.023] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11269ddb | out: pbBuffer=0x11269ddb) returned 1
	[0188.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e970 | out: pbBuffer=0x1104e970) returned 1
	[0188.024] GetFileType (hFile=0x16c) returned 0x1
	[0188.024] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0188.024] WriteFile (in: hFile=0x16c, lpBuffer=0x112b9000*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112b9000*, lpNumberOfBytesWritten=0x1133bdfc*=0x47e, lpOverlapped=0x1133be08) returned 1
	[0188.025] GetFileType (hFile=0x16c) returned 0x1
	[0188.025] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0188.025] GetFileType (hFile=0x16c) returned 0x1
	[0188.025] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0188.025] WriteFile (in: hFile=0x16c, lpBuffer=0x112c4000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112c4000*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0188.026] GetFileType (hFile=0x16c) returned 0x1
	[0188.026] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0188.026] CloseHandle (hObject=0x16c) returned 1
	[0188.032] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.tl30z")) returned 0x20
	[0188.032] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0188.043] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0188.693] SetEvent (hEvent=0x1f0) returned 1
	[0188.693] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu")) returned 0x80
	[0188.693] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu", dwFileAttributes=0x80) returned 1
	[0188.694] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.tl30z" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.tl30z"), dwFlags=0x1) returned 1
	[0188.706] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.tl30z" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0188.707] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0188.707] ReadFile (in: hFile=0x184, lpBuffer=0x110fa000, nNumberOfBytesToRead=0x2498c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110fa000*, lpNumberOfBytesRead=0x1128ce18*=0x2498c, lpOverlapped=0x0) returned 1
	[0188.723] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e280 | out: pbBuffer=0x1142e280) returned 1
	[0188.723] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e278 | out: pbBuffer=0x1142e278) returned 1
	[0188.723] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11407502 | out: pbBuffer=0x11407502) returned 1
	[0188.723] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140753f | out: pbBuffer=0x1140753f) returned 1
	[0188.724] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2b0 | out: pbBuffer=0x1142e2b0) returned 1
	[0188.729] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0188.796] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0188.796] SetEvent (hEvent=0x150) returned 1
	[0188.797] SetEvent (hEvent=0x1f0) returned 1
	[0188.797] SetEvent (hEvent=0x134) returned 1
	[0188.798] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0188.916] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0188.916] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0188.973] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0188.973] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0189.010] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0189.010] SetEvent (hEvent=0x150) returned 1
	[0189.010] SetEvent (hEvent=0x164) returned 1
	[0189.010] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0189.058] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0189.059] GetFileType (hFile=0x184) returned 0x1
	[0189.059] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11253de0 | out: lpNewFilePointer=0x0) returned 1
	[0189.059] WriteFile (in: hFile=0x184, lpBuffer=0x11200000*, nNumberOfBytesToWrite=0x2498c, lpNumberOfBytesWritten=0x11253dfc, lpOverlapped=0x11253e08 | out: lpBuffer=0x11200000*, lpNumberOfBytesWritten=0x11253dfc*=0x2498c, lpOverlapped=0x11253e08) returned 1
	[0189.061] GetFileType (hFile=0x184) returned 0x1
	[0189.061] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x2498c, lpNewFilePointer=0x0, dwMoveMethod=0x11253de0 | out: lpNewFilePointer=0x0) returned 1
	[0189.061] GetFileType (hFile=0x184) returned 0x1
	[0189.061] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11253de0 | out: lpNewFilePointer=0x0) returned 1
	[0189.062] WriteFile (in: hFile=0x184, lpBuffer=0x112ea000*, nNumberOfBytesToWrite=0x242, lpNumberOfBytesWritten=0x11253dfc, lpOverlapped=0x11253e08 | out: lpBuffer=0x112ea000*, lpNumberOfBytesWritten=0x11253dfc*=0x242, lpOverlapped=0x11253e08) returned 1
	[0189.284] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0189.566] SetEvent (hEvent=0x1bc) returned 1
	[0189.566] GetFileType (hFile=0x184) returned 0x1
	[0189.566] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x2498c, lpNewFilePointer=0x0, dwMoveMethod=0x11253de0 | out: lpNewFilePointer=0x0) returned 1
	[0189.566] CloseHandle (hObject=0x184) returned 1
	[0190.187] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0190.721] SetEvent (hEvent=0x1e8) returned 1
	[0190.721] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0191.734] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 0x80
	[0191.735] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", dwFileAttributes=0x80) returned 1
	[0191.735] SetEvent (hEvent=0x1f0) returned 1
	[0191.736] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0194.250] SetEvent (hEvent=0x1e0) returned 1
	[0194.250] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0194.822] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0195.445] SwitchToThread () returned 1
	[0195.525] SetEvent (hEvent=0x164) returned 1
	[0195.525] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0195.593] SetEvent (hEvent=0x164) returned 1
	[0195.593] SetEvent (hEvent=0x1f0) returned 1
	[0195.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e100 | out: pbBuffer=0x1142e100) returned 1
	[0195.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1106a802 | out: pbBuffer=0x1106a802) returned 1
	[0195.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1106a89b | out: pbBuffer=0x1106a89b) returned 1
	[0195.595] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e130 | out: pbBuffer=0x1142e130) returned 1
	[0195.596] GetFileType (hFile=0x1cc) returned 0x1
	[0195.596] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0195.596] WriteFile (in: hFile=0x1cc, lpBuffer=0x11b00000*, nNumberOfBytesToWrite=0x97f2, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11b00000*, lpNumberOfBytesWritten=0x1102bdfc*=0x97f2, lpOverlapped=0x1102be08) returned 1
	[0195.597] GetFileType (hFile=0x1cc) returned 0x1
	[0195.597] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x97f2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0195.597] GetFileType (hFile=0x1cc) returned 0x1
	[0195.597] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0195.598] WriteFile (in: hFile=0x1cc, lpBuffer=0x11344a80*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11344a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x239, lpOverlapped=0x1102be08) returned 1
	[0195.598] GetFileType (hFile=0x1cc) returned 0x1
	[0195.598] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x97f2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0195.598] CloseHandle (hObject=0x1cc) returned 1
	[0195.601] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.tl30z")) returned 0x20
	[0195.602] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0195.602] GetFileType (hFile=0x1f8) returned 0x1
	[0195.602] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11317de0 | out: lpNewFilePointer=0x0) returned 1
	[0195.603] WriteFile (in: hFile=0x1f8, lpBuffer=0x11083000*, nNumberOfBytesToWrite=0x26f, lpNumberOfBytesWritten=0x11317dfc, lpOverlapped=0x11317e08 | out: lpBuffer=0x11083000*, lpNumberOfBytesWritten=0x11317dfc*=0x26f, lpOverlapped=0x11317e08) returned 1
	[0195.688] GetFileType (hFile=0x1f8) returned 0x1
	[0195.688] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x58d5a, lpNewFilePointer=0x0, dwMoveMethod=0x11317de0 | out: lpNewFilePointer=0x0) returned 1
	[0195.688] CloseHandle (hObject=0x1f8) returned 1
	[0196.733] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0196.786] SetEvent (hEvent=0x1e8) returned 1
	[0196.786] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0196.826] SetEvent (hEvent=0x1f0) returned 1
	[0196.827] SwitchToThread () returned 1
	[0196.893] SetEvent (hEvent=0x1bc) returned 1
	[0196.893] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0196.937] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0196.937] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0197.023] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0197.024] SetEvent (hEvent=0x1bc) returned 1
	[0197.024] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0197.194] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0197.194] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0x20
	[0197.195] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf", dwFileAttributes=0x20) returned 0
	[0197.195] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\cht_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0197.195] VirtualAlloc (lpAddress=0x110ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110ec000
	[0197.196] VirtualFree (lpAddress=0x11e00000, dwSize=0x200000, dwFreeType=0x4000) returned 1
	[0197.222] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.tl30z" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.tl30z")) returned 0x20
	[0197.222] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.tl30z", dwFileAttributes=0x21) returned 1
	[0197.223] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0197.757] SetEvent (hEvent=0x1e0) returned 1
	[0197.757] VirtualAlloc (lpAddress=0x11334000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11334000
	[0197.759] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20
	[0197.759] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf", dwFileAttributes=0x20) returned 0
	[0197.759] VirtualAlloc (lpAddress=0x11340000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11340000
	[0197.760] VirtualAlloc (lpAddress=0x11344000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11344000
	[0197.761] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\malgun_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0197.761] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0198.003] SetEvent (hEvent=0x134) returned 1
	[0198.003] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20
	[0198.003] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf", dwFileAttributes=0x20) returned 0
	[0198.003] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\segmono_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0198.214] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0198.300] SetEvent (hEvent=0x1e0) returned 1
	[0198.300] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0212.626] VirtualAlloc (lpAddress=0x11bda000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bda000
	[0212.627] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 0x20
	[0212.627] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0212.627] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0218.444] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0218.706] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11559e08 | out: lpMode=0x11559e08) returned 0
	[0218.706] ReadFile (in: hFile=0x200, lpBuffer=0x11b2a000, nNumberOfBytesToRead=0x11fd7, lpNumberOfBytesRead=0x11559e18, lpOverlapped=0x0 | out: lpBuffer=0x11b2a000*, lpNumberOfBytesRead=0x11559e18*=0x11fd7, lpOverlapped=0x0) returned 1
	[0218.719] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e2d0 | out: pbBuffer=0x1104e2d0) returned 1
	[0218.720] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e2c8 | out: pbBuffer=0x1104e2c8) returned 1
	[0218.720] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ed402 | out: pbBuffer=0x113ed402) returned 1
	[0218.720] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113ed496 | out: pbBuffer=0x113ed496) returned 1
	[0218.720] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e300 | out: pbBuffer=0x1104e300) returned 1
	[0218.724] GetFileType (hFile=0x200) returned 0x1
	[0218.725] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0218.725] WriteFile (in: hFile=0x200, lpBuffer=0x115f8000*, nNumberOfBytesToWrite=0x11fd7, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x115f8000*, lpNumberOfBytesWritten=0x1102bdfc*=0x11fd7, lpOverlapped=0x1102be08) returned 1
	[0219.197] SetEvent (hEvent=0x150) returned 1
	[0219.197] GetFileType (hFile=0x200) returned 0x1
	[0219.197] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x11fd7, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0219.197] GetFileType (hFile=0x200) returned 0x1
	[0219.198] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0219.198] WriteFile (in: hFile=0x200, lpBuffer=0x11b8c000*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11b8c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x245, lpOverlapped=0x1102be08) returned 1
	[0219.371] GetFileType (hFile=0x200) returned 0x1
	[0219.371] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x11fd7, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0219.371] CloseHandle (hObject=0x200) returned 1
	[0219.652] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.tl30z")) returned 0x20
	[0219.652] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0219.701] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0219.817] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0219.859] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0219.899] SetEvent (hEvent=0x124) returned 1
	[0219.899] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0219.999] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0220.071] SetEvent (hEvent=0x210) returned 1
	[0220.071] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0220.285] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0220.753] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0242.274] SetEvent (hEvent=0x134) returned 1
	[0242.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20
	[0242.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf", dwFileAttributes=0x20) returned 1
	[0242.275] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.tl30z"), dwFlags=0x1) returned 1
	[0243.735] SetEvent (hEvent=0x150) returned 1
	[0243.735] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0243.844] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11256e08 | out: lpMode=0x11256e08) returned 0
	[0243.844] ReadFile (in: hFile=0x288, lpBuffer=0x112da000, nNumberOfBytesToRead=0x7569, lpNumberOfBytesRead=0x11256e18, lpOverlapped=0x0 | out: lpBuffer=0x112da000*, lpNumberOfBytesRead=0x11256e18*=0x7569, lpOverlapped=0x0) returned 1
	[0243.855] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0243.855] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e3b8 | out: pbBuffer=0x1104e3b8) returned 1
	[0243.855] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133c802 | out: pbBuffer=0x1133c802) returned 1
	[0243.856] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0243.857] GetFileType (hFile=0x288) returned 0x1
	[0243.857] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f9de0 | out: lpNewFilePointer=0x0) returned 1
	[0243.893] WriteFile (in: hFile=0x288, lpBuffer=0x1139c000*, nNumberOfBytesToWrite=0x7569, lpNumberOfBytesWritten=0x110f9dfc, lpOverlapped=0x110f9e08 | out: lpBuffer=0x1139c000*, lpNumberOfBytesWritten=0x110f9dfc*=0x7569, lpOverlapped=0x110f9e08) returned 1
	[0243.894] GetFileType (hFile=0x288) returned 0x1
	[0243.894] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x7569, lpNewFilePointer=0x0, dwMoveMethod=0x110f9de0 | out: lpNewFilePointer=0x0) returned 1
	[0243.894] GetFileType (hFile=0x288) returned 0x1
	[0243.894] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f9de0 | out: lpNewFilePointer=0x0) returned 1
	[0243.895] WriteFile (in: hFile=0x288, lpBuffer=0x11058a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x110f9dfc, lpOverlapped=0x110f9e08 | out: lpBuffer=0x11058a80*, lpNumberOfBytesWritten=0x110f9dfc*=0x233, lpOverlapped=0x110f9e08) returned 1
	[0243.895] GetFileType (hFile=0x288) returned 0x1
	[0243.895] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x7569, lpNewFilePointer=0x0, dwMoveMethod=0x110f9de0 | out: lpNewFilePointer=0x0) returned 1
	[0243.895] CloseHandle (hObject=0x288) returned 1
	[0243.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.tl30z")) returned 0x20
	[0243.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.tl30z", dwFileAttributes=0x21) returned 1
	[0243.929] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0244.152] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0244.158] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0244.184] SetEvent (hEvent=0x1f0) returned 1
	[0244.184] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0244.189] SetEvent (hEvent=0x1f0) returned 1
	[0244.189] ReadFile (in: hFile=0x1b4, lpBuffer=0x1143e000, nNumberOfBytesToRead=0x7e56, lpNumberOfBytesRead=0x113ade18, lpOverlapped=0x0 | out: lpBuffer=0x1143e000*, lpNumberOfBytesRead=0x113ade18*=0x7e56, lpOverlapped=0x0) returned 1
	[0244.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0244.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133c802 | out: pbBuffer=0x1133c802) returned 1
	[0244.205] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0244.205] GetFileType (hFile=0x1b4) returned 0x1
	[0244.206] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.206] WriteFile (in: hFile=0x1b4, lpBuffer=0x1109e000*, nNumberOfBytesToWrite=0x7e56, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1109e000*, lpNumberOfBytesWritten=0x112f3dfc*=0x7e56, lpOverlapped=0x112f3e08) returned 1
	[0244.206] GetFileType (hFile=0x1b4) returned 0x1
	[0244.206] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7e56, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.207] GetFileType (hFile=0x1b4) returned 0x1
	[0244.207] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.207] WriteFile (in: hFile=0x1b4, lpBuffer=0x11058a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11058a80*, lpNumberOfBytesWritten=0x112f3dfc*=0x236, lpOverlapped=0x112f3e08) returned 1
	[0244.207] GetFileType (hFile=0x1b4) returned 0x1
	[0244.207] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7e56, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.208] CloseHandle (hObject=0x1b4) returned 1
	[0244.316] SetEvent (hEvent=0x150) returned 1
	[0244.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.tl30z")) returned 0x20
	[0244.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.tl30z", dwFileAttributes=0x21) returned 1
	[0244.366] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0244.531] SetEvent (hEvent=0x12c) returned 1
	[0244.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20
	[0244.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf", dwFileAttributes=0x20) returned 1
	[0244.532] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.tl30z"), dwFlags=0x1) returned 1
	[0245.907] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0245.934] SetEvent (hEvent=0x134) returned 1
	[0245.934] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0246.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20
	[0246.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x20) returned 1
	[0246.707] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.tl30z"), dwFlags=0x1) returned 1
	[0248.378] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0248.422] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0248.422] ReadFile (in: hFile=0x288, lpBuffer=0x113ce500, nNumberOfBytesToRead=0x99, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113ce500*, lpNumberOfBytesRead=0x1128ae18*=0x99, lpOverlapped=0x0) returned 1
	[0248.425] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e530 | out: pbBuffer=0x1104e530) returned 1
	[0248.425] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e528 | out: pbBuffer=0x1104e528) returned 1
	[0248.426] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137d202 | out: pbBuffer=0x1137d202) returned 1
	[0248.426] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137d2e2 | out: pbBuffer=0x1137d2e2) returned 1
	[0248.426] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e560 | out: pbBuffer=0x1104e560) returned 1
	[0248.426] GetFileType (hFile=0x288) returned 0x1
	[0248.426] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0248.426] WriteFile (in: hFile=0x288, lpBuffer=0x11385200*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11385200*, lpNumberOfBytesWritten=0x112f3dfc*=0x99, lpOverlapped=0x112f3e08) returned 1
	[0248.427] GetFileType (hFile=0x288) returned 0x1
	[0248.427] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x99, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0248.427] GetFileType (hFile=0x288) returned 0x1
	[0248.427] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0248.427] WriteFile (in: hFile=0x288, lpBuffer=0x112d8000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x112d8000*, lpNumberOfBytesWritten=0x112f3dfc*=0x224, lpOverlapped=0x112f3e08) returned 1
	[0248.433] GetFileType (hFile=0x288) returned 0x1
	[0248.433] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x99, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0248.433] CloseHandle (hObject=0x288) returned 1
	[0248.509] SetEvent (hEvent=0x150) returned 1
	[0248.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.tl30z")) returned 0x20
	[0248.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.tl30z", dwFileAttributes=0x21) returned 1
	[0248.518] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0249.198] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0249.337] SetEvent (hEvent=0x210) returned 1
	[0249.337] SetEvent (hEvent=0x248) returned 1
	[0249.337] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0250.024] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0250.815] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0250.852] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0250.906] SetEvent (hEvent=0x134) returned 1
	[0250.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 0x20
	[0250.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties", dwFileAttributes=0x20) returned 1
	[0250.907] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.tl30z"), dwFlags=0x1) returned 1
	[0251.642] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0251.646] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0251.646] ReadFile (in: hFile=0x1d8, lpBuffer=0x111f2000, nNumberOfBytesToRead=0x2899, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x111f2000*, lpNumberOfBytesRead=0x11423e18*=0x2899, lpOverlapped=0x0) returned 1
	[0251.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e290 | out: pbBuffer=0x1142e290) returned 1
	[0251.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e288 | out: pbBuffer=0x1142e288) returned 1
	[0251.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11411202 | out: pbBuffer=0x11411202) returned 1
	[0251.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114112ad | out: pbBuffer=0x114112ad) returned 1
	[0251.655] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2c0 | out: pbBuffer=0x1142e2c0) returned 1
	[0251.656] GetFileType (hFile=0x1d8) returned 0x1
	[0251.656] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0251.656] WriteFile (in: hFile=0x1d8, lpBuffer=0x11258000*, nNumberOfBytesToWrite=0x2899, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11258000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2899, lpOverlapped=0x1102be08) returned 1
	[0251.657] GetFileType (hFile=0x1d8) returned 0x1
	[0251.657] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2899, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0251.657] GetFileType (hFile=0x1d8) returned 0x1
	[0251.657] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0251.657] WriteFile (in: hFile=0x1d8, lpBuffer=0x1146d880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1146d880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0251.658] GetFileType (hFile=0x1d8) returned 0x1
	[0251.658] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2899, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0251.658] CloseHandle (hObject=0x1d8) returned 1
	[0251.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.tl30z")) returned 0x20
	[0251.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0251.727] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0251.873] SetEvent (hEvent=0x218) returned 1
	[0251.873] SetEvent (hEvent=0x134) returned 1
	[0251.874] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0251.936] SetEvent (hEvent=0x24c) returned 1
	[0251.938] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0251.971] SetEvent (hEvent=0x24c) returned 1
	[0251.971] SwitchToThread () returned 1
	[0251.975] SetEvent (hEvent=0x24c) returned 1
	[0251.975] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0251.990] SetEvent (hEvent=0x24c) returned 1
	[0251.990] SwitchToThread () returned 1
	[0251.992] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0252.145] SetEvent (hEvent=0x218) returned 1
	[0252.145] SetEvent (hEvent=0x234) returned 1
	[0252.145] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0252.377] SetEvent (hEvent=0x248) returned 1
	[0252.377] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0252.389] SetEvent (hEvent=0x248) returned 1
	[0252.389] SetEvent (hEvent=0x234) returned 1
	[0252.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 0x20
	[0252.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs", dwFileAttributes=0x20) returned 1
	[0252.390] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.tl30z"), dwFlags=0x1) returned 1
	[0252.520] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0252.523] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0252.523] ReadFile (in: hFile=0x288, lpBuffer=0x111bc500, nNumberOfBytesToRead=0x4e5, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x111bc500*, lpNumberOfBytesRead=0x1131de18*=0x4e5, lpOverlapped=0x0) returned 1
	[0252.531] SetEvent (hEvent=0x1e8) returned 1
	[0252.532] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0252.532] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0252.533] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e2802 | out: pbBuffer=0x113e2802) returned 1
	[0252.533] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e281b | out: pbBuffer=0x113e281b) returned 1
	[0252.533] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e2886 | out: pbBuffer=0x113e2886) returned 1
	[0252.533] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e28b1 | out: pbBuffer=0x113e28b1) returned 1
	[0252.533] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0252.534] GetFileType (hFile=0x288) returned 0x1
	[0252.534] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.534] WriteFile (in: hFile=0x288, lpBuffer=0x11302000*, nNumberOfBytesToWrite=0x4e5, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11302000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4e5, lpOverlapped=0x1102be08) returned 1
	[0252.534] GetFileType (hFile=0x288) returned 0x1
	[0252.534] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x4e5, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.535] GetFileType (hFile=0x288) returned 0x1
	[0252.535] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.535] WriteFile (in: hFile=0x288, lpBuffer=0x1148ea80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1148ea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0252.535] GetFileType (hFile=0x288) returned 0x1
	[0252.535] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x4e5, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.536] CloseHandle (hObject=0x288) returned 1
	[0252.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.tl30z")) returned 0x20
	[0252.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.tl30z", dwFileAttributes=0x21) returned 1
	[0252.575] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0252.579] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0253.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 0x20
	[0253.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", dwFileAttributes=0x20) returned 1
	[0253.209] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.tl30z" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.tl30z"), dwFlags=0x1) returned 1
	[0253.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.tl30z" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0253.211] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0253.211] VirtualAlloc (lpAddress=0x11eb0000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0x11eb0000
	[0253.213] ReadFile (in: hFile=0x1d8, lpBuffer=0x11eb0000, nNumberOfBytesToRead=0x939a, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11eb0000*, lpNumberOfBytesRead=0x1131ce18*=0x939a, lpOverlapped=0x0) returned 1
	[0253.278] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0253.335] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0253.600] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0253.614] SetEvent (hEvent=0x234) returned 1
	[0253.615] SwitchToThread () returned 1
	[0253.620] SetEvent (hEvent=0x234) returned 1
	[0253.620] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0253.733] SetEvent (hEvent=0x210) returned 1
	[0253.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0253.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0253.734] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0254.467] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0254.477] SetEvent (hEvent=0x218) returned 1
	[0254.477] SetEvent (hEvent=0x24c) returned 1
	[0254.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208
	[0254.482] GetConsoleMode (in: hConsoleHandle=0x208, lpMode=0x110ade08 | out: lpMode=0x110ade08) returned 0
	[0254.483] ReadFile (in: hFile=0x208, lpBuffer=0x11396000, nNumberOfBytesToRead=0xc636, lpNumberOfBytesRead=0x110ade18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x110ade18*=0xc636, lpOverlapped=0x0) returned 1
	[0254.489] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0254.490] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ea802 | out: pbBuffer=0x112ea802) returned 1
	[0254.490] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ea808 | out: pbBuffer=0x112ea808) returned 1
	[0254.490] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0254.491] GetFileType (hFile=0x208) returned 0x1
	[0254.492] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110adde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.492] WriteFile (in: hFile=0x208, lpBuffer=0x112d4000*, nNumberOfBytesToWrite=0xc636, lpNumberOfBytesWritten=0x110addfc, lpOverlapped=0x110ade08 | out: lpBuffer=0x112d4000*, lpNumberOfBytesWritten=0x110addfc*=0xc636, lpOverlapped=0x110ade08) returned 1
	[0254.492] GetFileType (hFile=0x208) returned 0x1
	[0254.493] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0xc636, lpNewFilePointer=0x0, dwMoveMethod=0x110adde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.493] GetFileType (hFile=0x208) returned 0x1
	[0254.493] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110adde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.493] WriteFile (in: hFile=0x208, lpBuffer=0x1135aa80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x110addfc, lpOverlapped=0x110ade08 | out: lpBuffer=0x1135aa80*, lpNumberOfBytesWritten=0x110addfc*=0x233, lpOverlapped=0x110ade08) returned 1
	[0254.591] GetFileType (hFile=0x208) returned 0x1
	[0254.592] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0xc636, lpNewFilePointer=0x0, dwMoveMethod=0x110adde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.592] CloseHandle (hObject=0x208) returned 1
	[0254.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0254.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0254.622] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0254.636] SetEvent (hEvent=0x124) returned 1
	[0254.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 0x220
	[0254.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0254.637] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0255.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0255.352] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0255.352] ReadFile (in: hFile=0x224, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x863, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11423e18*=0x863, lpOverlapped=0x0) returned 1
	[0255.359] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e930 | out: pbBuffer=0x1104e930) returned 1
	[0255.359] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11451b02 | out: pbBuffer=0x11451b02) returned 1
	[0255.359] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11451b68 | out: pbBuffer=0x11451b68) returned 1
	[0255.359] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e960 | out: pbBuffer=0x1104e960) returned 1
	[0255.359] GetFileType (hFile=0x224) returned 0x1
	[0255.360] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.360] WriteFile (in: hFile=0x224, lpBuffer=0x111f3000*, nNumberOfBytesToWrite=0x863, lpNumberOfBytesWritten=0x11f6bdfc, lpOverlapped=0x11f6be08 | out: lpBuffer=0x111f3000*, lpNumberOfBytesWritten=0x11f6bdfc*=0x863, lpOverlapped=0x11f6be08) returned 1
	[0255.360] GetFileType (hFile=0x224) returned 0x1
	[0255.360] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x863, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.360] GetFileType (hFile=0x224) returned 0x1
	[0255.361] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.361] WriteFile (in: hFile=0x224, lpBuffer=0x11473180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11f6bdfc, lpOverlapped=0x11f6be08 | out: lpBuffer=0x11473180*, lpNumberOfBytesWritten=0x11f6bdfc*=0x227, lpOverlapped=0x11f6be08) returned 1
	[0255.361] GetFileType (hFile=0x224) returned 0x1
	[0255.361] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x863, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.362] CloseHandle (hObject=0x224) returned 1
	[0255.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0255.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0255.372] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0255.425] SetEvent (hEvent=0x218) returned 1
	[0255.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0255.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0255.426] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0255.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0255.990] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0255.990] ReadFile (in: hFile=0x224, lpBuffer=0x11396000, nNumberOfBytesToRead=0xc92b, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x11423e18*=0xc92b, lpOverlapped=0x0) returned 1
	[0255.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0255.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107a802 | out: pbBuffer=0x1107a802) returned 1
	[0255.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0255.999] GetFileType (hFile=0x224) returned 0x1
	[0255.999] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.000] WriteFile (in: hFile=0x224, lpBuffer=0x11464000*, nNumberOfBytesToWrite=0xc92b, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11464000*, lpNumberOfBytesWritten=0x1102bdfc*=0xc92b, lpOverlapped=0x1102be08) returned 1
	[0256.000] GetFileType (hFile=0x224) returned 0x1
	[0256.001] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xc92b, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.001] GetFileType (hFile=0x224) returned 0x1
	[0256.001] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.001] WriteFile (in: hFile=0x224, lpBuffer=0x1135aa80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135aa80*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0256.006] GetFileType (hFile=0x224) returned 0x1
	[0256.007] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xc92b, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.007] CloseHandle (hObject=0x224) returned 1
	[0256.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0256.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0256.022] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0256.073] SetEvent (hEvent=0x26c) returned 1
	[0256.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0256.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0256.074] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0256.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0256.573] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0256.573] ReadFile (in: hFile=0x1d8, lpBuffer=0x11f86500, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11f86500*, lpNumberOfBytesRead=0x11423e18*=0x4ed, lpOverlapped=0x0) returned 1
	[0256.578] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0256.578] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11f93202 | out: pbBuffer=0x11f93202) returned 1
	[0256.578] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11f93238 | out: pbBuffer=0x11f93238) returned 1
	[0256.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11f932b6 | out: pbBuffer=0x11f932b6) returned 1
	[0256.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0256.579] GetFileType (hFile=0x1d8) returned 0x1
	[0256.579] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.580] WriteFile (in: hFile=0x1d8, lpBuffer=0x110b9000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x11f69dfc, lpOverlapped=0x11f69e08 | out: lpBuffer=0x110b9000*, lpNumberOfBytesWritten=0x11f69dfc*=0x4ed, lpOverlapped=0x11f69e08) returned 1
	[0256.580] GetFileType (hFile=0x1d8) returned 0x1
	[0256.580] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.581] GetFileType (hFile=0x1d8) returned 0x1
	[0256.581] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.581] WriteFile (in: hFile=0x1d8, lpBuffer=0x11321880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11f69dfc, lpOverlapped=0x11f69e08 | out: lpBuffer=0x11321880*, lpNumberOfBytesWritten=0x11f69dfc*=0x22d, lpOverlapped=0x11f69e08) returned 1
	[0256.582] GetFileType (hFile=0x1d8) returned 0x1
	[0256.582] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.582] CloseHandle (hObject=0x1d8) returned 1
	[0256.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0256.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0256.671] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0256.748] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0256.842] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0256.854] SetEvent (hEvent=0x234) returned 1
	[0256.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0256.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0256.855] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0257.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0257.365] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0257.366] ReadFile (in: hFile=0x1fc, lpBuffer=0x11194000, nNumberOfBytesToRead=0x5aa, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11194000*, lpNumberOfBytesRead=0x11428e18*=0x5aa, lpOverlapped=0x0) returned 1
	[0257.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332c50 | out: pbBuffer=0x11332c50) returned 1
	[0257.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11181102 | out: pbBuffer=0x11181102) returned 1
	[0257.378] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332c80 | out: pbBuffer=0x11332c80) returned 1
	[0257.378] GetFileType (hFile=0x1fc) returned 0x1
	[0257.378] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.378] WriteFile (in: hFile=0x1fc, lpBuffer=0x111a8000*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x11fb3dfc, lpOverlapped=0x11fb3e08 | out: lpBuffer=0x111a8000*, lpNumberOfBytesWritten=0x11fb3dfc*=0x5aa, lpOverlapped=0x11fb3e08) returned 1
	[0257.378] GetFileType (hFile=0x1fc) returned 0x1
	[0257.379] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x5aa, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.379] GetFileType (hFile=0x1fc) returned 0x1
	[0257.379] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.379] WriteFile (in: hFile=0x1fc, lpBuffer=0x1118d180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11fb3dfc, lpOverlapped=0x11fb3e08 | out: lpBuffer=0x1118d180*, lpNumberOfBytesWritten=0x11fb3dfc*=0x22a, lpOverlapped=0x11fb3e08) returned 1
	[0257.379] GetFileType (hFile=0x1fc) returned 0x1
	[0257.379] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x5aa, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.379] CloseHandle (hObject=0x1fc) returned 1
	[0257.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0257.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0257.393] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0257.399] SetEvent (hEvent=0x234) returned 1
	[0257.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0257.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0257.400] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0257.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0257.899] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0257.899] ReadFile (in: hFile=0x1fc, lpBuffer=0x11186000, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11186000*, lpNumberOfBytesRead=0x11428e18*=0x4ed, lpOverlapped=0x0) returned 1
	[0257.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0257.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0257.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f8e02 | out: pbBuffer=0x111f8e02) returned 1
	[0257.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f8eb9 | out: pbBuffer=0x111f8eb9) returned 1
	[0257.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0257.910] GetFileType (hFile=0x1fc) returned 0x1
	[0257.910] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.911] WriteFile (in: hFile=0x1fc, lpBuffer=0x11376000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x113d7dfc, lpOverlapped=0x113d7e08 | out: lpBuffer=0x11376000*, lpNumberOfBytesWritten=0x113d7dfc*=0x4ed, lpOverlapped=0x113d7e08) returned 1
	[0257.911] GetFileType (hFile=0x1fc) returned 0x1
	[0257.912] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.912] GetFileType (hFile=0x1fc) returned 0x1
	[0257.912] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.912] WriteFile (in: hFile=0x1fc, lpBuffer=0x11204a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113d7dfc, lpOverlapped=0x113d7e08 | out: lpBuffer=0x11204a80*, lpNumberOfBytesWritten=0x113d7dfc*=0x22d, lpOverlapped=0x113d7e08) returned 1
	[0257.912] GetFileType (hFile=0x1fc) returned 0x1
	[0257.912] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.913] CloseHandle (hObject=0x1fc) returned 1
	[0257.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0257.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0257.925] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0257.932] SetEvent (hEvent=0x210) returned 1
	[0257.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 0x220
	[0257.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", dwFileAttributes=0x220) returned 1
	[0257.933] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.tl30z"), dwFlags=0x1) returned 1
	[0258.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0258.678] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0258.678] ReadFile (in: hFile=0x224, lpBuffer=0x11172000, nNumberOfBytesToRead=0x2667, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11172000*, lpNumberOfBytesRead=0x11428e18*=0x2667, lpOverlapped=0x0) returned 1
	[0258.733] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0258.734] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1131ed02 | out: pbBuffer=0x1131ed02) returned 1
	[0258.734] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0258.734] GetFileType (hFile=0x224) returned 0x1
	[0258.735] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.735] WriteFile (in: hFile=0x224, lpBuffer=0x11256000*, nNumberOfBytesToWrite=0x2667, lpNumberOfBytesWritten=0x113d7dfc, lpOverlapped=0x113d7e08 | out: lpBuffer=0x11256000*, lpNumberOfBytesWritten=0x113d7dfc*=0x2667, lpOverlapped=0x113d7e08) returned 1
	[0258.735] GetFileType (hFile=0x224) returned 0x1
	[0258.735] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2667, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.735] GetFileType (hFile=0x224) returned 0x1
	[0258.736] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.736] WriteFile (in: hFile=0x224, lpBuffer=0x11067500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113d7dfc, lpOverlapped=0x113d7e08 | out: lpBuffer=0x11067500*, lpNumberOfBytesWritten=0x113d7dfc*=0x230, lpOverlapped=0x113d7e08) returned 1
	[0258.736] GetFileType (hFile=0x224) returned 0x1
	[0258.736] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2667, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.736] CloseHandle (hObject=0x224) returned 1
	[0258.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.tl30z")) returned 0x220
	[0258.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0258.787] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0258.823] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0258.832] SetEvent (hEvent=0x1e8) returned 1
	[0258.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 0x220
	[0258.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF", dwFileAttributes=0x220) returned 1
	[0258.834] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.tl30z"), dwFlags=0x1) returned 1
	[0259.150] SetEvent (hEvent=0x150) returned 1
	[0259.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0259.228] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0259.229] ReadFile (in: hFile=0x224, lpBuffer=0x1106a000, nNumberOfBytesToRead=0x1c30, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1106a000*, lpNumberOfBytesRead=0x1128be18*=0x1c30, lpOverlapped=0x0) returned 1
	[0259.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0259.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c7302 | out: pbBuffer=0x112c7302) returned 1
	[0259.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0259.240] GetFileType (hFile=0x224) returned 0x1
	[0259.240] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.241] WriteFile (in: hFile=0x224, lpBuffer=0x1137c000*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1137c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1c30, lpOverlapped=0x1102be08) returned 1
	[0259.241] GetFileType (hFile=0x224) returned 0x1
	[0259.242] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1c30, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.242] GetFileType (hFile=0x224) returned 0x1
	[0259.242] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.242] WriteFile (in: hFile=0x224, lpBuffer=0x11bef880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bef880*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0259.242] GetFileType (hFile=0x224) returned 0x1
	[0259.242] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1c30, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.243] CloseHandle (hObject=0x224) returned 1
	[0259.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.tl30z")) returned 0x220
	[0259.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0259.255] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0259.277] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0259.471] SetEvent (hEvent=0x26c) returned 1
	[0259.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 0x220
	[0259.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", dwFileAttributes=0x220) returned 1
	[0259.472] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.tl30z"), dwFlags=0x1) returned 1
	[0259.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0259.824] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0259.824] ReadFile (in: hFile=0x288, lpBuffer=0x113da000, nNumberOfBytesToRead=0x1e06, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113da000*, lpNumberOfBytesRead=0x11428e18*=0x1e06, lpOverlapped=0x0) returned 1
	[0259.829] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112966c0 | out: pbBuffer=0x112966c0) returned 1
	[0259.829] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112966b8 | out: pbBuffer=0x112966b8) returned 1
	[0259.829] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113de702 | out: pbBuffer=0x113de702) returned 1
	[0259.830] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112966f0 | out: pbBuffer=0x112966f0) returned 1
	[0259.830] GetFileType (hFile=0x288) returned 0x1
	[0259.830] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.830] WriteFile (in: hFile=0x288, lpBuffer=0x11bce000*, nNumberOfBytesToWrite=0x1e06, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x11bce000*, lpNumberOfBytesWritten=0x112bbdfc*=0x1e06, lpOverlapped=0x112bbe08) returned 1
	[0259.830] GetFileType (hFile=0x288) returned 0x1
	[0259.830] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1e06, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.831] GetFileType (hFile=0x288) returned 0x1
	[0259.831] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.831] WriteFile (in: hFile=0x288, lpBuffer=0x113fb500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x113fb500*, lpNumberOfBytesWritten=0x112bbdfc*=0x22a, lpOverlapped=0x112bbe08) returned 1
	[0259.831] GetFileType (hFile=0x288) returned 0x1
	[0259.831] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1e06, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.831] CloseHandle (hObject=0x288) returned 1
	[0259.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.tl30z")) returned 0x220
	[0259.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0259.942] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0259.985] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0260.019] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0260.192] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0260.307] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0260.348] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0260.467] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0260.540] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0260.666] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0260.813] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0260.916] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0261.021] SetEvent (hEvent=0x1b0) returned 1
	[0261.022] SetEvent (hEvent=0x1f0) returned 1
	[0261.022] SetEvent (hEvent=0x248) returned 1
	[0261.022] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0261.028] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0261.028] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0261.037] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0261.037] SetEvent (hEvent=0x1b0) returned 1
	[0261.037] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0261.044] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0261.044] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0262.745] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0262.821] SetEvent (hEvent=0x210) returned 1
	[0262.821] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0262.839] SetEvent (hEvent=0x210) returned 1
	[0262.839] SwitchToThread () returned 1
	[0262.848] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0263.040] SetEvent (hEvent=0x26c) returned 1
	[0263.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 0x220
	[0263.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", dwFileAttributes=0x220) returned 1
	[0263.041] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0263.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0263.497] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0263.497] ReadFile (in: hFile=0x1fc, lpBuffer=0x1134e300, nNumberOfBytesToRead=0x63c, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1134e300*, lpNumberOfBytesRead=0x11287e18*=0x63c, lpOverlapped=0x0) returned 1
	[0263.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0263.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f288 | out: pbBuffer=0x1140f288) returned 1
	[0263.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11275202 | out: pbBuffer=0x11275202) returned 1
	[0263.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2c0 | out: pbBuffer=0x1140f2c0) returned 1
	[0263.510] GetFileType (hFile=0x1fc) returned 0x1
	[0263.510] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.510] WriteFile (in: hFile=0x1fc, lpBuffer=0x11255000*, nNumberOfBytesToWrite=0x63c, lpNumberOfBytesWritten=0x1110bdfc, lpOverlapped=0x1110be08 | out: lpBuffer=0x11255000*, lpNumberOfBytesWritten=0x1110bdfc*=0x63c, lpOverlapped=0x1110be08) returned 1
	[0263.511] GetFileType (hFile=0x1fc) returned 0x1
	[0263.511] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x63c, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.511] GetFileType (hFile=0x1fc) returned 0x1
	[0263.511] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.512] WriteFile (in: hFile=0x1fc, lpBuffer=0x11256000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1110bdfc, lpOverlapped=0x1110be08 | out: lpBuffer=0x11256000*, lpNumberOfBytesWritten=0x1110bdfc*=0x22a, lpOverlapped=0x1110be08) returned 1
	[0263.512] GetFileType (hFile=0x1fc) returned 0x1
	[0263.512] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x63c, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.512] CloseHandle (hObject=0x1fc) returned 1
	[0263.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.tl30z")) returned 0x220
	[0263.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0263.523] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0263.532] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0263.553] SetEvent (hEvent=0x218) returned 1
	[0263.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 0x220
	[0263.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", dwFileAttributes=0x220) returned 1
	[0263.554] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0263.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0263.980] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0263.980] ReadFile (in: hFile=0x288, lpBuffer=0x11300000, nNumberOfBytesToRead=0xea2, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11300000*, lpNumberOfBytesRead=0x11428e18*=0xea2, lpOverlapped=0x0) returned 1
	[0263.984] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66c0 | out: pbBuffer=0x113e66c0) returned 1
	[0263.984] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66b8 | out: pbBuffer=0x113e66b8) returned 1
	[0263.984] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11327302 | out: pbBuffer=0x11327302) returned 1
	[0263.984] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132735d | out: pbBuffer=0x1132735d) returned 1
	[0263.984] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11327370 | out: pbBuffer=0x11327370) returned 1
	[0263.985] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66f0 | out: pbBuffer=0x113e66f0) returned 1
	[0263.985] GetFileType (hFile=0x288) returned 0x1
	[0263.985] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.986] WriteFile (in: hFile=0x288, lpBuffer=0x11314000*, nNumberOfBytesToWrite=0xea2, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11314000*, lpNumberOfBytesWritten=0x112bddfc*=0xea2, lpOverlapped=0x112bde08) returned 1
	[0263.986] GetFileType (hFile=0x288) returned 0x1
	[0263.986] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xea2, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.986] GetFileType (hFile=0x288) returned 0x1
	[0263.986] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.987] WriteFile (in: hFile=0x288, lpBuffer=0x11310380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11310380*, lpNumberOfBytesWritten=0x112bddfc*=0x22a, lpOverlapped=0x112bde08) returned 1
	[0263.987] GetFileType (hFile=0x288) returned 0x1
	[0263.987] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xea2, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.987] CloseHandle (hObject=0x288) returned 1
	[0263.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.tl30z")) returned 0x220
	[0263.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0264.000] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0264.011] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0264.035] SetEvent (hEvent=0x218) returned 1
	[0264.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 0x220
	[0264.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", dwFileAttributes=0x220) returned 1
	[0264.036] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0264.488] SetEvent (hEvent=0x150) returned 1
	[0264.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0264.496] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0264.497] ReadFile (in: hFile=0x224, lpBuffer=0x11450000, nNumberOfBytesToRead=0x1d74, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11450000*, lpNumberOfBytesRead=0x11022e18*=0x1d74, lpOverlapped=0x0) returned 1
	[0264.505] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6980 | out: pbBuffer=0x113e6980) returned 1
	[0264.506] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6978 | out: pbBuffer=0x113e6978) returned 1
	[0264.506] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11452802 | out: pbBuffer=0x11452802) returned 1
	[0264.506] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114528bf | out: pbBuffer=0x114528bf) returned 1
	[0264.506] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69b0 | out: pbBuffer=0x113e69b0) returned 1
	[0264.507] GetFileType (hFile=0x224) returned 0x1
	[0264.507] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.507] WriteFile (in: hFile=0x224, lpBuffer=0x11468000*, nNumberOfBytesToWrite=0x1d74, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11468000*, lpNumberOfBytesWritten=0x112bddfc*=0x1d74, lpOverlapped=0x112bde08) returned 1
	[0264.507] GetFileType (hFile=0x224) returned 0x1
	[0264.508] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1d74, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.508] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0264.518] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0264.518] SetEvent (hEvent=0x150) returned 1
	[0264.518] SetEvent (hEvent=0x26c) returned 1
	[0264.518] SetEvent (hEvent=0x248) returned 1
	[0264.518] GetFileType (hFile=0x224) returned 0x1
	[0264.518] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.519] WriteFile (in: hFile=0x224, lpBuffer=0x1146c000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x1146c000*, lpNumberOfBytesWritten=0x112bddfc*=0x230, lpOverlapped=0x112bde08) returned 1
	[0264.519] GetFileType (hFile=0x224) returned 0x1
	[0264.519] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1d74, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.519] CloseHandle (hObject=0x224) returned 1
	[0264.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.tl30z")) returned 0x220
	[0264.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0264.600] SwitchToThread () returned 1
	[0264.603] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0266.835] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0266.840] SetEvent (hEvent=0x1b0) returned 1
	[0266.840] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0266.858] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0266.930] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0266.981] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0267.020] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0267.146] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0267.264] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0267.289] SetEvent (hEvent=0x26c) returned 1
	[0267.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x220
	[0267.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", dwFileAttributes=0x220) returned 1
	[0267.290] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.544] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0267.544] ReadFile (in: hFile=0x1d8, lpBuffer=0x112c8000, nNumberOfBytesToRead=0x3f34, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x112c8000*, lpNumberOfBytesRead=0x11425e18*=0x3f34, lpOverlapped=0x0) returned 1
	[0267.553] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0267.553] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63f8 | out: pbBuffer=0x113e63f8) returned 1
	[0267.553] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134dd02 | out: pbBuffer=0x1134dd02) returned 1
	[0267.553] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134dda7 | out: pbBuffer=0x1134dda7) returned 1
	[0267.553] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134ddae | out: pbBuffer=0x1134ddae) returned 1
	[0267.554] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6430 | out: pbBuffer=0x113e6430) returned 1
	[0267.554] GetFileType (hFile=0x1d8) returned 0x1
	[0267.554] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.554] WriteFile (in: hFile=0x1d8, lpBuffer=0x1109a000*, nNumberOfBytesToWrite=0x3f34, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x1109a000*, lpNumberOfBytesWritten=0x11373dfc*=0x3f34, lpOverlapped=0x11373e08) returned 1
	[0267.555] GetFileType (hFile=0x1d8) returned 0x1
	[0267.555] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3f34, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.555] GetFileType (hFile=0x1d8) returned 0x1
	[0267.555] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.555] WriteFile (in: hFile=0x1d8, lpBuffer=0x111d8700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x111d8700*, lpNumberOfBytesWritten=0x11373dfc*=0x233, lpOverlapped=0x11373e08) returned 1
	[0267.556] GetFileType (hFile=0x1d8) returned 0x1
	[0267.556] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3f34, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.556] CloseHandle (hObject=0x1d8) returned 1
	[0267.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.tl30z")) returned 0x220
	[0267.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.566] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0267.579] SetEvent (hEvent=0x26c) returned 1
	[0267.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x220
	[0267.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", dwFileAttributes=0x220) returned 1
	[0267.580] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.815] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0267.815] ReadFile (in: hFile=0x1d8, lpBuffer=0x110cd500, nNumberOfBytesToRead=0x133c, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x110cd500*, lpNumberOfBytesRead=0x11425e18*=0x133c, lpOverlapped=0x0) returned 1
	[0267.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f040 | out: pbBuffer=0x1140f040) returned 1
	[0267.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11217402 | out: pbBuffer=0x11217402) returned 1
	[0267.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11217491 | out: pbBuffer=0x11217491) returned 1
	[0267.822] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f070 | out: pbBuffer=0x1140f070) returned 1
	[0267.822] GetFileType (hFile=0x1d8) returned 0x1
	[0267.822] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.822] WriteFile (in: hFile=0x1d8, lpBuffer=0x11188000*, nNumberOfBytesToWrite=0x133c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11188000*, lpNumberOfBytesWritten=0x11031dfc*=0x133c, lpOverlapped=0x11031e08) returned 1
	[0267.822] GetFileType (hFile=0x1d8) returned 0x1
	[0267.823] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x133c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.823] GetFileType (hFile=0x1d8) returned 0x1
	[0267.823] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.823] WriteFile (in: hFile=0x1d8, lpBuffer=0x1117e700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1117e700*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0267.823] GetFileType (hFile=0x1d8) returned 0x1
	[0267.823] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x133c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.823] CloseHandle (hObject=0x1d8) returned 1
	[0267.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.tl30z")) returned 0x220
	[0267.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.842] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0267.858] SetEvent (hEvent=0x26c) returned 1
	[0267.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x220
	[0267.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", dwFileAttributes=0x220) returned 1
	[0267.859] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.047] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0268.047] ReadFile (in: hFile=0x1d4, lpBuffer=0x11be0000, nNumberOfBytesToRead=0x9d0e, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11be0000*, lpNumberOfBytesRead=0x11425e18*=0x9d0e, lpOverlapped=0x0) returned 1
	[0268.052] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0268.052] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119d402 | out: pbBuffer=0x1119d402) returned 1
	[0268.052] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119d4b8 | out: pbBuffer=0x1119d4b8) returned 1
	[0268.053] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0268.054] GetFileType (hFile=0x1d4) returned 0x1
	[0268.054] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.054] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ee000*, nNumberOfBytesToWrite=0x9d0e, lpNumberOfBytesWritten=0x11391dfc, lpOverlapped=0x11391e08 | out: lpBuffer=0x112ee000*, lpNumberOfBytesWritten=0x11391dfc*=0x9d0e, lpOverlapped=0x11391e08) returned 1
	[0268.055] GetFileType (hFile=0x1d4) returned 0x1
	[0268.055] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x9d0e, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.055] GetFileType (hFile=0x1d4) returned 0x1
	[0268.055] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.055] WriteFile (in: hFile=0x1d4, lpBuffer=0x1117fc00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11391dfc, lpOverlapped=0x11391e08 | out: lpBuffer=0x1117fc00*, lpNumberOfBytesWritten=0x11391dfc*=0x233, lpOverlapped=0x11391e08) returned 1
	[0268.055] GetFileType (hFile=0x1d4) returned 0x1
	[0268.056] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x9d0e, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.056] CloseHandle (hObject=0x1d4) returned 1
	[0268.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.tl30z")) returned 0x220
	[0268.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.061] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0268.083] SetEvent (hEvent=0x210) returned 1
	[0268.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 0x220
	[0268.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", dwFileAttributes=0x220) returned 1
	[0268.085] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.tl30z"), dwFlags=0x1) returned 1
	[0268.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.257] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0268.257] ReadFile (in: hFile=0x1d4, lpBuffer=0x111d2000, nNumberOfBytesToRead=0x34cb, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x111d2000*, lpNumberOfBytesRead=0x11425e18*=0x34cb, lpOverlapped=0x0) returned 1
	[0268.265] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296050 | out: pbBuffer=0x11296050) returned 1
	[0268.265] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b9102 | out: pbBuffer=0x110b9102) returned 1
	[0268.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296080 | out: pbBuffer=0x11296080) returned 1
	[0268.266] GetFileType (hFile=0x1d4) returned 0x1
	[0268.266] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.278] WriteFile (in: hFile=0x1d4, lpBuffer=0x11206000*, nNumberOfBytesToWrite=0x34cb, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x11206000*, lpNumberOfBytesWritten=0x1138ddfc*=0x34cb, lpOverlapped=0x1138de08) returned 1
	[0268.278] GetFileType (hFile=0x1d4) returned 0x1
	[0268.279] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x34cb, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.279] GetFileType (hFile=0x1d4) returned 0x1
	[0268.279] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.279] WriteFile (in: hFile=0x1d4, lpBuffer=0x111ea380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x111ea380*, lpNumberOfBytesWritten=0x1138ddfc*=0x230, lpOverlapped=0x1138de08) returned 1
	[0268.279] GetFileType (hFile=0x1d4) returned 0x1
	[0268.279] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x34cb, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.279] CloseHandle (hObject=0x1d4) returned 1
	[0268.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.tl30z")) returned 0x220
	[0268.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.296] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0268.300] SetEvent (hEvent=0x210) returned 1
	[0268.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x220
	[0268.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", dwFileAttributes=0x220) returned 1
	[0268.301] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.462] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0268.462] ReadFile (in: hFile=0x1d4, lpBuffer=0x11396000, nNumberOfBytesToRead=0x25ee, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x11425e18*=0x25ee, lpOverlapped=0x0) returned 1
	[0268.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0268.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11350802 | out: pbBuffer=0x11350802) returned 1
	[0268.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113508c4 | out: pbBuffer=0x113508c4) returned 1
	[0268.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0268.470] GetFileType (hFile=0x1d4) returned 0x1
	[0268.471] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.471] WriteFile (in: hFile=0x1d4, lpBuffer=0x112e2000*, nNumberOfBytesToWrite=0x25ee, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x112e2000*, lpNumberOfBytesWritten=0x1138ddfc*=0x25ee, lpOverlapped=0x1138de08) returned 1
	[0268.471] GetFileType (hFile=0x1d4) returned 0x1
	[0268.471] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x25ee, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.471] GetFileType (hFile=0x1d4) returned 0x1
	[0268.471] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.472] WriteFile (in: hFile=0x1d4, lpBuffer=0x1136ea80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x1136ea80*, lpNumberOfBytesWritten=0x1138ddfc*=0x233, lpOverlapped=0x1138de08) returned 1
	[0268.472] GetFileType (hFile=0x1d4) returned 0x1
	[0268.472] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x25ee, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.472] CloseHandle (hObject=0x1d4) returned 1
	[0268.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.tl30z")) returned 0x220
	[0268.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.479] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0268.491] SetEvent (hEvent=0x234) returned 1
	[0268.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x220
	[0268.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", dwFileAttributes=0x220) returned 1
	[0268.492] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.641] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0268.641] ReadFile (in: hFile=0x1d4, lpBuffer=0x11223500, nNumberOfBytesToRead=0x30e8, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11223500*, lpNumberOfBytesRead=0x11425e18*=0x30e8, lpOverlapped=0x0) returned 1
	[0268.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f540 | out: pbBuffer=0x1140f540) returned 1
	[0268.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f538 | out: pbBuffer=0x1140f538) returned 1
	[0268.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f2702 | out: pbBuffer=0x112f2702) returned 1
	[0268.646] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0268.647] GetFileType (hFile=0x1d4) returned 0x1
	[0268.647] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.647] WriteFile (in: hFile=0x1d4, lpBuffer=0x1130e000*, nNumberOfBytesToWrite=0x30e8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1130e000*, lpNumberOfBytesWritten=0x11031dfc*=0x30e8, lpOverlapped=0x11031e08) returned 1
	[0268.647] GetFileType (hFile=0x1d4) returned 0x1
	[0268.648] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x30e8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.648] GetFileType (hFile=0x1d4) returned 0x1
	[0268.648] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.648] WriteFile (in: hFile=0x1d4, lpBuffer=0x11bc9880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bc9880*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0268.648] GetFileType (hFile=0x1d4) returned 0x1
	[0268.648] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x30e8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.649] CloseHandle (hObject=0x1d4) returned 1
	[0268.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.tl30z")) returned 0x220
	[0268.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.662] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0268.668] SetEvent (hEvent=0x234) returned 1
	[0268.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x220
	[0268.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", dwFileAttributes=0x220) returned 1
	[0268.668] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.958] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0268.958] ReadFile (in: hFile=0x1d4, lpBuffer=0x11180800, nNumberOfBytesToRead=0x27a2, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11180800*, lpNumberOfBytesRead=0x11425e18*=0x27a2, lpOverlapped=0x0) returned 1
	[0268.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f9c0 | out: pbBuffer=0x1140f9c0) returned 1
	[0268.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f9b8 | out: pbBuffer=0x1140f9b8) returned 1
	[0268.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bc602 | out: pbBuffer=0x112bc602) returned 1
	[0268.963] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f9f0 | out: pbBuffer=0x1140f9f0) returned 1
	[0268.963] GetFileType (hFile=0x1d4) returned 0x1
	[0268.963] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.964] WriteFile (in: hFile=0x1d4, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0x27a2, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x11031dfc*=0x27a2, lpOverlapped=0x11031e08) returned 1
	[0268.964] GetFileType (hFile=0x1d4) returned 0x1
	[0268.964] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x27a2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.964] GetFileType (hFile=0x1d4) returned 0x1
	[0268.964] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.965] WriteFile (in: hFile=0x1d4, lpBuffer=0x112c4380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112c4380*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0268.965] GetFileType (hFile=0x1d4) returned 0x1
	[0268.965] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x27a2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.965] CloseHandle (hObject=0x1d4) returned 1
	[0268.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.tl30z")) returned 0x220
	[0268.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.971] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0268.980] SetEvent (hEvent=0x234) returned 1
	[0268.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x220
	[0268.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", dwFileAttributes=0x220) returned 1
	[0268.981] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0269.147] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0269.147] ReadFile (in: hFile=0x1d4, lpBuffer=0x11466000, nNumberOfBytesToRead=0x1f86, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11466000*, lpNumberOfBytesRead=0x11425e18*=0x1f86, lpOverlapped=0x0) returned 1
	[0269.152] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112964e0 | out: pbBuffer=0x112964e0) returned 1
	[0269.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bd302 | out: pbBuffer=0x110bd302) returned 1
	[0269.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bd3d3 | out: pbBuffer=0x110bd3d3) returned 1
	[0269.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296510 | out: pbBuffer=0x11296510) returned 1
	[0269.153] GetFileType (hFile=0x1d4) returned 0x1
	[0269.153] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.154] WriteFile (in: hFile=0x1d4, lpBuffer=0x111ce000*, nNumberOfBytesToWrite=0x1f86, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x111ce000*, lpNumberOfBytesWritten=0x1138ddfc*=0x1f86, lpOverlapped=0x1138de08) returned 1
	[0269.154] GetFileType (hFile=0x1d4) returned 0x1
	[0269.154] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1f86, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.154] GetFileType (hFile=0x1d4) returned 0x1
	[0269.154] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.154] WriteFile (in: hFile=0x1d4, lpBuffer=0x11435180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x11435180*, lpNumberOfBytesWritten=0x1138ddfc*=0x230, lpOverlapped=0x1138de08) returned 1
	[0269.155] GetFileType (hFile=0x1d4) returned 0x1
	[0269.155] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1f86, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.155] CloseHandle (hObject=0x1d4) returned 1
	[0269.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.tl30z")) returned 0x220
	[0269.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.177] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0269.182] SetEvent (hEvent=0x234) returned 1
	[0269.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x220
	[0269.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", dwFileAttributes=0x220) returned 1
	[0269.183] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0269.385] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0269.385] SetEvent (hEvent=0x218) returned 1
	[0269.385] ReadFile (in: hFile=0x1d4, lpBuffer=0x1112e000, nNumberOfBytesToRead=0x1264, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1112e000*, lpNumberOfBytesRead=0x11425e18*=0x1264, lpOverlapped=0x0) returned 1
	[0269.390] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e60e0 | out: pbBuffer=0x113e60e0) returned 1
	[0269.390] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e7a02 | out: pbBuffer=0x111e7a02) returned 1
	[0269.391] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6110 | out: pbBuffer=0x113e6110) returned 1
	[0269.391] GetFileType (hFile=0x1d4) returned 0x1
	[0269.391] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.391] WriteFile (in: hFile=0x1d4, lpBuffer=0x11152000*, nNumberOfBytesToWrite=0x1264, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11152000*, lpNumberOfBytesWritten=0x11031dfc*=0x1264, lpOverlapped=0x11031e08) returned 1
	[0269.392] GetFileType (hFile=0x1d4) returned 0x1
	[0269.392] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1264, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.392] GetFileType (hFile=0x1d4) returned 0x1
	[0269.392] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.392] WriteFile (in: hFile=0x1d4, lpBuffer=0x11144a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11144a80*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0269.392] GetFileType (hFile=0x1d4) returned 0x1
	[0269.392] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1264, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.392] CloseHandle (hObject=0x1d4) returned 1
	[0269.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.tl30z")) returned 0x220
	[0269.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.400] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0269.401] SetEvent (hEvent=0x218) returned 1
	[0269.401] SetEvent (hEvent=0x210) returned 1
	[0269.401] SwitchToThread () returned 1
	[0269.406] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0269.417] SetEvent (hEvent=0x210) returned 1
	[0269.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x220
	[0269.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF", dwFileAttributes=0x220) returned 1
	[0269.418] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.558] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0269.558] ReadFile (in: hFile=0x1d8, lpBuffer=0x1110ca80, nNumberOfBytesToRead=0xa54, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1110ca80*, lpNumberOfBytesRead=0x11423e18*=0xa54, lpOverlapped=0x0) returned 1
	[0269.561] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0269.561] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e2702 | out: pbBuffer=0x113e2702) returned 1
	[0269.562] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e2770 | out: pbBuffer=0x113e2770) returned 1
	[0269.562] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e27a0 | out: pbBuffer=0x113e27a0) returned 1
	[0269.562] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0269.562] GetFileType (hFile=0x1d8) returned 0x1
	[0269.562] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.562] WriteFile (in: hFile=0x1d8, lpBuffer=0x110f3000*, nNumberOfBytesToWrite=0xa54, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110f3000*, lpNumberOfBytesWritten=0x11031dfc*=0xa54, lpOverlapped=0x11031e08) returned 1
	[0269.563] GetFileType (hFile=0x1d8) returned 0x1
	[0269.563] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa54, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.563] GetFileType (hFile=0x1d8) returned 0x1
	[0269.563] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.563] WriteFile (in: hFile=0x1d8, lpBuffer=0x111eb500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111eb500*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0269.563] GetFileType (hFile=0x1d8) returned 0x1
	[0269.564] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa54, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.564] CloseHandle (hObject=0x1d8) returned 1
	[0269.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.tl30z")) returned 0x220
	[0269.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.570] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0269.583] SetEvent (hEvent=0x210) returned 1
	[0269.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x220
	[0269.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF", dwFileAttributes=0x220) returned 1
	[0269.584] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.758] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0269.758] ReadFile (in: hFile=0x1d8, lpBuffer=0x111b5880, nNumberOfBytesToRead=0x32c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x111b5880*, lpNumberOfBytesRead=0x11423e18*=0x32c, lpOverlapped=0x0) returned 1
	[0269.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6c0 | out: pbBuffer=0x1140f6c0) returned 1
	[0269.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f6b8 | out: pbBuffer=0x1140f6b8) returned 1
	[0269.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a1002 | out: pbBuffer=0x113a1002) returned 1
	[0269.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6f0 | out: pbBuffer=0x1140f6f0) returned 1
	[0269.762] GetFileType (hFile=0x1d8) returned 0x1
	[0269.762] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.762] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c4000*, nNumberOfBytesToWrite=0x32c, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x113c4000*, lpNumberOfBytesWritten=0x113afdfc*=0x32c, lpOverlapped=0x113afe08) returned 1
	[0269.763] GetFileType (hFile=0x1d8) returned 0x1
	[0269.763] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x32c, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.763] GetFileType (hFile=0x1d8) returned 0x1
	[0269.763] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.763] WriteFile (in: hFile=0x1d8, lpBuffer=0x113bc700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x113bc700*, lpNumberOfBytesWritten=0x113afdfc*=0x227, lpOverlapped=0x113afe08) returned 1
	[0269.763] GetFileType (hFile=0x1d8) returned 0x1
	[0269.763] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x32c, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.763] CloseHandle (hObject=0x1d8) returned 1
	[0269.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf.tl30z")) returned 0x220
	[0269.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.774] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0269.784] SetEvent (hEvent=0x210) returned 1
	[0269.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x220
	[0269.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", dwFileAttributes=0x220) returned 1
	[0269.784] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.945] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0269.945] ReadFile (in: hFile=0x1d8, lpBuffer=0x11bd4000, nNumberOfBytesToRead=0x6ba0, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11bd4000*, lpNumberOfBytesRead=0x11423e18*=0x6ba0, lpOverlapped=0x0) returned 1
	[0269.949] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65f0 | out: pbBuffer=0x113e65f0) returned 1
	[0269.949] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cdc02 | out: pbBuffer=0x113cdc02) returned 1
	[0269.949] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cdc72 | out: pbBuffer=0x113cdc72) returned 1
	[0269.950] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6620 | out: pbBuffer=0x113e6620) returned 1
	[0269.950] GetFileType (hFile=0x1d8) returned 0x1
	[0269.951] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.951] WriteFile (in: hFile=0x1d8, lpBuffer=0x110ba000*, nNumberOfBytesToWrite=0x6ba0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110ba000*, lpNumberOfBytesWritten=0x11031dfc*=0x6ba0, lpOverlapped=0x11031e08) returned 1
	[0269.951] GetFileType (hFile=0x1d8) returned 0x1
	[0269.951] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6ba0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.951] GetFileType (hFile=0x1d8) returned 0x1
	[0269.952] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.952] WriteFile (in: hFile=0x1d8, lpBuffer=0x112ffc00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112ffc00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0269.952] GetFileType (hFile=0x1d8) returned 0x1
	[0269.952] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6ba0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.952] CloseHandle (hObject=0x1d8) returned 1
	[0269.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf.tl30z")) returned 0x220
	[0269.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.963] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0269.968] SetEvent (hEvent=0x248) returned 1
	[0269.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x220
	[0269.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF", dwFileAttributes=0x220) returned 1
	[0269.969] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.167] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0270.167] ReadFile (in: hFile=0x1d8, lpBuffer=0x1124b000, nNumberOfBytesToRead=0xeb8, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1124b000*, lpNumberOfBytesRead=0x11423e18*=0xeb8, lpOverlapped=0x0) returned 1
	[0270.174] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0270.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0270.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1126c802 | out: pbBuffer=0x1126c802) returned 1
	[0270.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0270.175] GetFileType (hFile=0x1d8) returned 0x1
	[0270.175] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.175] WriteFile (in: hFile=0x1d8, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0xeb8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x11031dfc*=0xeb8, lpOverlapped=0x11031e08) returned 1
	[0270.176] GetFileType (hFile=0x1d8) returned 0x1
	[0270.176] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xeb8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.176] GetFileType (hFile=0x1d8) returned 0x1
	[0270.176] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.176] WriteFile (in: hFile=0x1d8, lpBuffer=0x11298a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11298a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0270.176] GetFileType (hFile=0x1d8) returned 0x1
	[0270.176] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xeb8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.176] CloseHandle (hObject=0x1d8) returned 1
	[0270.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf.tl30z")) returned 0x220
	[0270.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.185] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0270.193] SetEvent (hEvent=0x218) returned 1
	[0270.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x220
	[0270.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", dwFileAttributes=0x220) returned 1
	[0270.194] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.361] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0270.361] ReadFile (in: hFile=0x1d8, lpBuffer=0x113d8000, nNumberOfBytesToRead=0x1f26, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113d8000*, lpNumberOfBytesRead=0x11423e18*=0x1f26, lpOverlapped=0x0) returned 1
	[0270.365] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0270.365] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137fe02 | out: pbBuffer=0x1137fe02) returned 1
	[0270.365] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137fe5a | out: pbBuffer=0x1137fe5a) returned 1
	[0270.365] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137fe8c | out: pbBuffer=0x1137fe8c) returned 1
	[0270.366] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0270.366] GetFileType (hFile=0x1d8) returned 0x1
	[0270.366] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.366] WriteFile (in: hFile=0x1d8, lpBuffer=0x110de000*, nNumberOfBytesToWrite=0x1f26, lpNumberOfBytesWritten=0x113f1dfc, lpOverlapped=0x113f1e08 | out: lpBuffer=0x110de000*, lpNumberOfBytesWritten=0x113f1dfc*=0x1f26, lpOverlapped=0x113f1e08) returned 1
	[0270.367] GetFileType (hFile=0x1d8) returned 0x1
	[0270.367] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1f26, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.367] GetFileType (hFile=0x1d8) returned 0x1
	[0270.367] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.367] WriteFile (in: hFile=0x1d8, lpBuffer=0x113e4700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113f1dfc, lpOverlapped=0x113f1e08 | out: lpBuffer=0x113e4700*, lpNumberOfBytesWritten=0x113f1dfc*=0x230, lpOverlapped=0x113f1e08) returned 1
	[0270.367] GetFileType (hFile=0x1d8) returned 0x1
	[0270.367] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1f26, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.367] CloseHandle (hObject=0x1d8) returned 1
	[0270.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf.tl30z")) returned 0x220
	[0270.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.374] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0270.391] SetEvent (hEvent=0x218) returned 1
	[0270.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x220
	[0270.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", dwFileAttributes=0x220) returned 1
	[0270.392] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.636] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0270.636] ReadFile (in: hFile=0x1d8, lpBuffer=0x113ae000, nNumberOfBytesToRead=0x20ae, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113ae000*, lpNumberOfBytesRead=0x11423e18*=0x20ae, lpOverlapped=0x0) returned 1
	[0270.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0270.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0270.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c8802 | out: pbBuffer=0x113c8802) returned 1
	[0270.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c88ad | out: pbBuffer=0x113c88ad) returned 1
	[0270.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0270.646] GetFileType (hFile=0x1d8) returned 0x1
	[0270.646] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113edde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.646] WriteFile (in: hFile=0x1d8, lpBuffer=0x112bc000*, nNumberOfBytesToWrite=0x20ae, lpNumberOfBytesWritten=0x113eddfc, lpOverlapped=0x113ede08 | out: lpBuffer=0x112bc000*, lpNumberOfBytesWritten=0x113eddfc*=0x20ae, lpOverlapped=0x113ede08) returned 1
	[0270.646] GetFileType (hFile=0x1d8) returned 0x1
	[0270.646] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x20ae, lpNewFilePointer=0x0, dwMoveMethod=0x113edde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.647] GetFileType (hFile=0x1d8) returned 0x1
	[0270.647] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113edde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.647] WriteFile (in: hFile=0x1d8, lpBuffer=0x112a8a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113eddfc, lpOverlapped=0x113ede08 | out: lpBuffer=0x112a8a80*, lpNumberOfBytesWritten=0x113eddfc*=0x22a, lpOverlapped=0x113ede08) returned 1
	[0270.647] GetFileType (hFile=0x1d8) returned 0x1
	[0270.647] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x20ae, lpNewFilePointer=0x0, dwMoveMethod=0x113edde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.647] CloseHandle (hObject=0x1d8) returned 1
	[0270.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf.tl30z")) returned 0x220
	[0270.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.667] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0270.683] SetEvent (hEvent=0x218) returned 1
	[0270.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x220
	[0270.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF", dwFileAttributes=0x220) returned 1
	[0270.684] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.876] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0270.876] ReadFile (in: hFile=0x1d8, lpBuffer=0x1111c000, nNumberOfBytesToRead=0x4bc, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1111c000*, lpNumberOfBytesRead=0x11423e18*=0x4bc, lpOverlapped=0x0) returned 1
	[0270.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11452540 | out: pbBuffer=0x11452540) returned 1
	[0270.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11452538 | out: pbBuffer=0x11452538) returned 1
	[0270.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11120702 | out: pbBuffer=0x11120702) returned 1
	[0270.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111207a2 | out: pbBuffer=0x111207a2) returned 1
	[0270.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11452570 | out: pbBuffer=0x11452570) returned 1
	[0270.879] GetFileType (hFile=0x1d8) returned 0x1
	[0270.879] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.879] WriteFile (in: hFile=0x1d8, lpBuffer=0x11125000*, nNumberOfBytesToWrite=0x4bc, lpNumberOfBytesWritten=0x1146fdfc, lpOverlapped=0x1146fe08 | out: lpBuffer=0x11125000*, lpNumberOfBytesWritten=0x1146fdfc*=0x4bc, lpOverlapped=0x1146fe08) returned 1
	[0270.880] GetFileType (hFile=0x1d8) returned 0x1
	[0270.880] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4bc, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.880] GetFileType (hFile=0x1d8) returned 0x1
	[0270.880] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.880] WriteFile (in: hFile=0x1d8, lpBuffer=0x11115500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1146fdfc, lpOverlapped=0x1146fe08 | out: lpBuffer=0x11115500*, lpNumberOfBytesWritten=0x1146fdfc*=0x22a, lpOverlapped=0x1146fe08) returned 1
	[0270.880] GetFileType (hFile=0x1d8) returned 0x1
	[0270.880] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4bc, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.880] CloseHandle (hObject=0x1d8) returned 1
	[0270.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf.tl30z")) returned 0x220
	[0270.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.893] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0270.900] SetEvent (hEvent=0x218) returned 1
	[0270.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x220
	[0270.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF", dwFileAttributes=0x220) returned 1
	[0270.901] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.053] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0271.053] ReadFile (in: hFile=0x1d8, lpBuffer=0x1108d800, nNumberOfBytesToRead=0x68c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1108d800*, lpNumberOfBytesRead=0x11423e18*=0x68c, lpOverlapped=0x0) returned 1
	[0271.056] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0271.056] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0271.057] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c9302 | out: pbBuffer=0x113c9302) returned 1
	[0271.057] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0271.057] GetFileType (hFile=0x1d8) returned 0x1
	[0271.057] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.057] WriteFile (in: hFile=0x1d8, lpBuffer=0x11339000*, nNumberOfBytesToWrite=0x68c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11339000*, lpNumberOfBytesWritten=0x11031dfc*=0x68c, lpOverlapped=0x11031e08) returned 1
	[0271.058] GetFileType (hFile=0x1d8) returned 0x1
	[0271.058] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x68c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.058] GetFileType (hFile=0x1d8) returned 0x1
	[0271.058] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.058] WriteFile (in: hFile=0x1d8, lpBuffer=0x1118dc00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1118dc00*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0271.058] GetFileType (hFile=0x1d8) returned 0x1
	[0271.059] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x68c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.059] CloseHandle (hObject=0x1d8) returned 1
	[0271.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf.tl30z")) returned 0x220
	[0271.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.073] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0271.081] SetEvent (hEvent=0x26c) returned 1
	[0271.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x220
	[0271.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", dwFileAttributes=0x220) returned 1
	[0271.081] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.438] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0271.438] ReadFile (in: hFile=0x1d8, lpBuffer=0x112da000, nNumberOfBytesToRead=0x1c08, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112da000*, lpNumberOfBytesRead=0x11423e18*=0x1c08, lpOverlapped=0x0) returned 1
	[0271.444] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6840 | out: pbBuffer=0x113e6840) returned 1
	[0271.444] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11187e02 | out: pbBuffer=0x11187e02) returned 1
	[0271.444] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11187e2d | out: pbBuffer=0x11187e2d) returned 1
	[0271.445] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6870 | out: pbBuffer=0x113e6870) returned 1
	[0271.445] GetFileType (hFile=0x1d8) returned 0x1
	[0271.445] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.445] WriteFile (in: hFile=0x1d8, lpBuffer=0x1132a000*, nNumberOfBytesToWrite=0x1c08, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1132a000*, lpNumberOfBytesWritten=0x11031dfc*=0x1c08, lpOverlapped=0x11031e08) returned 1
	[0271.446] GetFileType (hFile=0x1d8) returned 0x1
	[0271.446] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1c08, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.446] GetFileType (hFile=0x1d8) returned 0x1
	[0271.446] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.446] WriteFile (in: hFile=0x1d8, lpBuffer=0x1138f500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1138f500*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0271.446] GetFileType (hFile=0x1d8) returned 0x1
	[0271.447] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1c08, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.447] CloseHandle (hObject=0x1d8) returned 1
	[0271.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf.tl30z")) returned 0x220
	[0271.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.455] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0271.466] SetEvent (hEvent=0x26c) returned 1
	[0271.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x220
	[0271.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", dwFileAttributes=0x220) returned 1
	[0271.467] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.630] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0271.630] ReadFile (in: hFile=0x1d8, lpBuffer=0x11438000, nNumberOfBytesToRead=0x292a, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11438000*, lpNumberOfBytesRead=0x11423e18*=0x292a, lpOverlapped=0x0) returned 1
	[0271.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0271.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e628 | out: pbBuffer=0x1104e628) returned 1
	[0271.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11440802 | out: pbBuffer=0x11440802) returned 1
	[0271.634] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144083b | out: pbBuffer=0x1144083b) returned 1
	[0271.634] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0271.635] GetFileType (hFile=0x1d8) returned 0x1
	[0271.635] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.635] WriteFile (in: hFile=0x1d8, lpBuffer=0x1130a000*, nNumberOfBytesToWrite=0x292a, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x1130a000*, lpNumberOfBytesWritten=0x1105ddfc*=0x292a, lpOverlapped=0x1105de08) returned 1
	[0271.635] GetFileType (hFile=0x1d8) returned 0x1
	[0271.635] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x292a, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.636] GetFileType (hFile=0x1d8) returned 0x1
	[0271.636] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.636] WriteFile (in: hFile=0x1d8, lpBuffer=0x1145d500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x1145d500*, lpNumberOfBytesWritten=0x1105ddfc*=0x22a, lpOverlapped=0x1105de08) returned 1
	[0271.636] GetFileType (hFile=0x1d8) returned 0x1
	[0271.636] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x292a, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.636] CloseHandle (hObject=0x1d8) returned 1
	[0271.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf.tl30z")) returned 0x220
	[0271.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.648] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0271.655] SetEvent (hEvent=0x26c) returned 1
	[0271.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf")) returned 0x220
	[0271.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF", dwFileAttributes=0x220) returned 1
	[0271.656] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.852] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0271.852] ReadFile (in: hFile=0x1d8, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x8d6, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11423e18*=0x8d6, lpOverlapped=0x0) returned 1
	[0271.856] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6f70 | out: pbBuffer=0x113e6f70) returned 1
	[0271.856] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1128f202 | out: pbBuffer=0x1128f202) returned 1
	[0271.856] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1128f273 | out: pbBuffer=0x1128f273) returned 1
	[0271.856] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1128f29f | out: pbBuffer=0x1128f29f) returned 1
	[0271.857] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6fa0 | out: pbBuffer=0x113e6fa0) returned 1
	[0271.857] GetFileType (hFile=0x1d8) returned 0x1
	[0271.857] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.857] WriteFile (in: hFile=0x1d8, lpBuffer=0x11093000*, nNumberOfBytesToWrite=0x8d6, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11093000*, lpNumberOfBytesWritten=0x11031dfc*=0x8d6, lpOverlapped=0x11031e08) returned 1
	[0271.857] GetFileType (hFile=0x1d8) returned 0x1
	[0271.858] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8d6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.858] GetFileType (hFile=0x1d8) returned 0x1
	[0271.858] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.858] WriteFile (in: hFile=0x1d8, lpBuffer=0x11167c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11167c00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0271.858] GetFileType (hFile=0x1d8) returned 0x1
	[0271.858] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8d6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.858] CloseHandle (hObject=0x1d8) returned 1
	[0271.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf.tl30z")) returned 0x220
	[0271.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.868] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0271.877] SetEvent (hEvent=0x26c) returned 1
	[0271.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf")) returned 0x220
	[0271.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF", dwFileAttributes=0x220) returned 1
	[0271.877] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.017] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0272.017] ReadFile (in: hFile=0x1d8, lpBuffer=0x113f5c00, nNumberOfBytesToRead=0xb96, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113f5c00*, lpNumberOfBytesRead=0x11423e18*=0xb96, lpOverlapped=0x0) returned 1
	[0272.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332780 | out: pbBuffer=0x11332780) returned 1
	[0272.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332778 | out: pbBuffer=0x11332778) returned 1
	[0272.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bdd02 | out: pbBuffer=0x112bdd02) returned 1
	[0272.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112bdd2d | out: pbBuffer=0x112bdd2d) returned 1
	[0272.023] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327b0 | out: pbBuffer=0x113327b0) returned 1
	[0272.023] GetFileType (hFile=0x1d8) returned 0x1
	[0272.023] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.023] WriteFile (in: hFile=0x1d8, lpBuffer=0x1122a000*, nNumberOfBytesToWrite=0xb96, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x1122a000*, lpNumberOfBytesWritten=0x1105ddfc*=0xb96, lpOverlapped=0x1105de08) returned 1
	[0272.023] GetFileType (hFile=0x1d8) returned 0x1
	[0272.023] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb96, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.024] GetFileType (hFile=0x1d8) returned 0x1
	[0272.024] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.024] WriteFile (in: hFile=0x1d8, lpBuffer=0x110b5c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x110b5c00*, lpNumberOfBytesWritten=0x1105ddfc*=0x22d, lpOverlapped=0x1105de08) returned 1
	[0272.024] GetFileType (hFile=0x1d8) returned 0x1
	[0272.024] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb96, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.024] CloseHandle (hObject=0x1d8) returned 1
	[0272.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf.tl30z")) returned 0x220
	[0272.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.035] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0272.039] SetEvent (hEvent=0x26c) returned 1
	[0272.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x220
	[0272.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF", dwFileAttributes=0x220) returned 1
	[0272.040] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.211] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0272.211] ReadFile (in: hFile=0x1d8, lpBuffer=0x112dc000, nNumberOfBytesToRead=0xa82, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x11423e18*=0xa82, lpOverlapped=0x0) returned 1
	[0272.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0272.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e338 | out: pbBuffer=0x1104e338) returned 1
	[0272.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11251202 | out: pbBuffer=0x11251202) returned 1
	[0272.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125123f | out: pbBuffer=0x1125123f) returned 1
	[0272.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112512da | out: pbBuffer=0x112512da) returned 1
	[0272.218] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0272.218] GetFileType (hFile=0x1d8) returned 0x1
	[0272.218] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.218] WriteFile (in: hFile=0x1d8, lpBuffer=0x112e7000*, nNumberOfBytesToWrite=0xa82, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x112e7000*, lpNumberOfBytesWritten=0x112c5dfc*=0xa82, lpOverlapped=0x112c5e08) returned 1
	[0272.218] GetFileType (hFile=0x1d8) returned 0x1
	[0272.218] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa82, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.218] GetFileType (hFile=0x1d8) returned 0x1
	[0272.219] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.219] WriteFile (in: hFile=0x1d8, lpBuffer=0x11387880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x11387880*, lpNumberOfBytesWritten=0x112c5dfc*=0x224, lpOverlapped=0x112c5e08) returned 1
	[0272.219] GetFileType (hFile=0x1d8) returned 0x1
	[0272.219] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa82, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.219] CloseHandle (hObject=0x1d8) returned 1
	[0272.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf.tl30z")) returned 0x220
	[0272.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.231] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0272.240] SetEvent (hEvent=0x1b0) returned 1
	[0272.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x220
	[0272.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF", dwFileAttributes=0x220) returned 1
	[0272.241] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.485] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0272.485] ReadFile (in: hFile=0x1d8, lpBuffer=0x110e3000, nNumberOfBytesToRead=0x44b0, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110e3000*, lpNumberOfBytesRead=0x11423e18*=0x44b0, lpOverlapped=0x0) returned 1
	[0272.494] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332080 | out: pbBuffer=0x11332080) returned 1
	[0272.494] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ab002 | out: pbBuffer=0x112ab002) returned 1
	[0272.494] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ab09a | out: pbBuffer=0x112ab09a) returned 1
	[0272.494] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332110 | out: pbBuffer=0x11332110) returned 1
	[0272.495] GetFileType (hFile=0x1d8) returned 0x1
	[0272.495] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.496] WriteFile (in: hFile=0x1d8, lpBuffer=0x11464000*, nNumberOfBytesToWrite=0x44b0, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x11464000*, lpNumberOfBytesWritten=0x112c5dfc*=0x44b0, lpOverlapped=0x112c5e08) returned 1
	[0272.496] GetFileType (hFile=0x1d8) returned 0x1
	[0272.496] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x44b0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.496] GetFileType (hFile=0x1d8) returned 0x1
	[0272.496] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.496] WriteFile (in: hFile=0x1d8, lpBuffer=0x1144c380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x1144c380*, lpNumberOfBytesWritten=0x112c5dfc*=0x227, lpOverlapped=0x112c5e08) returned 1
	[0272.497] GetFileType (hFile=0x1d8) returned 0x1
	[0272.497] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x44b0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.497] CloseHandle (hObject=0x1d8) returned 1
	[0272.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf.tl30z")) returned 0x220
	[0272.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.506] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0272.513] SetEvent (hEvent=0x1b0) returned 1
	[0272.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x220
	[0272.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF", dwFileAttributes=0x220) returned 1
	[0272.513] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.683] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0272.683] ReadFile (in: hFile=0x1d8, lpBuffer=0x1140b800, nNumberOfBytesToRead=0x78c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1140b800*, lpNumberOfBytesRead=0x11423e18*=0x78c, lpOverlapped=0x0) returned 1
	[0272.689] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69c0 | out: pbBuffer=0x113e69c0) returned 1
	[0272.689] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e69b8 | out: pbBuffer=0x113e69b8) returned 1
	[0272.689] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11138902 | out: pbBuffer=0x11138902) returned 1
	[0272.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69f0 | out: pbBuffer=0x113e69f0) returned 1
	[0272.690] GetFileType (hFile=0x1d8) returned 0x1
	[0272.690] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.690] WriteFile (in: hFile=0x1d8, lpBuffer=0x1118a000*, nNumberOfBytesToWrite=0x78c, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1118a000*, lpNumberOfBytesWritten=0x112c9dfc*=0x78c, lpOverlapped=0x112c9e08) returned 1
	[0272.690] GetFileType (hFile=0x1d8) returned 0x1
	[0272.690] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x78c, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.691] GetFileType (hFile=0x1d8) returned 0x1
	[0272.691] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.691] WriteFile (in: hFile=0x1d8, lpBuffer=0x11186700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11186700*, lpNumberOfBytesWritten=0x112c9dfc*=0x22a, lpOverlapped=0x112c9e08) returned 1
	[0272.691] GetFileType (hFile=0x1d8) returned 0x1
	[0272.691] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x78c, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.691] CloseHandle (hObject=0x1d8) returned 1
	[0272.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf.tl30z")) returned 0x220
	[0272.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.726] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0272.735] SetEvent (hEvent=0x1b0) returned 1
	[0272.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x220
	[0272.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF", dwFileAttributes=0x220) returned 1
	[0272.736] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.909] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0272.909] ReadFile (in: hFile=0x1d8, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x8b2, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11423e18*=0x8b2, lpOverlapped=0x0) returned 1
	[0272.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0272.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0272.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136b302 | out: pbBuffer=0x1136b302) returned 1
	[0272.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0272.920] GetFileType (hFile=0x1d8) returned 0x1
	[0272.920] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.920] WriteFile (in: hFile=0x1d8, lpBuffer=0x110ea000*, nNumberOfBytesToWrite=0x8b2, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x110ea000*, lpNumberOfBytesWritten=0x112c9dfc*=0x8b2, lpOverlapped=0x112c9e08) returned 1
	[0272.921] GetFileType (hFile=0x1d8) returned 0x1
	[0272.921] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8b2, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.921] GetFileType (hFile=0x1d8) returned 0x1
	[0272.921] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.921] WriteFile (in: hFile=0x1d8, lpBuffer=0x1133d880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1133d880*, lpNumberOfBytesWritten=0x112c9dfc*=0x227, lpOverlapped=0x112c9e08) returned 1
	[0272.921] GetFileType (hFile=0x1d8) returned 0x1
	[0272.921] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8b2, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.922] CloseHandle (hObject=0x1d8) returned 1
	[0272.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf.tl30z")) returned 0x220
	[0272.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.936] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0272.945] SetEvent (hEvent=0x218) returned 1
	[0272.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x220
	[0272.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF", dwFileAttributes=0x220) returned 1
	[0272.946] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.088] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0273.088] ReadFile (in: hFile=0x1d8, lpBuffer=0x11090000, nNumberOfBytesToRead=0x85c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x11423e18*=0x85c, lpOverlapped=0x0) returned 1
	[0273.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327f0 | out: pbBuffer=0x113327f0) returned 1
	[0273.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c7202 | out: pbBuffer=0x113c7202) returned 1
	[0273.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c7202 | out: pbBuffer=0x113c7202) returned 1
	[0273.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332820 | out: pbBuffer=0x11332820) returned 1
	[0273.093] GetFileType (hFile=0x1d8) returned 0x1
	[0273.093] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.093] WriteFile (in: hFile=0x1d8, lpBuffer=0x11099000*, nNumberOfBytesToWrite=0x85c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11099000*, lpNumberOfBytesWritten=0x1102bdfc*=0x85c, lpOverlapped=0x1102be08) returned 1
	[0273.093] GetFileType (hFile=0x1d8) returned 0x1
	[0273.093] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x85c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.094] GetFileType (hFile=0x1d8) returned 0x1
	[0273.094] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.094] WriteFile (in: hFile=0x1d8, lpBuffer=0x1109c700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1109c700*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0273.094] GetFileType (hFile=0x1d8) returned 0x1
	[0273.094] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x85c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.094] CloseHandle (hObject=0x1d8) returned 1
	[0273.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf.tl30z")) returned 0x220
	[0273.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.110] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0273.116] SetEvent (hEvent=0x218) returned 1
	[0273.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x220
	[0273.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF", dwFileAttributes=0x220) returned 1
	[0273.117] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.276] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0273.276] ReadFile (in: hFile=0x1d8, lpBuffer=0x11451000, nNumberOfBytesToRead=0xe04, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11451000*, lpNumberOfBytesRead=0x11423e18*=0xe04, lpOverlapped=0x0) returned 1
	[0273.284] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6320 | out: pbBuffer=0x113e6320) returned 1
	[0273.284] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6318 | out: pbBuffer=0x113e6318) returned 1
	[0273.284] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110f4602 | out: pbBuffer=0x110f4602) returned 1
	[0273.284] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6350 | out: pbBuffer=0x113e6350) returned 1
	[0273.285] GetFileType (hFile=0x1d8) returned 0x1
	[0273.285] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.285] WriteFile (in: hFile=0x1d8, lpBuffer=0x11102000*, nNumberOfBytesToWrite=0xe04, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11102000*, lpNumberOfBytesWritten=0x112c9dfc*=0xe04, lpOverlapped=0x112c9e08) returned 1
	[0273.286] GetFileType (hFile=0x1d8) returned 0x1
	[0273.286] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xe04, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.286] GetFileType (hFile=0x1d8) returned 0x1
	[0273.286] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.286] WriteFile (in: hFile=0x1d8, lpBuffer=0x11104000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11104000*, lpNumberOfBytesWritten=0x112c9dfc*=0x224, lpOverlapped=0x112c9e08) returned 1
	[0273.286] GetFileType (hFile=0x1d8) returned 0x1
	[0273.287] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xe04, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.287] CloseHandle (hObject=0x1d8) returned 1
	[0273.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf.tl30z")) returned 0x220
	[0273.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.301] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0273.310] SetEvent (hEvent=0x218) returned 1
	[0273.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x220
	[0273.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF", dwFileAttributes=0x220) returned 1
	[0273.311] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.468] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0273.469] ReadFile (in: hFile=0x1d8, lpBuffer=0x11091b00, nNumberOfBytesToRead=0x820, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11091b00*, lpNumberOfBytesRead=0x11423e18*=0x820, lpOverlapped=0x0) returned 1
	[0273.473] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332f40 | out: pbBuffer=0x11332f40) returned 1
	[0273.473] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332f38 | out: pbBuffer=0x11332f38) returned 1
	[0273.473] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1115e502 | out: pbBuffer=0x1115e502) returned 1
	[0273.473] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1115e5ac | out: pbBuffer=0x1115e5ac) returned 1
	[0273.473] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1115e5c7 | out: pbBuffer=0x1115e5c7) returned 1
	[0273.474] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332f70 | out: pbBuffer=0x11332f70) returned 1
	[0273.474] GetFileType (hFile=0x1d8) returned 0x1
	[0273.474] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.474] WriteFile (in: hFile=0x1d8, lpBuffer=0x11170000*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11170000*, lpNumberOfBytesWritten=0x1102bdfc*=0x820, lpOverlapped=0x1102be08) returned 1
	[0273.475] GetFileType (hFile=0x1d8) returned 0x1
	[0273.475] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x820, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.475] GetFileType (hFile=0x1d8) returned 0x1
	[0273.475] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.475] WriteFile (in: hFile=0x1d8, lpBuffer=0x11146e00*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11146e00*, lpNumberOfBytesWritten=0x1102bdfc*=0x21e, lpOverlapped=0x1102be08) returned 1
	[0273.479] GetFileType (hFile=0x1d8) returned 0x1
	[0273.480] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x820, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.480] CloseHandle (hObject=0x1d8) returned 1
	[0273.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf.tl30z")) returned 0x220
	[0273.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.484] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0273.498] SetEvent (hEvent=0x218) returned 1
	[0273.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x220
	[0273.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF", dwFileAttributes=0x220) returned 1
	[0273.499] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.804] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0273.804] ReadFile (in: hFile=0x1d8, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x8b8, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11423e18*=0x8b8, lpOverlapped=0x0) returned 1
	[0273.810] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0273.810] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0273.810] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f6802 | out: pbBuffer=0x111f6802) returned 1
	[0273.810] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f68e9 | out: pbBuffer=0x111f68e9) returned 1
	[0273.811] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0273.811] GetFileType (hFile=0x1d8) returned 0x1
	[0273.811] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.811] WriteFile (in: hFile=0x1d8, lpBuffer=0x1126c000*, nNumberOfBytesToWrite=0x8b8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1126c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x8b8, lpOverlapped=0x1102be08) returned 1
	[0273.812] GetFileType (hFile=0x1d8) returned 0x1
	[0273.812] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8b8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.812] GetFileType (hFile=0x1d8) returned 0x1
	[0273.812] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.812] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bd1500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bd1500*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0273.812] GetFileType (hFile=0x1d8) returned 0x1
	[0273.812] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8b8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.812] CloseHandle (hObject=0x1d8) returned 1
	[0273.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf.tl30z")) returned 0x220
	[0273.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.817] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0273.831] SetEvent (hEvent=0x210) returned 1
	[0273.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x220
	[0273.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF", dwFileAttributes=0x220) returned 1
	[0273.832] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.992] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0273.992] ReadFile (in: hFile=0x1d8, lpBuffer=0x1138e000, nNumberOfBytesToRead=0x824, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1138e000*, lpNumberOfBytesRead=0x11423e18*=0x824, lpOverlapped=0x0) returned 1
	[0273.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e620 | out: pbBuffer=0x1104e620) returned 1
	[0273.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ae802 | out: pbBuffer=0x111ae802) returned 1
	[0273.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ae8a2 | out: pbBuffer=0x111ae8a2) returned 1
	[0273.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0273.996] GetFileType (hFile=0x1d8) returned 0x1
	[0273.996] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.996] WriteFile (in: hFile=0x1d8, lpBuffer=0x1135a000*, nNumberOfBytesToWrite=0x824, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1135a000*, lpNumberOfBytesWritten=0x112c9dfc*=0x824, lpOverlapped=0x112c9e08) returned 1
	[0273.997] GetFileType (hFile=0x1d8) returned 0x1
	[0273.997] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x824, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.997] GetFileType (hFile=0x1d8) returned 0x1
	[0273.997] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.997] WriteFile (in: hFile=0x1d8, lpBuffer=0x1133d500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1133d500*, lpNumberOfBytesWritten=0x112c9dfc*=0x221, lpOverlapped=0x112c9e08) returned 1
	[0273.997] GetFileType (hFile=0x1d8) returned 0x1
	[0273.997] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x824, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.998] CloseHandle (hObject=0x1d8) returned 1
	[0274.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf.tl30z")) returned 0x220
	[0274.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.002] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0274.010] SetEvent (hEvent=0x210) returned 1
	[0274.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x220
	[0274.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF", dwFileAttributes=0x220) returned 1
	[0274.011] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.194] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0274.195] ReadFile (in: hFile=0x1d8, lpBuffer=0x113f5c00, nNumberOfBytesToRead=0x6e8, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113f5c00*, lpNumberOfBytesRead=0x11423e18*=0x6e8, lpOverlapped=0x0) returned 1
	[0274.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66e0 | out: pbBuffer=0x113e66e0) returned 1
	[0274.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66d8 | out: pbBuffer=0x113e66d8) returned 1
	[0274.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11217a02 | out: pbBuffer=0x11217a02) returned 1
	[0274.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11217a39 | out: pbBuffer=0x11217a39) returned 1
	[0274.201] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6710 | out: pbBuffer=0x113e6710) returned 1
	[0274.201] GetFileType (hFile=0x1d8) returned 0x1
	[0274.201] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.201] WriteFile (in: hFile=0x1d8, lpBuffer=0x113e3000*, nNumberOfBytesToWrite=0x6e8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113e3000*, lpNumberOfBytesWritten=0x1102bdfc*=0x6e8, lpOverlapped=0x1102be08) returned 1
	[0274.201] GetFileType (hFile=0x1d8) returned 0x1
	[0274.202] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6e8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.202] GetFileType (hFile=0x1d8) returned 0x1
	[0274.202] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.202] WriteFile (in: hFile=0x1d8, lpBuffer=0x113fae00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113fae00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0274.202] GetFileType (hFile=0x1d8) returned 0x1
	[0274.202] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6e8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.202] CloseHandle (hObject=0x1d8) returned 1
	[0274.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf.tl30z")) returned 0x220
	[0274.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.217] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0274.229] SetEvent (hEvent=0x210) returned 1
	[0274.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x220
	[0274.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF", dwFileAttributes=0x220) returned 1
	[0274.230] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.460] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0274.460] ReadFile (in: hFile=0x1d8, lpBuffer=0x11296000, nNumberOfBytesToRead=0x244, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11296000*, lpNumberOfBytesRead=0x11423e18*=0x244, lpOverlapped=0x0) returned 1
	[0274.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6f0 | out: pbBuffer=0x1140f6f0) returned 1
	[0274.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f6e8 | out: pbBuffer=0x1140f6e8) returned 1
	[0274.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e5e02 | out: pbBuffer=0x113e5e02) returned 1
	[0274.464] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f720 | out: pbBuffer=0x1140f720) returned 1
	[0274.464] GetFileType (hFile=0x1d8) returned 0x1
	[0274.464] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.464] WriteFile (in: hFile=0x1d8, lpBuffer=0x110ecc00*, nNumberOfBytesToWrite=0x244, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x110ecc00*, lpNumberOfBytesWritten=0x112c9dfc*=0x244, lpOverlapped=0x112c9e08) returned 1
	[0274.464] GetFileType (hFile=0x1d8) returned 0x1
	[0274.464] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x244, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.465] GetFileType (hFile=0x1d8) returned 0x1
	[0274.465] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.465] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c1c00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x113c1c00*, lpNumberOfBytesWritten=0x112c9dfc*=0x221, lpOverlapped=0x112c9e08) returned 1
	[0274.472] GetFileType (hFile=0x1d8) returned 0x1
	[0274.472] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x244, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.472] CloseHandle (hObject=0x1d8) returned 1
	[0274.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf.tl30z")) returned 0x220
	[0274.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.488] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0274.495] SetEvent (hEvent=0x210) returned 1
	[0274.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x220
	[0274.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF", dwFileAttributes=0x220) returned 1
	[0274.496] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.643] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0274.643] ReadFile (in: hFile=0x1d8, lpBuffer=0x11430000, nNumberOfBytesToRead=0xcb4, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11423e18*=0xcb4, lpOverlapped=0x0) returned 1
	[0274.648] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6e30 | out: pbBuffer=0x113e6e30) returned 1
	[0274.648] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110aae02 | out: pbBuffer=0x110aae02) returned 1
	[0274.648] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110aae21 | out: pbBuffer=0x110aae21) returned 1
	[0274.648] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110aae72 | out: pbBuffer=0x110aae72) returned 1
	[0274.648] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110aae87 | out: pbBuffer=0x110aae87) returned 1
	[0274.648] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6e60 | out: pbBuffer=0x113e6e60) returned 1
	[0274.649] GetFileType (hFile=0x1d8) returned 0x1
	[0274.649] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.649] WriteFile (in: hFile=0x1d8, lpBuffer=0x11456000*, nNumberOfBytesToWrite=0xcb4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11456000*, lpNumberOfBytesWritten=0x1102bdfc*=0xcb4, lpOverlapped=0x1102be08) returned 1
	[0274.649] GetFileType (hFile=0x1d8) returned 0x1
	[0274.649] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcb4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.649] GetFileType (hFile=0x1d8) returned 0x1
	[0274.649] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.649] WriteFile (in: hFile=0x1d8, lpBuffer=0x110af500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110af500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0274.650] GetFileType (hFile=0x1d8) returned 0x1
	[0274.650] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcb4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.650] CloseHandle (hObject=0x1d8) returned 1
	[0274.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf.tl30z")) returned 0x220
	[0274.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.670] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0274.678] SetEvent (hEvent=0x210) returned 1
	[0274.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x220
	[0274.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF", dwFileAttributes=0x220) returned 1
	[0274.679] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0275.018] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0275.018] ReadFile (in: hFile=0x1d8, lpBuffer=0x1115e000, nNumberOfBytesToRead=0x1b2e, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1115e000*, lpNumberOfBytesRead=0x11423e18*=0x1b2e, lpOverlapped=0x0) returned 1
	[0275.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fe10 | out: pbBuffer=0x1140fe10) returned 1
	[0275.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140fe08 | out: pbBuffer=0x1140fe08) returned 1
	[0275.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11127002 | out: pbBuffer=0x11127002) returned 1
	[0275.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1112702b | out: pbBuffer=0x1112702b) returned 1
	[0275.025] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fe40 | out: pbBuffer=0x1140fe40) returned 1
	[0275.025] GetFileType (hFile=0x1d8) returned 0x1
	[0275.025] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.025] WriteFile (in: hFile=0x1d8, lpBuffer=0x11178000*, nNumberOfBytesToWrite=0x1b2e, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11178000*, lpNumberOfBytesWritten=0x112c9dfc*=0x1b2e, lpOverlapped=0x112c9e08) returned 1
	[0275.026] GetFileType (hFile=0x1d8) returned 0x1
	[0275.026] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b2e, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.026] GetFileType (hFile=0x1d8) returned 0x1
	[0275.026] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.026] WriteFile (in: hFile=0x1d8, lpBuffer=0x11170380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11170380*, lpNumberOfBytesWritten=0x112c9dfc*=0x230, lpOverlapped=0x112c9e08) returned 1
	[0275.026] GetFileType (hFile=0x1d8) returned 0x1
	[0275.026] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b2e, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.026] CloseHandle (hObject=0x1d8) returned 1
	[0275.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf.tl30z")) returned 0x220
	[0275.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.042] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0275.061] SetEvent (hEvent=0x210) returned 1
	[0275.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf")) returned 0x220
	[0275.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF", dwFileAttributes=0x220) returned 1
	[0275.062] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0275.289] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0275.289] ReadFile (in: hFile=0x1d8, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x8e8, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11423e18*=0x8e8, lpOverlapped=0x0) returned 1
	[0275.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0275.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63f8 | out: pbBuffer=0x113e63f8) returned 1
	[0275.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261d02 | out: pbBuffer=0x11261d02) returned 1
	[0275.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11261d96 | out: pbBuffer=0x11261d96) returned 1
	[0275.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11261dce | out: pbBuffer=0x11261dce) returned 1
	[0275.312] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6430 | out: pbBuffer=0x113e6430) returned 1
	[0275.312] GetFileType (hFile=0x1d8) returned 0x1
	[0275.312] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.312] WriteFile (in: hFile=0x1d8, lpBuffer=0x113e4000*, nNumberOfBytesToWrite=0x8e8, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x113e4000*, lpNumberOfBytesWritten=0x113f3dfc*=0x8e8, lpOverlapped=0x113f3e08) returned 1
	[0275.313] GetFileType (hFile=0x1d8) returned 0x1
	[0275.313] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8e8, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.313] GetFileType (hFile=0x1d8) returned 0x1
	[0275.313] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.313] WriteFile (in: hFile=0x1d8, lpBuffer=0x111b8a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x111b8a80*, lpNumberOfBytesWritten=0x113f3dfc*=0x227, lpOverlapped=0x113f3e08) returned 1
	[0275.314] GetFileType (hFile=0x1d8) returned 0x1
	[0275.314] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8e8, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.314] CloseHandle (hObject=0x1d8) returned 1
	[0275.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf.tl30z")) returned 0x220
	[0275.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.354] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0275.364] SetEvent (hEvent=0x26c) returned 1
	[0275.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid")) returned 0x220
	[0275.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID", dwFileAttributes=0x220) returned 1
	[0275.364] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0275.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0275.621] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0275.621] ReadFile (in: hFile=0x224, lpBuffer=0x11159300, nNumberOfBytesToRead=0x12ee, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11159300*, lpNumberOfBytesRead=0x11423e18*=0x12ee, lpOverlapped=0x0) returned 1
	[0275.624] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e610 | out: pbBuffer=0x1104e610) returned 1
	[0275.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e608 | out: pbBuffer=0x1104e608) returned 1
	[0275.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d0702 | out: pbBuffer=0x111d0702) returned 1
	[0275.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0275.625] GetFileType (hFile=0x224) returned 0x1
	[0275.625] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.626] WriteFile (in: hFile=0x224, lpBuffer=0x111e2000*, nNumberOfBytesToWrite=0x12ee, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x111e2000*, lpNumberOfBytesWritten=0x113efdfc*=0x12ee, lpOverlapped=0x113efe08) returned 1
	[0275.626] GetFileType (hFile=0x224) returned 0x1
	[0275.626] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x12ee, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.626] GetFileType (hFile=0x224) returned 0x1
	[0275.626] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.627] WriteFile (in: hFile=0x224, lpBuffer=0x11311500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x11311500*, lpNumberOfBytesWritten=0x113efdfc*=0x230, lpOverlapped=0x113efe08) returned 1
	[0275.627] GetFileType (hFile=0x224) returned 0x1
	[0275.627] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x12ee, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.627] CloseHandle (hObject=0x224) returned 1
	[0275.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid.tl30z")) returned 0x220
	[0275.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0275.645] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0275.662] SetEvent (hEvent=0x26c) returned 1
	[0275.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x220
	[0275.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF", dwFileAttributes=0x220) returned 1
	[0275.663] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0275.901] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0275.901] ReadFile (in: hFile=0x224, lpBuffer=0x11232000, nNumberOfBytesToRead=0x3772, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11232000*, lpNumberOfBytesRead=0x11423e18*=0x3772, lpOverlapped=0x0) returned 1
	[0275.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b30 | out: pbBuffer=0x113e6b30) returned 1
	[0275.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6b28 | out: pbBuffer=0x113e6b28) returned 1
	[0275.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11091202 | out: pbBuffer=0x11091202) returned 1
	[0275.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b60 | out: pbBuffer=0x113e6b60) returned 1
	[0275.910] GetFileType (hFile=0x224) returned 0x1
	[0275.910] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.910] WriteFile (in: hFile=0x224, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x3772, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x113f3dfc*=0x3772, lpOverlapped=0x113f3e08) returned 1
	[0275.911] GetFileType (hFile=0x224) returned 0x1
	[0275.911] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3772, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.911] GetFileType (hFile=0x224) returned 0x1
	[0275.911] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.911] WriteFile (in: hFile=0x224, lpBuffer=0x110a1180*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x110a1180*, lpNumberOfBytesWritten=0x113f3dfc*=0x233, lpOverlapped=0x113f3e08) returned 1
	[0275.912] GetFileType (hFile=0x224) returned 0x1
	[0275.912] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3772, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.912] CloseHandle (hObject=0x224) returned 1
	[0275.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf.tl30z")) returned 0x220
	[0275.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.991] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0276.015] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0276.063] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0276.077] SetEvent (hEvent=0x210) returned 1
	[0276.077] SetEvent (hEvent=0x1f0) returned 1
	[0276.077] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0276.082] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0276.082] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0276.087] SetEvent (hEvent=0x218) returned 1
	[0276.087] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0276.093] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0276.093] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0276.820] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0276.825] SetEvent (hEvent=0x218) returned 1
	[0276.825] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0276.828] SetEvent (hEvent=0x218) returned 1
	[0276.828] SwitchToThread () returned 1
	[0276.831] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0276.836] SetEvent (hEvent=0x1b0) returned 1
	[0276.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf")) returned 0x220
	[0276.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF", dwFileAttributes=0x220) returned 1
	[0276.837] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0277.013] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0277.013] ReadFile (in: hFile=0x224, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x3690, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11286e18*=0x3690, lpOverlapped=0x0) returned 1
	[0277.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3d0 | out: pbBuffer=0x1140f3d0) returned 1
	[0277.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267e02 | out: pbBuffer=0x11267e02) returned 1
	[0277.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267e17 | out: pbBuffer=0x11267e17) returned 1
	[0277.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267e9e | out: pbBuffer=0x11267e9e) returned 1
	[0277.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0277.023] GetFileType (hFile=0x224) returned 0x1
	[0277.023] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.023] WriteFile (in: hFile=0x224, lpBuffer=0x113d2000*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113d2000*, lpNumberOfBytesWritten=0x11031dfc*=0x3690, lpOverlapped=0x11031e08) returned 1
	[0277.024] GetFileType (hFile=0x224) returned 0x1
	[0277.024] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3690, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.024] GetFileType (hFile=0x224) returned 0x1
	[0277.024] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.024] WriteFile (in: hFile=0x224, lpBuffer=0x1143ee00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1143ee00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0277.024] GetFileType (hFile=0x224) returned 0x1
	[0277.024] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3690, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.024] CloseHandle (hObject=0x224) returned 1
	[0277.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf.tl30z")) returned 0x220
	[0277.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.030] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0277.035] SetEvent (hEvent=0x1b0) returned 1
	[0277.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf")) returned 0x220
	[0277.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF", dwFileAttributes=0x220) returned 1
	[0277.035] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0277.382] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0277.382] ReadFile (in: hFile=0x224, lpBuffer=0x112a6000, nNumberOfBytesToRead=0x1378, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x112a6000*, lpNumberOfBytesRead=0x11286e18*=0x1378, lpOverlapped=0x0) returned 1
	[0277.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0277.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0277.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123d302 | out: pbBuffer=0x1123d302) returned 1
	[0277.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1123d379 | out: pbBuffer=0x1123d379) returned 1
	[0277.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0277.388] GetFileType (hFile=0x224) returned 0x1
	[0277.388] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.388] WriteFile (in: hFile=0x224, lpBuffer=0x112c8000*, nNumberOfBytesToWrite=0x1378, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x112c8000*, lpNumberOfBytesWritten=0x113b7dfc*=0x1378, lpOverlapped=0x113b7e08) returned 1
	[0277.388] GetFileType (hFile=0x224) returned 0x1
	[0277.388] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1378, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.388] GetFileType (hFile=0x224) returned 0x1
	[0277.388] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.388] WriteFile (in: hFile=0x224, lpBuffer=0x11251880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x11251880*, lpNumberOfBytesWritten=0x113b7dfc*=0x22d, lpOverlapped=0x113b7e08) returned 1
	[0277.389] GetFileType (hFile=0x224) returned 0x1
	[0277.389] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1378, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.389] CloseHandle (hObject=0x224) returned 1
	[0277.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf.tl30z")) returned 0x220
	[0277.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.397] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0277.406] SetEvent (hEvent=0x234) returned 1
	[0277.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf")) returned 0x220
	[0277.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF", dwFileAttributes=0x220) returned 1
	[0277.407] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0277.579] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0277.579] ReadFile (in: hFile=0x1fc, lpBuffer=0x11126000, nNumberOfBytesToRead=0x76ce, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11126000*, lpNumberOfBytesRead=0x11286e18*=0x76ce, lpOverlapped=0x0) returned 1
	[0277.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112021d0 | out: pbBuffer=0x112021d0) returned 1
	[0277.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112021c8 | out: pbBuffer=0x112021c8) returned 1
	[0277.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bbc02 | out: pbBuffer=0x110bbc02) returned 1
	[0277.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bbc35 | out: pbBuffer=0x110bbc35) returned 1
	[0277.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bbc65 | out: pbBuffer=0x110bbc65) returned 1
	[0277.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202200 | out: pbBuffer=0x11202200) returned 1
	[0277.586] GetFileType (hFile=0x1fc) returned 0x1
	[0277.586] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.586] WriteFile (in: hFile=0x1fc, lpBuffer=0x1115c000*, nNumberOfBytesToWrite=0x76ce, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x1115c000*, lpNumberOfBytesWritten=0x113a1dfc*=0x76ce, lpOverlapped=0x113a1e08) returned 1
	[0277.587] GetFileType (hFile=0x1fc) returned 0x1
	[0277.587] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x76ce, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.587] GetFileType (hFile=0x1fc) returned 0x1
	[0277.587] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.587] WriteFile (in: hFile=0x1fc, lpBuffer=0x1120b180*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x1120b180*, lpNumberOfBytesWritten=0x113a1dfc*=0x236, lpOverlapped=0x113a1e08) returned 1
	[0277.588] GetFileType (hFile=0x1fc) returned 0x1
	[0277.588] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x76ce, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.588] CloseHandle (hObject=0x1fc) returned 1
	[0277.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf.tl30z")) returned 0x220
	[0277.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.601] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0277.608] SetEvent (hEvent=0x248) returned 1
	[0277.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf")) returned 0x220
	[0277.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF", dwFileAttributes=0x220) returned 1
	[0277.609] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0277.790] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0277.790] ReadFile (in: hFile=0x1fc, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x88c, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11286e18*=0x88c, lpOverlapped=0x0) returned 1
	[0277.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112022a0 | out: pbBuffer=0x112022a0) returned 1
	[0277.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11335202 | out: pbBuffer=0x11335202) returned 1
	[0277.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113352eb | out: pbBuffer=0x113352eb) returned 1
	[0277.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112022d0 | out: pbBuffer=0x112022d0) returned 1
	[0277.794] GetFileType (hFile=0x1fc) returned 0x1
	[0277.795] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0277.795] WriteFile (in: hFile=0x1fc, lpBuffer=0x111d8000*, nNumberOfBytesToWrite=0x88c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111d8000*, lpNumberOfBytesWritten=0x1102bdfc*=0x88c, lpOverlapped=0x1102be08) returned 1
	[0277.795] GetFileType (hFile=0x1fc) returned 0x1
	[0277.797] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x88c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0277.797] GetFileType (hFile=0x1fc) returned 0x1
	[0277.797] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0277.797] WriteFile (in: hFile=0x1fc, lpBuffer=0x11477880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11477880*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0277.797] GetFileType (hFile=0x1fc) returned 0x1
	[0277.797] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x88c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0277.797] CloseHandle (hObject=0x1fc) returned 1
	[0277.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf.tl30z")) returned 0x220
	[0277.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.813] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0277.822] SetEvent (hEvent=0x26c) returned 1
	[0277.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf")) returned 0x220
	[0277.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF", dwFileAttributes=0x220) returned 1
	[0277.822] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.120] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0278.121] ReadFile (in: hFile=0x224, lpBuffer=0x113f3000, nNumberOfBytesToRead=0xf94, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x113f3000*, lpNumberOfBytesRead=0x11286e18*=0xf94, lpOverlapped=0x0) returned 1
	[0278.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202590 | out: pbBuffer=0x11202590) returned 1
	[0278.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ae602 | out: pbBuffer=0x111ae602) returned 1
	[0278.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ae667 | out: pbBuffer=0x111ae667) returned 1
	[0278.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ae6b5 | out: pbBuffer=0x111ae6b5) returned 1
	[0278.127] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112025c0 | out: pbBuffer=0x112025c0) returned 1
	[0278.127] GetFileType (hFile=0x224) returned 0x1
	[0278.127] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.127] WriteFile (in: hFile=0x224, lpBuffer=0x1132c000*, nNumberOfBytesToWrite=0xf94, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1132c000*, lpNumberOfBytesWritten=0x1102bdfc*=0xf94, lpOverlapped=0x1102be08) returned 1
	[0278.128] GetFileType (hFile=0x224) returned 0x1
	[0278.128] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xf94, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.128] GetFileType (hFile=0x224) returned 0x1
	[0278.128] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.128] WriteFile (in: hFile=0x224, lpBuffer=0x11065500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11065500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0278.129] GetFileType (hFile=0x224) returned 0x1
	[0278.129] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xf94, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.129] CloseHandle (hObject=0x224) returned 1
	[0278.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf.tl30z")) returned 0x220
	[0278.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.163] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0278.202] SetEvent (hEvent=0x26c) returned 1
	[0278.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid")) returned 0x220
	[0278.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID", dwFileAttributes=0x220) returned 1
	[0278.203] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0278.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.388] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0278.388] ReadFile (in: hFile=0x224, lpBuffer=0x11216000, nNumberOfBytesToRead=0x32b5, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11216000*, lpNumberOfBytesRead=0x1131ce18*=0x32b5, lpOverlapped=0x0) returned 1
	[0278.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61d0 | out: pbBuffer=0x113e61d0) returned 1
	[0278.393] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11226702 | out: pbBuffer=0x11226702) returned 1
	[0278.393] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6200 | out: pbBuffer=0x113e6200) returned 1
	[0278.393] GetFileType (hFile=0x224) returned 0x1
	[0278.393] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.394] WriteFile (in: hFile=0x224, lpBuffer=0x112ee000*, nNumberOfBytesToWrite=0x32b5, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x112ee000*, lpNumberOfBytesWritten=0x113a1dfc*=0x32b5, lpOverlapped=0x113a1e08) returned 1
	[0278.394] GetFileType (hFile=0x224) returned 0x1
	[0278.394] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x32b5, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.394] GetFileType (hFile=0x224) returned 0x1
	[0278.394] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.394] WriteFile (in: hFile=0x224, lpBuffer=0x112f2000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x112f2000*, lpNumberOfBytesWritten=0x113a1dfc*=0x230, lpOverlapped=0x113a1e08) returned 1
	[0278.395] GetFileType (hFile=0x224) returned 0x1
	[0278.395] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x32b5, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.395] CloseHandle (hObject=0x224) returned 1
	[0278.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid.tl30z")) returned 0x220
	[0278.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0278.409] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0278.425] SetEvent (hEvent=0x26c) returned 1
	[0278.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf")) returned 0x220
	[0278.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF", dwFileAttributes=0x220) returned 1
	[0278.426] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.666] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0278.666] ReadFile (in: hFile=0x224, lpBuffer=0x11150000, nNumberOfBytesToRead=0xeb4, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11150000*, lpNumberOfBytesRead=0x1131ce18*=0xeb4, lpOverlapped=0x0) returned 1
	[0278.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6350 | out: pbBuffer=0x113e6350) returned 1
	[0278.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11227102 | out: pbBuffer=0x11227102) returned 1
	[0278.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11227148 | out: pbBuffer=0x11227148) returned 1
	[0278.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11227174 | out: pbBuffer=0x11227174) returned 1
	[0278.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112271c9 | out: pbBuffer=0x112271c9) returned 1
	[0278.673] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6380 | out: pbBuffer=0x113e6380) returned 1
	[0278.673] GetFileType (hFile=0x224) returned 0x1
	[0278.674] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.674] WriteFile (in: hFile=0x224, lpBuffer=0x11436000*, nNumberOfBytesToWrite=0xeb4, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11436000*, lpNumberOfBytesWritten=0x113a1dfc*=0xeb4, lpOverlapped=0x113a1e08) returned 1
	[0278.675] GetFileType (hFile=0x224) returned 0x1
	[0278.675] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xeb4, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.675] GetFileType (hFile=0x224) returned 0x1
	[0278.675] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.675] WriteFile (in: hFile=0x224, lpBuffer=0x112f2e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x112f2e00*, lpNumberOfBytesWritten=0x113a1dfc*=0x22d, lpOverlapped=0x113a1e08) returned 1
	[0278.676] GetFileType (hFile=0x224) returned 0x1
	[0278.676] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xeb4, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.676] CloseHandle (hObject=0x224) returned 1
	[0278.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf.tl30z")) returned 0x220
	[0278.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.704] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0278.709] SetEvent (hEvent=0x26c) returned 1
	[0278.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf")) returned 0x220
	[0278.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF", dwFileAttributes=0x220) returned 1
	[0278.709] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.925] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0278.925] ReadFile (in: hFile=0x224, lpBuffer=0x113e4000, nNumberOfBytesToRead=0x7a8, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113e4000*, lpNumberOfBytesRead=0x11428e18*=0x7a8, lpOverlapped=0x0) returned 1
	[0278.930] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0278.930] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0278.930] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11384802 | out: pbBuffer=0x11384802) returned 1
	[0278.935] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0278.936] GetFileType (hFile=0x224) returned 0x1
	[0278.936] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.936] WriteFile (in: hFile=0x224, lpBuffer=0x1144b000*, nNumberOfBytesToWrite=0x7a8, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x1144b000*, lpNumberOfBytesWritten=0x113a3dfc*=0x7a8, lpOverlapped=0x113a3e08) returned 1
	[0278.937] GetFileType (hFile=0x224) returned 0x1
	[0278.937] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7a8, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.937] GetFileType (hFile=0x224) returned 0x1
	[0278.937] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.937] WriteFile (in: hFile=0x224, lpBuffer=0x110eca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x110eca80*, lpNumberOfBytesWritten=0x113a3dfc*=0x22a, lpOverlapped=0x113a3e08) returned 1
	[0278.937] GetFileType (hFile=0x224) returned 0x1
	[0278.937] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7a8, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.938] CloseHandle (hObject=0x224) returned 1
	[0278.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf.tl30z")) returned 0x220
	[0278.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.961] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0278.966] SetEvent (hEvent=0x26c) returned 1
	[0278.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf")) returned 0x220
	[0278.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF", dwFileAttributes=0x220) returned 1
	[0278.967] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.108] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0279.108] ReadFile (in: hFile=0x224, lpBuffer=0x110ece00, nNumberOfBytesToRead=0x332, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110ece00*, lpNumberOfBytesRead=0x11428e18*=0x332, lpOverlapped=0x0) returned 1
	[0279.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0279.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0279.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11385302 | out: pbBuffer=0x11385302) returned 1
	[0279.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11385304 | out: pbBuffer=0x11385304) returned 1
	[0279.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0279.115] GetFileType (hFile=0x224) returned 0x1
	[0279.115] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.115] WriteFile (in: hFile=0x224, lpBuffer=0x113f6000*, nNumberOfBytesToWrite=0x332, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x113f6000*, lpNumberOfBytesWritten=0x113a3dfc*=0x332, lpOverlapped=0x113a3e08) returned 1
	[0279.115] GetFileType (hFile=0x224) returned 0x1
	[0279.115] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x332, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.115] GetFileType (hFile=0x224) returned 0x1
	[0279.115] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.116] WriteFile (in: hFile=0x224, lpBuffer=0x110edc00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x110edc00*, lpNumberOfBytesWritten=0x113a3dfc*=0x227, lpOverlapped=0x113a3e08) returned 1
	[0279.116] GetFileType (hFile=0x224) returned 0x1
	[0279.116] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x332, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.116] CloseHandle (hObject=0x224) returned 1
	[0279.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf.tl30z")) returned 0x220
	[0279.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.127] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0279.142] SetEvent (hEvent=0x26c) returned 1
	[0279.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf")) returned 0x220
	[0279.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF", dwFileAttributes=0x220) returned 1
	[0279.142] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.320] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0279.320] ReadFile (in: hFile=0x224, lpBuffer=0x11250600, nNumberOfBytesToRead=0x5bc, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11250600*, lpNumberOfBytesRead=0x11428e18*=0x5bc, lpOverlapped=0x0) returned 1
	[0279.325] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e620 | out: pbBuffer=0x1104e620) returned 1
	[0279.325] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e618 | out: pbBuffer=0x1104e618) returned 1
	[0279.325] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11234802 | out: pbBuffer=0x11234802) returned 1
	[0279.325] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11234838 | out: pbBuffer=0x11234838) returned 1
	[0279.325] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0279.325] GetFileType (hFile=0x224) returned 0x1
	[0279.325] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.326] WriteFile (in: hFile=0x224, lpBuffer=0x11198000*, nNumberOfBytesToWrite=0x5bc, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x11198000*, lpNumberOfBytesWritten=0x113a3dfc*=0x5bc, lpOverlapped=0x113a3e08) returned 1
	[0279.326] GetFileType (hFile=0x224) returned 0x1
	[0279.326] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5bc, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.326] GetFileType (hFile=0x224) returned 0x1
	[0279.326] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.326] WriteFile (in: hFile=0x224, lpBuffer=0x11467880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x11467880*, lpNumberOfBytesWritten=0x113a3dfc*=0x22d, lpOverlapped=0x113a3e08) returned 1
	[0279.326] GetFileType (hFile=0x224) returned 0x1
	[0279.327] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5bc, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.327] CloseHandle (hObject=0x224) returned 1
	[0279.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf.tl30z")) returned 0x220
	[0279.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.338] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0279.342] SetEvent (hEvent=0x26c) returned 1
	[0279.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf")) returned 0x220
	[0279.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF", dwFileAttributes=0x220) returned 1
	[0279.342] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.512] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0279.512] ReadFile (in: hFile=0x224, lpBuffer=0x112b2e00, nNumberOfBytesToRead=0x620, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x112b2e00*, lpNumberOfBytesRead=0x11428e18*=0x620, lpOverlapped=0x0) returned 1
	[0279.516] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69e0 | out: pbBuffer=0x113e69e0) returned 1
	[0279.517] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c2902 | out: pbBuffer=0x112c2902) returned 1
	[0279.517] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c2927 | out: pbBuffer=0x112c2927) returned 1
	[0279.517] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c29bb | out: pbBuffer=0x112c29bb) returned 1
	[0279.517] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6a10 | out: pbBuffer=0x113e6a10) returned 1
	[0279.517] GetFileType (hFile=0x224) returned 0x1
	[0279.517] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a7de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.517] WriteFile (in: hFile=0x224, lpBuffer=0x11147000*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x110a7dfc, lpOverlapped=0x110a7e08 | out: lpBuffer=0x11147000*, lpNumberOfBytesWritten=0x110a7dfc*=0x620, lpOverlapped=0x110a7e08) returned 1
	[0279.518] GetFileType (hFile=0x224) returned 0x1
	[0279.518] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x620, lpNewFilePointer=0x0, dwMoveMethod=0x110a7de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.518] GetFileType (hFile=0x224) returned 0x1
	[0279.518] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a7de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.518] WriteFile (in: hFile=0x224, lpBuffer=0x1113c700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x110a7dfc, lpOverlapped=0x110a7e08 | out: lpBuffer=0x1113c700*, lpNumberOfBytesWritten=0x110a7dfc*=0x221, lpOverlapped=0x110a7e08) returned 1
	[0279.518] GetFileType (hFile=0x224) returned 0x1
	[0279.518] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x620, lpNewFilePointer=0x0, dwMoveMethod=0x110a7de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.518] CloseHandle (hObject=0x224) returned 1
	[0279.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf.tl30z")) returned 0x220
	[0279.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.523] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0279.533] SetEvent (hEvent=0x26c) returned 1
	[0279.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf")) returned 0x220
	[0279.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF", dwFileAttributes=0x220) returned 1
	[0279.534] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.712] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0279.712] ReadFile (in: hFile=0x224, lpBuffer=0x1117a000, nNumberOfBytesToRead=0x1bac, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1117a000*, lpNumberOfBytesRead=0x11428e18*=0x1bac, lpOverlapped=0x0) returned 1
	[0279.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0279.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0279.718] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1142d202 | out: pbBuffer=0x1142d202) returned 1
	[0279.718] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142d29a | out: pbBuffer=0x1142d29a) returned 1
	[0279.718] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0279.718] GetFileType (hFile=0x224) returned 0x1
	[0279.718] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.718] WriteFile (in: hFile=0x224, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x1bac, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x1121ddfc*=0x1bac, lpOverlapped=0x1121de08) returned 1
	[0279.719] GetFileType (hFile=0x224) returned 0x1
	[0279.719] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1bac, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.719] GetFileType (hFile=0x224) returned 0x1
	[0279.719] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.719] WriteFile (in: hFile=0x224, lpBuffer=0x111b9880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x111b9880*, lpNumberOfBytesWritten=0x1121ddfc*=0x230, lpOverlapped=0x1121de08) returned 1
	[0279.720] GetFileType (hFile=0x224) returned 0x1
	[0279.720] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1bac, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.720] CloseHandle (hObject=0x224) returned 1
	[0279.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf.tl30z")) returned 0x220
	[0279.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.832] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0279.838] SetEvent (hEvent=0x218) returned 1
	[0279.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf")) returned 0x220
	[0279.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF", dwFileAttributes=0x220) returned 1
	[0279.838] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0280.018] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0280.018] ReadFile (in: hFile=0x224, lpBuffer=0x113fc000, nNumberOfBytesToRead=0x4f4, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113fc000*, lpNumberOfBytesRead=0x11428e18*=0x4f4, lpOverlapped=0x0) returned 1
	[0280.023] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202260 | out: pbBuffer=0x11202260) returned 1
	[0280.023] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11321202 | out: pbBuffer=0x11321202) returned 1
	[0280.023] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11321275 | out: pbBuffer=0x11321275) returned 1
	[0280.023] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202290 | out: pbBuffer=0x11202290) returned 1
	[0280.024] GetFileType (hFile=0x224) returned 0x1
	[0280.024] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.024] WriteFile (in: hFile=0x224, lpBuffer=0x111cb000*, nNumberOfBytesToWrite=0x4f4, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x111cb000*, lpNumberOfBytesWritten=0x11219dfc*=0x4f4, lpOverlapped=0x11219e08) returned 1
	[0280.024] GetFileType (hFile=0x224) returned 0x1
	[0280.024] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4f4, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.024] GetFileType (hFile=0x224) returned 0x1
	[0280.025] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.025] WriteFile (in: hFile=0x224, lpBuffer=0x1139b880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x1139b880*, lpNumberOfBytesWritten=0x11219dfc*=0x22a, lpOverlapped=0x11219e08) returned 1
	[0280.025] GetFileType (hFile=0x224) returned 0x1
	[0280.025] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4f4, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.025] CloseHandle (hObject=0x224) returned 1
	[0280.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf.tl30z")) returned 0x220
	[0280.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.031] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0280.048] SetEvent (hEvent=0x210) returned 1
	[0280.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf")) returned 0x220
	[0280.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF", dwFileAttributes=0x220) returned 1
	[0280.049] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0280.199] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0280.200] ReadFile (in: hFile=0x224, lpBuffer=0x11121800, nNumberOfBytesToRead=0x1746, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11121800*, lpNumberOfBytesRead=0x11428e18*=0x1746, lpOverlapped=0x0) returned 1
	[0280.207] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113322d0 | out: pbBuffer=0x113322d0) returned 1
	[0280.207] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11065d02 | out: pbBuffer=0x11065d02) returned 1
	[0280.207] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332300 | out: pbBuffer=0x11332300) returned 1
	[0280.207] GetFileType (hFile=0x224) returned 0x1
	[0280.207] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.207] WriteFile (in: hFile=0x224, lpBuffer=0x112f0000*, nNumberOfBytesToWrite=0x1746, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x112f0000*, lpNumberOfBytesWritten=0x1121ddfc*=0x1746, lpOverlapped=0x1121de08) returned 1
	[0280.208] GetFileType (hFile=0x224) returned 0x1
	[0280.208] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1746, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.208] GetFileType (hFile=0x224) returned 0x1
	[0280.208] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.208] WriteFile (in: hFile=0x224, lpBuffer=0x1113b180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x1113b180*, lpNumberOfBytesWritten=0x1121ddfc*=0x22d, lpOverlapped=0x1121de08) returned 1
	[0280.208] GetFileType (hFile=0x224) returned 0x1
	[0280.208] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1746, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.208] CloseHandle (hObject=0x224) returned 1
	[0280.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf.tl30z")) returned 0x220
	[0280.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.215] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0280.224] SetEvent (hEvent=0x210) returned 1
	[0280.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf")) returned 0x220
	[0280.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF", dwFileAttributes=0x220) returned 1
	[0280.225] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0280.525] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0280.525] ReadFile (in: hFile=0x1d8, lpBuffer=0x112da400, nNumberOfBytesToRead=0xa90, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x112da400*, lpNumberOfBytesRead=0x11428e18*=0xa90, lpOverlapped=0x0) returned 1
	[0280.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202840 | out: pbBuffer=0x11202840) returned 1
	[0280.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a3b02 | out: pbBuffer=0x111a3b02) returned 1
	[0280.552] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111a3b2b | out: pbBuffer=0x111a3b2b) returned 1
	[0280.552] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111a3b44 | out: pbBuffer=0x111a3b44) returned 1
	[0280.552] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111a3bbd | out: pbBuffer=0x111a3bbd) returned 1
	[0280.552] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202870 | out: pbBuffer=0x11202870) returned 1
	[0280.552] GetFileType (hFile=0x1d8) returned 0x1
	[0280.552] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.553] WriteFile (in: hFile=0x1d8, lpBuffer=0x1124b000*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x1124b000*, lpNumberOfBytesWritten=0x11219dfc*=0xa90, lpOverlapped=0x11219e08) returned 1
	[0280.553] GetFileType (hFile=0x1d8) returned 0x1
	[0280.553] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa90, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.553] GetFileType (hFile=0x1d8) returned 0x1
	[0280.553] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.553] WriteFile (in: hFile=0x1d8, lpBuffer=0x11171180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x11171180*, lpNumberOfBytesWritten=0x11219dfc*=0x224, lpOverlapped=0x11219e08) returned 1
	[0280.554] GetFileType (hFile=0x1d8) returned 0x1
	[0280.554] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa90, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.554] CloseHandle (hObject=0x1d8) returned 1
	[0280.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf.tl30z")) returned 0x220
	[0280.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.564] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0280.589] SetEvent (hEvent=0x234) returned 1
	[0280.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf")) returned 0x220
	[0280.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF", dwFileAttributes=0x220) returned 1
	[0280.589] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0280.740] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0280.740] ReadFile (in: hFile=0x1d8, lpBuffer=0x1134c000, nNumberOfBytesToRead=0xc0a, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1134c000*, lpNumberOfBytesRead=0x11428e18*=0xc0a, lpOverlapped=0x0) returned 1
	[0280.744] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0280.744] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0280.744] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a3302 | out: pbBuffer=0x111a3302) returned 1
	[0280.745] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0280.745] GetFileType (hFile=0x1d8) returned 0x1
	[0280.745] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.745] WriteFile (in: hFile=0x1d8, lpBuffer=0x112de000*, nNumberOfBytesToWrite=0xc0a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112de000*, lpNumberOfBytesWritten=0x1102bdfc*=0xc0a, lpOverlapped=0x1102be08) returned 1
	[0280.745] GetFileType (hFile=0x1d8) returned 0x1
	[0280.745] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc0a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.746] GetFileType (hFile=0x1d8) returned 0x1
	[0280.746] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.746] WriteFile (in: hFile=0x1d8, lpBuffer=0x1137c380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1137c380*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0280.746] GetFileType (hFile=0x1d8) returned 0x1
	[0280.746] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc0a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.746] CloseHandle (hObject=0x1d8) returned 1
	[0280.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf.tl30z")) returned 0x220
	[0280.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.764] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0280.772] SetEvent (hEvent=0x1b0) returned 1
	[0280.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf")) returned 0x220
	[0280.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF", dwFileAttributes=0x220) returned 1
	[0280.772] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.041] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0281.041] ReadFile (in: hFile=0x1d8, lpBuffer=0x11464000, nNumberOfBytesToRead=0x6b76, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11464000*, lpNumberOfBytesRead=0x11428e18*=0x6b76, lpOverlapped=0x0) returned 1
	[0281.045] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0281.046] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11191e02 | out: pbBuffer=0x11191e02) returned 1
	[0281.046] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0281.047] GetFileType (hFile=0x1d8) returned 0x1
	[0281.047] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.047] WriteFile (in: hFile=0x1d8, lpBuffer=0x111da000*, nNumberOfBytesToWrite=0x6b76, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111da000*, lpNumberOfBytesWritten=0x1102bdfc*=0x6b76, lpOverlapped=0x1102be08) returned 1
	[0281.048] GetFileType (hFile=0x1d8) returned 0x1
	[0281.048] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6b76, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.048] GetFileType (hFile=0x1d8) returned 0x1
	[0281.048] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.048] WriteFile (in: hFile=0x1d8, lpBuffer=0x110de700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110de700*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0281.049] GetFileType (hFile=0x1d8) returned 0x1
	[0281.049] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6b76, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.049] CloseHandle (hObject=0x1d8) returned 1
	[0281.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf.tl30z")) returned 0x220
	[0281.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.058] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0281.067] SetEvent (hEvent=0x248) returned 1
	[0281.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf")) returned 0x220
	[0281.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF", dwFileAttributes=0x220) returned 1
	[0281.068] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.212] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0281.212] ReadFile (in: hFile=0x1d8, lpBuffer=0x110bd000, nNumberOfBytesToRead=0x738, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110bd000*, lpNumberOfBytesRead=0x11428e18*=0x738, lpOverlapped=0x0) returned 1
	[0281.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332960 | out: pbBuffer=0x11332960) returned 1
	[0281.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332958 | out: pbBuffer=0x11332958) returned 1
	[0281.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a1f02 | out: pbBuffer=0x113a1f02) returned 1
	[0281.216] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332990 | out: pbBuffer=0x11332990) returned 1
	[0281.216] GetFileType (hFile=0x1d8) returned 0x1
	[0281.216] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.216] WriteFile (in: hFile=0x1d8, lpBuffer=0x1122a000*, nNumberOfBytesToWrite=0x738, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1122a000*, lpNumberOfBytesWritten=0x11031dfc*=0x738, lpOverlapped=0x11031e08) returned 1
	[0281.216] GetFileType (hFile=0x1d8) returned 0x1
	[0281.216] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x738, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.216] GetFileType (hFile=0x1d8) returned 0x1
	[0281.217] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.217] WriteFile (in: hFile=0x1d8, lpBuffer=0x1122c000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1122c000*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0281.217] GetFileType (hFile=0x1d8) returned 0x1
	[0281.217] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x738, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.217] CloseHandle (hObject=0x1d8) returned 1
	[0281.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf.tl30z")) returned 0x220
	[0281.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.228] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0281.238] SetEvent (hEvent=0x248) returned 1
	[0281.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf")) returned 0x220
	[0281.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF", dwFileAttributes=0x220) returned 1
	[0281.239] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.397] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0281.398] ReadFile (in: hFile=0x1d8, lpBuffer=0x11296500, nNumberOfBytesToRead=0x23d4, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11296500*, lpNumberOfBytesRead=0x11428e18*=0x23d4, lpOverlapped=0x0) returned 1
	[0281.403] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332de0 | out: pbBuffer=0x11332de0) returned 1
	[0281.403] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11227f02 | out: pbBuffer=0x11227f02) returned 1
	[0281.403] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11227f1f | out: pbBuffer=0x11227f1f) returned 1
	[0281.403] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332e10 | out: pbBuffer=0x11332e10) returned 1
	[0281.404] SetEvent (hEvent=0x248) returned 1
	[0281.404] GetFileType (hFile=0x1d8) returned 0x1
	[0281.404] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.404] WriteFile (in: hFile=0x1d8, lpBuffer=0x1114e000*, nNumberOfBytesToWrite=0x23d4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1114e000*, lpNumberOfBytesWritten=0x11031dfc*=0x23d4, lpOverlapped=0x11031e08) returned 1
	[0281.405] GetFileType (hFile=0x1d8) returned 0x1
	[0281.405] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x23d4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.405] GetFileType (hFile=0x1d8) returned 0x1
	[0281.405] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.406] WriteFile (in: hFile=0x1d8, lpBuffer=0x1113ea80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1113ea80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0281.406] GetFileType (hFile=0x1d8) returned 0x1
	[0281.406] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x23d4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.406] CloseHandle (hObject=0x1d8) returned 1
	[0281.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf.tl30z")) returned 0x220
	[0281.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.419] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0281.422] SetEvent (hEvent=0x248) returned 1
	[0281.422] SetEvent (hEvent=0x234) returned 1
	[0281.422] SwitchToThread () returned 1
	[0281.460] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0282.657] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0282.659] SetEvent (hEvent=0x1b0) returned 1
	[0282.659] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0282.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf")) returned 0x220
	[0282.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF", dwFileAttributes=0x220) returned 1
	[0282.670] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0282.929] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0282.930] ReadFile (in: hFile=0x288, lpBuffer=0x11458000, nNumberOfBytesToRead=0x6e34, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11458000*, lpNumberOfBytesRead=0x11287e18*=0x6e34, lpOverlapped=0x0) returned 1
	[0282.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0282.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11441302 | out: pbBuffer=0x11441302) returned 1
	[0282.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11441338 | out: pbBuffer=0x11441338) returned 1
	[0282.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144133c | out: pbBuffer=0x1144133c) returned 1
	[0282.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0282.939] GetFileType (hFile=0x288) returned 0x1
	[0282.939] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111afde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.939] WriteFile (in: hFile=0x288, lpBuffer=0x110b2000*, nNumberOfBytesToWrite=0x6e34, lpNumberOfBytesWritten=0x111afdfc, lpOverlapped=0x111afe08 | out: lpBuffer=0x110b2000*, lpNumberOfBytesWritten=0x111afdfc*=0x6e34, lpOverlapped=0x111afe08) returned 1
	[0282.940] GetFileType (hFile=0x288) returned 0x1
	[0282.940] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x6e34, lpNewFilePointer=0x0, dwMoveMethod=0x111afde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.940] GetFileType (hFile=0x288) returned 0x1
	[0282.940] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111afde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.940] WriteFile (in: hFile=0x288, lpBuffer=0x113d5880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x111afdfc, lpOverlapped=0x111afe08 | out: lpBuffer=0x113d5880*, lpNumberOfBytesWritten=0x111afdfc*=0x230, lpOverlapped=0x111afe08) returned 1
	[0282.940] GetFileType (hFile=0x288) returned 0x1
	[0282.941] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x6e34, lpNewFilePointer=0x0, dwMoveMethod=0x111afde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.941] CloseHandle (hObject=0x288) returned 1
	[0282.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf.tl30z")) returned 0x220
	[0282.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.947] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0282.953] SetEvent (hEvent=0x210) returned 1
	[0282.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf")) returned 0x220
	[0282.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF", dwFileAttributes=0x220) returned 1
	[0282.953] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf.tl30z"), dwFlags=0x1) returned 1
	[0283.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.095] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0283.095] ReadFile (in: hFile=0x288, lpBuffer=0x11160000, nNumberOfBytesToRead=0x1b16, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11160000*, lpNumberOfBytesRead=0x11287e18*=0x1b16, lpOverlapped=0x0) returned 1
	[0283.102] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112026a0 | out: pbBuffer=0x112026a0) returned 1
	[0283.102] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202698 | out: pbBuffer=0x11202698) returned 1
	[0283.102] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112af402 | out: pbBuffer=0x112af402) returned 1
	[0283.102] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112af445 | out: pbBuffer=0x112af445) returned 1
	[0283.102] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112af463 | out: pbBuffer=0x112af463) returned 1
	[0283.103] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112026d0 | out: pbBuffer=0x112026d0) returned 1
	[0283.103] GetFileType (hFile=0x288) returned 0x1
	[0283.103] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.103] WriteFile (in: hFile=0x288, lpBuffer=0x11184000*, nNumberOfBytesToWrite=0x1b16, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11184000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1b16, lpOverlapped=0x1102be08) returned 1
	[0283.104] GetFileType (hFile=0x288) returned 0x1
	[0283.104] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1b16, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.104] GetFileType (hFile=0x288) returned 0x1
	[0283.104] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.104] WriteFile (in: hFile=0x288, lpBuffer=0x1116e700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1116e700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0283.105] GetFileType (hFile=0x288) returned 0x1
	[0283.105] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1b16, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.105] CloseHandle (hObject=0x288) returned 1
	[0283.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf.tl30z")) returned 0x220
	[0283.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0283.132] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0283.151] SetEvent (hEvent=0x210) returned 1
	[0283.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg")) returned 0x220
	[0283.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG", dwFileAttributes=0x220) returned 1
	[0283.152] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg.tl30z"), dwFlags=0x1) returned 1
	[0283.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.375] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0283.375] ReadFile (in: hFile=0x288, lpBuffer=0x1134c000, nNumberOfBytesToRead=0x5f39, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1134c000*, lpNumberOfBytesRead=0x11287e18*=0x5f39, lpOverlapped=0x0) returned 1
	[0283.383] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0283.383] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1140a802 | out: pbBuffer=0x1140a802) returned 1
	[0283.383] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140a886 | out: pbBuffer=0x1140a886) returned 1
	[0283.384] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0283.385] GetFileType (hFile=0x288) returned 0x1
	[0283.385] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.385] WriteFile (in: hFile=0x288, lpBuffer=0x11166000*, nNumberOfBytesToWrite=0x5f39, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11166000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5f39, lpOverlapped=0x1102be08) returned 1
	[0283.386] GetFileType (hFile=0x288) returned 0x1
	[0283.386] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5f39, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.386] GetFileType (hFile=0x288) returned 0x1
	[0283.386] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.386] WriteFile (in: hFile=0x288, lpBuffer=0x11259180*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11259180*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0283.386] GetFileType (hFile=0x288) returned 0x1
	[0283.387] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5f39, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.387] CloseHandle (hObject=0x288) returned 1
	[0283.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg.tl30z")) returned 0x220
	[0283.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0283.397] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0283.413] SetEvent (hEvent=0x26c) returned 1
	[0283.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 0x220
	[0283.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG", dwFileAttributes=0x220) returned 1
	[0283.413] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.tl30z"), dwFlags=0x1) returned 1
	[0283.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.574] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0283.574] ReadFile (in: hFile=0x288, lpBuffer=0x1120c000, nNumberOfBytesToRead=0x2dae, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1120c000*, lpNumberOfBytesRead=0x11287e18*=0x2dae, lpOverlapped=0x0) returned 1
	[0283.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0283.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1140be02 | out: pbBuffer=0x1140be02) returned 1
	[0283.586] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e510 | out: pbBuffer=0x1104e510) returned 1
	[0283.586] GetFileType (hFile=0x288) returned 0x1
	[0283.586] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.586] WriteFile (in: hFile=0x288, lpBuffer=0x111e8000*, nNumberOfBytesToWrite=0x2dae, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111e8000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2dae, lpOverlapped=0x1102be08) returned 1
	[0283.587] GetFileType (hFile=0x288) returned 0x1
	[0283.587] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x2dae, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.587] GetFileType (hFile=0x288) returned 0x1
	[0283.587] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.587] WriteFile (in: hFile=0x288, lpBuffer=0x1144ee00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1144ee00*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0283.587] GetFileType (hFile=0x288) returned 0x1
	[0283.588] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x2dae, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.588] CloseHandle (hObject=0x288) returned 1
	[0283.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.tl30z")) returned 0x220
	[0283.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0283.592] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0283.599] SetEvent (hEvent=0x26c) returned 1
	[0283.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 0x220
	[0283.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG", dwFileAttributes=0x220) returned 1
	[0283.599] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.tl30z"), dwFlags=0x1) returned 1
	[0283.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0283.822] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0283.822] ReadFile (in: hFile=0x1d4, lpBuffer=0x11196000, nNumberOfBytesToRead=0x25c7, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11196000*, lpNumberOfBytesRead=0x11287e18*=0x25c7, lpOverlapped=0x0) returned 1
	[0283.848] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6200 | out: pbBuffer=0x113e6200) returned 1
	[0283.848] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e61f8 | out: pbBuffer=0x113e61f8) returned 1
	[0283.848] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122dd02 | out: pbBuffer=0x1122dd02) returned 1
	[0283.848] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1122dd3b | out: pbBuffer=0x1122dd3b) returned 1
	[0283.848] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6230 | out: pbBuffer=0x113e6230) returned 1
	[0283.849] GetFileType (hFile=0x1d4) returned 0x1
	[0283.849] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.849] WriteFile (in: hFile=0x1d4, lpBuffer=0x110fe000*, nNumberOfBytesToWrite=0x25c7, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110fe000*, lpNumberOfBytesWritten=0x1102bdfc*=0x25c7, lpOverlapped=0x1102be08) returned 1
	[0283.849] GetFileType (hFile=0x1d4) returned 0x1
	[0283.849] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x25c7, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.849] GetFileType (hFile=0x1d4) returned 0x1
	[0283.850] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.850] WriteFile (in: hFile=0x1d4, lpBuffer=0x11295880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11295880*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0283.850] GetFileType (hFile=0x1d4) returned 0x1
	[0283.850] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x25c7, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.850] CloseHandle (hObject=0x1d4) returned 1
	[0283.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.tl30z")) returned 0x220
	[0283.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0283.856] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0283.866] SetEvent (hEvent=0x26c) returned 1
	[0283.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 0x220
	[0283.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG", dwFileAttributes=0x220) returned 1
	[0283.866] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.tl30z"), dwFlags=0x1) returned 1
	[0284.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.013] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0284.013] ReadFile (in: hFile=0x1d4, lpBuffer=0x112de000, nNumberOfBytesToRead=0x4cc8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x112de000*, lpNumberOfBytesRead=0x11287e18*=0x4cc8, lpOverlapped=0x0) returned 1
	[0284.018] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0284.018] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0284.018] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11373302 | out: pbBuffer=0x11373302) returned 1
	[0284.018] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0284.019] GetFileType (hFile=0x1d4) returned 0x1
	[0284.019] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.019] WriteFile (in: hFile=0x1d4, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x4cc8, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x1138fdfc*=0x4cc8, lpOverlapped=0x1138fe08) returned 1
	[0284.020] GetFileType (hFile=0x1d4) returned 0x1
	[0284.020] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4cc8, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.020] GetFileType (hFile=0x1d4) returned 0x1
	[0284.020] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.020] WriteFile (in: hFile=0x1d4, lpBuffer=0x1133f880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x1133f880*, lpNumberOfBytesWritten=0x1138fdfc*=0x22a, lpOverlapped=0x1138fe08) returned 1
	[0284.020] GetFileType (hFile=0x1d4) returned 0x1
	[0284.020] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4cc8, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.020] CloseHandle (hObject=0x1d4) returned 1
	[0284.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.tl30z")) returned 0x220
	[0284.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0284.028] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0284.042] SetEvent (hEvent=0x210) returned 1
	[0284.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 0x220
	[0284.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG", dwFileAttributes=0x220) returned 1
	[0284.042] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.tl30z"), dwFlags=0x1) returned 1
	[0284.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.197] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0284.197] ReadFile (in: hFile=0x1d4, lpBuffer=0x110b0000, nNumberOfBytesToRead=0xabad, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110b0000*, lpNumberOfBytesRead=0x11287e18*=0xabad, lpOverlapped=0x0) returned 1
	[0284.202] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0284.203] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332808 | out: pbBuffer=0x11332808) returned 1
	[0284.203] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b7402 | out: pbBuffer=0x111b7402) returned 1
	[0284.203] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b7442 | out: pbBuffer=0x111b7442) returned 1
	[0284.203] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332840 | out: pbBuffer=0x11332840) returned 1
	[0284.204] GetFileType (hFile=0x1d4) returned 0x1
	[0284.205] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.205] WriteFile (in: hFile=0x1d4, lpBuffer=0x11234000*, nNumberOfBytesToWrite=0xabad, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11234000*, lpNumberOfBytesWritten=0x1102bdfc*=0xabad, lpOverlapped=0x1102be08) returned 1
	[0284.205] GetFileType (hFile=0x1d4) returned 0x1
	[0284.205] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xabad, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.205] GetFileType (hFile=0x1d4) returned 0x1
	[0284.205] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.205] WriteFile (in: hFile=0x1d4, lpBuffer=0x11200700*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11200700*, lpNumberOfBytesWritten=0x1102bdfc*=0x239, lpOverlapped=0x1102be08) returned 1
	[0284.206] GetFileType (hFile=0x1d4) returned 0x1
	[0284.206] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xabad, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.206] CloseHandle (hObject=0x1d4) returned 1
	[0284.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.tl30z")) returned 0x220
	[0284.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0284.219] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0284.282] SetEvent (hEvent=0x210) returned 1
	[0284.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf")) returned 0x220
	[0284.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF", dwFileAttributes=0x220) returned 1
	[0284.283] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.421] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0284.421] ReadFile (in: hFile=0x1d4, lpBuffer=0x11458000, nNumberOfBytesToRead=0xe392, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11458000*, lpNumberOfBytesRead=0x11287e18*=0xe392, lpOverlapped=0x0) returned 1
	[0284.426] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202580 | out: pbBuffer=0x11202580) returned 1
	[0284.427] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138a702 | out: pbBuffer=0x1138a702) returned 1
	[0284.427] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112025b0 | out: pbBuffer=0x112025b0) returned 1
	[0284.428] GetFileType (hFile=0x1d4) returned 0x1
	[0284.428] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.429] WriteFile (in: hFile=0x1d4, lpBuffer=0x11212000*, nNumberOfBytesToWrite=0xe392, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11212000*, lpNumberOfBytesWritten=0x1102bdfc*=0xe392, lpOverlapped=0x1102be08) returned 1
	[0284.429] GetFileType (hFile=0x1d4) returned 0x1
	[0284.429] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xe392, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.429] GetFileType (hFile=0x1d4) returned 0x1
	[0284.429] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.430] WriteFile (in: hFile=0x1d4, lpBuffer=0x11351880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11351880*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0284.430] GetFileType (hFile=0x1d4) returned 0x1
	[0284.430] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xe392, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.430] CloseHandle (hObject=0x1d4) returned 1
	[0284.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.tl30z")) returned 0x220
	[0284.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.502] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0284.513] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0284.558] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0284.603] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0284.644] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0284.703] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0284.739] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0284.780] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0284.822] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0284.953] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0285.001] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0285.019] SetEvent (hEvent=0x210) returned 1
	[0285.020] SetEvent (hEvent=0x1f0) returned 1
	[0285.020] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0285.024] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0285.024] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0285.025] SetEvent (hEvent=0x234) returned 1
	[0285.025] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0285.028] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0285.583] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0285.591] SetEvent (hEvent=0x210) returned 1
	[0285.591] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0285.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif")) returned 0x220
	[0285.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF", dwFileAttributes=0x220) returned 1
	[0285.634] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif.tl30z"), dwFlags=0x1) returned 1
	[0285.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.839] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0285.839] ReadFile (in: hFile=0x1d4, lpBuffer=0x113f0800, nNumberOfBytesToRead=0x409f, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x113f0800*, lpNumberOfBytesRead=0x11287e18*=0x409f, lpOverlapped=0x0) returned 1
	[0285.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202040 | out: pbBuffer=0x11202040) returned 1
	[0285.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202038 | out: pbBuffer=0x11202038) returned 1
	[0285.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133d102 | out: pbBuffer=0x1133d102) returned 1
	[0285.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202070 | out: pbBuffer=0x11202070) returned 1
	[0285.877] GetFileType (hFile=0x1d4) returned 0x1
	[0285.878] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.878] WriteFile (in: hFile=0x1d4, lpBuffer=0x112f6000*, nNumberOfBytesToWrite=0x409f, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112f6000*, lpNumberOfBytesWritten=0x1102bdfc*=0x409f, lpOverlapped=0x1102be08) returned 1
	[0285.878] GetFileType (hFile=0x1d4) returned 0x1
	[0285.878] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x409f, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.878] GetFileType (hFile=0x1d4) returned 0x1
	[0285.878] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.878] WriteFile (in: hFile=0x1d4, lpBuffer=0x113dc700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113dc700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0285.879] GetFileType (hFile=0x1d4) returned 0x1
	[0285.879] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x409f, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.879] CloseHandle (hObject=0x1d4) returned 1
	[0285.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif.tl30z")) returned 0x220
	[0285.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.887] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0285.911] SetEvent (hEvent=0x210) returned 1
	[0285.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf")) returned 0x220
	[0285.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF", dwFileAttributes=0x220) returned 1
	[0285.914] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf.tl30z"), dwFlags=0x1) returned 1
	[0286.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.239] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0286.239] ReadFile (in: hFile=0x1d4, lpBuffer=0x1123b000, nNumberOfBytesToRead=0x45be, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1123b000*, lpNumberOfBytesRead=0x11287e18*=0x45be, lpOverlapped=0x0) returned 1
	[0286.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0286.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332398 | out: pbBuffer=0x11332398) returned 1
	[0286.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d1302 | out: pbBuffer=0x111d1302) returned 1
	[0286.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d130f | out: pbBuffer=0x111d130f) returned 1
	[0286.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d13ac | out: pbBuffer=0x111d13ac) returned 1
	[0286.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323d0 | out: pbBuffer=0x113323d0) returned 1
	[0286.250] GetFileType (hFile=0x1d4) returned 0x1
	[0286.250] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.250] WriteFile (in: hFile=0x1d4, lpBuffer=0x1115c000*, nNumberOfBytesToWrite=0x45be, lpNumberOfBytesWritten=0x113bddfc, lpOverlapped=0x113bde08 | out: lpBuffer=0x1115c000*, lpNumberOfBytesWritten=0x113bddfc*=0x45be, lpOverlapped=0x113bde08) returned 1
	[0286.250] GetFileType (hFile=0x1d4) returned 0x1
	[0286.250] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x45be, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.251] GetFileType (hFile=0x1d4) returned 0x1
	[0286.251] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.251] WriteFile (in: hFile=0x1d4, lpBuffer=0x111e3880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x113bddfc, lpOverlapped=0x113bde08 | out: lpBuffer=0x111e3880*, lpNumberOfBytesWritten=0x113bddfc*=0x233, lpOverlapped=0x113bde08) returned 1
	[0286.251] GetFileType (hFile=0x1d4) returned 0x1
	[0286.251] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x45be, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.251] CloseHandle (hObject=0x1d4) returned 1
	[0286.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf.tl30z")) returned 0x220
	[0286.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0286.261] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0286.291] SetEvent (hEvent=0x210) returned 1
	[0286.291] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp")) returned 0x220
	[0286.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP", dwFileAttributes=0x220) returned 1
	[0286.291] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp.tl30z"), dwFlags=0x1) returned 1
	[0286.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.506] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0286.507] ReadFile (in: hFile=0x1d4, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x11287e18*=0x7db8, lpOverlapped=0x0) returned 1
	[0286.512] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0286.512] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4b8 | out: pbBuffer=0x1104e4b8) returned 1
	[0286.512] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a3e02 | out: pbBuffer=0x111a3e02) returned 1
	[0286.512] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111a3e4b | out: pbBuffer=0x111a3e4b) returned 1
	[0286.513] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0286.514] GetFileType (hFile=0x1d4) returned 0x1
	[0286.514] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.514] WriteFile (in: hFile=0x1d4, lpBuffer=0x11458000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11458000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7db8, lpOverlapped=0x1102be08) returned 1
	[0286.515] GetFileType (hFile=0x1d4) returned 0x1
	[0286.515] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.515] GetFileType (hFile=0x1d4) returned 0x1
	[0286.515] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.515] WriteFile (in: hFile=0x1d4, lpBuffer=0x1134ca80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1134ca80*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0286.516] GetFileType (hFile=0x1d4) returned 0x1
	[0286.516] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.516] CloseHandle (hObject=0x1d4) returned 1
	[0286.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp.tl30z")) returned 0x220
	[0286.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0286.534] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0286.550] SetEvent (hEvent=0x234) returned 1
	[0286.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp")) returned 0x220
	[0286.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP", dwFileAttributes=0x220) returned 1
	[0286.551] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp.tl30z"), dwFlags=0x1) returned 1
	[0286.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.752] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0286.752] ReadFile (in: hFile=0x1d4, lpBuffer=0x11204000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11204000*, lpNumberOfBytesRead=0x11287e18*=0x7db8, lpOverlapped=0x0) returned 1
	[0286.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113322f0 | out: pbBuffer=0x113322f0) returned 1
	[0286.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119df02 | out: pbBuffer=0x1119df02) returned 1
	[0286.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119df61 | out: pbBuffer=0x1119df61) returned 1
	[0286.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119dfad | out: pbBuffer=0x1119dfad) returned 1
	[0286.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332320 | out: pbBuffer=0x11332320) returned 1
	[0286.761] GetFileType (hFile=0x1d4) returned 0x1
	[0286.761] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.761] WriteFile (in: hFile=0x1d4, lpBuffer=0x1123e000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1123e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7db8, lpOverlapped=0x1102be08) returned 1
	[0286.761] GetFileType (hFile=0x1d4) returned 0x1
	[0286.762] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.762] GetFileType (hFile=0x1d4) returned 0x1
	[0286.762] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.762] WriteFile (in: hFile=0x1d4, lpBuffer=0x11be5500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11be5500*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0286.762] GetFileType (hFile=0x1d4) returned 0x1
	[0286.762] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.762] CloseHandle (hObject=0x1d4) returned 1
	[0286.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp.tl30z")) returned 0x220
	[0286.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0286.775] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0286.792] SetEvent (hEvent=0x234) returned 1
	[0286.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf")) returned 0x220
	[0286.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF", dwFileAttributes=0x220) returned 1
	[0286.792] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.018] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0287.018] ReadFile (in: hFile=0x1d4, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x6978, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11287e18*=0x6978, lpOverlapped=0x0) returned 1
	[0287.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332650 | out: pbBuffer=0x11332650) returned 1
	[0287.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332648 | out: pbBuffer=0x11332648) returned 1
	[0287.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136e702 | out: pbBuffer=0x1136e702) returned 1
	[0287.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136e794 | out: pbBuffer=0x1136e794) returned 1
	[0287.025] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332680 | out: pbBuffer=0x11332680) returned 1
	[0287.026] GetFileType (hFile=0x1d4) returned 0x1
	[0287.026] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.026] WriteFile (in: hFile=0x1d4, lpBuffer=0x11098000*, nNumberOfBytesToWrite=0x6978, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11098000*, lpNumberOfBytesWritten=0x1102bdfc*=0x6978, lpOverlapped=0x1102be08) returned 1
	[0287.027] GetFileType (hFile=0x1d4) returned 0x1
	[0287.027] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6978, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.027] GetFileType (hFile=0x1d4) returned 0x1
	[0287.027] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.027] WriteFile (in: hFile=0x1d4, lpBuffer=0x110bb500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110bb500*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0287.027] GetFileType (hFile=0x1d4) returned 0x1
	[0287.028] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6978, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.028] CloseHandle (hObject=0x1d4) returned 1
	[0287.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf.tl30z")) returned 0x220
	[0287.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.037] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0287.081] SetEvent (hEvent=0x1b0) returned 1
	[0287.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf")) returned 0x220
	[0287.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF", dwFileAttributes=0x220) returned 1
	[0287.082] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.455] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0287.455] ReadFile (in: hFile=0x1d4, lpBuffer=0x11bc6000, nNumberOfBytesToRead=0xaf94, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesRead=0x11287e18*=0xaf94, lpOverlapped=0x0) returned 1
	[0287.461] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0287.461] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bde802 | out: pbBuffer=0x11bde802) returned 1
	[0287.462] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0287.462] GetFileType (hFile=0x1d4) returned 0x1
	[0287.463] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.463] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ae000*, nNumberOfBytesToWrite=0xaf94, lpNumberOfBytesWritten=0x1121bdfc, lpOverlapped=0x1121be08 | out: lpBuffer=0x112ae000*, lpNumberOfBytesWritten=0x1121bdfc*=0xaf94, lpOverlapped=0x1121be08) returned 1
	[0287.463] GetFileType (hFile=0x1d4) returned 0x1
	[0287.463] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xaf94, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.463] GetFileType (hFile=0x1d4) returned 0x1
	[0287.463] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.464] WriteFile (in: hFile=0x1d4, lpBuffer=0x112faa80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1121bdfc, lpOverlapped=0x1121be08 | out: lpBuffer=0x112faa80*, lpNumberOfBytesWritten=0x1121bdfc*=0x236, lpOverlapped=0x1121be08) returned 1
	[0287.464] GetFileType (hFile=0x1d4) returned 0x1
	[0287.464] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xaf94, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.464] CloseHandle (hObject=0x1d4) returned 1
	[0287.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf.tl30z")) returned 0x220
	[0287.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.492] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0287.502] SetEvent (hEvent=0x1b0) returned 1
	[0287.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf")) returned 0x220
	[0287.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF", dwFileAttributes=0x220) returned 1
	[0287.502] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.657] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0287.657] ReadFile (in: hFile=0x1d4, lpBuffer=0x11154000, nNumberOfBytesToRead=0xd74, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11154000*, lpNumberOfBytesRead=0x11287e18*=0xd74, lpOverlapped=0x0) returned 1
	[0287.660] SetEvent (hEvent=0x1b0) returned 1
	[0287.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6540 | out: pbBuffer=0x113e6540) returned 1
	[0287.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6538 | out: pbBuffer=0x113e6538) returned 1
	[0287.662] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1115c702 | out: pbBuffer=0x1115c702) returned 1
	[0287.662] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1115c77a | out: pbBuffer=0x1115c77a) returned 1
	[0287.662] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0287.662] GetFileType (hFile=0x1d4) returned 0x1
	[0287.662] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.662] WriteFile (in: hFile=0x1d4, lpBuffer=0x11188000*, nNumberOfBytesToWrite=0xd74, lpNumberOfBytesWritten=0x1121fdfc, lpOverlapped=0x1121fe08 | out: lpBuffer=0x11188000*, lpNumberOfBytesWritten=0x1121fdfc*=0xd74, lpOverlapped=0x1121fe08) returned 1
	[0287.663] GetFileType (hFile=0x1d4) returned 0x1
	[0287.663] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xd74, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.663] GetFileType (hFile=0x1d4) returned 0x1
	[0287.663] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.663] WriteFile (in: hFile=0x1d4, lpBuffer=0x11123500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1121fdfc, lpOverlapped=0x1121fe08 | out: lpBuffer=0x11123500*, lpNumberOfBytesWritten=0x1121fdfc*=0x22d, lpOverlapped=0x1121fe08) returned 1
	[0287.663] GetFileType (hFile=0x1d4) returned 0x1
	[0287.663] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xd74, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.664] CloseHandle (hObject=0x1d4) returned 1
	[0287.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf.tl30z")) returned 0x220
	[0287.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.678] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0287.680] SetEvent (hEvent=0x1b0) returned 1
	[0287.680] SetEvent (hEvent=0x234) returned 1
	[0287.681] SwitchToThread () returned 1
	[0287.685] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0287.695] SetEvent (hEvent=0x234) returned 1
	[0287.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf")) returned 0x220
	[0287.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF", dwFileAttributes=0x220) returned 1
	[0287.696] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.886] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0287.886] ReadFile (in: hFile=0x1d4, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x1214, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x11287e18*=0x1214, lpOverlapped=0x0) returned 1
	[0287.946] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0287.946] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e338 | out: pbBuffer=0x1104e338) returned 1
	[0287.947] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11325302 | out: pbBuffer=0x11325302) returned 1
	[0287.947] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132532c | out: pbBuffer=0x1132532c) returned 1
	[0287.947] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132533d | out: pbBuffer=0x1132533d) returned 1
	[0287.947] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0287.948] GetFileType (hFile=0x1d4) returned 0x1
	[0287.948] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.948] WriteFile (in: hFile=0x1d4, lpBuffer=0x11466000*, nNumberOfBytesToWrite=0x1214, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11466000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1214, lpOverlapped=0x1102be08) returned 1
	[0287.948] GetFileType (hFile=0x1d4) returned 0x1
	[0287.948] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1214, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.949] GetFileType (hFile=0x1d4) returned 0x1
	[0287.949] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.949] WriteFile (in: hFile=0x1d4, lpBuffer=0x11363880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11363880*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0287.949] GetFileType (hFile=0x1d4) returned 0x1
	[0287.949] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1214, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.949] CloseHandle (hObject=0x1d4) returned 1
	[0287.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf.tl30z")) returned 0x220
	[0287.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.967] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0287.976] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0288.007] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0288.041] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0288.081] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0288.117] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0288.167] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0288.211] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0288.251] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0288.315] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0288.354] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0288.480] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0288.492] SetEvent (hEvent=0x1b0) returned 1
	[0288.493] SetEvent (hEvent=0x1f0) returned 1
	[0288.493] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0288.497] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0288.497] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0288.500] SetEvent (hEvent=0x218) returned 1
	[0288.500] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0288.506] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0289.504] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0289.507] SetEvent (hEvent=0x1b0) returned 1
	[0289.507] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0289.516] SetEvent (hEvent=0x1b0) returned 1
	[0289.516] SwitchToThread () returned 1
	[0289.519] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0289.523] SetEvent (hEvent=0x210) returned 1
	[0289.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf")) returned 0x220
	[0289.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF", dwFileAttributes=0x220) returned 1
	[0289.524] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0289.767] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0289.767] ReadFile (in: hFile=0x1d4, lpBuffer=0x11396000, nNumberOfBytesToRead=0x7c44, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x1128be18*=0x7c44, lpOverlapped=0x0) returned 1
	[0289.773] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3d0 | out: pbBuffer=0x1140f3d0) returned 1
	[0289.773] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133dd02 | out: pbBuffer=0x1133dd02) returned 1
	[0289.773] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1133dd20 | out: pbBuffer=0x1133dd20) returned 1
	[0289.774] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0289.774] GetFileType (hFile=0x1d4) returned 0x1
	[0289.775] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.775] WriteFile (in: hFile=0x1d4, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0x7c44, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x11031dfc*=0x7c44, lpOverlapped=0x11031e08) returned 1
	[0289.775] GetFileType (hFile=0x1d4) returned 0x1
	[0289.775] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7c44, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.776] GetFileType (hFile=0x1d4) returned 0x1
	[0289.776] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.776] WriteFile (in: hFile=0x1d4, lpBuffer=0x113a4700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113a4700*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0289.776] GetFileType (hFile=0x1d4) returned 0x1
	[0289.776] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7c44, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.776] CloseHandle (hObject=0x1d4) returned 1
	[0289.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf.tl30z")) returned 0x220
	[0289.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.807] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0289.820] SetEvent (hEvent=0x248) returned 1
	[0289.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf")) returned 0x220
	[0289.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF", dwFileAttributes=0x220) returned 1
	[0289.821] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.127] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0290.127] ReadFile (in: hFile=0x1d4, lpBuffer=0x113aca80, nNumberOfBytesToRead=0x287c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113aca80*, lpNumberOfBytesRead=0x11423e18*=0x287c, lpOverlapped=0x0) returned 1
	[0290.133] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324e0 | out: pbBuffer=0x113324e0) returned 1
	[0290.133] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324d8 | out: pbBuffer=0x113324d8) returned 1
	[0290.133] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112fa802 | out: pbBuffer=0x112fa802) returned 1
	[0290.133] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112fa890 | out: pbBuffer=0x112fa890) returned 1
	[0290.134] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0290.134] GetFileType (hFile=0x1d4) returned 0x1
	[0290.134] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.134] WriteFile (in: hFile=0x1d4, lpBuffer=0x11312000*, nNumberOfBytesToWrite=0x287c, lpNumberOfBytesWritten=0x1145fdfc, lpOverlapped=0x1145fe08 | out: lpBuffer=0x11312000*, lpNumberOfBytesWritten=0x1145fdfc*=0x287c, lpOverlapped=0x1145fe08) returned 1
	[0290.135] GetFileType (hFile=0x1d4) returned 0x1
	[0290.135] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x287c, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.135] GetFileType (hFile=0x1d4) returned 0x1
	[0290.135] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.135] WriteFile (in: hFile=0x1d4, lpBuffer=0x11323180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1145fdfc, lpOverlapped=0x1145fe08 | out: lpBuffer=0x11323180*, lpNumberOfBytesWritten=0x1145fdfc*=0x22d, lpOverlapped=0x1145fe08) returned 1
	[0290.135] GetFileType (hFile=0x1d4) returned 0x1
	[0290.135] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x287c, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.136] CloseHandle (hObject=0x1d4) returned 1
	[0290.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf.tl30z")) returned 0x220
	[0290.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.159] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0290.171] SetEvent (hEvent=0x248) returned 1
	[0290.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf")) returned 0x220
	[0290.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF", dwFileAttributes=0x220) returned 1
	[0290.172] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.378] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0290.378] ReadFile (in: hFile=0x1d4, lpBuffer=0x11be8000, nNumberOfBytesToRead=0x274c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11be8000*, lpNumberOfBytesRead=0x11423e18*=0x274c, lpOverlapped=0x0) returned 1
	[0290.384] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6320 | out: pbBuffer=0x113e6320) returned 1
	[0290.384] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6318 | out: pbBuffer=0x113e6318) returned 1
	[0290.385] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bf4802 | out: pbBuffer=0x11bf4802) returned 1
	[0290.385] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6350 | out: pbBuffer=0x113e6350) returned 1
	[0290.385] SetEvent (hEvent=0x248) returned 1
	[0290.386] GetFileType (hFile=0x1d4) returned 0x1
	[0290.386] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.386] WriteFile (in: hFile=0x1d4, lpBuffer=0x111e2000*, nNumberOfBytesToWrite=0x274c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111e2000*, lpNumberOfBytesWritten=0x11031dfc*=0x274c, lpOverlapped=0x11031e08) returned 1
	[0290.386] GetFileType (hFile=0x1d4) returned 0x1
	[0290.386] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x274c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.386] GetFileType (hFile=0x1d4) returned 0x1
	[0290.387] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.387] WriteFile (in: hFile=0x1d4, lpBuffer=0x11c04380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c04380*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0290.387] GetFileType (hFile=0x1d4) returned 0x1
	[0290.387] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x274c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.387] CloseHandle (hObject=0x1d4) returned 1
	[0290.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf.tl30z")) returned 0x220
	[0290.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.402] SwitchToThread () returned 1
	[0290.406] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0290.724] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0291.147] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0291.148] SetEvent (hEvent=0x234) returned 1
	[0291.149] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0291.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf")) returned 0x220
	[0291.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF", dwFileAttributes=0x220) returned 1
	[0291.188] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.388] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0291.388] ReadFile (in: hFile=0x1d4, lpBuffer=0x11326000, nNumberOfBytesToRead=0x5804, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11326000*, lpNumberOfBytesRead=0x11423e18*=0x5804, lpOverlapped=0x0) returned 1
	[0291.393] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0291.393] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63d8 | out: pbBuffer=0x113e63d8) returned 1
	[0291.393] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11249e02 | out: pbBuffer=0x11249e02) returned 1
	[0291.394] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0291.395] GetFileType (hFile=0x1d4) returned 0x1
	[0291.395] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.395] WriteFile (in: hFile=0x1d4, lpBuffer=0x1146a000*, nNumberOfBytesToWrite=0x5804, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1146a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5804, lpOverlapped=0x1102be08) returned 1
	[0291.396] GetFileType (hFile=0x1d4) returned 0x1
	[0291.397] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5804, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.397] GetFileType (hFile=0x1d4) returned 0x1
	[0291.397] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.397] WriteFile (in: hFile=0x1d4, lpBuffer=0x113d2a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d2a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0291.397] GetFileType (hFile=0x1d4) returned 0x1
	[0291.397] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5804, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.397] CloseHandle (hObject=0x1d4) returned 1
	[0291.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf.tl30z")) returned 0x220
	[0291.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.408] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0291.418] SetEvent (hEvent=0x234) returned 1
	[0291.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf")) returned 0x220
	[0291.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF", dwFileAttributes=0x220) returned 1
	[0291.419] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0291.527] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0291.527] ReadFile (in: hFile=0x224, lpBuffer=0x11098000, nNumberOfBytesToRead=0x26f0, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11098000*, lpNumberOfBytesRead=0x11423e18*=0x26f0, lpOverlapped=0x0) returned 1
	[0291.532] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0291.532] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ae802 | out: pbBuffer=0x110ae802) returned 1
	[0291.532] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110ae8d1 | out: pbBuffer=0x110ae8d1) returned 1
	[0291.533] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0291.533] GetFileType (hFile=0x224) returned 0x1
	[0291.533] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.533] WriteFile (in: hFile=0x224, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x26f0, lpNumberOfBytesWritten=0x11419dfc, lpOverlapped=0x11419e08 | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x11419dfc*=0x26f0, lpOverlapped=0x11419e08) returned 1
	[0291.534] GetFileType (hFile=0x224) returned 0x1
	[0291.534] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x26f0, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.534] GetFileType (hFile=0x224) returned 0x1
	[0291.534] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.534] WriteFile (in: hFile=0x224, lpBuffer=0x110c0a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11419dfc, lpOverlapped=0x11419e08 | out: lpBuffer=0x110c0a80*, lpNumberOfBytesWritten=0x11419dfc*=0x22d, lpOverlapped=0x11419e08) returned 1
	[0291.534] GetFileType (hFile=0x224) returned 0x1
	[0291.534] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x26f0, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.534] CloseHandle (hObject=0x224) returned 1
	[0291.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf.tl30z")) returned 0x220
	[0291.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.537] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0291.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf")) returned 0x220
	[0291.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF", dwFileAttributes=0x220) returned 1
	[0291.539] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0291.613] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0291.613] ReadFile (in: hFile=0x1d8, lpBuffer=0x11358000, nNumberOfBytesToRead=0x16ec, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11358000*, lpNumberOfBytesRead=0x11286e18*=0x16ec, lpOverlapped=0x0) returned 1
	[0291.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0291.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267302 | out: pbBuffer=0x11267302) returned 1
	[0291.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323e0 | out: pbBuffer=0x113323e0) returned 1
	[0291.618] GetFileType (hFile=0x1d8) returned 0x1
	[0291.618] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.619] WriteFile (in: hFile=0x1d8, lpBuffer=0x1139e000*, nNumberOfBytesToWrite=0x16ec, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1139e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x16ec, lpOverlapped=0x1102be08) returned 1
	[0291.619] GetFileType (hFile=0x1d8) returned 0x1
	[0291.619] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x16ec, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.619] GetFileType (hFile=0x1d8) returned 0x1
	[0291.619] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.619] WriteFile (in: hFile=0x1d8, lpBuffer=0x11219c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11219c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0291.620] GetFileType (hFile=0x1d8) returned 0x1
	[0291.620] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x16ec, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.620] CloseHandle (hObject=0x1d8) returned 1
	[0291.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf.tl30z")) returned 0x220
	[0291.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.622] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0291.625] SetEvent (hEvent=0x1b0) returned 1
	[0291.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf")) returned 0x220
	[0291.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF", dwFileAttributes=0x220) returned 1
	[0291.626] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0291.691] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x112f5e08 | out: lpMode=0x112f5e08) returned 0
	[0291.691] ReadFile (in: hFile=0x1fc, lpBuffer=0x11300000, nNumberOfBytesToRead=0x99c, lpNumberOfBytesRead=0x112f5e18, lpOverlapped=0x0 | out: lpBuffer=0x11300000*, lpNumberOfBytesRead=0x112f5e18*=0x99c, lpOverlapped=0x0) returned 1
	[0291.695] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0291.696] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0291.696] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130e802 | out: pbBuffer=0x1130e802) returned 1
	[0291.696] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130e893 | out: pbBuffer=0x1130e893) returned 1
	[0291.696] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0291.696] GetFileType (hFile=0x1fc) returned 0x1
	[0291.696] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.697] WriteFile (in: hFile=0x1fc, lpBuffer=0x111f2000*, nNumberOfBytesToWrite=0x99c, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x111f2000*, lpNumberOfBytesWritten=0x112f5dfc*=0x99c, lpOverlapped=0x112f5e08) returned 1
	[0291.697] GetFileType (hFile=0x1fc) returned 0x1
	[0291.697] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x99c, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.697] GetFileType (hFile=0x1fc) returned 0x1
	[0291.697] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.697] WriteFile (in: hFile=0x1fc, lpBuffer=0x111dca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x111dca80*, lpNumberOfBytesWritten=0x112f5dfc*=0x22a, lpOverlapped=0x112f5e08) returned 1
	[0291.698] GetFileType (hFile=0x1fc) returned 0x1
	[0291.698] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x99c, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.698] CloseHandle (hObject=0x1fc) returned 1
	[0291.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf.tl30z")) returned 0x220
	[0291.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.701] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0291.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf")) returned 0x220
	[0291.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF", dwFileAttributes=0x220) returned 1
	[0291.702] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0291.777] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0291.778] ReadFile (in: hFile=0x1d8, lpBuffer=0x112b4000, nNumberOfBytesToRead=0x1984, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x112b4000*, lpNumberOfBytesRead=0x1131ae18*=0x1984, lpOverlapped=0x0) returned 1
	[0291.785] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332820 | out: pbBuffer=0x11332820) returned 1
	[0291.785] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1118f102 | out: pbBuffer=0x1118f102) returned 1
	[0291.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332850 | out: pbBuffer=0x11332850) returned 1
	[0291.786] GetFileType (hFile=0x1d8) returned 0x1
	[0291.786] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.786] WriteFile (in: hFile=0x1d8, lpBuffer=0x1110e000*, nNumberOfBytesToWrite=0x1984, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1110e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1984, lpOverlapped=0x1102be08) returned 1
	[0291.788] GetFileType (hFile=0x1d8) returned 0x1
	[0291.788] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1984, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.788] GetFileType (hFile=0x1d8) returned 0x1
	[0291.788] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.788] WriteFile (in: hFile=0x1d8, lpBuffer=0x112c8700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112c8700*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0291.788] GetFileType (hFile=0x1d8) returned 0x1
	[0291.789] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1984, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.789] CloseHandle (hObject=0x1d8) returned 1
	[0291.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf.tl30z")) returned 0x220
	[0291.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.792] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0291.797] SetEvent (hEvent=0x1b0) returned 1
	[0291.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf")) returned 0x220
	[0291.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF", dwFileAttributes=0x220) returned 1
	[0291.797] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.929] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0291.930] ReadFile (in: hFile=0x1d4, lpBuffer=0x111c8000, nNumberOfBytesToRead=0x40cc, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x111c8000*, lpNumberOfBytesRead=0x1131ae18*=0x40cc, lpOverlapped=0x0) returned 1
	[0291.934] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0291.934] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0291.934] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133e802 | out: pbBuffer=0x1133e802) returned 1
	[0291.934] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1133e84b | out: pbBuffer=0x1133e84b) returned 1
	[0291.935] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0291.935] GetFileType (hFile=0x1d4) returned 0x1
	[0291.935] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.935] WriteFile (in: hFile=0x1d4, lpBuffer=0x113f0000*, nNumberOfBytesToWrite=0x40cc, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x113f0000*, lpNumberOfBytesWritten=0x11373dfc*=0x40cc, lpOverlapped=0x11373e08) returned 1
	[0291.936] GetFileType (hFile=0x1d4) returned 0x1
	[0291.936] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x40cc, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.944] GetFileType (hFile=0x1d4) returned 0x1
	[0291.945] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.945] WriteFile (in: hFile=0x1d4, lpBuffer=0x1135ea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x1135ea80*, lpNumberOfBytesWritten=0x11373dfc*=0x227, lpOverlapped=0x11373e08) returned 1
	[0291.947] GetFileType (hFile=0x1d4) returned 0x1
	[0291.947] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x40cc, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.948] CloseHandle (hObject=0x1d4) returned 1
	[0291.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf.tl30z")) returned 0x220
	[0291.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.961] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0291.966] SetEvent (hEvent=0x248) returned 1
	[0291.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf")) returned 0x220
	[0291.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF", dwFileAttributes=0x220) returned 1
	[0291.967] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0292.072] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0292.073] ReadFile (in: hFile=0x1fc, lpBuffer=0x113ab000, nNumberOfBytesToRead=0xe8c, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x113ab000*, lpNumberOfBytesRead=0x1131ae18*=0xe8c, lpOverlapped=0x0) returned 1
	[0292.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0292.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133fc02 | out: pbBuffer=0x1133fc02) returned 1
	[0292.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0292.092] GetFileType (hFile=0x1fc) returned 0x1
	[0292.092] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.092] WriteFile (in: hFile=0x1fc, lpBuffer=0x11452000*, nNumberOfBytesToWrite=0xe8c, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x11452000*, lpNumberOfBytesWritten=0x11373dfc*=0xe8c, lpOverlapped=0x11373e08) returned 1
	[0292.093] GetFileType (hFile=0x1fc) returned 0x1
	[0292.094] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xe8c, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.094] GetFileType (hFile=0x1fc) returned 0x1
	[0292.094] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.094] WriteFile (in: hFile=0x1fc, lpBuffer=0x11442700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x11442700*, lpNumberOfBytesWritten=0x11373dfc*=0x22a, lpOverlapped=0x11373e08) returned 1
	[0292.096] GetFileType (hFile=0x1fc) returned 0x1
	[0292.096] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xe8c, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.096] CloseHandle (hObject=0x1fc) returned 1
	[0292.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf.tl30z")) returned 0x220
	[0292.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.131] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0292.147] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0292.163] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0292.187] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0292.203] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0292.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf")) returned 0x220
	[0292.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF", dwFileAttributes=0x220) returned 1
	[0292.219] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0292.307] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0292.308] ReadFile (in: hFile=0x250, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x22a0, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x11287e18*=0x22a0, lpOverlapped=0x0) returned 1
	[0292.313] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1124c1b0 | out: pbBuffer=0x1124c1b0) returned 1
	[0292.313] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136a802 | out: pbBuffer=0x1136a802) returned 1
	[0292.313] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136a87b | out: pbBuffer=0x1136a87b) returned 1
	[0292.313] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1124c1e0 | out: pbBuffer=0x1124c1e0) returned 1
	[0292.314] GetFileType (hFile=0x250) returned 0x1
	[0292.314] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.314] WriteFile (in: hFile=0x250, lpBuffer=0x1135a000*, nNumberOfBytesToWrite=0x22a0, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x1135a000*, lpNumberOfBytesWritten=0x113afdfc*=0x22a0, lpOverlapped=0x113afe08) returned 1
	[0292.314] GetFileType (hFile=0x250) returned 0x1
	[0292.314] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x22a0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.315] GetFileType (hFile=0x250) returned 0x1
	[0292.315] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.315] WriteFile (in: hFile=0x250, lpBuffer=0x11bc7180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x11bc7180*, lpNumberOfBytesWritten=0x113afdfc*=0x224, lpOverlapped=0x113afe08) returned 1
	[0292.315] GetFileType (hFile=0x250) returned 0x1
	[0292.315] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x22a0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.315] CloseHandle (hObject=0x250) returned 1
	[0292.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf.tl30z")) returned 0x220
	[0292.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.318] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0292.322] SetEvent (hEvent=0x1b0) returned 1
	[0292.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf")) returned 0x220
	[0292.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF", dwFileAttributes=0x220) returned 1
	[0292.322] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0293.030] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0293.030] ReadFile (in: hFile=0x224, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x36b8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11287e18*=0x36b8, lpOverlapped=0x0) returned 1
	[0293.034] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0293.034] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11063d02 | out: pbBuffer=0x11063d02) returned 1
	[0293.034] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11063d0a | out: pbBuffer=0x11063d0a) returned 1
	[0293.035] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0293.036] GetFileType (hFile=0x224) returned 0x1
	[0293.036] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.036] WriteFile (in: hFile=0x224, lpBuffer=0x1145a000*, nNumberOfBytesToWrite=0x36b8, lpNumberOfBytesWritten=0x113addfc, lpOverlapped=0x113ade08 | out: lpBuffer=0x1145a000*, lpNumberOfBytesWritten=0x113addfc*=0x36b8, lpOverlapped=0x113ade08) returned 1
	[0293.044] GetFileType (hFile=0x224) returned 0x1
	[0293.045] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x36b8, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.045] GetFileType (hFile=0x224) returned 0x1
	[0293.045] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.045] WriteFile (in: hFile=0x224, lpBuffer=0x110de700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113addfc, lpOverlapped=0x113ade08 | out: lpBuffer=0x110de700*, lpNumberOfBytesWritten=0x113addfc*=0x230, lpOverlapped=0x113ade08) returned 1
	[0293.045] GetFileType (hFile=0x224) returned 0x1
	[0293.045] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x36b8, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.045] CloseHandle (hObject=0x224) returned 1
	[0293.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf.tl30z")) returned 0x220
	[0293.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.049] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0293.053] SetEvent (hEvent=0x210) returned 1
	[0293.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf")) returned 0x220
	[0293.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF", dwFileAttributes=0x220) returned 1
	[0293.053] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0293.134] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0293.134] ReadFile (in: hFile=0x288, lpBuffer=0x111fc000, nNumberOfBytesToRead=0x12c8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x111fc000*, lpNumberOfBytesRead=0x11287e18*=0x12c8, lpOverlapped=0x0) returned 1
	[0293.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0293.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110af102 | out: pbBuffer=0x110af102) returned 1
	[0293.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110af195 | out: pbBuffer=0x110af195) returned 1
	[0293.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332840 | out: pbBuffer=0x11332840) returned 1
	[0293.139] GetFileType (hFile=0x288) returned 0x1
	[0293.139] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.139] WriteFile (in: hFile=0x288, lpBuffer=0x1121e000*, nNumberOfBytesToWrite=0x12c8, lpNumberOfBytesWritten=0x113addfc, lpOverlapped=0x113ade08 | out: lpBuffer=0x1121e000*, lpNumberOfBytesWritten=0x113addfc*=0x12c8, lpOverlapped=0x113ade08) returned 1
	[0293.140] GetFileType (hFile=0x288) returned 0x1
	[0293.140] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x12c8, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.140] GetFileType (hFile=0x288) returned 0x1
	[0293.140] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.140] WriteFile (in: hFile=0x288, lpBuffer=0x11210380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113addfc, lpOverlapped=0x113ade08 | out: lpBuffer=0x11210380*, lpNumberOfBytesWritten=0x113addfc*=0x227, lpOverlapped=0x113ade08) returned 1
	[0293.141] GetFileType (hFile=0x288) returned 0x1
	[0293.141] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x12c8, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.141] CloseHandle (hObject=0x288) returned 1
	[0293.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf.tl30z")) returned 0x220
	[0293.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.144] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0293.148] SetEvent (hEvent=0x210) returned 1
	[0293.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf")) returned 0x220
	[0293.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF", dwFileAttributes=0x220) returned 1
	[0293.148] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0293.239] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0293.240] ReadFile (in: hFile=0x1fc, lpBuffer=0x11176000, nNumberOfBytesToRead=0x1574, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11176000*, lpNumberOfBytesRead=0x11287e18*=0x1574, lpOverlapped=0x0) returned 1
	[0293.244] SetEvent (hEvent=0x210) returned 1
	[0293.246] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1124c760 | out: pbBuffer=0x1124c760) returned 1
	[0293.246] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1124c758 | out: pbBuffer=0x1124c758) returned 1
	[0293.246] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11155102 | out: pbBuffer=0x11155102) returned 1
	[0293.246] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1124c790 | out: pbBuffer=0x1124c790) returned 1
	[0293.247] GetFileType (hFile=0x1fc) returned 0x1
	[0293.247] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.248] WriteFile (in: hFile=0x1fc, lpBuffer=0x111a0000*, nNumberOfBytesToWrite=0x1574, lpNumberOfBytesWritten=0x113abdfc, lpOverlapped=0x113abe08 | out: lpBuffer=0x111a0000*, lpNumberOfBytesWritten=0x113abdfc*=0x1574, lpOverlapped=0x113abe08) returned 1
	[0293.248] GetFileType (hFile=0x1fc) returned 0x1
	[0293.248] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1574, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.248] GetFileType (hFile=0x1fc) returned 0x1
	[0293.248] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.249] WriteFile (in: hFile=0x1fc, lpBuffer=0x1118ca80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113abdfc, lpOverlapped=0x113abe08 | out: lpBuffer=0x1118ca80*, lpNumberOfBytesWritten=0x113abdfc*=0x22d, lpOverlapped=0x113abe08) returned 1
	[0293.249] GetFileType (hFile=0x1fc) returned 0x1
	[0293.249] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1574, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.249] CloseHandle (hObject=0x1fc) returned 1
	[0293.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf.tl30z")) returned 0x220
	[0293.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.257] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0293.259] SetEvent (hEvent=0x210) returned 1
	[0293.259] SetEvent (hEvent=0x248) returned 1
	[0293.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf")) returned 0x220
	[0293.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF", dwFileAttributes=0x220) returned 1
	[0293.260] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0293.354] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0293.354] ReadFile (in: hFile=0x1fc, lpBuffer=0x11070600, nNumberOfBytesToRead=0x12b4, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11070600*, lpNumberOfBytesRead=0x11428e18*=0x12b4, lpOverlapped=0x0) returned 1
	[0293.360] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6040 | out: pbBuffer=0x113e6040) returned 1
	[0293.360] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11419d02 | out: pbBuffer=0x11419d02) returned 1
	[0293.360] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11419d0a | out: pbBuffer=0x11419d0a) returned 1
	[0293.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11419d78 | out: pbBuffer=0x11419d78) returned 1
	[0293.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6070 | out: pbBuffer=0x113e6070) returned 1
	[0293.361] GetFileType (hFile=0x1fc) returned 0x1
	[0293.362] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.362] WriteFile (in: hFile=0x1fc, lpBuffer=0x11360000*, nNumberOfBytesToWrite=0x12b4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11360000*, lpNumberOfBytesWritten=0x11031dfc*=0x12b4, lpOverlapped=0x11031e08) returned 1
	[0293.362] GetFileType (hFile=0x1fc) returned 0x1
	[0293.362] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x12b4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.362] GetFileType (hFile=0x1fc) returned 0x1
	[0293.363] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.363] WriteFile (in: hFile=0x1fc, lpBuffer=0x1124f180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1124f180*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0293.363] GetFileType (hFile=0x1fc) returned 0x1
	[0293.363] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x12b4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.363] CloseHandle (hObject=0x1fc) returned 1
	[0293.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf.tl30z")) returned 0x220
	[0293.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.367] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0293.370] SetEvent (hEvent=0x218) returned 1
	[0293.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg")) returned 0x220
	[0293.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG", dwFileAttributes=0x220) returned 1
	[0293.371] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0293.448] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0293.448] ReadFile (in: hFile=0x224, lpBuffer=0x110e0000, nNumberOfBytesToRead=0x8379, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110e0000*, lpNumberOfBytesRead=0x11428e18*=0x8379, lpOverlapped=0x0) returned 1
	[0293.454] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0293.454] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11107302 | out: pbBuffer=0x11107302) returned 1
	[0293.455] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0293.456] GetFileType (hFile=0x224) returned 0x1
	[0293.456] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.456] WriteFile (in: hFile=0x224, lpBuffer=0x11304000*, nNumberOfBytesToWrite=0x8379, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x11304000*, lpNumberOfBytesWritten=0x113efdfc*=0x8379, lpOverlapped=0x113efe08) returned 1
	[0293.457] GetFileType (hFile=0x224) returned 0x1
	[0293.457] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x8379, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.457] GetFileType (hFile=0x224) returned 0x1
	[0293.457] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.457] WriteFile (in: hFile=0x224, lpBuffer=0x111b3880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x111b3880*, lpNumberOfBytesWritten=0x113efdfc*=0x233, lpOverlapped=0x113efe08) returned 1
	[0293.458] GetFileType (hFile=0x224) returned 0x1
	[0293.458] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x8379, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.458] CloseHandle (hObject=0x224) returned 1
	[0293.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg.tl30z")) returned 0x220
	[0293.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.462] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0293.468] SetEvent (hEvent=0x218) returned 1
	[0293.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg")) returned 0x220
	[0293.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG", dwFileAttributes=0x220) returned 1
	[0293.469] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0293.573] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0293.573] ReadFile (in: hFile=0x1d4, lpBuffer=0x11338000, nNumberOfBytesToRead=0x7c6a, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11338000*, lpNumberOfBytesRead=0x11428e18*=0x7c6a, lpOverlapped=0x0) returned 1
	[0293.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0293.580] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1126d302 | out: pbBuffer=0x1126d302) returned 1
	[0293.580] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0293.581] GetFileType (hFile=0x1d4) returned 0x1
	[0293.581] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.582] WriteFile (in: hFile=0x1d4, lpBuffer=0x1124e000*, nNumberOfBytesToWrite=0x7c6a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1124e000*, lpNumberOfBytesWritten=0x11031dfc*=0x7c6a, lpOverlapped=0x11031e08) returned 1
	[0293.582] GetFileType (hFile=0x1d4) returned 0x1
	[0293.582] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7c6a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.582] GetFileType (hFile=0x1d4) returned 0x1
	[0293.583] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.583] WriteFile (in: hFile=0x1d4, lpBuffer=0x1123bc00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1123bc00*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0293.583] GetFileType (hFile=0x1d4) returned 0x1
	[0293.583] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7c6a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.584] CloseHandle (hObject=0x1d4) returned 1
	[0293.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg.tl30z")) returned 0x220
	[0293.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.588] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0293.590] SetEvent (hEvent=0x210) returned 1
	[0293.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg")) returned 0x220
	[0293.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG", dwFileAttributes=0x220) returned 1
	[0293.591] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0293.773] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0293.773] ReadFile (in: hFile=0x288, lpBuffer=0x110aa000, nNumberOfBytesToRead=0x9a76, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110aa000*, lpNumberOfBytesRead=0x11428e18*=0x9a76, lpOverlapped=0x0) returned 1
	[0293.779] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0293.779] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f268 | out: pbBuffer=0x1140f268) returned 1
	[0293.779] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1143b202 | out: pbBuffer=0x1143b202) returned 1
	[0293.779] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0293.780] GetFileType (hFile=0x288) returned 0x1
	[0293.780] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.780] WriteFile (in: hFile=0x288, lpBuffer=0x11208000*, nNumberOfBytesToWrite=0x9a76, lpNumberOfBytesWritten=0x112a3dfc, lpOverlapped=0x112a3e08 | out: lpBuffer=0x11208000*, lpNumberOfBytesWritten=0x112a3dfc*=0x9a76, lpOverlapped=0x112a3e08) returned 1
	[0293.781] GetFileType (hFile=0x288) returned 0x1
	[0293.781] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x9a76, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.781] GetFileType (hFile=0x288) returned 0x1
	[0293.781] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.782] WriteFile (in: hFile=0x288, lpBuffer=0x1144d880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x112a3dfc, lpOverlapped=0x112a3e08 | out: lpBuffer=0x1144d880*, lpNumberOfBytesWritten=0x112a3dfc*=0x236, lpOverlapped=0x112a3e08) returned 1
	[0293.782] GetFileType (hFile=0x288) returned 0x1
	[0293.782] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x9a76, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.782] CloseHandle (hObject=0x288) returned 1
	[0293.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg.tl30z")) returned 0x220
	[0293.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.786] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0293.790] SetEvent (hEvent=0x210) returned 1
	[0293.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg")) returned 0x220
	[0293.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG", dwFileAttributes=0x220) returned 1
	[0293.791] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0293.887] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0293.888] ReadFile (in: hFile=0x1d8, lpBuffer=0x112aa000, nNumberOfBytesToRead=0x6b01, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x112aa000*, lpNumberOfBytesRead=0x11428e18*=0x6b01, lpOverlapped=0x0) returned 1
	[0293.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0293.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6298 | out: pbBuffer=0x113e6298) returned 1
	[0293.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137d302 | out: pbBuffer=0x1137d302) returned 1
	[0293.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137d367 | out: pbBuffer=0x1137d367) returned 1
	[0293.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137d368 | out: pbBuffer=0x1137d368) returned 1
	[0293.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62d0 | out: pbBuffer=0x113e62d0) returned 1
	[0293.895] GetFileType (hFile=0x1d8) returned 0x1
	[0293.895] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.896] WriteFile (in: hFile=0x1d8, lpBuffer=0x11102000*, nNumberOfBytesToWrite=0x6b01, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11102000*, lpNumberOfBytesWritten=0x11031dfc*=0x6b01, lpOverlapped=0x11031e08) returned 1
	[0293.896] GetFileType (hFile=0x1d8) returned 0x1
	[0293.896] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6b01, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.896] GetFileType (hFile=0x1d8) returned 0x1
	[0293.896] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.896] WriteFile (in: hFile=0x1d8, lpBuffer=0x11385880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11385880*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0293.897] GetFileType (hFile=0x1d8) returned 0x1
	[0293.897] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6b01, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.897] CloseHandle (hObject=0x1d8) returned 1
	[0293.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg.tl30z")) returned 0x220
	[0293.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.899] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0293.943] SetEvent (hEvent=0x234) returned 1
	[0293.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf")) returned 0x220
	[0293.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF", dwFileAttributes=0x220) returned 1
	[0293.944] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0294.043] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0294.043] ReadFile (in: hFile=0x288, lpBuffer=0x11bc8000, nNumberOfBytesToRead=0x3c68, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11bc8000*, lpNumberOfBytesRead=0x11428e18*=0x3c68, lpOverlapped=0x0) returned 1
	[0294.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324e0 | out: pbBuffer=0x113324e0) returned 1
	[0294.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1146fe02 | out: pbBuffer=0x1146fe02) returned 1
	[0294.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1146fe3c | out: pbBuffer=0x1146fe3c) returned 1
	[0294.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1146fee6 | out: pbBuffer=0x1146fee6) returned 1
	[0294.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0294.050] GetFileType (hFile=0x288) returned 0x1
	[0294.050] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.050] WriteFile (in: hFile=0x288, lpBuffer=0x111c6000*, nNumberOfBytesToWrite=0x3c68, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x111c6000*, lpNumberOfBytesWritten=0x112a1dfc*=0x3c68, lpOverlapped=0x112a1e08) returned 1
	[0294.051] GetFileType (hFile=0x288) returned 0x1
	[0294.051] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x3c68, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.051] GetFileType (hFile=0x288) returned 0x1
	[0294.051] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.051] WriteFile (in: hFile=0x288, lpBuffer=0x11bdc700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x11bdc700*, lpNumberOfBytesWritten=0x112a1dfc*=0x22d, lpOverlapped=0x112a1e08) returned 1
	[0294.051] GetFileType (hFile=0x288) returned 0x1
	[0294.052] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x3c68, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.052] CloseHandle (hObject=0x288) returned 1
	[0294.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf.tl30z")) returned 0x220
	[0294.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.055] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0294.059] SetEvent (hEvent=0x210) returned 1
	[0294.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf")) returned 0x220
	[0294.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF", dwFileAttributes=0x220) returned 1
	[0294.059] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0294.161] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0294.161] ReadFile (in: hFile=0x1d8, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x3394, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x11428e18*=0x3394, lpOverlapped=0x0) returned 1
	[0294.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0294.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cdb02 | out: pbBuffer=0x113cdb02) returned 1
	[0294.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cdb0b | out: pbBuffer=0x113cdb0b) returned 1
	[0294.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0294.168] GetFileType (hFile=0x1d8) returned 0x1
	[0294.168] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.168] WriteFile (in: hFile=0x1d8, lpBuffer=0x1133e000*, nNumberOfBytesToWrite=0x3394, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1133e000*, lpNumberOfBytesWritten=0x11031dfc*=0x3394, lpOverlapped=0x11031e08) returned 1
	[0294.168] GetFileType (hFile=0x1d8) returned 0x1
	[0294.168] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3394, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.168] GetFileType (hFile=0x1d8) returned 0x1
	[0294.169] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.169] WriteFile (in: hFile=0x1d8, lpBuffer=0x1129b880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1129b880*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0294.169] GetFileType (hFile=0x1d8) returned 0x1
	[0294.169] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3394, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.169] CloseHandle (hObject=0x1d8) returned 1
	[0294.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf.tl30z")) returned 0x220
	[0294.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.172] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0294.174] SetEvent (hEvent=0x234) returned 1
	[0294.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf")) returned 0x220
	[0294.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF", dwFileAttributes=0x220) returned 1
	[0294.175] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0294.251] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0294.251] ReadFile (in: hFile=0x1d8, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x406c, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11428e18*=0x406c, lpOverlapped=0x0) returned 1
	[0294.257] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0294.257] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e0802 | out: pbBuffer=0x110e0802) returned 1
	[0294.257] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e08be | out: pbBuffer=0x110e08be) returned 1
	[0294.257] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0294.258] GetFileType (hFile=0x1d8) returned 0x1
	[0294.258] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.258] WriteFile (in: hFile=0x1d8, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x406c, lpNumberOfBytesWritten=0x112d5dfc, lpOverlapped=0x112d5e08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x112d5dfc*=0x406c, lpOverlapped=0x112d5e08) returned 1
	[0294.259] GetFileType (hFile=0x1d8) returned 0x1
	[0294.259] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x406c, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.259] GetFileType (hFile=0x1d8) returned 0x1
	[0294.259] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.259] WriteFile (in: hFile=0x1d8, lpBuffer=0x112f8a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112d5dfc, lpOverlapped=0x112d5e08 | out: lpBuffer=0x112f8a80*, lpNumberOfBytesWritten=0x112d5dfc*=0x227, lpOverlapped=0x112d5e08) returned 1
	[0294.259] GetFileType (hFile=0x1d8) returned 0x1
	[0294.259] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x406c, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.259] CloseHandle (hObject=0x1d8) returned 1
	[0294.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf.tl30z")) returned 0x220
	[0294.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.262] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0294.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf")) returned 0x220
	[0294.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF", dwFileAttributes=0x220) returned 1
	[0294.266] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.367] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0294.367] ReadFile (in: hFile=0x1fc, lpBuffer=0x1118c000, nNumberOfBytesToRead=0xe70, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1118c000*, lpNumberOfBytesRead=0x11428e18*=0xe70, lpOverlapped=0x0) returned 1
	[0294.379] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f550 | out: pbBuffer=0x1140f550) returned 1
	[0294.379] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1105f102 | out: pbBuffer=0x1105f102) returned 1
	[0294.380] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105f125 | out: pbBuffer=0x1105f125) returned 1
	[0294.380] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105f1d4 | out: pbBuffer=0x1105f1d4) returned 1
	[0294.380] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f580 | out: pbBuffer=0x1140f580) returned 1
	[0294.380] GetFileType (hFile=0x1fc) returned 0x1
	[0294.381] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.381] WriteFile (in: hFile=0x1fc, lpBuffer=0x111a8000*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111a8000*, lpNumberOfBytesWritten=0x11031dfc*=0xe70, lpOverlapped=0x11031e08) returned 1
	[0294.381] GetFileType (hFile=0x1fc) returned 0x1
	[0294.381] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xe70, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.381] GetFileType (hFile=0x1fc) returned 0x1
	[0294.381] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.381] WriteFile (in: hFile=0x1fc, lpBuffer=0x1105d880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1105d880*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0294.382] GetFileType (hFile=0x1fc) returned 0x1
	[0294.382] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xe70, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.382] CloseHandle (hObject=0x1fc) returned 1
	[0294.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf.tl30z")) returned 0x220
	[0294.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf")) returned 0x220
	[0294.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF", dwFileAttributes=0x220) returned 1
	[0294.386] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.515] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0294.515] ReadFile (in: hFile=0x1fc, lpBuffer=0x1114e000, nNumberOfBytesToRead=0x1884, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1114e000*, lpNumberOfBytesRead=0x11288e18*=0x1884, lpOverlapped=0x0) returned 1
	[0294.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0294.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11350802 | out: pbBuffer=0x11350802) returned 1
	[0294.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0294.524] GetFileType (hFile=0x1fc) returned 0x1
	[0294.524] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1116bde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.524] WriteFile (in: hFile=0x1fc, lpBuffer=0x11376000*, nNumberOfBytesToWrite=0x1884, lpNumberOfBytesWritten=0x1116bdfc, lpOverlapped=0x1116be08 | out: lpBuffer=0x11376000*, lpNumberOfBytesWritten=0x1116bdfc*=0x1884, lpOverlapped=0x1116be08) returned 1
	[0294.524] GetFileType (hFile=0x1fc) returned 0x1
	[0294.524] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1884, lpNewFilePointer=0x0, dwMoveMethod=0x1116bde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.524] GetFileType (hFile=0x1fc) returned 0x1
	[0294.525] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1116bde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.525] WriteFile (in: hFile=0x1fc, lpBuffer=0x113f8a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1116bdfc, lpOverlapped=0x1116be08 | out: lpBuffer=0x113f8a80*, lpNumberOfBytesWritten=0x1116bdfc*=0x224, lpOverlapped=0x1116be08) returned 1
	[0294.525] GetFileType (hFile=0x1fc) returned 0x1
	[0294.525] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1884, lpNewFilePointer=0x0, dwMoveMethod=0x1116bde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.525] CloseHandle (hObject=0x1fc) returned 1
	[0294.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf.tl30z")) returned 0x220
	[0294.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.528] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0294.531] SetEvent (hEvent=0x218) returned 1
	[0294.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf")) returned 0x220
	[0294.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF", dwFileAttributes=0x220) returned 1
	[0294.531] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0294.601] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0294.601] ReadFile (in: hFile=0x224, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x6688, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x11288e18*=0x6688, lpOverlapped=0x0) returned 1
	[0294.606] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e620 | out: pbBuffer=0x1104e620) returned 1
	[0294.607] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11463e02 | out: pbBuffer=0x11463e02) returned 1
	[0294.607] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0294.608] GetFileType (hFile=0x224) returned 0x1
	[0294.608] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11167de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.608] WriteFile (in: hFile=0x224, lpBuffer=0x11434000*, nNumberOfBytesToWrite=0x6688, lpNumberOfBytesWritten=0x11167dfc, lpOverlapped=0x11167e08 | out: lpBuffer=0x11434000*, lpNumberOfBytesWritten=0x11167dfc*=0x6688, lpOverlapped=0x11167e08) returned 1
	[0294.609] GetFileType (hFile=0x224) returned 0x1
	[0294.609] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6688, lpNewFilePointer=0x0, dwMoveMethod=0x11167de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.609] GetFileType (hFile=0x224) returned 0x1
	[0294.609] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11167de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.609] WriteFile (in: hFile=0x224, lpBuffer=0x1130e700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11167dfc, lpOverlapped=0x11167e08 | out: lpBuffer=0x1130e700*, lpNumberOfBytesWritten=0x11167dfc*=0x22a, lpOverlapped=0x11167e08) returned 1
	[0294.609] GetFileType (hFile=0x224) returned 0x1
	[0294.610] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6688, lpNewFilePointer=0x0, dwMoveMethod=0x11167de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.610] CloseHandle (hObject=0x224) returned 1
	[0294.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf.tl30z")) returned 0x220
	[0294.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.613] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0294.615] SetEvent (hEvent=0x218) returned 1
	[0294.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf")) returned 0x220
	[0294.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF", dwFileAttributes=0x220) returned 1
	[0294.615] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0294.685] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0294.685] ReadFile (in: hFile=0x250, lpBuffer=0x1124e000, nNumberOfBytesToRead=0x1c98, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1124e000*, lpNumberOfBytesRead=0x11288e18*=0x1c98, lpOverlapped=0x0) returned 1
	[0294.689] SetEvent (hEvent=0x218) returned 1
	[0294.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0294.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324e8 | out: pbBuffer=0x113324e8) returned 1
	[0294.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11351d02 | out: pbBuffer=0x11351d02) returned 1
	[0294.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11351d9d | out: pbBuffer=0x11351d9d) returned 1
	[0294.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0294.691] GetFileType (hFile=0x250) returned 0x1
	[0294.691] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1116bde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.691] WriteFile (in: hFile=0x250, lpBuffer=0x111e2000*, nNumberOfBytesToWrite=0x1c98, lpNumberOfBytesWritten=0x1116bdfc, lpOverlapped=0x1116be08 | out: lpBuffer=0x111e2000*, lpNumberOfBytesWritten=0x1116bdfc*=0x1c98, lpOverlapped=0x1116be08) returned 1
	[0294.692] GetFileType (hFile=0x250) returned 0x1
	[0294.692] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1c98, lpNewFilePointer=0x0, dwMoveMethod=0x1116bde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.692] GetFileType (hFile=0x250) returned 0x1
	[0294.692] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1116bde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.692] WriteFile (in: hFile=0x250, lpBuffer=0x1125c700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1116bdfc, lpOverlapped=0x1116be08 | out: lpBuffer=0x1125c700*, lpNumberOfBytesWritten=0x1116bdfc*=0x22a, lpOverlapped=0x1116be08) returned 1
	[0294.692] GetFileType (hFile=0x250) returned 0x1
	[0294.693] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1c98, lpNewFilePointer=0x0, dwMoveMethod=0x1116bde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.693] CloseHandle (hObject=0x250) returned 1
	[0294.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf.tl30z")) returned 0x220
	[0294.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.699] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0294.700] SetEvent (hEvent=0x218) returned 1
	[0294.700] SetEvent (hEvent=0x234) returned 1
	[0294.700] SwitchToThread () returned 1
	[0294.703] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0294.704] SetEvent (hEvent=0x234) returned 1
	[0294.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf")) returned 0x220
	[0294.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF", dwFileAttributes=0x220) returned 1
	[0294.705] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0294.775] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0294.775] ReadFile (in: hFile=0x1d4, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x11e4, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x11288e18*=0x11e4, lpOverlapped=0x0) returned 1
	[0294.785] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0294.785] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0294.785] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a4802 | out: pbBuffer=0x113a4802) returned 1
	[0294.785] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a4817 | out: pbBuffer=0x113a4817) returned 1
	[0294.785] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a48a1 | out: pbBuffer=0x113a48a1) returned 1
	[0294.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0294.786] GetFileType (hFile=0x1d4) returned 0x1
	[0294.786] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.786] WriteFile (in: hFile=0x1d4, lpBuffer=0x1132a000*, nNumberOfBytesToWrite=0x11e4, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x1132a000*, lpNumberOfBytesWritten=0x110c3dfc*=0x11e4, lpOverlapped=0x110c3e08) returned 1
	[0294.787] GetFileType (hFile=0x1d4) returned 0x1
	[0294.787] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x11e4, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.787] GetFileType (hFile=0x1d4) returned 0x1
	[0294.787] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.787] WriteFile (in: hFile=0x1d4, lpBuffer=0x112e4a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x112e4a80*, lpNumberOfBytesWritten=0x110c3dfc*=0x22a, lpOverlapped=0x110c3e08) returned 1
	[0294.787] GetFileType (hFile=0x1d4) returned 0x1
	[0294.788] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x11e4, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.788] CloseHandle (hObject=0x1d4) returned 1
	[0294.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf.tl30z")) returned 0x220
	[0294.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.791] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0294.795] SetEvent (hEvent=0x26c) returned 1
	[0294.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf")) returned 0x220
	[0294.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF", dwFileAttributes=0x220) returned 1
	[0294.796] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0294.874] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0294.874] ReadFile (in: hFile=0x224, lpBuffer=0x1144e000, nNumberOfBytesToRead=0x1b2c, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1144e000*, lpNumberOfBytesRead=0x11288e18*=0x1b2c, lpOverlapped=0x0) returned 1
	[0294.880] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0294.880] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f4502 | out: pbBuffer=0x112f4502) returned 1
	[0294.880] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f4551 | out: pbBuffer=0x112f4551) returned 1
	[0294.880] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0294.881] GetFileType (hFile=0x224) returned 0x1
	[0294.881] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.881] WriteFile (in: hFile=0x224, lpBuffer=0x1130a000*, nNumberOfBytesToWrite=0x1b2c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1130a000*, lpNumberOfBytesWritten=0x11031dfc*=0x1b2c, lpOverlapped=0x11031e08) returned 1
	[0294.881] GetFileType (hFile=0x224) returned 0x1
	[0294.881] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1b2c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.882] GetFileType (hFile=0x224) returned 0x1
	[0294.882] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.882] WriteFile (in: hFile=0x224, lpBuffer=0x11063180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11063180*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0294.882] GetFileType (hFile=0x224) returned 0x1
	[0294.882] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1b2c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.882] CloseHandle (hObject=0x224) returned 1
	[0294.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf.tl30z")) returned 0x220
	[0294.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.885] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0294.888] SetEvent (hEvent=0x26c) returned 1
	[0294.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf")) returned 0x220
	[0294.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF", dwFileAttributes=0x220) returned 1
	[0294.889] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.093] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0295.093] ReadFile (in: hFile=0x224, lpBuffer=0x11214000, nNumberOfBytesToRead=0x812c, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11214000*, lpNumberOfBytesRead=0x11288e18*=0x812c, lpOverlapped=0x0) returned 1
	[0295.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x110ac340 | out: pbBuffer=0x110ac340) returned 1
	[0295.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1120d002 | out: pbBuffer=0x1120d002) returned 1
	[0295.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1120d09c | out: pbBuffer=0x1120d09c) returned 1
	[0295.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x110ac370 | out: pbBuffer=0x110ac370) returned 1
	[0295.099] GetFileType (hFile=0x224) returned 0x1
	[0295.100] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.100] WriteFile (in: hFile=0x224, lpBuffer=0x11132000*, nNumberOfBytesToWrite=0x812c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11132000*, lpNumberOfBytesWritten=0x11031dfc*=0x812c, lpOverlapped=0x11031e08) returned 1
	[0295.100] GetFileType (hFile=0x224) returned 0x1
	[0295.101] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x812c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.101] GetFileType (hFile=0x224) returned 0x1
	[0295.101] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.101] WriteFile (in: hFile=0x224, lpBuffer=0x11226a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11226a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0295.101] GetFileType (hFile=0x224) returned 0x1
	[0295.101] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x812c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.101] CloseHandle (hObject=0x224) returned 1
	[0295.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf.tl30z")) returned 0x220
	[0295.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.104] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.107] SetEvent (hEvent=0x26c) returned 1
	[0295.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf")) returned 0x220
	[0295.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF", dwFileAttributes=0x220) returned 1
	[0295.108] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.211] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0295.211] ReadFile (in: hFile=0x224, lpBuffer=0x111b8000, nNumberOfBytesToRead=0xe78, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x111b8000*, lpNumberOfBytesRead=0x11288e18*=0xe78, lpOverlapped=0x0) returned 1
	[0295.216] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0295.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0295.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e4802 | out: pbBuffer=0x112e4802) returned 1
	[0295.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e480d | out: pbBuffer=0x112e480d) returned 1
	[0295.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0295.217] GetFileType (hFile=0x224) returned 0x1
	[0295.217] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.218] WriteFile (in: hFile=0x224, lpBuffer=0x11340000*, nNumberOfBytesToWrite=0xe78, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11340000*, lpNumberOfBytesWritten=0x1141ddfc*=0xe78, lpOverlapped=0x1141de08) returned 1
	[0295.218] GetFileType (hFile=0x224) returned 0x1
	[0295.218] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe78, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.218] GetFileType (hFile=0x224) returned 0x1
	[0295.218] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.218] WriteFile (in: hFile=0x224, lpBuffer=0x11198a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11198a80*, lpNumberOfBytesWritten=0x1141ddfc*=0x22d, lpOverlapped=0x1141de08) returned 1
	[0295.219] GetFileType (hFile=0x224) returned 0x1
	[0295.219] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe78, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.219] CloseHandle (hObject=0x224) returned 1
	[0295.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf.tl30z")) returned 0x220
	[0295.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.221] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf")) returned 0x220
	[0295.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF", dwFileAttributes=0x220) returned 1
	[0295.224] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0295.305] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0295.305] ReadFile (in: hFile=0x250, lpBuffer=0x11448000, nNumberOfBytesToRead=0x9658, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11448000*, lpNumberOfBytesRead=0x11288e18*=0x9658, lpOverlapped=0x0) returned 1
	[0295.313] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0295.313] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63d8 | out: pbBuffer=0x113e63d8) returned 1
	[0295.313] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119fd02 | out: pbBuffer=0x1119fd02) returned 1
	[0295.314] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0295.315] GetFileType (hFile=0x250) returned 0x1
	[0295.315] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.315] WriteFile (in: hFile=0x250, lpBuffer=0x1129c000*, nNumberOfBytesToWrite=0x9658, lpNumberOfBytesWritten=0x110a3dfc, lpOverlapped=0x110a3e08 | out: lpBuffer=0x1129c000*, lpNumberOfBytesWritten=0x110a3dfc*=0x9658, lpOverlapped=0x110a3e08) returned 1
	[0295.316] GetFileType (hFile=0x250) returned 0x1
	[0295.316] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x9658, lpNewFilePointer=0x0, dwMoveMethod=0x110a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.316] GetFileType (hFile=0x250) returned 0x1
	[0295.317] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.317] WriteFile (in: hFile=0x250, lpBuffer=0x112f8700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x110a3dfc, lpOverlapped=0x110a3e08 | out: lpBuffer=0x112f8700*, lpNumberOfBytesWritten=0x110a3dfc*=0x230, lpOverlapped=0x110a3e08) returned 1
	[0295.317] GetFileType (hFile=0x250) returned 0x1
	[0295.317] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x9658, lpNewFilePointer=0x0, dwMoveMethod=0x110a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.317] CloseHandle (hObject=0x250) returned 1
	[0295.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf.tl30z")) returned 0x220
	[0295.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.321] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.324] SetEvent (hEvent=0x218) returned 1
	[0295.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf")) returned 0x220
	[0295.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF", dwFileAttributes=0x220) returned 1
	[0295.325] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0295.403] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0295.403] SetEvent (hEvent=0x218) returned 1
	[0295.403] ReadFile (in: hFile=0x288, lpBuffer=0x1123a000, nNumberOfBytesToRead=0x31d0, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1123a000*, lpNumberOfBytesRead=0x11288e18*=0x31d0, lpOverlapped=0x0) returned 1
	[0295.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0295.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e628 | out: pbBuffer=0x1104e628) returned 1
	[0295.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bd6702 | out: pbBuffer=0x11bd6702) returned 1
	[0295.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bd6769 | out: pbBuffer=0x11bd6769) returned 1
	[0295.412] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0295.412] GetFileType (hFile=0x288) returned 0x1
	[0295.412] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.412] WriteFile (in: hFile=0x288, lpBuffer=0x11c02000*, nNumberOfBytesToWrite=0x31d0, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11c02000*, lpNumberOfBytesWritten=0x1141ddfc*=0x31d0, lpOverlapped=0x1141de08) returned 1
	[0295.413] GetFileType (hFile=0x288) returned 0x1
	[0295.413] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x31d0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.413] GetFileType (hFile=0x288) returned 0x1
	[0295.413] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.413] WriteFile (in: hFile=0x288, lpBuffer=0x11201500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11201500*, lpNumberOfBytesWritten=0x1141ddfc*=0x22a, lpOverlapped=0x1141de08) returned 1
	[0295.414] GetFileType (hFile=0x288) returned 0x1
	[0295.414] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x31d0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.414] CloseHandle (hObject=0x288) returned 1
	[0295.416] SwitchToThread () returned 1
	[0295.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf.tl30z")) returned 0x220
	[0295.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.420] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.421] SetEvent (hEvent=0x26c) returned 1
	[0295.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf")) returned 0x220
	[0295.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF", dwFileAttributes=0x220) returned 1
	[0295.422] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0295.498] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0295.498] ReadFile (in: hFile=0x1d8, lpBuffer=0x11204000, nNumberOfBytesToRead=0x54d4, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11204000*, lpNumberOfBytesRead=0x11288e18*=0x54d4, lpOverlapped=0x0) returned 1
	[0295.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0295.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11216802 | out: pbBuffer=0x11216802) returned 1
	[0295.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11216899 | out: pbBuffer=0x11216899) returned 1
	[0295.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112168d4 | out: pbBuffer=0x112168d4) returned 1
	[0295.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112168da | out: pbBuffer=0x112168da) returned 1
	[0295.515] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0295.515] GetFileType (hFile=0x1d8) returned 0x1
	[0295.515] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141bde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.516] WriteFile (in: hFile=0x1d8, lpBuffer=0x111a2000*, nNumberOfBytesToWrite=0x54d4, lpNumberOfBytesWritten=0x1141bdfc, lpOverlapped=0x1141be08 | out: lpBuffer=0x111a2000*, lpNumberOfBytesWritten=0x1141bdfc*=0x54d4, lpOverlapped=0x1141be08) returned 1
	[0295.517] GetFileType (hFile=0x1d8) returned 0x1
	[0295.517] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x54d4, lpNewFilePointer=0x0, dwMoveMethod=0x1141bde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.517] GetFileType (hFile=0x1d8) returned 0x1
	[0295.517] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141bde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.517] WriteFile (in: hFile=0x1d8, lpBuffer=0x113a0a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1141bdfc, lpOverlapped=0x1141be08 | out: lpBuffer=0x113a0a80*, lpNumberOfBytesWritten=0x1141bdfc*=0x22d, lpOverlapped=0x1141be08) returned 1
	[0295.517] GetFileType (hFile=0x1d8) returned 0x1
	[0295.518] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x54d4, lpNewFilePointer=0x0, dwMoveMethod=0x1141bde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.518] CloseHandle (hObject=0x1d8) returned 1
	[0295.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf.tl30z")) returned 0x220
	[0295.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.532] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.538] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.555] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.572] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.591] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.609] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.629] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.641] SetEvent (hEvent=0x218) returned 1
	[0295.642] SetEvent (hEvent=0x1b0) returned 1
	[0295.642] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0295.644] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0295.645] SetEvent (hEvent=0x210) returned 1
	[0295.645] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0295.646] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.647] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.686] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.752] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.799] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.899] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.900] SetEvent (hEvent=0x218) returned 1
	[0295.901] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.924] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.928] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.949] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0295.969] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.015] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.034] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.053] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.072] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.093] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.189] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.209] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.226] SetEvent (hEvent=0x218) returned 1
	[0296.226] SetEvent (hEvent=0x1b0) returned 1
	[0296.226] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0296.229] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.229] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0296.231] SetEvent (hEvent=0x210) returned 1
	[0296.231] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0296.234] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.270] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.551] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.554] SetEvent (hEvent=0x210) returned 1
	[0296.554] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.559] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.574] SetEvent (hEvent=0x218) returned 1
	[0296.574] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf")) returned 0x220
	[0296.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF", dwFileAttributes=0x220) returned 1
	[0296.576] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0296.678] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0296.678] ReadFile (in: hFile=0x1d8, lpBuffer=0x11158000, nNumberOfBytesToRead=0x773a, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11158000*, lpNumberOfBytesRead=0x1131ae18*=0x773a, lpOverlapped=0x0) returned 1
	[0296.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3e0 | out: pbBuffer=0x1140f3e0) returned 1
	[0296.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3d8 | out: pbBuffer=0x1140f3d8) returned 1
	[0296.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e9d02 | out: pbBuffer=0x110e9d02) returned 1
	[0296.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e9d24 | out: pbBuffer=0x110e9d24) returned 1
	[0296.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e9de4 | out: pbBuffer=0x110e9de4) returned 1
	[0296.685] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0296.685] GetFileType (hFile=0x1d8) returned 0x1
	[0296.685] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.685] WriteFile (in: hFile=0x1d8, lpBuffer=0x11458000*, nNumberOfBytesToWrite=0x773a, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x11458000*, lpNumberOfBytesWritten=0x112a1dfc*=0x773a, lpOverlapped=0x112a1e08) returned 1
	[0296.686] GetFileType (hFile=0x1d8) returned 0x1
	[0296.686] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x773a, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.686] GetFileType (hFile=0x1d8) returned 0x1
	[0296.686] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.686] WriteFile (in: hFile=0x1d8, lpBuffer=0x11170700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x11170700*, lpNumberOfBytesWritten=0x112a1dfc*=0x236, lpOverlapped=0x112a1e08) returned 1
	[0296.686] GetFileType (hFile=0x1d8) returned 0x1
	[0296.687] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x773a, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.687] CloseHandle (hObject=0x1d8) returned 1
	[0296.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf.tl30z")) returned 0x220
	[0296.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.690] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf")) returned 0x220
	[0296.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF", dwFileAttributes=0x220) returned 1
	[0296.692] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.764] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0296.770] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0296.770] ReadFile (in: hFile=0x1d8, lpBuffer=0x111a4000, nNumberOfBytesToRead=0x21da, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x111a4000*, lpNumberOfBytesRead=0x1131ae18*=0x21da, lpOverlapped=0x0) returned 1
	[0296.775] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0296.775] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0296.775] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f4802 | out: pbBuffer=0x111f4802) returned 1
	[0296.775] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f48c9 | out: pbBuffer=0x111f48c9) returned 1
	[0296.776] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0296.776] GetFileType (hFile=0x1d8) returned 0x1
	[0296.776] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.776] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bc6000*, nNumberOfBytesToWrite=0x21da, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesWritten=0x1102bdfc*=0x21da, lpOverlapped=0x1102be08) returned 1
	[0296.777] GetFileType (hFile=0x1d8) returned 0x1
	[0296.777] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x21da, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.777] GetFileType (hFile=0x1d8) returned 0x1
	[0296.777] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.777] WriteFile (in: hFile=0x1d8, lpBuffer=0x111d2a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111d2a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0296.777] GetFileType (hFile=0x1d8) returned 0x1
	[0296.778] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x21da, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.778] CloseHandle (hObject=0x1d8) returned 1
	[0296.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf.tl30z")) returned 0x220
	[0296.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.781] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.783] SetEvent (hEvent=0x234) returned 1
	[0296.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf")) returned 0x220
	[0296.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF", dwFileAttributes=0x220) returned 1
	[0296.784] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0296.875] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0296.875] ReadFile (in: hFile=0x224, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x1500, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x1131ae18*=0x1500, lpOverlapped=0x0) returned 1
	[0296.881] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f700 | out: pbBuffer=0x1140f700) returned 1
	[0296.881] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f6f8 | out: pbBuffer=0x1140f6f8) returned 1
	[0296.881] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e3302 | out: pbBuffer=0x113e3302) returned 1
	[0296.881] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e3386 | out: pbBuffer=0x113e3386) returned 1
	[0296.881] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f730 | out: pbBuffer=0x1140f730) returned 1
	[0296.882] GetFileType (hFile=0x224) returned 0x1
	[0296.882] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.882] WriteFile (in: hFile=0x224, lpBuffer=0x110de000*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110de000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1500, lpOverlapped=0x1102be08) returned 1
	[0296.882] GetFileType (hFile=0x224) returned 0x1
	[0296.883] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1500, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.883] GetFileType (hFile=0x224) returned 0x1
	[0296.883] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.883] WriteFile (in: hFile=0x224, lpBuffer=0x1132c700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1132c700*, lpNumberOfBytesWritten=0x1102bdfc*=0x221, lpOverlapped=0x1102be08) returned 1
	[0296.883] GetFileType (hFile=0x224) returned 0x1
	[0296.883] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1500, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.884] CloseHandle (hObject=0x224) returned 1
	[0296.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf.tl30z")) returned 0x220
	[0296.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.888] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0296.892] SetEvent (hEvent=0x234) returned 1
	[0296.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf")) returned 0x220
	[0296.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF", dwFileAttributes=0x220) returned 1
	[0296.893] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0297.000] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0297.000] ReadFile (in: hFile=0x224, lpBuffer=0x1111c500, nNumberOfBytesToRead=0x2480, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1111c500*, lpNumberOfBytesRead=0x1131ae18*=0x2480, lpOverlapped=0x0) returned 1
	[0297.006] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0297.007] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0297.012] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130d202 | out: pbBuffer=0x1130d202) returned 1
	[0297.012] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0297.012] GetFileType (hFile=0x224) returned 0x1
	[0297.013] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.013] WriteFile (in: hFile=0x224, lpBuffer=0x11458000*, nNumberOfBytesToWrite=0x2480, lpNumberOfBytesWritten=0x111e3dfc, lpOverlapped=0x111e3e08 | out: lpBuffer=0x11458000*, lpNumberOfBytesWritten=0x111e3dfc*=0x2480, lpOverlapped=0x111e3e08) returned 1
	[0297.013] GetFileType (hFile=0x224) returned 0x1
	[0297.013] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2480, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.013] GetFileType (hFile=0x224) returned 0x1
	[0297.013] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.014] WriteFile (in: hFile=0x224, lpBuffer=0x1110b880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x111e3dfc, lpOverlapped=0x111e3e08 | out: lpBuffer=0x1110b880*, lpNumberOfBytesWritten=0x111e3dfc*=0x221, lpOverlapped=0x111e3e08) returned 1
	[0297.014] GetFileType (hFile=0x224) returned 0x1
	[0297.014] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2480, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.014] CloseHandle (hObject=0x224) returned 1
	[0297.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf.tl30z")) returned 0x220
	[0297.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.018] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0297.023] SetEvent (hEvent=0x234) returned 1
	[0297.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf")) returned 0x220
	[0297.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF", dwFileAttributes=0x220) returned 1
	[0297.024] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0297.101] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0297.101] ReadFile (in: hFile=0x224, lpBuffer=0x111ad400, nNumberOfBytesToRead=0x221c, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x111ad400*, lpNumberOfBytesRead=0x1131ae18*=0x221c, lpOverlapped=0x0) returned 1
	[0297.106] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fb40 | out: pbBuffer=0x1140fb40) returned 1
	[0297.106] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140fb38 | out: pbBuffer=0x1140fb38) returned 1
	[0297.106] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11159302 | out: pbBuffer=0x11159302) returned 1
	[0297.106] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fb70 | out: pbBuffer=0x1140fb70) returned 1
	[0297.106] SetEvent (hEvent=0x234) returned 1
	[0297.107] GetFileType (hFile=0x224) returned 0x1
	[0297.107] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.107] WriteFile (in: hFile=0x224, lpBuffer=0x11198000*, nNumberOfBytesToWrite=0x221c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11198000*, lpNumberOfBytesWritten=0x1102bdfc*=0x221c, lpOverlapped=0x1102be08) returned 1
	[0297.108] GetFileType (hFile=0x224) returned 0x1
	[0297.108] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x221c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.108] GetFileType (hFile=0x224) returned 0x1
	[0297.108] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.108] WriteFile (in: hFile=0x224, lpBuffer=0x11167180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11167180*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0297.109] GetFileType (hFile=0x224) returned 0x1
	[0297.109] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x221c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.109] CloseHandle (hObject=0x224) returned 1
	[0297.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf.tl30z")) returned 0x220
	[0297.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.126] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0297.128] SetEvent (hEvent=0x234) returned 1
	[0297.128] SetEvent (hEvent=0x218) returned 1
	[0297.128] SwitchToThread () returned 1
	[0297.165] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0297.200] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0297.240] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0297.589] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0297.592] SetEvent (hEvent=0x218) returned 1
	[0297.592] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0297.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf")) returned 0x220
	[0297.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF", dwFileAttributes=0x220) returned 1
	[0297.632] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0297.719] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0297.719] ReadFile (in: hFile=0x224, lpBuffer=0x11396000, nNumberOfBytesToRead=0x5350, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x1131de18*=0x5350, lpOverlapped=0x0) returned 1
	[0297.728] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0297.729] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0297.729] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a6802 | out: pbBuffer=0x112a6802) returned 1
	[0297.729] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0297.730] GetFileType (hFile=0x224) returned 0x1
	[0297.730] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.730] WriteFile (in: hFile=0x224, lpBuffer=0x111ae000*, nNumberOfBytesToWrite=0x5350, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x111ae000*, lpNumberOfBytesWritten=0x112a1dfc*=0x5350, lpOverlapped=0x112a1e08) returned 1
	[0297.731] GetFileType (hFile=0x224) returned 0x1
	[0297.731] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5350, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.731] GetFileType (hFile=0x224) returned 0x1
	[0297.732] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.732] WriteFile (in: hFile=0x224, lpBuffer=0x112e0a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x112e0a80*, lpNumberOfBytesWritten=0x112a1dfc*=0x22a, lpOverlapped=0x112a1e08) returned 1
	[0297.732] GetFileType (hFile=0x224) returned 0x1
	[0297.732] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5350, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.732] CloseHandle (hObject=0x224) returned 1
	[0297.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf.tl30z")) returned 0x220
	[0297.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.736] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0297.740] SetEvent (hEvent=0x218) returned 1
	[0297.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf")) returned 0x220
	[0297.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF", dwFileAttributes=0x220) returned 1
	[0297.741] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0297.832] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0297.832] ReadFile (in: hFile=0x1fc, lpBuffer=0x110be000, nNumberOfBytesToRead=0x14ce, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x110be000*, lpNumberOfBytesRead=0x1131de18*=0x14ce, lpOverlapped=0x0) returned 1
	[0297.838] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0297.838] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f268 | out: pbBuffer=0x1140f268) returned 1
	[0297.838] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a7302 | out: pbBuffer=0x112a7302) returned 1
	[0297.838] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a7329 | out: pbBuffer=0x112a7329) returned 1
	[0297.838] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a73da | out: pbBuffer=0x112a73da) returned 1
	[0297.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0297.839] GetFileType (hFile=0x1fc) returned 0x1
	[0297.839] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.839] WriteFile (in: hFile=0x1fc, lpBuffer=0x1144a000*, nNumberOfBytesToWrite=0x14ce, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x1144a000*, lpNumberOfBytesWritten=0x112a1dfc*=0x14ce, lpOverlapped=0x112a1e08) returned 1
	[0297.840] GetFileType (hFile=0x1fc) returned 0x1
	[0297.840] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x14ce, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.840] GetFileType (hFile=0x1fc) returned 0x1
	[0297.840] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.840] WriteFile (in: hFile=0x1fc, lpBuffer=0x112e1880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x112e1880*, lpNumberOfBytesWritten=0x112a1dfc*=0x22d, lpOverlapped=0x112a1e08) returned 1
	[0297.841] GetFileType (hFile=0x1fc) returned 0x1
	[0297.841] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x14ce, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.841] CloseHandle (hObject=0x1fc) returned 1
	[0297.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf.tl30z")) returned 0x220
	[0297.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.844] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0297.849] SetEvent (hEvent=0x218) returned 1
	[0297.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf")) returned 0x220
	[0297.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF", dwFileAttributes=0x220) returned 1
	[0297.851] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0297.992] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0297.992] ReadFile (in: hFile=0x1fc, lpBuffer=0x11222000, nNumberOfBytesToRead=0x9d26, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11222000*, lpNumberOfBytesRead=0x1131de18*=0x9d26, lpOverlapped=0x0) returned 1
	[0297.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332460 | out: pbBuffer=0x11332460) returned 1
	[0297.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332458 | out: pbBuffer=0x11332458) returned 1
	[0297.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1113a602 | out: pbBuffer=0x1113a602) returned 1
	[0297.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1113a681 | out: pbBuffer=0x1113a681) returned 1
	[0297.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1113a698 | out: pbBuffer=0x1113a698) returned 1
	[0297.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332490 | out: pbBuffer=0x11332490) returned 1
	[0298.001] SetEvent (hEvent=0x218) returned 1
	[0298.001] GetFileType (hFile=0x1fc) returned 0x1
	[0298.001] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.001] WriteFile (in: hFile=0x1fc, lpBuffer=0x1116c000*, nNumberOfBytesToWrite=0x9d26, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x1116c000*, lpNumberOfBytesWritten=0x1129ddfc*=0x9d26, lpOverlapped=0x1129de08) returned 1
	[0298.002] GetFileType (hFile=0x1fc) returned 0x1
	[0298.002] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x9d26, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.003] GetFileType (hFile=0x1fc) returned 0x1
	[0298.003] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.003] WriteFile (in: hFile=0x1fc, lpBuffer=0x11184000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x11184000*, lpNumberOfBytesWritten=0x1129ddfc*=0x233, lpOverlapped=0x1129de08) returned 1
	[0298.003] GetFileType (hFile=0x1fc) returned 0x1
	[0298.003] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x9d26, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.003] CloseHandle (hObject=0x1fc) returned 1
	[0298.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf.tl30z")) returned 0x220
	[0298.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.015] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.018] SetEvent (hEvent=0x218) returned 1
	[0298.018] SetEvent (hEvent=0x210) returned 1
	[0298.018] SwitchToThread () returned 1
	[0298.022] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.048] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.058] SetEvent (hEvent=0x248) returned 1
	[0298.058] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf")) returned 0x220
	[0298.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF", dwFileAttributes=0x220) returned 1
	[0298.069] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0298.190] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0298.191] ReadFile (in: hFile=0x224, lpBuffer=0x1112a000, nNumberOfBytesToRead=0xd6b4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1112a000*, lpNumberOfBytesRead=0x1128ce18*=0xd6b4, lpOverlapped=0x0) returned 1
	[0298.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3d0 | out: pbBuffer=0x1140f3d0) returned 1
	[0298.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11271c02 | out: pbBuffer=0x11271c02) returned 1
	[0298.198] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0298.199] GetFileType (hFile=0x224) returned 0x1
	[0298.199] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.199] WriteFile (in: hFile=0x224, lpBuffer=0x111ea000*, nNumberOfBytesToWrite=0xd6b4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111ea000*, lpNumberOfBytesWritten=0x1102bdfc*=0xd6b4, lpOverlapped=0x1102be08) returned 1
	[0298.200] GetFileType (hFile=0x224) returned 0x1
	[0298.200] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xd6b4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.200] GetFileType (hFile=0x224) returned 0x1
	[0298.200] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.202] WriteFile (in: hFile=0x224, lpBuffer=0x11436a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11436a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0298.202] GetFileType (hFile=0x224) returned 0x1
	[0298.202] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xd6b4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.202] CloseHandle (hObject=0x224) returned 1
	[0298.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf.tl30z")) returned 0x220
	[0298.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.220] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0298.221] SetEvent (hEvent=0x218) returned 1
	[0298.221] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0298.224] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.224] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.443] SetEvent (hEvent=0x218) returned 1
	[0298.443] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.445] SetEvent (hEvent=0x218) returned 1
	[0298.445] SwitchToThread () returned 1
	[0298.447] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.455] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.475] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.647] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.663] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.680] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.698] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.717] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.731] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.738] SetEvent (hEvent=0x218) returned 1
	[0298.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf")) returned 0x220
	[0298.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF", dwFileAttributes=0x220) returned 1
	[0298.739] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0298.819] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0298.819] ReadFile (in: hFile=0x250, lpBuffer=0x1107a000, nNumberOfBytesToRead=0x1f7c, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1107a000*, lpNumberOfBytesRead=0x1128ae18*=0x1f7c, lpOverlapped=0x0) returned 1
	[0298.825] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0298.825] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111fa802 | out: pbBuffer=0x111fa802) returned 1
	[0298.825] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111fa833 | out: pbBuffer=0x111fa833) returned 1
	[0298.825] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111fa88f | out: pbBuffer=0x111fa88f) returned 1
	[0298.825] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111fa8ae | out: pbBuffer=0x111fa8ae) returned 1
	[0298.825] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0298.826] GetFileType (hFile=0x250) returned 0x1
	[0298.826] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.826] WriteFile (in: hFile=0x250, lpBuffer=0x11368000*, nNumberOfBytesToWrite=0x1f7c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11368000*, lpNumberOfBytesWritten=0x11031dfc*=0x1f7c, lpOverlapped=0x11031e08) returned 1
	[0298.826] GetFileType (hFile=0x250) returned 0x1
	[0298.826] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1f7c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.826] GetFileType (hFile=0x250) returned 0x1
	[0298.826] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.827] WriteFile (in: hFile=0x250, lpBuffer=0x111f6e00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111f6e00*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0298.827] GetFileType (hFile=0x250) returned 0x1
	[0298.827] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1f7c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.827] CloseHandle (hObject=0x250) returned 1
	[0298.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf.tl30z")) returned 0x220
	[0298.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.829] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0298.830] SetEvent (hEvent=0x218) returned 1
	[0298.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf")) returned 0x220
	[0298.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF", dwFileAttributes=0x220) returned 1
	[0298.831] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0298.903] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0298.904] ReadFile (in: hFile=0x224, lpBuffer=0x110de000, nNumberOfBytesToRead=0x5398, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110de000*, lpNumberOfBytesRead=0x11428e18*=0x5398, lpOverlapped=0x0) returned 1
	[0298.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0298.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111fbe02 | out: pbBuffer=0x111fbe02) returned 1
	[0298.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0298.910] GetFileType (hFile=0x224) returned 0x1
	[0298.910] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.910] WriteFile (in: hFile=0x224, lpBuffer=0x112ae000*, nNumberOfBytesToWrite=0x5398, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112ae000*, lpNumberOfBytesWritten=0x11031dfc*=0x5398, lpOverlapped=0x11031e08) returned 1
	[0298.910] GetFileType (hFile=0x224) returned 0x1
	[0298.911] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5398, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.911] GetFileType (hFile=0x224) returned 0x1
	[0298.911] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.911] WriteFile (in: hFile=0x224, lpBuffer=0x110a6a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110a6a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0298.911] GetFileType (hFile=0x224) returned 0x1
	[0298.911] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5398, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.911] CloseHandle (hObject=0x224) returned 1
	[0299.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf.tl30z")) returned 0x220
	[0299.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.118] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.124] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.144] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.161] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.179] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.200] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.220] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.230] SetEvent (hEvent=0x234) returned 1
	[0299.231] SetEvent (hEvent=0x1b0) returned 1
	[0299.231] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0299.234] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.234] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0299.235] SetEvent (hEvent=0x1f0) returned 1
	[0299.235] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0299.238] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.508] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.510] SetEvent (hEvent=0x234) returned 1
	[0299.510] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.513] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.517] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.537] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.603] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.612] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.662] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.723] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.741] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.766] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.776] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.798] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.821] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.840] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.854] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.867] SetEvent (hEvent=0x234) returned 1
	[0299.869] SetEvent (hEvent=0x1b0) returned 1
	[0299.869] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0299.872] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.872] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x0
	[0299.873] SetEvent (hEvent=0x1f0) returned 1
	[0299.873] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0x1) returned 0x102
	[0299.875] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0299.875] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0300.073] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0300.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf")) returned 0x220
	[0300.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF", dwFileAttributes=0x220) returned 1
	[0300.078] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254
	[0300.122] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0300.122] ReadFile (in: hFile=0x254, lpBuffer=0x1143a000, nNumberOfBytesToRead=0x975e, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1143a000*, lpNumberOfBytesRead=0x1128ce18*=0x975e, lpOverlapped=0x0) returned 1
	[0300.496] SetEvent (hEvent=0x150) returned 1
	[0300.499] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158170 | out: pbBuffer=0x11158170) returned 1
	[0300.499] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158168 | out: pbBuffer=0x11158168) returned 1
	[0300.499] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c5f502 | out: pbBuffer=0x11c5f502) returned 1
	[0300.500] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c5f52d | out: pbBuffer=0x11c5f52d) returned 1
	[0300.500] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111581a0 | out: pbBuffer=0x111581a0) returned 1
	[0300.501] GetFileType (hFile=0x254) returned 0x1
	[0300.501] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.501] WriteFile (in: hFile=0x254, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0x975e, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x1133fdfc*=0x975e, lpOverlapped=0x1133fe08) returned 1
	[0300.502] GetFileType (hFile=0x254) returned 0x1
	[0300.502] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x975e, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.502] GetFileType (hFile=0x254) returned 0x1
	[0300.502] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.502] WriteFile (in: hFile=0x254, lpBuffer=0x11ce5500*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11ce5500*, lpNumberOfBytesWritten=0x1133fdfc*=0x239, lpOverlapped=0x1133fe08) returned 1
	[0300.502] GetFileType (hFile=0x254) returned 0x1
	[0300.502] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x975e, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.502] CloseHandle (hObject=0x254) returned 1
	[0300.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf.tl30z")) returned 0x220
	[0300.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.503] SetEvent (hEvent=0x210) returned 1
	[0300.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c)) returned 1
	[0300.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf")) returned 0x220
	[0300.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF", dwFileAttributes=0x220) returned 1
	[0300.504] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254
	[0300.506] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0300.506] ReadFile (in: hFile=0x254, lpBuffer=0x11209800, nNumberOfBytesToRead=0x1720, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11209800*, lpNumberOfBytesRead=0x1128ce18*=0x1720, lpOverlapped=0x0) returned 1
	[0300.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0300.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112d8802 | out: pbBuffer=0x112d8802) returned 1
	[0300.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0300.903] GetFileType (hFile=0x254) returned 0x1
	[0300.904] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.904] WriteFile (in: hFile=0x254, lpBuffer=0x1138c000*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x113b9dfc, lpOverlapped=0x113b9e08 | out: lpBuffer=0x1138c000*, lpNumberOfBytesWritten=0x113b9dfc*=0x1720, lpOverlapped=0x113b9e08) returned 1
	[0300.904] GetFileType (hFile=0x254) returned 0x1
	[0300.904] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x1720, lpNewFilePointer=0x0, dwMoveMethod=0x113b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.904] GetFileType (hFile=0x254) returned 0x1
	[0300.905] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.905] WriteFile (in: hFile=0x254, lpBuffer=0x11caca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113b9dfc, lpOverlapped=0x113b9e08 | out: lpBuffer=0x11caca80*, lpNumberOfBytesWritten=0x113b9dfc*=0x227, lpOverlapped=0x113b9e08) returned 1
	[0300.905] GetFileType (hFile=0x254) returned 0x1
	[0300.905] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x1720, lpNewFilePointer=0x0, dwMoveMethod=0x113b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.905] CloseHandle (hObject=0x254) returned 1
	[0301.016] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0301.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf.tl30z")) returned 0x220
	[0301.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.111] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0301.136] SetEvent (hEvent=0x160) returned 1
	[0301.136] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0301.174] SetEvent (hEvent=0x124) returned 1
	[0301.174] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0301.176] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0308.624] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0308.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf")) returned 0x220
	[0308.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF", dwFileAttributes=0x220) returned 1
	[0308.628] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0308.696] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11096e08 | out: lpMode=0x11096e08) returned 0
	[0308.696] ReadFile (in: hFile=0x1c8, lpBuffer=0x110a2000, nNumberOfBytesToRead=0xd70, lpNumberOfBytesRead=0x11096e18, lpOverlapped=0x0 | out: lpBuffer=0x110a2000*, lpNumberOfBytesRead=0x11096e18*=0xd70, lpOverlapped=0x0) returned 1
	[0308.823] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61e0 | out: pbBuffer=0x113e61e0) returned 1
	[0308.823] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d9e02 | out: pbBuffer=0x110d9e02) returned 1
	[0308.823] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d9ee9 | out: pbBuffer=0x110d9ee9) returned 1
	[0308.823] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6210 | out: pbBuffer=0x113e6210) returned 1
	[0308.824] GetFileType (hFile=0x1c8) returned 0x1
	[0308.824] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.824] WriteFile (in: hFile=0x1c8, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0xd70, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1133bdfc*=0xd70, lpOverlapped=0x1133be08) returned 1
	[0308.824] GetFileType (hFile=0x1c8) returned 0x1
	[0308.824] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xd70, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.824] GetFileType (hFile=0x1c8) returned 0x1
	[0308.824] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.824] WriteFile (in: hFile=0x1c8, lpBuffer=0x11235180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11235180*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0308.825] GetFileType (hFile=0x1c8) returned 0x1
	[0308.825] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xd70, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.825] CloseHandle (hObject=0x1c8) returned 1
	[0308.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf.tl30z")) returned 0x220
	[0308.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.826] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb3)) returned 1
	[0308.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid")) returned 0x220
	[0308.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID", dwFileAttributes=0x220) returned 1
	[0308.826] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0308.828] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11096e08 | out: lpMode=0x11096e08) returned 0
	[0308.828] ReadFile (in: hFile=0x1c8, lpBuffer=0x11239500, nNumberOfBytesToRead=0x19a4, lpNumberOfBytesRead=0x11096e18, lpOverlapped=0x0 | out: lpBuffer=0x11239500*, lpNumberOfBytesRead=0x11096e18*=0x19a4, lpOverlapped=0x0) returned 1
	[0308.873] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0308.949] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263d0 | out: pbBuffer=0x111263d0) returned 1
	[0308.949] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111263c8 | out: pbBuffer=0x111263c8) returned 1
	[0308.949] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125a502 | out: pbBuffer=0x1125a502) returned 1
	[0308.950] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126400 | out: pbBuffer=0x11126400) returned 1
	[0308.950] GetFileType (hFile=0x1c8) returned 0x1
	[0308.950] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.950] WriteFile (in: hFile=0x1c8, lpBuffer=0x11102000*, nNumberOfBytesToWrite=0x19a4, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11102000*, lpNumberOfBytesWritten=0x1133ddfc*=0x19a4, lpOverlapped=0x1133de08) returned 1
	[0308.951] GetFileType (hFile=0x1c8) returned 0x1
	[0308.951] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x19a4, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.951] GetFileType (hFile=0x1c8) returned 0x1
	[0308.951] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.951] WriteFile (in: hFile=0x1c8, lpBuffer=0x11be0e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11be0e00*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0308.951] GetFileType (hFile=0x1c8) returned 0x1
	[0308.951] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x19a4, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.952] CloseHandle (hObject=0x1c8) returned 1
	[0308.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid.tl30z")) returned 0x220
	[0308.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0308.953] SetEvent (hEvent=0x1c4) returned 1
	[0308.953] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0309.224] SetEvent (hEvent=0x1c4) returned 1
	[0309.224] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0309.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf")) returned 0x220
	[0309.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF", dwFileAttributes=0x220) returned 1
	[0309.243] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0309.382] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0309.382] ReadFile (in: hFile=0x1d4, lpBuffer=0x1116a000, nNumberOfBytesToRead=0x1928, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1116a000*, lpNumberOfBytesRead=0x11288e18*=0x1928, lpOverlapped=0x0) returned 1
	[0309.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0309.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11178802 | out: pbBuffer=0x11178802) returned 1
	[0309.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117889e | out: pbBuffer=0x1117889e) returned 1
	[0309.393] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0309.393] GetFileType (hFile=0x1d4) returned 0x1
	[0309.394] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.394] WriteFile (in: hFile=0x1d4, lpBuffer=0x113f8000*, nNumberOfBytesToWrite=0x1928, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113f8000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1928, lpOverlapped=0x1133fe08) returned 1
	[0309.394] GetFileType (hFile=0x1d4) returned 0x1
	[0309.394] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1928, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.394] GetFileType (hFile=0x1d4) returned 0x1
	[0309.394] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.395] WriteFile (in: hFile=0x1d4, lpBuffer=0x113d4a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113d4a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0309.395] GetFileType (hFile=0x1d4) returned 0x1
	[0309.395] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1928, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.395] CloseHandle (hObject=0x1d4) returned 1
	[0309.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf.tl30z")) returned 0x220
	[0309.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.406] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0309.581] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0309.586] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0309.643] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0310.928] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0311.023] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0311.026] SetEvent (hEvent=0x1e8) returned 1
	[0311.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf")) returned 0x220
	[0311.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF", dwFileAttributes=0x220) returned 1
	[0311.026] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0311.108] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0311.109] ReadFile (in: hFile=0x184, lpBuffer=0x113c0000, nNumberOfBytesToRead=0x78e0, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113c0000*, lpNumberOfBytesRead=0x1128ae18*=0x78e0, lpOverlapped=0x0) returned 1
	[0311.166] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0311.166] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cc502 | out: pbBuffer=0x113cc502) returned 1
	[0311.166] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cc5ad | out: pbBuffer=0x113cc5ad) returned 1
	[0311.166] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cc5ba | out: pbBuffer=0x113cc5ba) returned 1
	[0311.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0311.168] GetFileType (hFile=0x184) returned 0x1
	[0311.168] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.168] WriteFile (in: hFile=0x184, lpBuffer=0x11324000*, nNumberOfBytesToWrite=0x78e0, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11324000*, lpNumberOfBytesWritten=0x1133ddfc*=0x78e0, lpOverlapped=0x1133de08) returned 1
	[0311.168] GetFileType (hFile=0x184) returned 0x1
	[0311.169] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x78e0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.169] GetFileType (hFile=0x184) returned 0x1
	[0311.169] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.169] WriteFile (in: hFile=0x184, lpBuffer=0x113bd180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x113bd180*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0311.169] GetFileType (hFile=0x184) returned 0x1
	[0311.169] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x78e0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.169] CloseHandle (hObject=0x184) returned 1
	[0311.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf.tl30z")) returned 0x220
	[0311.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf")) returned 0x220
	[0311.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF", dwFileAttributes=0x220) returned 1
	[0311.505] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0311.679] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11093e08 | out: lpMode=0x11093e08) returned 0
	[0311.679] ReadFile (in: hFile=0x184, lpBuffer=0x11218000, nNumberOfBytesToRead=0x4090, lpNumberOfBytesRead=0x11093e18, lpOverlapped=0x0 | out: lpBuffer=0x11218000*, lpNumberOfBytesRead=0x11093e18*=0x4090, lpOverlapped=0x0) returned 1
	[0311.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6960 | out: pbBuffer=0x113e6960) returned 1
	[0311.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6958 | out: pbBuffer=0x113e6958) returned 1
	[0311.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11152502 | out: pbBuffer=0x11152502) returned 1
	[0311.691] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6990 | out: pbBuffer=0x113e6990) returned 1
	[0311.691] GetFileType (hFile=0x184) returned 0x1
	[0311.691] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.691] WriteFile (in: hFile=0x184, lpBuffer=0x1116a000*, nNumberOfBytesToWrite=0x4090, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1116a000*, lpNumberOfBytesWritten=0x1133ddfc*=0x4090, lpOverlapped=0x1133de08) returned 1
	[0311.692] GetFileType (hFile=0x184) returned 0x1
	[0311.692] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x4090, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.692] GetFileType (hFile=0x184) returned 0x1
	[0311.692] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.692] WriteFile (in: hFile=0x184, lpBuffer=0x112e9c00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112e9c00*, lpNumberOfBytesWritten=0x1133ddfc*=0x221, lpOverlapped=0x1133de08) returned 1
	[0311.692] GetFileType (hFile=0x184) returned 0x1
	[0311.692] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x4090, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.693] CloseHandle (hObject=0x184) returned 1
	[0311.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf.tl30z")) returned 0x220
	[0311.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.696] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0311.700] SetEvent (hEvent=0x1e8) returned 1
	[0311.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf")) returned 0x220
	[0311.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF", dwFileAttributes=0x220) returned 1
	[0311.700] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0311.784] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0311.784] ReadFile (in: hFile=0x1f4, lpBuffer=0x1136e000, nNumberOfBytesToRead=0x39f8, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x1128be18*=0x39f8, lpOverlapped=0x0) returned 1
	[0311.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0311.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11193402 | out: pbBuffer=0x11193402) returned 1
	[0311.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119348e | out: pbBuffer=0x1119348e) returned 1
	[0311.790] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0311.790] GetFileType (hFile=0x1f4) returned 0x1
	[0311.790] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.791] WriteFile (in: hFile=0x1f4, lpBuffer=0x111ea000*, nNumberOfBytesToWrite=0x39f8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111ea000*, lpNumberOfBytesWritten=0x11031dfc*=0x39f8, lpOverlapped=0x11031e08) returned 1
	[0311.791] GetFileType (hFile=0x1f4) returned 0x1
	[0311.791] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x39f8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.791] GetFileType (hFile=0x1f4) returned 0x1
	[0311.791] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.791] WriteFile (in: hFile=0x1f4, lpBuffer=0x11c49180*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c49180*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0311.792] GetFileType (hFile=0x1f4) returned 0x1
	[0311.792] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x39f8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.792] CloseHandle (hObject=0x1f4) returned 1
	[0311.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf.tl30z")) returned 0x220
	[0311.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf")) returned 0x220
	[0311.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF", dwFileAttributes=0x220) returned 1
	[0311.795] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0311.869] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0311.869] ReadFile (in: hFile=0x1f4, lpBuffer=0x11134000, nNumberOfBytesToRead=0x3380, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11134000*, lpNumberOfBytesRead=0x1128be18*=0x3380, lpOverlapped=0x0) returned 1
	[0311.874] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263d0 | out: pbBuffer=0x111263d0) returned 1
	[0311.874] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111263c8 | out: pbBuffer=0x111263c8) returned 1
	[0311.874] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e5202 | out: pbBuffer=0x113e5202) returned 1
	[0311.874] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126400 | out: pbBuffer=0x11126400) returned 1
	[0311.875] GetFileType (hFile=0x1f4) returned 0x1
	[0311.875] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.875] WriteFile (in: hFile=0x1f4, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x3380, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3380, lpOverlapped=0x1102be08) returned 1
	[0311.876] GetFileType (hFile=0x1f4) returned 0x1
	[0311.876] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3380, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.876] GetFileType (hFile=0x1f4) returned 0x1
	[0311.876] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.876] WriteFile (in: hFile=0x1f4, lpBuffer=0x113ed880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113ed880*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0311.876] GetFileType (hFile=0x1f4) returned 0x1
	[0311.876] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3380, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.876] CloseHandle (hObject=0x1f4) returned 1
	[0311.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf.tl30z")) returned 0x220
	[0311.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.879] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0311.890] SetEvent (hEvent=0x22c) returned 1
	[0311.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf")) returned 0x220
	[0311.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF", dwFileAttributes=0x220) returned 1
	[0311.891] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0311.999] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0311.999] ReadFile (in: hFile=0x1b4, lpBuffer=0x112ff400, nNumberOfBytesToRead=0x2178, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112ff400*, lpNumberOfBytesRead=0x1128be18*=0x2178, lpOverlapped=0x0) returned 1
	[0312.004] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6810 | out: pbBuffer=0x113e6810) returned 1
	[0312.004] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6808 | out: pbBuffer=0x113e6808) returned 1
	[0312.004] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144df02 | out: pbBuffer=0x1144df02) returned 1
	[0312.004] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6840 | out: pbBuffer=0x113e6840) returned 1
	[0312.004] GetFileType (hFile=0x1b4) returned 0x1
	[0312.004] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0312.005] WriteFile (in: hFile=0x1b4, lpBuffer=0x110f4000*, nNumberOfBytesToWrite=0x2178, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110f4000*, lpNumberOfBytesWritten=0x11031dfc*=0x2178, lpOverlapped=0x11031e08) returned 1
	[0312.005] GetFileType (hFile=0x1b4) returned 0x1
	[0312.005] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2178, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0312.005] GetFileType (hFile=0x1b4) returned 0x1
	[0312.005] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0312.006] WriteFile (in: hFile=0x1b4, lpBuffer=0x110baa80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110baa80*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0312.006] GetFileType (hFile=0x1b4) returned 0x1
	[0312.006] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2178, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0312.006] CloseHandle (hObject=0x1b4) returned 1
	[0312.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf.tl30z")) returned 0x220
	[0312.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.009] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0312.013] SetEvent (hEvent=0x22c) returned 1
	[0312.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf")) returned 0x220
	[0312.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF", dwFileAttributes=0x220) returned 1
	[0312.013] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0312.092] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0312.092] ReadFile (in: hFile=0x290, lpBuffer=0x1129a000, nNumberOfBytesToRead=0x1868, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1129a000*, lpNumberOfBytesRead=0x1128be18*=0x1868, lpOverlapped=0x0) returned 1
	[0312.099] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0312.099] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113aa802 | out: pbBuffer=0x113aa802) returned 1
	[0312.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0312.100] GetFileType (hFile=0x290) returned 0x1
	[0312.100] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.100] WriteFile (in: hFile=0x290, lpBuffer=0x113fa000*, nNumberOfBytesToWrite=0x1868, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x113fa000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1868, lpOverlapped=0x1133de08) returned 1
	[0312.101] GetFileType (hFile=0x290) returned 0x1
	[0312.101] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x1868, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.101] GetFileType (hFile=0x290) returned 0x1
	[0312.101] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.101] WriteFile (in: hFile=0x290, lpBuffer=0x1105ea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1105ea80*, lpNumberOfBytesWritten=0x1133ddfc*=0x227, lpOverlapped=0x1133de08) returned 1
	[0312.101] GetFileType (hFile=0x290) returned 0x1
	[0312.101] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x1868, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.101] CloseHandle (hObject=0x290) returned 1
	[0312.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf.tl30z")) returned 0x220
	[0312.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.117] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0312.125] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0312.139] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0312.155] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0312.172] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0312.189] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0312.206] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0312.223] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0312.242] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0312.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg")) returned 0x220
	[0312.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG", dwFileAttributes=0x220) returned 1
	[0312.249] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg.tl30z"), dwFlags=0x1) returned 1
	[0312.350] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0312.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0312.357] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11095e08 | out: lpMode=0x11095e08) returned 0
	[0312.357] ReadFile (in: hFile=0x1f4, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x9eeb, lpNumberOfBytesRead=0x11095e18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x11095e18*=0x9eeb, lpOverlapped=0x0) returned 1
	[0312.368] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126100 | out: pbBuffer=0x11126100) returned 1
	[0312.369] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ea802 | out: pbBuffer=0x111ea802) returned 1
	[0312.369] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ea879 | out: pbBuffer=0x111ea879) returned 1
	[0312.369] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ea8e3 | out: pbBuffer=0x111ea8e3) returned 1
	[0312.369] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126130 | out: pbBuffer=0x11126130) returned 1
	[0312.371] GetFileType (hFile=0x1f4) returned 0x1
	[0312.371] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.371] WriteFile (in: hFile=0x1f4, lpBuffer=0x11128000*, nNumberOfBytesToWrite=0x9eeb, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11128000*, lpNumberOfBytesWritten=0x1133ddfc*=0x9eeb, lpOverlapped=0x1133de08) returned 1
	[0312.372] GetFileType (hFile=0x1f4) returned 0x1
	[0312.372] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x9eeb, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.372] GetFileType (hFile=0x1f4) returned 0x1
	[0312.372] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.372] WriteFile (in: hFile=0x1f4, lpBuffer=0x11154a80*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11154a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x23c, lpOverlapped=0x1133de08) returned 1
	[0312.374] GetFileType (hFile=0x1f4) returned 0x1
	[0312.374] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x9eeb, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.378] CloseHandle (hObject=0x1f4) returned 1
	[0312.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg.tl30z")) returned 0x220
	[0312.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0312.405] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0312.408] SetEvent (hEvent=0x164) returned 1
	[0312.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp")) returned 0x220
	[0312.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP", dwFileAttributes=0x220) returned 1
	[0312.409] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0313.527] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11095e08 | out: lpMode=0x11095e08) returned 0
	[0313.527] ReadFile (in: hFile=0x200, lpBuffer=0x111e0000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x11095e18, lpOverlapped=0x0 | out: lpBuffer=0x111e0000*, lpNumberOfBytesRead=0x11095e18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0313.533] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0313.533] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e9302 | out: pbBuffer=0x112e9302) returned 1
	[0313.533] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0313.535] GetFileType (hFile=0x200) returned 0x1
	[0313.535] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.535] WriteFile (in: hFile=0x200, lpBuffer=0x110cc000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110cc000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7ce0, lpOverlapped=0x1102de08) returned 1
	[0313.535] GetFileType (hFile=0x200) returned 0x1
	[0313.536] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.536] GetFileType (hFile=0x200) returned 0x1
	[0313.536] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.536] WriteFile (in: hFile=0x200, lpBuffer=0x1130b880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1130b880*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0313.536] GetFileType (hFile=0x200) returned 0x1
	[0313.537] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.537] CloseHandle (hObject=0x200) returned 1
	[0313.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp.tl30z")) returned 0x220
	[0313.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0313.540] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0313.544] SetEvent (hEvent=0x164) returned 1
	[0313.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp")) returned 0x220
	[0313.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP", dwFileAttributes=0x220) returned 1
	[0313.545] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0313.627] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11095e08 | out: lpMode=0x11095e08) returned 0
	[0313.627] ReadFile (in: hFile=0x184, lpBuffer=0x11228000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x11095e18, lpOverlapped=0x0 | out: lpBuffer=0x11228000*, lpNumberOfBytesRead=0x11095e18*=0x7db8, lpOverlapped=0x0) returned 1
	[0313.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0313.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11472702 | out: pbBuffer=0x11472702) returned 1
	[0313.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114727e3 | out: pbBuffer=0x114727e3) returned 1
	[0313.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0313.790] GetFileType (hFile=0x184) returned 0x1
	[0313.790] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.790] WriteFile (in: hFile=0x184, lpBuffer=0x110a0000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110a0000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7db8, lpOverlapped=0x1102de08) returned 1
	[0313.791] GetFileType (hFile=0x184) returned 0x1
	[0313.791] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.791] GetFileType (hFile=0x184) returned 0x1
	[0313.791] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.791] WriteFile (in: hFile=0x184, lpBuffer=0x112e3500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112e3500*, lpNumberOfBytesWritten=0x1102ddfc*=0x236, lpOverlapped=0x1102de08) returned 1
	[0313.791] GetFileType (hFile=0x184) returned 0x1
	[0313.792] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.792] CloseHandle (hObject=0x184) returned 1
	[0313.829] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0313.835] SetEvent (hEvent=0x27c) returned 1
	[0313.835] SetEvent (hEvent=0x234) returned 1
	[0313.835] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0317.623] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0317.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf")) returned 0x220
	[0317.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF", dwFileAttributes=0x220) returned 1
	[0317.629] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0317.742] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0317.742] ReadFile (in: hFile=0x1b4, lpBuffer=0x111ee000, nNumberOfBytesToRead=0x6cc4, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x111ee000*, lpNumberOfBytesRead=0x1128be18*=0x6cc4, lpOverlapped=0x0) returned 1
	[0317.827] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0317.827] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6258 | out: pbBuffer=0x113e6258) returned 1
	[0317.827] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b9202 | out: pbBuffer=0x113b9202) returned 1
	[0317.827] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b925e | out: pbBuffer=0x113b925e) returned 1
	[0317.827] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b927f | out: pbBuffer=0x113b927f) returned 1
	[0317.827] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b92db | out: pbBuffer=0x113b92db) returned 1
	[0317.828] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0317.829] GetFileType (hFile=0x1b4) returned 0x1
	[0317.829] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.829] WriteFile (in: hFile=0x1b4, lpBuffer=0x1109a000*, nNumberOfBytesToWrite=0x6cc4, lpNumberOfBytesWritten=0x11375dfc, lpOverlapped=0x11375e08 | out: lpBuffer=0x1109a000*, lpNumberOfBytesWritten=0x11375dfc*=0x6cc4, lpOverlapped=0x11375e08) returned 1
	[0317.830] GetFileType (hFile=0x1b4) returned 0x1
	[0317.830] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6cc4, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.830] GetFileType (hFile=0x1b4) returned 0x1
	[0317.830] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.830] WriteFile (in: hFile=0x1b4, lpBuffer=0x112de380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11375dfc, lpOverlapped=0x11375e08 | out: lpBuffer=0x112de380*, lpNumberOfBytesWritten=0x11375dfc*=0x22d, lpOverlapped=0x11375e08) returned 1
	[0317.830] GetFileType (hFile=0x1b4) returned 0x1
	[0317.830] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6cc4, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.830] CloseHandle (hObject=0x1b4) returned 1
	[0317.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf.tl30z")) returned 0x220
	[0317.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.862] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0317.867] SetEvent (hEvent=0x284) returned 1
	[0317.867] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) returned 0x0
	[0317.881] SetEvent (hEvent=0x210) returned 1
	[0317.882] WaitForSingleObject (hHandle=0x118, dwMilliseconds=0xffffffff) 

Thread:
	id = 2
	os_tid = 0x7cc


Thread:
	id = 3
	os_tid = 0xedc


Thread:
	id = 4
	os_tid = 0xdc4

	[0098.894] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0xc9ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xc9ff30*=0x11c) returned 1
	[0098.895] VirtualQuery (in: lpAddress=0xc9ff40, lpBuffer=0xc9ff40, dwLength=0x1c | out: lpBuffer=0xc9ff40*(BaseAddress=0xc9f000, AllocationBase=0xba0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0098.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0098.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0099.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0099.087] SetEvent (hEvent=0x134) returned 1
	[0099.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0099.371] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0099.372] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x150
	[0099.372] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0099.476] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0099.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0099.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0100.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0100.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0100.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0100.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0100.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0100.724] SetEvent (hEvent=0x12c) returned 1
	[0100.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0101.092] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0101.094] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0101.234] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0101.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0101.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0101.438] SetEvent (hEvent=0x124) returned 1
	[0101.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0101.514] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0101.515] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0110.526] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0110.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0110.700] SetEvent (hEvent=0x124) returned 1
	[0110.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0111.158] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0111.159] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0112.422] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0112.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0112.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0112.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0113.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0113.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0113.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0114.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0114.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0114.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0114.523] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0114.525] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0114.744] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0114.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0114.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0114.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0115.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0115.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0115.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0115.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0115.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0115.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0115.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0115.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0115.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0116.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0116.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0116.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0116.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0116.507] SetEvent (hEvent=0x12c) returned 1
	[0116.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0116.892] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0116.893] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0117.300] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0117.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0117.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0117.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0117.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0118.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0118.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0118.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0118.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0118.689] SetEvent (hEvent=0x160) returned 1
	[0118.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0118.941] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0118.943] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0119.682] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0119.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0119.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0119.965] SetEvent (hEvent=0x160) returned 1
	[0119.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0120.058] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0120.059] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0121.053] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0121.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0121.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0121.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0121.720] SetEvent (hEvent=0x160) returned 1
	[0121.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0122.179] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0122.180] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0122.516] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0122.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0126.156] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0126.159] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0126.398] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0126.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0126.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0126.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0127.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0127.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0127.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0129.881] SetEvent (hEvent=0x164) returned 1
	[0129.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0130.110] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0130.111] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0130.472] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0130.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0130.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0130.675] SetEvent (hEvent=0x118) returned 1
	[0130.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0130.784] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0130.784] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0131.084] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0131.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0131.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0132.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0132.327] SetEvent (hEvent=0x118) returned 1
	[0132.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0132.444] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0132.444] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0132.672] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0132.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0132.798] SetEvent (hEvent=0x118) returned 1
	[0132.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0132.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0132.989] SetEvent (hEvent=0x118) returned 1
	[0132.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0133.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0133.359] SetEvent (hEvent=0x118) returned 1
	[0133.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0133.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0133.885] SetEvent (hEvent=0x118) returned 1
	[0133.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0133.986] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0133.987] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0134.615] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0134.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0134.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0134.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0134.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0134.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0135.043] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0135.044] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0135.627] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0135.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0135.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0135.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0135.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0135.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0136.035] SetEvent (hEvent=0x160) returned 1
	[0136.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0136.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0136.181] SetEvent (hEvent=0x118) returned 1
	[0136.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0136.421] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0136.423] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0136.851] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0136.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0136.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0136.995] SetEvent (hEvent=0x118) returned 1
	[0136.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0136.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0137.117] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0137.118] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0137.992] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0137.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0138.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0138.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0138.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0138.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0138.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0138.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0139.049] SetEvent (hEvent=0x164) returned 1
	[0139.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0139.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0139.368] SetEvent (hEvent=0x164) returned 1
	[0139.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0139.533] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0139.534] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0139.728] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0139.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0139.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0139.864] SetEvent (hEvent=0x118) returned 1
	[0139.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0139.931] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0139.932] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0140.405] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0140.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0140.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0140.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0140.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0140.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0140.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0140.864] SetEvent (hEvent=0x160) returned 1
	[0140.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0140.930] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0140.931] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0141.042] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0141.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0141.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0141.530] SetEvent (hEvent=0x160) returned 1
	[0141.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0141.686] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0141.686] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0142.683] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0142.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0142.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0142.787] SetEvent (hEvent=0x134) returned 1
	[0142.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0142.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0142.826] SetEvent (hEvent=0x134) returned 1
	[0142.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0142.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0142.979] SetEvent (hEvent=0x134) returned 1
	[0142.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0143.744] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0143.746] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0144.498] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0144.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0144.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0144.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11028700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac
	[0144.792] CloseHandle (hObject=0x1ac) returned 1
	[0144.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0144.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0145.068] SetEvent (hEvent=0x1b0) returned 1
	[0145.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0145.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0145.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0145.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x112cc000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b8
	[0145.406] CloseHandle (hObject=0x1b8) returned 1
	[0145.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0145.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0145.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0145.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0145.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0145.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0145.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0145.752] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0145.753] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0146.025] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0146.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0146.060] SetEvent (hEvent=0x160) returned 1
	[0146.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0146.118] SetEvent (hEvent=0x160) returned 1
	[0146.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0146.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0146.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0146.231] SetEvent (hEvent=0x1b0) returned 1
	[0146.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0146.335] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0146.336] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0146.727] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0146.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0146.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0146.861] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0146.862] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0146.945] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0146.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0147.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0147.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0147.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0147.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0147.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0147.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0147.778] SetEvent (hEvent=0x160) returned 1
	[0147.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0147.795] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0147.796] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0147.828] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0147.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0147.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0147.893] SetEvent (hEvent=0x160) returned 1
	[0147.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0147.982] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0147.982] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0149.031] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0149.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0149.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0149.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0149.326] SetEvent (hEvent=0x160) returned 1
	[0149.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0149.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0149.662] SetEvent (hEvent=0x160) returned 1
	[0149.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0149.714] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0149.714] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0150.009] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0150.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.355] SetEvent (hEvent=0x134) returned 1
	[0150.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.420] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0150.421] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0150.481] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0150.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.562] SetEvent (hEvent=0x134) returned 1
	[0150.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.619] SetEvent (hEvent=0x134) returned 1
	[0150.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.644] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0150.645] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0150.741] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0150.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.807] SetEvent (hEvent=0x12c) returned 1
	[0150.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.890] SetEvent (hEvent=0x12c) returned 1
	[0150.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.925] SetEvent (hEvent=0x12c) returned 1
	[0150.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0150.946] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0150.946] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0151.195] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0151.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0151.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0151.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0151.565] SetEvent (hEvent=0x118) returned 1
	[0151.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0151.596] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0151.597] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0151.626] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0151.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0151.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0151.660] SetEvent (hEvent=0x118) returned 1
	[0151.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0151.689] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0151.690] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0152.080] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0152.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0152.168] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0152.168] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0152.193] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0152.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0152.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0152.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0152.463] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0152.463] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0152.557] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0152.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0152.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0152.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0152.802] SetEvent (hEvent=0x1b0) returned 1
	[0152.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0152.972] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0152.973] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0153.428] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0153.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0153.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0153.662] SetEvent (hEvent=0x1b0) returned 1
	[0153.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0153.955] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0153.956] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0155.012] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0155.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0155.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0155.230] SetEvent (hEvent=0x160) returned 1
	[0155.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0155.479] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0155.481] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0155.656] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0155.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0155.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0155.785] SetEvent (hEvent=0x160) returned 1
	[0155.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0155.843] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0155.843] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0156.450] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0156.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0156.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0156.610] SetEvent (hEvent=0x12c) returned 1
	[0156.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0156.738] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0156.739] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0156.949] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0156.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0157.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0157.137] SetEvent (hEvent=0x12c) returned 1
	[0157.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0157.234] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0157.235] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0158.445] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0158.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0158.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0158.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0158.702] SetEvent (hEvent=0x12c) returned 1
	[0158.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0158.756] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0158.757] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0158.898] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0158.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0158.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0158.998] SetEvent (hEvent=0x12c) returned 1
	[0158.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0159.043] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0159.044] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0159.704] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0159.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0159.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0159.829] SetEvent (hEvent=0x160) returned 1
	[0159.829] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0159.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0159.910] SetEvent (hEvent=0x12c) returned 1
	[0159.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0159.954] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0159.954] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0160.568] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0160.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0160.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0160.701] SetEvent (hEvent=0x12c) returned 1
	[0160.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0160.774] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0160.775] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0161.168] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0161.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0161.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0161.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0161.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0161.898] SetEvent (hEvent=0x1c4) returned 1
	[0161.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0162.076] SetEvent (hEvent=0x1c4) returned 1
	[0162.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0162.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0162.435] SetEvent (hEvent=0x1c4) returned 1
	[0162.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0162.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0162.838] SetEvent (hEvent=0x1c4) returned 1
	[0162.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0162.984] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0162.984] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0163.765] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0163.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0163.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0164.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0164.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0164.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0164.638] SetEvent (hEvent=0x12c) returned 1
	[0164.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0164.686] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0164.687] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0165.196] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0165.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0165.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0165.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0165.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0165.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0165.864] SetEvent (hEvent=0x1c4) returned 1
	[0165.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0166.095] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0166.101] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0166.634] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0166.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0166.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0166.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0166.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0166.773] SetEvent (hEvent=0x12c) returned 1
	[0166.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0166.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0166.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0166.844] SetEvent (hEvent=0x12c) returned 1
	[0166.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0166.849] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0166.849] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0167.273] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0167.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0167.342] SetEvent (hEvent=0x1b0) returned 1
	[0167.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0167.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0167.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0167.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0167.553] SetEvent (hEvent=0x1c4) returned 1
	[0167.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0167.613] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0167.613] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0167.996] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0167.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0168.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0168.155] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.156] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0168.217] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0168.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0168.419] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.419] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0168.428] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0168.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0168.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0168.675] SetEvent (hEvent=0x160) returned 1
	[0168.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0168.769] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.770] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0169.190] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0169.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0169.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0169.347] SetEvent (hEvent=0x160) returned 1
	[0169.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0169.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0169.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0169.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0169.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0169.690] SetEvent (hEvent=0x1c4) returned 1
	[0169.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0169.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0169.782] SetEvent (hEvent=0x160) returned 1
	[0169.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0169.866] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0169.867] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0170.009] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0170.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0170.068] SetEvent (hEvent=0x160) returned 1
	[0170.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0170.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0170.105] SetEvent (hEvent=0x160) returned 1
	[0170.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0170.174] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0170.175] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0170.645] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0170.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0170.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0170.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0171.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0171.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0171.173] SetEvent (hEvent=0x1c4) returned 1
	[0171.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0171.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0171.336] SetEvent (hEvent=0x160) returned 1
	[0171.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0171.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0171.581] SetEvent (hEvent=0x160) returned 1
	[0171.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0171.876] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0171.876] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0172.259] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0172.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0172.353] SetEvent (hEvent=0x160) returned 1
	[0172.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0172.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0172.502] SetEvent (hEvent=0x118) returned 1
	[0172.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0172.549] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0172.549] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0172.666] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0172.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0172.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0172.788] SetEvent (hEvent=0x134) returned 1
	[0172.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0172.862] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0172.862] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0173.215] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0173.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0173.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0173.465] SetEvent (hEvent=0x134) returned 1
	[0173.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0173.568] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0173.568] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0174.379] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0174.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0174.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0174.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0174.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0174.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0174.787] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0174.788] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0174.904] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0174.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0174.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0175.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0175.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0175.286] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0175.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0175.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0175.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0175.890] SetEvent (hEvent=0x1e8) returned 1
	[0175.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0176.023] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0176.023] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0176.891] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0176.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0176.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0177.012] SetEvent (hEvent=0x1f0) returned 1
	[0177.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0177.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0177.195] SetEvent (hEvent=0x1f0) returned 1
	[0177.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0177.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0177.780] SetEvent (hEvent=0x1f0) returned 1
	[0177.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0177.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0178.172] SetEvent (hEvent=0x1f0) returned 1
	[0178.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0178.434] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0178.434] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0179.516] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0179.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0179.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0179.758] SetEvent (hEvent=0x1f0) returned 1
	[0179.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0179.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0179.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0180.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0180.157] SetEvent (hEvent=0x1f0) returned 1
	[0180.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0180.265] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0180.265] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0181.224] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0181.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0181.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0181.626] SetEvent (hEvent=0x124) returned 1
	[0181.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0181.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0181.845] SetEvent (hEvent=0x124) returned 1
	[0181.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0181.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0182.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0182.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0182.198] SetEvent (hEvent=0x124) returned 1
	[0182.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0182.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0182.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0182.585] SetEvent (hEvent=0x12c) returned 1
	[0182.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0182.637] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0182.637] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0182.778] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0182.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0182.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0182.909] SetEvent (hEvent=0x118) returned 1
	[0182.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0182.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0183.017] SetEvent (hEvent=0x118) returned 1
	[0183.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0183.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0183.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0183.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0183.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0184.021] SetEvent (hEvent=0x1b0) returned 1
	[0184.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0184.204] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0184.205] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0184.675] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0184.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0184.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0184.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0185.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0185.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0185.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0185.399] SetEvent (hEvent=0x164) returned 1
	[0185.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0185.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0185.576] SetEvent (hEvent=0x164) returned 1
	[0185.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0185.644] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0185.646] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0185.831] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0185.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0185.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0186.041] SetEvent (hEvent=0x1e0) returned 1
	[0186.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0186.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0186.241] SetEvent (hEvent=0x1e0) returned 1
	[0186.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0186.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0186.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0186.665] SetEvent (hEvent=0x1e0) returned 1
	[0186.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0186.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0186.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0186.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0187.007] SetEvent (hEvent=0x1e0) returned 1
	[0187.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0187.059] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0187.060] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0187.186] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0187.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0187.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0187.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0187.486] SetEvent (hEvent=0x1e0) returned 1
	[0187.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0187.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0187.604] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0187.604] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0187.794] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0187.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0187.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0187.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0187.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0188.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0188.006] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0188.006] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0188.014] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0188.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0188.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0188.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0188.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0188.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0188.044] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0188.044] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0188.390] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0188.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0188.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0188.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0188.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0188.731] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0188.731] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0188.914] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0188.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0188.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0189.009] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0189.009] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0189.026] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0189.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0189.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0189.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0189.288] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0189.289] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0189.467] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0189.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0189.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0189.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0189.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0189.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0190.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0190.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0190.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0190.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0190.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0190.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0191.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0191.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0191.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0191.517] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0191.518] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0191.572] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0191.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0191.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0191.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0191.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0191.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0192.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0192.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0192.412] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0192.413] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0192.542] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0192.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0192.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0192.758] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0192.758] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0192.917] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0192.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0193.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0193.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0193.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0193.772] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0193.773] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0194.102] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0194.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0194.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0194.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0194.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0194.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0194.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0194.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0194.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0194.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0194.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0194.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0194.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0195.120] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0195.121] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0195.176] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0195.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0195.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0195.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0195.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0195.349] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0195.350] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0195.417] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0195.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0195.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0195.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0195.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0195.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0195.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0195.962] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0195.963] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0196.072] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0196.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0196.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0196.178] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0196.178] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0196.289] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0196.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0196.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0196.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0196.786] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0196.787] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0196.825] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0196.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0196.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0196.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0197.023] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0197.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0197.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0197.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0197.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0197.890] SetEvent (hEvent=0x164) returned 1
	[0197.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0198.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0198.112] SetEvent (hEvent=0x174) returned 1
	[0198.112] SetEvent (hEvent=0x1c4) returned 1
	[0198.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0198.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0198.261] SetEvent (hEvent=0x1e8) returned 1
	[0198.261] SetEvent (hEvent=0x1b0) returned 1
	[0198.261] SetEvent (hEvent=0x12c) returned 1
	[0198.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0198.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0198.346] SetEvent (hEvent=0x164) returned 1
	[0198.346] SetEvent (hEvent=0x1e0) returned 1
	[0198.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0198.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0198.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0198.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0198.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0198.815] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0198.815] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0198.909] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0198.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0198.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.152] SetEvent (hEvent=0x1b0) returned 1
	[0199.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.308] SetEvent (hEvent=0x12c) returned 1
	[0199.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.592] SetEvent (hEvent=0x1c4) returned 1
	[0199.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.741] SetEvent (hEvent=0x12c) returned 1
	[0199.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0199.877] SetEvent (hEvent=0x1e0) returned 1
	[0199.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0200.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0200.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0200.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0200.348] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0200.348] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0200.576] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0200.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0200.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0200.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0200.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0201.029] SetEvent (hEvent=0x1b0) returned 1
	[0201.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0201.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0201.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0201.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0201.540] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0201.541] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0201.728] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0201.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0201.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0201.826] SetEvent (hEvent=0x1e0) returned 1
	[0201.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0201.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0201.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0202.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0202.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0202.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0202.280] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.282] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0202.532] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0202.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0202.737] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0202.737] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0202.852] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0202.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0202.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0203.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0203.170] SetEvent (hEvent=0x1c4) returned 1
	[0203.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0203.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0203.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0203.707] SetEvent (hEvent=0x1e0) returned 1
	[0203.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0203.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0204.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0204.242] SetEvent (hEvent=0x1c4) returned 1
	[0204.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0204.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0204.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0204.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0204.907] SetEvent (hEvent=0x1e0) returned 1
	[0204.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0205.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0205.104] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0205.105] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0205.240] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0205.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0205.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0205.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0205.454] SetEvent (hEvent=0x12c) returned 1
	[0205.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0205.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0205.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0205.646] SetEvent (hEvent=0x1c4) returned 1
	[0205.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0205.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0205.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0205.827] SetEvent (hEvent=0x12c) returned 1
	[0205.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0205.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0206.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0206.158] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.159] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0206.297] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0206.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0206.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0206.476] SetEvent (hEvent=0x1c4) returned 1
	[0206.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0206.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0206.595] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.595] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0206.656] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0206.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0206.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0206.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0206.829] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0206.873] SetEvent (hEvent=0x1e0) returned 1
	[0206.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0206.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0207.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0207.258] SetEvent (hEvent=0x12c) returned 1
	[0207.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0207.336] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0207.336] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0207.497] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0207.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0207.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0207.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0207.700] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0207.701] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0207.795] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0207.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0207.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0207.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0208.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0208.159] SetEvent (hEvent=0x1b0) returned 1
	[0208.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0208.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0208.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0208.650] SetEvent (hEvent=0x12c) returned 1
	[0208.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0208.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0208.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0208.928] SetEvent (hEvent=0x1b0) returned 1
	[0208.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0209.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0209.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0209.185] SetEvent (hEvent=0x12c) returned 1
	[0209.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0209.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0209.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0209.710] SetEvent (hEvent=0x1c4) returned 1
	[0209.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0209.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0209.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0210.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0210.105] SetEvent (hEvent=0x12c) returned 1
	[0210.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0210.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0210.283] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0210.284] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0210.574] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0210.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0210.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0210.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0210.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0210.980] SetEvent (hEvent=0x1c4) returned 1
	[0210.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0211.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0211.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0211.271] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0211.272] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0211.585] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0211.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0211.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0211.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0211.936] SetEvent (hEvent=0x1b0) returned 1
	[0211.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0211.996] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0211.996] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0212.092] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0212.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.530] SetEvent (hEvent=0x12c) returned 1
	[0212.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.561] SetEvent (hEvent=0x164) returned 1
	[0212.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.594] SetEvent (hEvent=0x134) returned 1
	[0212.594] SetEvent (hEvent=0x174) returned 1
	[0212.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.603] SetEvent (hEvent=0x1e8) returned 1
	[0212.603] SetEvent (hEvent=0x118) returned 1
	[0212.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.628] SetEvent (hEvent=0x124) returned 1
	[0212.628] SetEvent (hEvent=0x160) returned 1
	[0212.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x110368c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c
	[0212.657] CloseHandle (hObject=0x20c) returned 1
	[0212.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11028a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c
	[0212.658] CloseHandle (hObject=0x20c) returned 1
	[0212.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.687] SetEvent (hEvent=0x218) returned 1
	[0212.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x112cc380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c
	[0212.689] CloseHandle (hObject=0x21c) returned 1
	[0212.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11036a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228
	[0212.769] CloseHandle (hObject=0x228) returned 1
	[0212.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0212.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.069] SetEvent (hEvent=0x23c) returned 1
	[0213.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.091] SetEvent (hEvent=0x234) returned 1
	[0213.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11037180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x254
	[0213.094] CloseHandle (hObject=0x254) returned 1
	[0213.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11028c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x260
	[0213.120] CloseHandle (hObject=0x260) returned 1
	[0213.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x112cc540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x268
	[0213.134] CloseHandle (hObject=0x268) returned 1
	[0213.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.194] SetEvent (hEvent=0x284) returned 1
	[0213.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.203] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0213.204] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0213.270] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0213.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.502] SetEvent (hEvent=0x284) returned 1
	[0213.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.546] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0213.547] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0213.769] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0213.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0213.965] SetEvent (hEvent=0x284) returned 1
	[0213.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0214.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0214.161] SetEvent (hEvent=0x284) returned 1
	[0214.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0214.343] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.343] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0214.779] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0214.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0214.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0214.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0214.840] SetEvent (hEvent=0x284) returned 1
	[0214.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0214.884] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0214.885] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0216.043] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0216.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0216.154] SetEvent (hEvent=0x1c4) returned 1
	[0216.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0216.371] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.372] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0216.730] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0216.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0216.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0216.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0216.800] SetEvent (hEvent=0x1c4) returned 1
	[0216.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0216.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0216.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0216.885] SetEvent (hEvent=0x1bc) returned 1
	[0216.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0216.893] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.893] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0216.919] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0216.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0216.937] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0216.937] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0217.100] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0217.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0217.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0217.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0217.204] SetEvent (hEvent=0x1bc) returned 1
	[0217.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0217.254] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0217.255] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0217.323] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0217.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0217.344] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0217.344] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0218.002] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0218.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.110] SetEvent (hEvent=0x164) returned 1
	[0218.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.313] SetEvent (hEvent=0x134) returned 1
	[0218.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.414] SetEvent (hEvent=0x134) returned 1
	[0218.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.583] SetEvent (hEvent=0x134) returned 1
	[0218.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.756] SetEvent (hEvent=0x134) returned 1
	[0218.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0218.772] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0218.773] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0219.254] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0219.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0219.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0219.591] SetEvent (hEvent=0x1e8) returned 1
	[0219.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0219.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0219.678] SetEvent (hEvent=0x1e8) returned 1
	[0219.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0219.713] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0219.714] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0219.798] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0219.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0219.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0219.833] SetEvent (hEvent=0x118) returned 1
	[0219.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0219.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0219.875] SetEvent (hEvent=0x118) returned 1
	[0219.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0219.900] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0219.900] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0219.998] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0219.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0220.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0220.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0220.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0220.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0220.662] SetEvent (hEvent=0x118) returned 1
	[0220.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0220.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0220.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0220.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0221.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0221.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0221.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0221.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0221.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0221.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.443] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0222.444] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0222.675] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0222.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.798] SetEvent (hEvent=0x23c) returned 1
	[0222.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.816] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0222.817] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0222.833] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0222.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.882] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0222.883] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0222.977] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0222.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0222.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.036] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0223.036] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0223.350] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0223.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.415] SetEvent (hEvent=0x264) returned 1
	[0223.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.658] SetEvent (hEvent=0x264) returned 1
	[0223.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0223.799] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0223.800] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0223.928] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0223.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.316] SetEvent (hEvent=0x23c) returned 1
	[0224.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.339] SetEvent (hEvent=0x23c) returned 1
	[0224.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.415] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0224.415] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0224.692] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0224.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.752] SetEvent (hEvent=0x23c) returned 1
	[0224.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0224.970] SetEvent (hEvent=0x23c) returned 1
	[0224.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.140] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.151] SetEvent (hEvent=0x23c) returned 1
	[0225.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.298] SetEvent (hEvent=0x23c) returned 1
	[0225.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.364] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0225.364] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0225.368] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0225.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.638] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0225.638] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0225.644] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0225.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.702] SetEvent (hEvent=0x12c) returned 1
	[0225.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.714] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0225.714] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0225.756] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0225.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0225.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.186] SetEvent (hEvent=0x12c) returned 1
	[0226.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.213] SetEvent (hEvent=0x12c) returned 1
	[0226.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.218] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0226.218] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0226.229] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0226.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.344] SetEvent (hEvent=0x25c) returned 1
	[0226.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.365] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0226.365] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0226.369] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0226.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.487] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0226.487] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0226.552] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0226.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.691] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0226.691] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0226.711] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0226.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.855] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0226.856] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0226.866] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0226.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.900] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0226.901] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0226.911] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0226.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0226.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.062] SetEvent (hEvent=0x25c) returned 1
	[0227.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.110] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0227.111] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0227.115] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0227.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.217] SetEvent (hEvent=0x25c) returned 1
	[0227.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.615] SetEvent (hEvent=0x25c) returned 1
	[0227.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.631] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0227.632] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0227.637] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0227.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.684] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0227.685] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0227.689] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0227.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.741] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0227.742] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0227.750] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0227.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.801] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0227.802] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0227.859] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0227.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.901] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0227.903] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0227.909] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0227.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0227.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.031] SetEvent (hEvent=0x26c) returned 1
	[0228.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.130] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0228.130] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0228.143] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0228.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.198] SetEvent (hEvent=0x26c) returned 1
	[0228.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.205] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0228.205] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0228.213] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0228.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.258] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0228.258] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0228.271] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0228.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.418] SetEvent (hEvent=0x26c) returned 1
	[0228.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0228.692] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0228.692] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0229.048] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0229.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.086] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0229.087] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0229.098] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0229.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.111] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.139] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0229.140] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0229.192] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0229.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.366] SetEvent (hEvent=0x264) returned 1
	[0229.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.403] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0229.403] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0229.405] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0229.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.570] SetEvent (hEvent=0x264) returned 1
	[0229.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.597] SetEvent (hEvent=0x264) returned 1
	[0229.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.602] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0229.602] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0229.608] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0229.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.761] SetEvent (hEvent=0x26c) returned 1
	[0229.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.764] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0229.765] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0229.782] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0229.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.833] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0229.834] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0229.847] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0229.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0229.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.016] SetEvent (hEvent=0x1f0) returned 1
	[0230.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.030] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0230.030] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0230.094] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0230.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.156] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0230.157] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0230.340] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0230.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.443] SetEvent (hEvent=0x1f0) returned 1
	[0230.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.467] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0230.468] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0230.473] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0230.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.573] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0230.573] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0230.585] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0230.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.672] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0230.672] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0230.693] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0230.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.935] SetEvent (hEvent=0x1e8) returned 1
	[0230.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.957] SetEvent (hEvent=0x1e8) returned 1
	[0230.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.967] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0230.967] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0230.970] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0230.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.981] SetEvent (hEvent=0x1e8) returned 1
	[0230.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0230.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.063] SetEvent (hEvent=0x1e8) returned 1
	[0231.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.111] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0231.112] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0231.119] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0231.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.263] SetEvent (hEvent=0x264) returned 1
	[0231.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.266] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0231.267] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0231.279] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0231.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.357] SetEvent (hEvent=0x26c) returned 1
	[0231.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.365] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0231.365] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0231.385] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0231.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.407] SetEvent (hEvent=0x12c) returned 1
	[0231.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.456] SetEvent (hEvent=0x12c) returned 1
	[0231.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0231.972] SetEvent (hEvent=0x12c) returned 1
	[0231.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.154] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0232.154] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0232.168] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0232.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.248] SetEvent (hEvent=0x23c) returned 1
	[0232.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.269] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0232.269] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0232.319] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0232.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.435] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0232.435] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0232.448] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0232.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.603] SetEvent (hEvent=0x26c) returned 1
	[0232.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.608] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0232.608] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0232.611] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0232.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.663] SetEvent (hEvent=0x25c) returned 1
	[0232.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.675] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0232.675] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0232.724] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0232.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.773] SetEvent (hEvent=0x1f0) returned 1
	[0232.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.776] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0232.776] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0232.785] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0232.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.800] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0232.801] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0232.809] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0232.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.829] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.915] SetEvent (hEvent=0x12c) returned 1
	[0232.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0232.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.022] SetEvent (hEvent=0x12c) returned 1
	[0233.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.035] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0233.035] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0233.040] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0233.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.061] SetEvent (hEvent=0x264) returned 1
	[0233.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.146] SetEvent (hEvent=0x26c) returned 1
	[0233.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.153] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0233.153] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0233.298] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0233.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.648] SetEvent (hEvent=0x12c) returned 1
	[0233.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.705] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0233.706] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0233.936] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0233.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0233.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.152] SetEvent (hEvent=0x25c) returned 1
	[0234.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.176] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0234.178] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0234.634] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0234.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.709] SetEvent (hEvent=0x264) returned 1
	[0234.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.714] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0234.714] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0234.732] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0234.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.926] SetEvent (hEvent=0x23c) returned 1
	[0234.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0234.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.014] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0235.016] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0235.020] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0235.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.104] SetEvent (hEvent=0x12c) returned 1
	[0235.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.108] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0235.108] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0235.112] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0235.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.677] SetEvent (hEvent=0x1f0) returned 1
	[0235.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0235.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.176] SetEvent (hEvent=0x264) returned 1
	[0236.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.311] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0236.311] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0236.337] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0236.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.353] SetEvent (hEvent=0x264) returned 1
	[0236.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.400] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0236.400] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0236.412] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0236.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.489] SetEvent (hEvent=0x284) returned 1
	[0236.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.615] SetEvent (hEvent=0x23c) returned 1
	[0236.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.624] SetEvent (hEvent=0x23c) returned 1
	[0236.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0236.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0237.031] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0237.031] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0237.090] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0237.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0237.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0237.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0237.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0237.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0237.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0237.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0237.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0237.661] SetEvent (hEvent=0x25c) returned 1
	[0237.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0237.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0237.950] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0237.951] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0238.048] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0238.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0238.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0238.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0238.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0238.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0238.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0238.868] SetEvent (hEvent=0x284) returned 1
	[0238.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0238.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.053] SetEvent (hEvent=0x284) returned 1
	[0239.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.417] SetEvent (hEvent=0x284) returned 1
	[0239.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.700] SetEvent (hEvent=0x1f0) returned 1
	[0239.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.720] SetEvent (hEvent=0x1f0) returned 1
	[0239.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.724] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0239.724] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0239.732] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0239.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.774] SetEvent (hEvent=0x1e0) returned 1
	[0239.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.776] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0239.777] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0239.842] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0239.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0239.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.013] SetEvent (hEvent=0x12c) returned 1
	[0240.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.025] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0240.025] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0240.079] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0240.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.164] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0240.165] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0240.177] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0240.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.514] SetEvent (hEvent=0x23c) returned 1
	[0240.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.597] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0240.598] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0240.609] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0240.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.649] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0240.649] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0240.652] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0240.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.761] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0240.762] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0240.767] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0240.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.797] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0240.798] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0240.803] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0240.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.911] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0240.912] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0240.941] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0240.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0240.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.116] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0241.116] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0241.162] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0241.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.236] SetEvent (hEvent=0x1f0) returned 1
	[0241.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.427] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0241.428] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0241.434] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0241.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.670] SetEvent (hEvent=0x1e0) returned 1
	[0241.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.701] SetEvent (hEvent=0x1e0) returned 1
	[0241.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.705] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0241.705] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0241.710] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0241.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.785] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0241.785] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0241.791] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0241.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.830] SetEvent (hEvent=0x12c) returned 1
	[0241.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.851] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0241.852] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0241.896] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0241.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.937] SetEvent (hEvent=0x12c) returned 1
	[0241.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0241.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.173] SetEvent (hEvent=0x12c) returned 1
	[0242.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.183] SetEvent (hEvent=0x284) returned 1
	[0242.183] SetEvent (hEvent=0x26c) returned 1
	[0242.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.199] SetEvent (hEvent=0x23c) returned 1
	[0242.199] SetEvent (hEvent=0x25c) returned 1
	[0242.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.207] SetEvent (hEvent=0x22c) returned 1
	[0242.207] SetEvent (hEvent=0x210) returned 1
	[0242.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.219] SetEvent (hEvent=0x240) returned 1
	[0242.219] SetEvent (hEvent=0x1b0) returned 1
	[0242.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.226] SetEvent (hEvent=0x1b0) returned 1
	[0242.226] SetEvent (hEvent=0x234) returned 1
	[0242.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.238] SetEvent (hEvent=0x24c) returned 1
	[0242.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.254] SetEvent (hEvent=0x124) returned 1
	[0242.254] SetEvent (hEvent=0x248) returned 1
	[0242.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.265] SetEvent (hEvent=0x118) returned 1
	[0242.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.353] SetEvent (hEvent=0x134) returned 1
	[0242.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.376] SetEvent (hEvent=0x160) returned 1
	[0242.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.450] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0242.451] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0242.500] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0242.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.530] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0242.530] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0242.587] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0242.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0242.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.221] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0243.222] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0243.289] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0243.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.614] SetEvent (hEvent=0x240) returned 1
	[0243.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.655] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0243.656] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0243.782] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0243.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0243.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.154] SetEvent (hEvent=0x118) returned 1
	[0244.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.212] SetEvent (hEvent=0x12c) returned 1
	[0244.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.224] SetEvent (hEvent=0x12c) returned 1
	[0244.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.311] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0244.312] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0244.332] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0244.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.358] SetEvent (hEvent=0x12c) returned 1
	[0244.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.685] SetEvent (hEvent=0x12c) returned 1
	[0244.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.828] SetEvent (hEvent=0x1e8) returned 1
	[0244.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.838] SetEvent (hEvent=0x1e8) returned 1
	[0244.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0244.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0245.281] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0245.282] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0245.380] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0245.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0245.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0245.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0245.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0245.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0245.906] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0245.907] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0245.927] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0245.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0245.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0245.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0245.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0246.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0246.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0246.044] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0246.044] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0246.057] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0246.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0246.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0246.156] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0246.157] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0246.525] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0246.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0246.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0246.668] SetEvent (hEvent=0x118) returned 1
	[0246.668] SetEvent (hEvent=0x1f0) returned 1
	[0246.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0246.709] SetEvent (hEvent=0x218) returned 1
	[0246.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0246.752] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0246.752] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0246.764] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0246.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0246.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0246.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0246.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0247.170] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0247.170] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0247.222] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0247.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0247.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0247.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0247.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0247.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0247.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0247.355] SetEvent (hEvent=0x248) returned 1
	[0247.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0247.541] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0247.542] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0247.933] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0247.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0247.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.126] SetEvent (hEvent=0x24c) returned 1
	[0248.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.166] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0248.167] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0248.281] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0248.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.286] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0248.286] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0248.289] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0248.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.411] SetEvent (hEvent=0x218) returned 1
	[0248.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.421] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0248.421] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0248.432] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0248.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.500] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0248.500] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0248.514] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0248.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.519] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0248.520] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0248.526] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0248.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.569] SetEvent (hEvent=0x1f0) returned 1
	[0248.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.596] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0248.597] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0248.607] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0248.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.909] SetEvent (hEvent=0x26c) returned 1
	[0248.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0248.953] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0248.953] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0249.049] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0249.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.087] SetEvent (hEvent=0x26c) returned 1
	[0249.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.127] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0249.127] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0249.182] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0249.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.246] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0249.247] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0249.254] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0249.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.453] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0249.454] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0249.461] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0249.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.629] SetEvent (hEvent=0x1f0) returned 1
	[0249.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.679] SetEvent (hEvent=0x248) returned 1
	[0249.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.693] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0249.693] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0249.704] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0249.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.784] SetEvent (hEvent=0x234) returned 1
	[0249.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.791] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0249.791] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0249.890] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0249.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.913] SetEvent (hEvent=0x210) returned 1
	[0249.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0249.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.070] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0250.070] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0250.083] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0250.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.249] SetEvent (hEvent=0x26c) returned 1
	[0250.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.343] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0250.344] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0250.420] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0250.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.493] SetEvent (hEvent=0x26c) returned 1
	[0250.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.499] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0250.499] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0250.501] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0250.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.578] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0250.578] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0250.599] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0250.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.724] SetEvent (hEvent=0x1f0) returned 1
	[0250.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.800] SetEvent (hEvent=0x248) returned 1
	[0250.800] SetEvent (hEvent=0x234) returned 1
	[0250.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.808] SetEvent (hEvent=0x234) returned 1
	[0250.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.814] SetEvent (hEvent=0x118) returned 1
	[0250.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.842] SetEvent (hEvent=0x118) returned 1
	[0250.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.853] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0250.853] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0250.905] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0250.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.920] SetEvent (hEvent=0x134) returned 1
	[0250.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.933] SetEvent (hEvent=0x218) returned 1
	[0250.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0250.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.143] SetEvent (hEvent=0x24c) returned 1
	[0251.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.407] SetEvent (hEvent=0x24c) returned 1
	[0251.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.416] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0251.417] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0251.430] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0251.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.589] SetEvent (hEvent=0x1f0) returned 1
	[0251.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.599] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0251.599] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0251.607] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0251.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.626] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0251.626] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0251.631] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0251.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.721] SetEvent (hEvent=0x1f0) returned 1
	[0251.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.741] SetEvent (hEvent=0x1f0) returned 1
	[0251.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.844] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0251.845] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0251.865] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0251.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.974] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0251.974] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0251.989] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0251.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0251.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.023] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0252.024] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0252.143] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0252.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.396] SetEvent (hEvent=0x218) returned 1
	[0252.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.403] SetEvent (hEvent=0x218) returned 1
	[0252.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.417] SetEvent (hEvent=0x134) returned 1
	[0252.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.477] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0252.478] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0252.487] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0252.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.504] SetEvent (hEvent=0x134) returned 1
	[0252.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.822] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0252.823] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0252.826] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0252.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.985] SetEvent (hEvent=0x218) returned 1
	[0252.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0252.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.000] SetEvent (hEvent=0x218) returned 1
	[0253.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.016] SetEvent (hEvent=0x218) returned 1
	[0253.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.019] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0253.020] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0253.116] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0253.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.146] SetEvent (hEvent=0x118) returned 1
	[0253.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.278] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0253.278] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0253.295] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0253.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.479] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0253.479] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0253.488] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0253.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.584] SetEvent (hEvent=0x118) returned 1
	[0253.584] SetEvent (hEvent=0x210) returned 1
	[0253.585] SetEvent (hEvent=0x24c) returned 1
	[0253.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.603] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0253.603] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0253.611] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0253.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.816] SetEvent (hEvent=0x248) returned 1
	[0253.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.888] SetEvent (hEvent=0x1f0) returned 1
	[0253.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.893] SetEvent (hEvent=0x1b0) returned 1
	[0253.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0253.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.081] SetEvent (hEvent=0x218) returned 1
	[0254.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.092] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0254.092] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0254.104] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0254.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.358] SetEvent (hEvent=0x218) returned 1
	[0254.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.372] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0254.372] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0254.454] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0254.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.628] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0254.629] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0254.636] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0254.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.858] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0254.859] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0254.880] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0254.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.901] SetEvent (hEvent=0x210) returned 1
	[0254.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.946] SetEvent (hEvent=0x26c) returned 1
	[0254.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0254.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.040] SetEvent (hEvent=0x26c) returned 1
	[0255.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.049] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0255.049] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0255.061] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0255.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.194] SetEvent (hEvent=0x26c) returned 1
	[0255.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.197] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0255.197] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0255.211] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0255.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.372] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0255.373] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0255.424] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0255.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.457] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0255.458] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0255.462] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0255.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.719] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0255.719] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0255.726] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0255.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.797] SetEvent (hEvent=0x218) returned 1
	[0255.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.876] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0255.876] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0255.882] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0255.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.981] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0255.981] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0255.984] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0255.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0255.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.023] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0256.023] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0256.073] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0256.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.120] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0256.120] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0256.186] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0256.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.240] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0256.241] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0256.244] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0256.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.375] SetEvent (hEvent=0x26c) returned 1
	[0256.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.383] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0256.384] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0256.400] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0256.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.547] SetEvent (hEvent=0x1e8) returned 1
	[0256.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.550] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0256.551] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0256.560] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0256.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.671] SetEvent (hEvent=0x210) returned 1
	[0256.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.677] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0256.678] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0256.690] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0256.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.790] SetEvent (hEvent=0x118) returned 1
	[0256.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.842] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0256.843] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0256.853] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0256.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.891] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0256.891] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0256.895] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0256.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0256.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.027] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0257.028] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0257.035] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0257.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.195] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0257.196] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0257.206] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0257.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.252] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0257.253] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0257.310] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0257.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.393] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0257.394] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0257.398] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0257.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.495] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0257.496] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0257.500] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0257.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.602] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0257.603] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0257.606] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0257.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.872] SetEvent (hEvent=0x218) returned 1
	[0257.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.881] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0257.881] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0257.892] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0257.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.927] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0257.927] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0257.931] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0257.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0257.986] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0257.987] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0257.991] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0257.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.233] SetEvent (hEvent=0x210) returned 1
	[0258.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.247] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0258.247] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0258.347] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0258.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.446] SetEvent (hEvent=0x26c) returned 1
	[0258.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.664] SetEvent (hEvent=0x1e8) returned 1
	[0258.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.947] SetEvent (hEvent=0x218) returned 1
	[0258.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.953] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0258.954] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0258.962] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0258.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0258.968] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0258.968] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0259.056] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0259.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.122] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0259.123] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0259.126] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0259.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.141] SetEvent (hEvent=0x234) returned 1
	[0259.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.146] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0259.147] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0259.219] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0259.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.259] SetEvent (hEvent=0x118) returned 1
	[0259.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.278] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0259.278] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0259.448] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0259.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.498] SetEvent (hEvent=0x1e8) returned 1
	[0259.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.509] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0259.510] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0259.592] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0259.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.727] SetEvent (hEvent=0x218) returned 1
	[0259.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.730] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0259.731] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0259.746] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0259.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.787] SetEvent (hEvent=0x210) returned 1
	[0259.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.941] SetEvent (hEvent=0x26c) returned 1
	[0259.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.950] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0259.951] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0259.957] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0259.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0259.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.117] SetEvent (hEvent=0x218) returned 1
	[0260.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.122] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0260.122] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0260.173] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0260.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.247] SetEvent (hEvent=0x210) returned 1
	[0260.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.319] SetEvent (hEvent=0x234) returned 1
	[0260.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.427] SetEvent (hEvent=0x26c) returned 1
	[0260.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.433] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0260.433] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0260.450] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0260.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.477] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0260.478] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0260.483] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0260.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.553] SetEvent (hEvent=0x218) returned 1
	[0260.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.558] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0260.558] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0260.560] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0260.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.679] SetEvent (hEvent=0x210) returned 1
	[0260.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.682] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0260.683] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0260.688] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0260.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.884] SetEvent (hEvent=0x234) returned 1
	[0260.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.892] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0260.892] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0260.897] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0260.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.926] SetEvent (hEvent=0x26c) returned 1
	[0260.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.929] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0260.930] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0260.938] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0260.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0260.956] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0260.957] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0261.018] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0261.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.047] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0261.048] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0261.053] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0261.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.145] SetEvent (hEvent=0x218) returned 1
	[0261.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.317] SetEvent (hEvent=0x234) returned 1
	[0261.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.320] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0261.321] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0261.324] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0261.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.361] SetEvent (hEvent=0x26c) returned 1
	[0261.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.468] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0261.468] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0261.478] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0261.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.540] SetEvent (hEvent=0x218) returned 1
	[0261.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.548] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0261.549] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0261.603] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0261.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.640] SetEvent (hEvent=0x234) returned 1
	[0261.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.720] SetEvent (hEvent=0x26c) returned 1
	[0261.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.723] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0261.724] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0261.732] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0261.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.823] SetEvent (hEvent=0x26c) returned 1
	[0261.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.921] SetEvent (hEvent=0x210) returned 1
	[0261.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.928] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0261.929] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0261.934] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0261.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0261.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.051] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0262.051] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0262.064] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0262.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.177] SetEvent (hEvent=0x218) returned 1
	[0262.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.196] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0262.196] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0262.232] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0262.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.277] SetEvent (hEvent=0x248) returned 1
	[0262.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.283] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0262.283] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0262.298] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0262.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.340] SetEvent (hEvent=0x26c) returned 1
	[0262.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.394] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0262.395] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0262.405] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0262.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.440] SetEvent (hEvent=0x1b0) returned 1
	[0262.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.443] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0262.444] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0262.525] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0262.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.558] SetEvent (hEvent=0x234) returned 1
	[0262.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.653] SetEvent (hEvent=0x218) returned 1
	[0262.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.665] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0262.665] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0262.670] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0262.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.710] SetEvent (hEvent=0x248) returned 1
	[0262.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.852] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0262.852] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0262.855] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0262.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0262.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.055] SetEvent (hEvent=0x1b0) returned 1
	[0263.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.062] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0263.062] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0263.067] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0263.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.199] SetEvent (hEvent=0x234) returned 1
	[0263.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.202] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0263.202] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0263.210] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0263.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.341] SetEvent (hEvent=0x26c) returned 1
	[0263.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.353] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0263.354] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0263.368] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0263.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.484] SetEvent (hEvent=0x248) returned 1
	[0263.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.530] SetEvent (hEvent=0x118) returned 1
	[0263.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.533] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0263.533] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0263.538] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0263.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.644] SetEvent (hEvent=0x1b0) returned 1
	[0263.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.650] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0263.650] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0263.659] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0263.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.700] SetEvent (hEvent=0x234) returned 1
	[0263.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.703] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0263.704] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0263.707] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0263.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.825] SetEvent (hEvent=0x26c) returned 1
	[0263.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.828] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0263.829] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0263.874] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0263.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.974] SetEvent (hEvent=0x26c) returned 1
	[0263.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0263.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.007] SetEvent (hEvent=0x118) returned 1
	[0264.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.012] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0264.012] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0264.019] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0264.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.213] SetEvent (hEvent=0x218) returned 1
	[0264.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.223] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0264.223] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0264.230] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0264.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.257] SetEvent (hEvent=0x234) returned 1
	[0264.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.357] SetEvent (hEvent=0x1b0) returned 1
	[0264.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.362] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0264.363] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0264.368] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0264.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.414] SetEvent (hEvent=0x26c) returned 1
	[0264.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.483] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0264.483] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0264.492] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0264.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.513] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0264.513] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0264.578] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0264.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.672] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0264.673] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0264.754] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0264.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.788] SetEvent (hEvent=0x234) returned 1
	[0264.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.790] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0264.791] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0264.797] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0264.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.902] SetEvent (hEvent=0x248) returned 1
	[0264.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.907] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0264.908] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0264.923] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0264.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0264.994] SetEvent (hEvent=0x1b0) returned 1
	[0264.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.089] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0265.090] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0265.097] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0265.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.346] SetEvent (hEvent=0x1b0) returned 1
	[0265.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.396] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0265.396] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0265.456] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0265.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.595] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0265.596] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0265.603] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0265.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.849] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0265.850] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0265.855] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0265.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.891] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0265.892] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0265.899] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0265.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0265.925] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0265.925] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0265.939] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0265.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.039] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0266.039] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0266.049] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0266.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.088] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0266.089] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0266.094] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0266.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.111] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.196] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0266.197] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0266.199] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0266.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.228] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0266.228] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0266.235] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0266.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.264] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0266.264] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0266.315] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0266.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.351] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0266.351] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0266.356] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0266.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.392] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0266.392] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0266.395] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0266.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.561] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0266.562] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0266.580] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0266.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.603] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0266.604] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0266.676] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0266.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.730] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0266.731] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0266.802] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0266.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.858] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0266.859] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0266.926] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0266.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.961] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0266.962] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0266.974] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0266.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0266.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.014] SetEvent (hEvent=0x118) returned 1
	[0267.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.022] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.023] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.135] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.187] SetEvent (hEvent=0x118) returned 1
	[0267.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.265] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.265] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.288] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.323] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.323] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.407] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.436] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.436] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.450] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.480] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.481] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.492] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.527] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.528] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.539] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.567] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.567] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.579] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.648] SetEvent (hEvent=0x26c) returned 1
	[0267.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.658] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.658] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.665] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.729] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.730] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.735] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.765] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.765] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.773] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.799] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.799] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.804] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.843] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.843] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.857] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.904] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.904] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.913] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.932] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.933] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.948] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0267.979] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0267.979] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0267.992] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0267.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.034] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.035] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.038] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.062] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.062] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.083] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.120] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.120] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.129] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.169] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.169] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.171] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.198] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.198] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.205] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.230] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.230] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.235] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.296] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.296] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.300] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.324] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.324] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.331] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.358] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.358] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.368] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.402] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.402] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.410] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.446] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.446] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.454] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.479] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.480] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.490] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.522] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.523] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.529] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.554] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.555] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.562] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.589] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.590] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.593] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.627] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.627] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.632] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.662] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.662] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.667] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.726] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.726] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.732] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.758] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.758] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.765] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.793] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.913] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.920] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.941] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.942] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.953] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.972] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0268.973] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0268.979] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0268.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0268.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.012] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.012] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.028] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.056] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.057] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.064] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.091] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.091] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.112] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.140] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.140] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.144] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.178] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.178] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.182] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.215] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.216] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.219] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.245] SetEvent (hEvent=0x234) returned 1
	[0269.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.249] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.250] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.257] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.284] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.293] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.293] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.302] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.350] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.351] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.375] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.445] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.446] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.449] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.481] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.481] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.492] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.512] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.513] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.519] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.542] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.542] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.552] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.570] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.571] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.582] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.606] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.606] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.611] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.633] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.634] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.641] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.671] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.672] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.680] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.742] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.742] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.751] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.774] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.774] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.782] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.818] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.818] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.824] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.859] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.859] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.863] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.890] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.890] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.896] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.925] SetEvent (hEvent=0x210) returned 1
	[0269.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.927] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.927] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.938] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.964] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0269.965] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0269.968] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0269.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0269.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.052] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.053] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.061] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.094] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.095] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.099] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.128] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.128] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.131] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.159] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.159] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.163] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.185] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.185] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.192] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.217] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.218] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.225] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.265] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.265] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.282] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.301] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.302] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.320] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.347] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.347] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.356] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.374] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.375] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.388] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.421] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.421] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.430] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.464] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.464] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.470] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.498] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.498] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.506] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.536] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.536] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.546] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.667] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.668] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.682] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.737] SetEvent (hEvent=0x218) returned 1
	[0270.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.747] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.747] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.755] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.785] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.786] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.796] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.824] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.824] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.834] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.861] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.861] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.865] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.893] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.893] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.899] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.925] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.926] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.936] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.972] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0270.972] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0270.975] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0270.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0270.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.037] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.037] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.040] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.073] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.073] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.080] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.103] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.104] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.122] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.148] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.149] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.164] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.315] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.315] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.323] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.361] SetEvent (hEvent=0x26c) returned 1
	[0271.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.363] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.364] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.416] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.419] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.420] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.431] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.455] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.455] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.465] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.499] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.500] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.502] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.541] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.541] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.557] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.587] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.588] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.590] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.611] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.611] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.619] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.648] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.649] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.654] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.675] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.675] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.704] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.767] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.767] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.780] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.802] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.802] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.813] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.839] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.839] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.848] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.868] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.869] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.876] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.894] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.895] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.898] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.931] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.931] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.936] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.966] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.966] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0271.972] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0271.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0271.996] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0271.997] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.007] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.035] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.035] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.038] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.106] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.107] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.109] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.144] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.144] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.150] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.187] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.188] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.200] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.231] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.231] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.240] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.292] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.292] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.310] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.347] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.348] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.354] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.438] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.438] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.443] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.472] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.472] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.480] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.507] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.507] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.512] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.554] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.555] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.561] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.586] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.587] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.596] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.630] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.631] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.638] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.657] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.658] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.670] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.727] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.727] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.735] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.770] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.770] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.773] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.803] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.803] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.810] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.849] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.850] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.857] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.891] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.892] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.896] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.936] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.938] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.945] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.969] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0272.969] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0272.978] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0272.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0272.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.008] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.008] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.014] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.032] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.033] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.044] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.077] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.078] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.084] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.110] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.110] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.116] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.147] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.147] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.151] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.177] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.178] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.188] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.212] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.212] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.214] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.253] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.253] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.257] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.301] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.302] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.310] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.335] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.336] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.352] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.381] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.381] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.387] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.410] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.410] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.420] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.453] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.453] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.459] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.493] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.493] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.497] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.619] SetEvent (hEvent=0x218) returned 1
	[0273.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.631] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.631] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.650] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.682] SetEvent (hEvent=0x218) returned 1
	[0273.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.689] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.689] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.695] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.743] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.743] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.746] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.786] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.787] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.793] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.821] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.821] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.830] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.857] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.857] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.867] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.891] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.891] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.897] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.938] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.944] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.944] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.949] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.971] SetEvent (hEvent=0x210) returned 1
	[0273.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.980] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0273.980] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0273.987] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0273.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0273.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.004] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.004] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.009] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.046] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.046] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.058] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.083] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.085] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.090] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.120] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.120] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.129] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.162] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.162] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.177] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.217] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.217] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.228] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.264] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.264] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.285] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.311] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.312] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.320] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.410] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.410] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.418] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.448] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.448] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.453] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.488] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.488] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.494] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.517] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.518] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.528] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.557] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.557] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.565] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.594] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.595] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.604] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.629] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.629] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.638] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.670] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.671] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.678] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.839] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.839] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.851] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.883] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.884] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.896] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.937] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.937] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0274.951] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0274.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0274.993] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0274.994] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.008] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.042] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.043] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.061] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.115] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.116] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.128] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.140] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.167] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.167] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.174] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.204] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.204] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.217] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.248] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.249] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.265] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.400] SetEvent (hEvent=0x26c) returned 1
	[0275.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.435] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.435] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.444] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.494] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.494] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.505] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.558] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.558] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.568] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.598] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.599] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.613] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.645] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.646] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.661] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.700] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.700] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.745] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.789] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.789] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.816] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.860] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.860] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.864] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.884] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0275.884] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0275.891] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0275.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0275.990] SetEvent (hEvent=0x26c) returned 1
	[0275.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.006] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.006] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.012] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.044] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.045] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.056] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.125] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.126] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.136] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.175] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.175] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.186] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.210] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.210] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.222] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.258] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.258] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.263] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.310] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.310] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.320] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.350] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.350] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.358] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.395] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.395] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.398] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.488] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.488] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.494] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.524] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.524] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.535] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.572] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.572] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.581] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.606] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.606] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.611] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.637] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.637] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.643] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.668] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.669] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.673] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.702] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.702] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.706] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.761] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.762] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.766] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.786] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.786] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.795] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.832] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.832] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.835] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.860] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.861] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.869] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.890] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.891] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.899] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.918] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.918] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0276.926] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0276.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0276.947] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0276.948] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.008] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.030] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.031] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.034] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.100] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.100] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.111] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.285] SetEvent (hEvent=0x1b0) returned 1
	[0277.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.287] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.287] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.298] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.323] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.324] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.345] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.373] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.373] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.377] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.402] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.402] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.406] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.423] SetEvent (hEvent=0x234) returned 1
	[0277.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.470] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.470] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.478] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.562] SetEvent (hEvent=0x234) returned 1
	[0277.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.565] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.566] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.572] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.601] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.602] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.607] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.641] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.641] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.647] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.677] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.677] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.690] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.719] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.719] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.724] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.744] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.744] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.749] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.813] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.814] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.821] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.860] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.861] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.878] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0277.975] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0277.975] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0277.989] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0277.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.020] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.021] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.023] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.023] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.060] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.060] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.066] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.153] SetEvent (hEvent=0x26c) returned 1
	[0278.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.179] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.181] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.192] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.227] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.227] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.233] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.259] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.259] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.285] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.321] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.321] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.333] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.372] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.372] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.381] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.411] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.411] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.414] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.541] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.542] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.550] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.580] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.581] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.588] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.614] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.615] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.618] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.650] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.650] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.656] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.690] SetEvent (hEvent=0x26c) returned 1
	[0278.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.705] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.705] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.708] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.869] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.870] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.881] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.917] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.917] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.921] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.961] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0278.961] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0278.965] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0278.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0278.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.021] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.022] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.028] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.062] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.062] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.068] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.091] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.092] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.099] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.127] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.128] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.141] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.167] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.168] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.171] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.197] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.197] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.207] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.262] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.262] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.265] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.304] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.305] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.313] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.338] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.338] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.341] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.373] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.374] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.382] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.421] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.421] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.424] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.452] SetEvent (hEvent=0x26c) returned 1
	[0279.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.463] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.463] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.472] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.498] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.499] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.507] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.508] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.524] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.524] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.532] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.558] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.558] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.562] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.596] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.596] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.599] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.632] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.632] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.635] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.671] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.672] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.678] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.833] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.833] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.837] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.893] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.893] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.900] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.930] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0279.930] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0279.946] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0279.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.975] SetEvent (hEvent=0x26c) returned 1
	[0279.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0279.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.001] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.001] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.008] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.035] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.035] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.047] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.080] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.080] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.090] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.114] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.114] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.124] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.153] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.154] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.160] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.188] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.188] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.195] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.215] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.216] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.223] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.243] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.243] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.258] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.333] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.334] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.337] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.416] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.417] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.420] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.467] SetEvent (hEvent=0x210) returned 1
	[0280.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.469] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.469] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.495] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.564] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.565] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.588] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.607] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.607] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.616] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.694] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.695] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.703] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.731] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.731] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.734] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.764] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.765] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.771] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.824] SetEvent (hEvent=0x1b0) returned 1
	[0280.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.827] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.828] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.833] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.865] SetEvent (hEvent=0x248) returned 1
	[0280.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.876] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.876] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.885] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.909] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0280.909] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0280.912] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0280.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0280.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.021] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.022] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.031] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.059] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.059] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.066] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.091] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.092] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.107] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.125] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.125] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.143] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.166] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.167] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.173] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.197] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.197] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.204] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.230] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.231] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.237] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.264] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.264] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.301] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.326] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.326] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.335] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.357] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.357] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.364] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.390] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.390] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.393] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.767] SetEvent (hEvent=0x248) returned 1
	[0281.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.776] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.776] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.898] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.983] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0281.984] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0281.992] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0281.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0281.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.015] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.016] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.026] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.043] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.044] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.052] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.077] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.077] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.083] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.104] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.104] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.113] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.140] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.141] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.152] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.183] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.184] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.190] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.218] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.218] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.224] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.381] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.382] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.392] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.442] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.442] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.469] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.526] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.526] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.531] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.715] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.715] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.728] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.785] SetEvent (hEvent=0x210) returned 1
	[0282.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.877] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.878] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.882] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.918] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.919] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.923] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.947] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.949] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.952] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.978] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0282.978] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0282.987] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0282.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0282.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.015] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.015] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.017] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.050] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.051] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.059] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.132] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.132] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.148] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.183] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.183] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.193] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.227] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.228] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.236] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.281] SetEvent (hEvent=0x1b0) returned 1
	[0283.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.283] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.284] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.293] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.354] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.354] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.369] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.397] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.397] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.412] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.442] SetEvent (hEvent=0x26c) returned 1
	[0283.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.450] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.450] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.453] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.485] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.486] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.495] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.521] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.521] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.524] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.564] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.564] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.568] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.592] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.593] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.598] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.713] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.713] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.716] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.740] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.740] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.745] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.772] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.772] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.779] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.806] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.806] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.810] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.857] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.858] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.865] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.907] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.907] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.911] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.943] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.944] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.951] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.970] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0283.970] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0283.979] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0283.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0283.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.005] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.006] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.009] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.029] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.029] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.041] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.073] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.074] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.077] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.105] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.105] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.107] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.137] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.137] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.141] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.183] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.184] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.189] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.222] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.222] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.281] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.372] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.373] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.381] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.406] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.406] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.413] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.497] SetEvent (hEvent=0x234) returned 1
	[0284.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.503] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.503] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.509] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.545] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.547] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.554] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.584] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.585] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.598] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.632] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.633] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.638] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.686] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.686] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.698] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.725] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.725] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.730] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.768] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.768] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.774] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.809] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.810] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.816] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.934] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.935] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.949] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0284.985] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0284.985] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0284.994] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0284.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.071] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.071] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.082] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.101] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.102] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.113] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.144] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.144] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.150] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.178] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.178] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.187] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.218] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.219] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.222] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.255] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.255] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.262] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.286] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.328] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.329] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.347] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.379] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.379] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.385] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.418] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.418] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.427] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.455] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.455] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.458] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.499] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.500] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.506] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.508] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.542] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.542] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.555] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.696] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.696] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.708] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.740] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.740] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.751] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.778] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.778] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.788] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.814] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.814] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.825] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.888] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.897] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.910] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.947] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0285.947] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0285.958] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0285.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0285.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.003] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.003] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.006] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.144] SetEvent (hEvent=0x210) returned 1
	[0286.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.165] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.166] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.173] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.219] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.219] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.232] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.263] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.264] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.290] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.329] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.333] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.337] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.390] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.390] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.393] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.431] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.432] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.437] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.467] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.468] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.490] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.538] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.539] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.549] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.588] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.588] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.596] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.625] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.625] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.641] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.691] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.692] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.698] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.735] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.736] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.747] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.775] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.775] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.791] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.834] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.834] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.845] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.956] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.956] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0286.960] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0286.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0286.991] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0286.991] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.002] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.038] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.039] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.080] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.117] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.117] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.126] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.140] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.163] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.164] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.174] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.199] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.200] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.377] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.426] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.427] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.438] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.492] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.493] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.500] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.525] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.525] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.533] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.568] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.571] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.577] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.599] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.599] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.612] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.642] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.643] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.652] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.686] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.686] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.694] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.726] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.726] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.731] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.768] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.768] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.779] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.807] SetEvent (hEvent=0x234) returned 1
	[0287.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.823] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.824] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.830] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.871] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.871] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0287.878] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0287.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.967] SetEvent (hEvent=0x118) returned 1
	[0287.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0287.992] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0287.992] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.003] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.023] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.025] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.026] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.031] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.065] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.065] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.071] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.098] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.098] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.109] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.140] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.146] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.149] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.160] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.199] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.199] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.206] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.238] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.238] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.247] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.299] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.299] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.312] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.342] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.342] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.348] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.388] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.388] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.472] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.584] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.584] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.597] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.627] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.628] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.638] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.670] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.671] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.676] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.719] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.720] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.731] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.763] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.764] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.774] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.811] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.812] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.820] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.861] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.862] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.866] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.946] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.946] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0288.955] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0288.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0288.996] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0288.996] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.007] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.023] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.034] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.035] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.043] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.076] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.076] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.087] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.117] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.118] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.122] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.163] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.164] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.171] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.197] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.197] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.205] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.253] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.254] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.265] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.324] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.325] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.337] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.364] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.365] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.378] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.417] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.418] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.427] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.453] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.453] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.463] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.508] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.520] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.520] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.523] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.557] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.557] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.570] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.656] SetEvent (hEvent=0x1b0) returned 1
	[0289.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.672] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.672] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.688] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.732] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.732] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.754] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.787] SetEvent (hEvent=0x248) returned 1
	[0289.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.808] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.808] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.819] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.868] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.868] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.882] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.949] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0289.950] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0289.968] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0289.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0289.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.024] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.025] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.040] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.091] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.091] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.116] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.159] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.159] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.170] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.200] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.200] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.212] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.257] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.257] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.264] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.313] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.314] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.328] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.356] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.356] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.366] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.410] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.410] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.416] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.453] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.453] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.461] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.497] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.497] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.502] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.546] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.546] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.566] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.612] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.612] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.627] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.674] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.674] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.682] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.701] SetEvent (hEvent=0x248) returned 1
	[0290.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.703] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.704] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.710] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.766] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.767] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.770] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.869] SetEvent (hEvent=0x26c) returned 1
	[0290.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.878] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.879] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.884] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.929] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.930] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.944] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.977] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0290.978] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0290.984] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0290.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0290.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.017] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.018] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.027] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.060] SetEvent (hEvent=0x234) returned 1
	[0291.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.067] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.068] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.074] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.107] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.107] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.117] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.234] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.235] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.240] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.273] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.273] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.297] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.334] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.334] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.340] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.370] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.370] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.380] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.408] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.409] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.418] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.449] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.450] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.456] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.489] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.489] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.490] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.538] SetEvent (hEvent=0x118) returned 1
	[0291.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.575] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.575] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.577] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.592] SetEvent (hEvent=0x210) returned 1
	[0291.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.606] SetEvent (hEvent=0x26c) returned 1
	[0291.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.608] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.608] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.609] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.623] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.624] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.625] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.639] SetEvent (hEvent=0x218) returned 1
	[0291.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.640] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.641] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.642] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.655] SetEvent (hEvent=0x248) returned 1
	[0291.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.687] SetEvent (hEvent=0x26c) returned 1
	[0291.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.701] SetEvent (hEvent=0x118) returned 1
	[0291.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.715] SetEvent (hEvent=0x218) returned 1
	[0291.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.792] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.793] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.795] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.923] SetEvent (hEvent=0x26c) returned 1
	[0291.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.963] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.964] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.966] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.985] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0291.986] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0291.988] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0291.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0291.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.101] SetEvent (hEvent=0x1b0) returned 1
	[0292.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.135] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0292.135] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0292.143] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0292.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.160] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0292.160] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0292.161] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0292.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.183] SetEvent (hEvent=0x210) returned 1
	[0292.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.221] SetEvent (hEvent=0x1b0) returned 1
	[0292.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.301] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0292.301] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0292.302] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0292.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.320] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0292.320] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0292.321] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0292.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.337] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0292.337] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0292.343] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0292.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.958] SetEvent (hEvent=0x1b0) returned 1
	[0292.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.962] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0292.963] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0292.965] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0292.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0292.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.002] SetEvent (hEvent=0x1b0) returned 1
	[0293.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.003] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.004] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.006] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.022] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.023] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.025] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.050] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.051] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.052] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.068] SetEvent (hEvent=0x218) returned 1
	[0293.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.089] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.089] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.091] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.110] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.110] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.112] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.127] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.128] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.130] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.145] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.146] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.147] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.182] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.182] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.184] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.211] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.211] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.214] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.231] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.234] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.236] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.307] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.307] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.310] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.367] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.367] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.369] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.409] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.409] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.410] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.424] SetEvent (hEvent=0x1b0) returned 1
	[0293.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.443] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.443] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.444] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.465] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.465] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.467] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.488] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.488] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.490] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.515] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.516] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.517] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.543] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.543] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.545] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.565] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.565] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.568] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.588] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.588] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.590] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.609] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.610] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.611] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.715] SetEvent (hEvent=0x210) returned 1
	[0293.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.747] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.748] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.750] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.788] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.788] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.790] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.862] SetEvent (hEvent=0x218) returned 1
	[0293.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.880] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.880] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.882] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.970] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0293.971] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0293.972] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0293.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0293.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.019] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.020] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.021] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.056] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.057] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.058] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.139] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.139] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.140] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.189] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.189] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.191] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.228] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.229] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.231] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.247] SetEvent (hEvent=0x26c) returned 1
	[0294.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.263] SetEvent (hEvent=0x118) returned 1
	[0294.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.312] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.313] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.315] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.355] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.356] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.357] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.408] SetEvent (hEvent=0x234) returned 1
	[0294.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.487] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.488] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.489] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.508] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.509] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.511] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.561] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.561] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.563] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.649] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.650] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.652] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.672] SetEvent (hEvent=0x218) returned 1
	[0294.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.724] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.724] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.725] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.740] SetEvent (hEvent=0x210) returned 1
	[0294.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.771] SetEvent (hEvent=0x218) returned 1
	[0294.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.792] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.792] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.794] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.828] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.828] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.830] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.868] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0294.868] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0294.870] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0294.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.990] SetEvent (hEvent=0x26c) returned 1
	[0294.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0294.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.019] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.020] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.026] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.069] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.069] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.071] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.087] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.087] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.088] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.134] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.135] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.136] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.140] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.160] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.160] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.162] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.205] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.205] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.208] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.223] SetEvent (hEvent=0x118) returned 1
	[0295.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.251] SetEvent (hEvent=0x218) returned 1
	[0295.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.258] SetEvent (hEvent=0x218) returned 1
	[0295.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.270] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.270] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.271] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.299] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.300] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.301] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.304] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.321] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.322] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.323] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.339] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.339] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.341] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.357] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.358] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.359] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.377] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.377] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.378] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.396] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.397] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.398] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.454] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.455] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.456] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.491] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.491] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.493] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.532] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.533] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.535] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.550] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.550] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.553] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.569] SetEvent (hEvent=0x1f0) returned 1
	[0295.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.586] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.586] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.588] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.625] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.625] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.627] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.676] SetEvent (hEvent=0x218) returned 1
	[0295.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.678] SetEvent (hEvent=0x218) returned 1
	[0295.678] SetEvent (hEvent=0x118) returned 1
	[0295.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.726] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.726] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.732] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.747] SetEvent (hEvent=0x118) returned 1
	[0295.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.794] SetEvent (hEvent=0x118) returned 1
	[0295.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.804] SetEvent (hEvent=0x26c) returned 1
	[0295.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.880] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.881] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.882] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.945] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0295.946] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0295.947] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0295.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0295.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.003] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.003] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.005] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.028] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.029] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.031] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.047] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.048] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.050] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.067] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.068] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.069] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.184] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.185] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.186] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.204] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.204] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.206] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.297] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.298] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.302] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.318] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.319] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.320] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.337] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.337] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.339] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.359] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.360] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.361] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.381] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.381] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.382] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.418] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.418] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.422] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.440] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.440] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.442] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.494] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.495] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.497] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.574] SetEvent (hEvent=0x118) returned 1
	[0296.574] SetEvent (hEvent=0x210) returned 1
	[0296.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.593] SetEvent (hEvent=0x218) returned 1
	[0296.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.625] SetEvent (hEvent=0x1f0) returned 1
	[0296.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.634] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.635] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.638] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.656] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.656] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.658] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.690] SetEvent (hEvent=0x118) returned 1
	[0296.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.721] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.721] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.723] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.737] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.737] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.739] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.798] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.798] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.800] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.850] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.851] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.852] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.869] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.869] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.872] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.888] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.888] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.889] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.960] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.960] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.962] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0296.995] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0296.995] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0296.997] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0296.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.018] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.019] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.020] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.062] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.063] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.064] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.078] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.079] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.080] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.182] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.182] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.185] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.224] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.224] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.225] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.239] SetEvent (hEvent=0x118) returned 1
	[0297.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.261] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.261] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.264] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.293] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.294] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.344] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.365] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.365] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.367] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.385] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.386] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.389] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.406] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.407] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.408] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.466] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.467] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.468] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.489] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.490] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.492] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.517] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.518] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.520] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.546] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.546] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.548] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.692] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.692] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.695] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.712] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.712] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.714] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.736] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.737] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.739] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.760] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.760] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.764] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.782] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.783] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.786] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.805] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.806] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.809] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.846] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.846] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.848] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.866] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.867] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.868] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.963] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0297.964] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0297.966] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0297.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0297.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.023] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.042] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.043] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.044] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.065] SetEvent (hEvent=0x118) returned 1
	[0298.066] SetEvent (hEvent=0x218) returned 1
	[0298.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.088] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.089] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.090] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.141] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.141] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.142] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.159] SetEvent (hEvent=0x218) returned 1
	[0298.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.181] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.182] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.183] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.226] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.226] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.228] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.248] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.249] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.250] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.269] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.269] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.270] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.336] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.337] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.339] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.358] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.358] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.360] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.424] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.424] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.427] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.449] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.449] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.451] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.659] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.659] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.661] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.676] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.676] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.678] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.693] SetEvent (hEvent=0x210) returned 1
	[0298.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.694] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.695] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.696] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.759] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.760] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.762] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.775] SetEvent (hEvent=0x210) returned 1
	[0298.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.776] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.777] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.783] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.843] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.845] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0298.846] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0298.848] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0298.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0298.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.085] SetEvent (hEvent=0x218) returned 1
	[0299.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.118] SetEvent (hEvent=0x218) returned 1
	[0299.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.119] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.119] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.121] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.138] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.138] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.140] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.156] SetEvent (hEvent=0x210) returned 1
	[0299.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.173] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.174] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.176] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.196] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.196] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.198] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.264] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.265] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.268] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.305] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.306] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.307] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.323] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.323] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.326] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.342] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.342] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.344] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.359] SetEvent (hEvent=0x1f0) returned 1
	[0299.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.374] SetEvent (hEvent=0x210) returned 1
	[0299.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.376] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.376] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.377] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.394] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.395] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.397] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.416] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.416] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.418] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.434] SetEvent (hEvent=0x218) returned 1
	[0299.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.449] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.450] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.452] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.470] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.470] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.472] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.489] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.490] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.492] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.508] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.531] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.532] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.534] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.601] SetEvent (hEvent=0x118) returned 1
	[0299.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.605] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.605] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.608] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.654] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.656] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.658] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.719] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.719] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.720] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.758] SetEvent (hEvent=0x118) returned 1
	[0299.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.770] SetEvent (hEvent=0x1f0) returned 1
	[0299.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.816] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.817] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.818] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.835] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.835] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.836] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.850] SetEvent (hEvent=0x218) returned 1
	[0299.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.877] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.877] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.878] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.918] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.918] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.920] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.991] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0299.991] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0299.992] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0299.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0299.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.013] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0300.013] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0300.015] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0300.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.023] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.036] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0300.037] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0300.039] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0300.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.070] SetEvent (hEvent=0x118) returned 1
	[0300.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.079] SetEvent (hEvent=0x1b0) returned 1
	[0300.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.089] SetEvent (hEvent=0x1e8) returned 1
	[0300.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.100] SetEvent (hEvent=0x124) returned 1
	[0300.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.110] SetEvent (hEvent=0x24c) returned 1
	[0300.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.121] SetEvent (hEvent=0x284) returned 1
	[0300.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.131] SetEvent (hEvent=0x284) returned 1
	[0300.131] SetEvent (hEvent=0x22c) returned 1
	[0300.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.150] SetEvent (hEvent=0x12c) returned 1
	[0300.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.160] SetEvent (hEvent=0x25c) returned 1
	[0300.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.196] SetEvent (hEvent=0x264) returned 1
	[0300.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.203] SetEvent (hEvent=0x240) returned 1
	[0300.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.210] SetEvent (hEvent=0x23c) returned 1
	[0300.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.215] SetEvent (hEvent=0x23c) returned 1
	[0300.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.219] SetEvent (hEvent=0x160) returned 1
	[0300.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.241] SetEvent (hEvent=0x164) returned 1
	[0300.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.251] SetEvent (hEvent=0x1bc) returned 1
	[0300.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.262] SetEvent (hEvent=0x1c4) returned 1
	[0300.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.271] SetEvent (hEvent=0x1c4) returned 1
	[0300.271] SetEvent (hEvent=0x274) returned 1
	[0300.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.320] SetEvent (hEvent=0x134) returned 1
	[0300.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.321] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0300.322] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0300.400] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0300.400] SwitchToThread () returned 1
	[0300.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.440] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0300.440] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0300.444] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0300.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.480] SetEvent (hEvent=0x210) returned 1
	[0300.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.481] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0300.482] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0300.534] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0300.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.547] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0300.548] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0300.552] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0300.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.603] SetEvent (hEvent=0x234) returned 1
	[0300.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.607] SetEvent (hEvent=0x174) returned 1
	[0300.607] SetEvent (hEvent=0x12c) returned 1
	[0300.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.610] SetEvent (hEvent=0x25c) returned 1
	[0300.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.612] SetEvent (hEvent=0x210) returned 1
	[0300.613] SetEvent (hEvent=0x27c) returned 1
	[0300.613] SetEvent (hEvent=0x264) returned 1
	[0300.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.629] SetEvent (hEvent=0x23c) returned 1
	[0300.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.632] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0300.633] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0300.638] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0300.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.667] SetEvent (hEvent=0x23c) returned 1
	[0300.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.694] SetEvent (hEvent=0x23c) returned 1
	[0300.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.695] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0300.695] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0300.891] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0300.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0300.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.026] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.026] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.029] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.073] SetEvent (hEvent=0x1bc) returned 1
	[0301.073] SetEvent (hEvent=0x12c) returned 1
	[0301.073] SetEvent (hEvent=0x160) returned 1
	[0301.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.078] SetEvent (hEvent=0x160) returned 1
	[0301.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.089] SetEvent (hEvent=0x160) returned 1
	[0301.090] SetEvent (hEvent=0x1bc) returned 1
	[0301.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.092] SetEvent (hEvent=0x1bc) returned 1
	[0301.092] SetEvent (hEvent=0x160) returned 1
	[0301.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.101] SetEvent (hEvent=0x1bc) returned 1
	[0301.102] SetEvent (hEvent=0x248) returned 1
	[0301.102] SetEvent (hEvent=0x1e0) returned 1
	[0301.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.110] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.110] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.115] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.129] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.129] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.131] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.140] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.141] SetEvent (hEvent=0x1b0) returned 1
	[0301.142] SetEvent (hEvent=0x24c) returned 1
	[0301.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.144] SetEvent (hEvent=0x24c) returned 1
	[0301.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.147] SetEvent (hEvent=0x24c) returned 1
	[0301.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.149] SetEvent (hEvent=0x24c) returned 1
	[0301.149] SetEvent (hEvent=0x1b0) returned 1
	[0301.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.152] SetEvent (hEvent=0x1b0) returned 1
	[0301.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.155] SetEvent (hEvent=0x124) returned 1
	[0301.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.157] SetEvent (hEvent=0x124) returned 1
	[0301.157] SetEvent (hEvent=0x284) returned 1
	[0301.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.160] SetEvent (hEvent=0x284) returned 1
	[0301.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.164] SetEvent (hEvent=0x284) returned 1
	[0301.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.170] SetEvent (hEvent=0x118) returned 1
	[0301.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.174] SetEvent (hEvent=0x118) returned 1
	[0301.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.201] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.201] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.211] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.224] SetEvent (hEvent=0x1e0) returned 1
	[0301.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.236] SetEvent (hEvent=0x1b0) returned 1
	[0301.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.275] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.276] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.277] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.304] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.307] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.307] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.309] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.323] SetEvent (hEvent=0x248) returned 1
	[0301.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.328] SetEvent (hEvent=0x248) returned 1
	[0301.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.349] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.349] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.351] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.383] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.384] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.386] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.420] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.420] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.422] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.441] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.442] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.443] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.464] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.464] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.465] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.546] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.547] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.548] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.567] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.568] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.569] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.604] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.604] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.606] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.622] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.623] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.625] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.660] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.660] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.662] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.679] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.680] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.683] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.756] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.756] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.760] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.780] SetEvent (hEvent=0x24c) returned 1
	[0301.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.800] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.801] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.803] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.895] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0301.895] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0301.897] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0301.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.915] SetEvent (hEvent=0x1e0) returned 1
	[0301.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.954] SetEvent (hEvent=0x164) returned 1
	[0301.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.964] SetEvent (hEvent=0x24c) returned 1
	[0301.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0301.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.149] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.150] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.151] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.168] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.168] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.170] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.206] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.206] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.208] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.221] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.221] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.224] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.243] SetEvent (hEvent=0x1b0) returned 1
	[0302.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.245] SetEvent (hEvent=0x1b0) returned 1
	[0302.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.267] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.267] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.269] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.349] SetEvent (hEvent=0x1b0) returned 1
	[0302.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.413] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.413] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.415] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.435] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.436] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.438] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.456] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.457] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.459] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.478] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.478] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.480] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.496] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.496] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.498] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.517] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.517] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.519] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.539] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.540] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.543] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.608] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.609] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.620] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.658] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.658] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.659] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.678] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.678] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.679] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.715] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.716] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.718] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.734] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.735] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.736] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.752] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.752] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.755] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.862] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.863] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.864] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.885] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.886] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.887] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.902] SetEvent (hEvent=0x1b0) returned 1
	[0302.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.982] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0302.982] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0302.983] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0302.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0302.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.001] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.001] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.003] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.022] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.023] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.024] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.044] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.045] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.047] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.065] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.066] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.067] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.086] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.086] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.088] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.105] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.105] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.108] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.372] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.372] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.386] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.431] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.432] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.434] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.474] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.474] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.476] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.492] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.493] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.495] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.523] SetEvent (hEvent=0x248) returned 1
	[0303.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.524] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.525] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.527] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.550] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.550] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.552] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.645] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.646] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.648] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.676] SetEvent (hEvent=0x284) returned 1
	[0303.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.680] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.680] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.683] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.694] SetEvent (hEvent=0x284) returned 1
	[0303.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.711] SetEvent (hEvent=0x1e0) returned 1
	[0303.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.829] SetEvent (hEvent=0x1e0) returned 1
	[0303.829] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.834] SetEvent (hEvent=0x1e0) returned 1
	[0303.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.848] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.849] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.851] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.908] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.908] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.910] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.950] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.951] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.953] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.985] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0303.985] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0303.987] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0303.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0303.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.005] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0304.006] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0304.008] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0304.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.029] SetEvent (hEvent=0x1b0) returned 1
	[0304.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.043] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0304.043] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0304.044] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0304.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.063] SetEvent (hEvent=0x160) returned 1
	[0304.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.094] SetEvent (hEvent=0x1b0) returned 1
	[0304.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.101] SetEvent (hEvent=0x1b0) returned 1
	[0304.101] SetEvent (hEvent=0x24c) returned 1
	[0304.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.131] SetEvent (hEvent=0x24c) returned 1
	[0304.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.185] SetEvent (hEvent=0x284) returned 1
	[0304.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.296] SetEvent (hEvent=0x160) returned 1
	[0304.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.297] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0304.297] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0304.299] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0304.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.373] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0304.373] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0304.375] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0304.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.592] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0304.592] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0304.593] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0304.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.611] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0304.612] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0304.614] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0304.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.633] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0304.634] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0304.635] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0304.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.688] SetEvent (hEvent=0x284) returned 1
	[0304.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.754] SetEvent (hEvent=0x1e0) returned 1
	[0304.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.777] SetEvent (hEvent=0x284) returned 1
	[0304.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.812] SetEvent (hEvent=0x284) returned 1
	[0304.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.822] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0304.823] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0304.826] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0304.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.865] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0304.866] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0304.868] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0304.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.890] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0304.890] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0304.892] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0304.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.938] SetEvent (hEvent=0x174) returned 1
	[0304.938] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0304.993] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0304.993] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0304.996] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0304.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.018] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.018] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.019] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.077] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.077] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.079] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.147] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.147] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.150] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.191] SetEvent (hEvent=0x174) returned 1
	[0305.191] SetEvent (hEvent=0x284) returned 1
	[0305.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.212] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.242] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.242] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.246] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.275] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.275] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.277] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.298] SetEvent (hEvent=0x1e0) returned 1
	[0305.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.311] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.312] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.313] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.362] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.363] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.364] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.382] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.383] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.384] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.403] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.403] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.405] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.406] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.430] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.431] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.432] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.449] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.449] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.451] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.469] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.470] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.471] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.494] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.494] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.496] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.515] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.516] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.517] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.540] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.541] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.542] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.568] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.568] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.582] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.588] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.589] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.591] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.749] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.750] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.752] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.772] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.773] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.775] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.791] SetEvent (hEvent=0x248) returned 1
	[0305.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.889] SetEvent (hEvent=0x248) returned 1
	[0305.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.897] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.898] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.900] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.961] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0305.961] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0305.963] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0305.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0305.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.010] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.010] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.012] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.032] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.032] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.033] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.051] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.051] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.054] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.086] SetEvent (hEvent=0x1b0) returned 1
	[0306.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.088] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.088] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.089] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.121] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.122] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.124] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.140] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.140] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.143] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.165] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.165] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.167] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.183] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.184] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.186] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.204] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.205] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.207] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.228] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.228] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.229] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.246] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.246] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.248] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.264] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.264] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.267] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.301] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.301] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.304] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.305] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.386] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.387] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.388] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.427] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.427] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.428] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.444] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.445] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.447] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.463] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.464] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.467] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.483] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.484] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.485] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.502] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.502] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.504] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.519] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.519] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.521] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.541] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.541] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.543] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.562] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.563] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.564] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.580] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.580] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.583] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.628] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.629] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.630] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.653] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.654] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.656] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.676] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.677] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.679] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.703] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.703] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.706] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.723] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.723] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.725] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.750] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.750] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.751] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.770] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.770] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.772] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.788] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.788] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.789] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.874] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.875] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.876] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.896] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.897] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.899] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.916] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.916] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.917] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.936] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0306.936] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0306.939] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0306.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0306.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.019] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.019] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.021] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.029] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.037] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.038] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.039] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.100] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.100] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.101] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.116] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.116] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.119] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.136] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.137] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.138] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.220] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.220] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.223] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.237] SetEvent (hEvent=0x174) returned 1
	[0307.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.240] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.240] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.241] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.257] SetEvent (hEvent=0x248) returned 1
	[0307.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.259] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.259] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.260] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.276] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.276] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.279] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.326] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.326] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.328] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.410] SetEvent (hEvent=0x24c) returned 1
	[0307.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.413] SetEvent (hEvent=0x24c) returned 1
	[0307.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.425] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.426] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.428] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.484] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.485] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.487] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.536] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.537] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.538] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.564] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.564] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.566] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.584] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.584] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.586] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.604] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.604] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.606] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.683] SetEvent (hEvent=0x174) returned 1
	[0307.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.738] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.739] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.741] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.774] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.774] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.776] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.817] SetEvent (hEvent=0x24c) returned 1
	[0307.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.828] SetEvent (hEvent=0x284) returned 1
	[0307.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.832] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.832] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.834] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.866] SetEvent (hEvent=0x284) returned 1
	[0307.866] SetEvent (hEvent=0x24c) returned 1
	[0307.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.886] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.887] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.888] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.906] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.907] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.909] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.938] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.949] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0307.950] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0307.951] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0307.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0307.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.011] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.012] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.014] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.023] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.036] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.037] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.038] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.099] SetEvent (hEvent=0x1b0) returned 1
	[0308.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.118] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.118] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.120] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.137] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.138] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.139] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.154] SetEvent (hEvent=0x248) returned 1
	[0308.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.171] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.171] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.172] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.262] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.262] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.263] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.318] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.318] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.322] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.362] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.362] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.365] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.381] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.381] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.382] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.397] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.398] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.400] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.432] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.432] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.434] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.451] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.452] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.454] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.483] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.484] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.487] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.508] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.509] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.510] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.512] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.520] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.525] SetEvent (hEvent=0x164) returned 1
	[0308.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.536] SetEvent (hEvent=0x124) returned 1
	[0308.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.549] SetEvent (hEvent=0x1e0) returned 1
	[0308.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.562] SetEvent (hEvent=0x27c) returned 1
	[0308.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.589] SetEvent (hEvent=0x25c) returned 1
	[0308.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.599] SetEvent (hEvent=0x12c) returned 1
	[0308.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.607] SetEvent (hEvent=0x12c) returned 1
	[0308.607] SetEvent (hEvent=0x1c4) returned 1
	[0308.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.620] SetEvent (hEvent=0x118) returned 1
	[0308.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.631] SetEvent (hEvent=0x1bc) returned 1
	[0308.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.659] SetEvent (hEvent=0x234) returned 1
	[0308.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.676] SetEvent (hEvent=0x210) returned 1
	[0308.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.687] SetEvent (hEvent=0x210) returned 1
	[0308.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.688] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.689] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.690] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.706] SetEvent (hEvent=0x218) returned 1
	[0308.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.718] SetEvent (hEvent=0x22c) returned 1
	[0308.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.728] SetEvent (hEvent=0x22c) returned 1
	[0308.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.739] SetEvent (hEvent=0x1f0) returned 1
	[0308.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.741] SetEvent (hEvent=0x134) returned 1
	[0308.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.750] SetEvent (hEvent=0x2a8) returned 1
	[0308.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.802] SetEvent (hEvent=0x240) returned 1
	[0308.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.803] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.804] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.868] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.901] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0308.901] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0308.903] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0308.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0308.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.027] SetEvent (hEvent=0x1e8) returned 1
	[0309.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.043] SetEvent (hEvent=0x1e8) returned 1
	[0309.043] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.058] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0309.058] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0309.066] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0309.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.096] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0309.097] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0309.098] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0309.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.159] SetEvent (hEvent=0x160) returned 1
	[0309.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.213] SetEvent (hEvent=0x27c) returned 1
	[0309.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.221] SetEvent (hEvent=0x284) returned 1
	[0309.221] SetEvent (hEvent=0x1e8) returned 1
	[0309.221] SetEvent (hEvent=0x118) returned 1
	[0309.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.233] SetEvent (hEvent=0x118) returned 1
	[0309.233] SetEvent (hEvent=0x1e8) returned 1
	[0309.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.251] SetEvent (hEvent=0x1c4) returned 1
	[0309.251] SetEvent (hEvent=0x22c) returned 1
	[0309.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.285] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0309.295] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0309.297] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0309.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.314] SetEvent (hEvent=0x26c) returned 1
	[0309.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.333] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0309.334] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0309.335] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0309.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0309.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.558] SetEvent (hEvent=0x27c) returned 1
	[0310.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.615] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0310.616] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0310.863] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0310.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0310.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.010] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.536] SetEvent (hEvent=0x234) returned 1
	[0311.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.688] SetEvent (hEvent=0x1e8) returned 1
	[0311.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.746] SetEvent (hEvent=0x1e8) returned 1
	[0311.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.747] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.812] SetEvent (hEvent=0x1e8) returned 1
	[0311.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.829] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.879] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0311.880] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0311.890] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0311.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.908] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0311.908] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0311.909] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0311.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.943] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0311.943] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0311.944] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0311.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.960] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0311.960] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0311.963] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0311.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0311.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.009] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0312.009] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0312.012] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0312.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.070] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0312.070] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0312.071] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0312.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.086] SetEvent (hEvent=0x218) returned 1
	[0312.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.119] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0312.120] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0312.122] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0312.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.136] SetEvent (hEvent=0x1e8) returned 1
	[0312.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.150] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.152] SetEvent (hEvent=0x164) returned 1
	[0312.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.167] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0312.167] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0312.169] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0312.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.185] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0312.185] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0312.186] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0312.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.201] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0312.201] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0312.202] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0312.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.219] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0312.220] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0312.221] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0312.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.250] SetEvent (hEvent=0x22c) returned 1
	[0312.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.252] SetEvent (hEvent=0x22c) returned 1
	[0312.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.272] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0312.272] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0312.273] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0312.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.324] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0312.324] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0312.327] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0312.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.405] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0312.405] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0312.407] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0312.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.426] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0312.426] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0312.428] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0312.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.460] SetEvent (hEvent=0x1e8) returned 1
	[0312.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0312.712] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0312.712] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0313.513] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0313.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.542] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0313.542] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0313.543] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0313.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.562] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0313.562] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0313.563] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0313.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.584] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0313.584] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0313.587] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0313.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.622] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0313.623] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0313.624] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0313.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.635] SetEvent (hEvent=0x218) returned 1
	[0313.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.642] SetEvent (hEvent=0x1b0) returned 1
	[0313.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.650] SetEvent (hEvent=0x284) returned 1
	[0313.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.656] SetEvent (hEvent=0x284) returned 1
	[0313.656] SetEvent (hEvent=0x1e0) returned 1
	[0313.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.677] SetEvent (hEvent=0x1e0) returned 1
	[0313.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.688] SetEvent (hEvent=0x210) returned 1
	[0313.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.704] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.723] SetEvent (hEvent=0x134) returned 1
	[0313.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.725] SetEvent (hEvent=0x1c4) returned 1
	[0313.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.731] SetEvent (hEvent=0x1c4) returned 1
	[0313.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.736] SetEvent (hEvent=0x24c) returned 1
	[0313.736] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.744] SetEvent (hEvent=0x25c) returned 1
	[0313.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0313.838] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0313.838] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0313.891] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0313.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.065] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.068] SetEvent (hEvent=0x22c) returned 1
	[0314.068] SetEvent (hEvent=0x1bc) returned 1
	[0314.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.194] SetEvent (hEvent=0x22c) returned 1
	[0314.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.218] SetEvent (hEvent=0x22c) returned 1
	[0314.219] SetEvent (hEvent=0x218) returned 1
	[0314.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.322] SetEvent (hEvent=0x218) returned 1
	[0314.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.384] SetEvent (hEvent=0x1b0) returned 1
	[0314.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.385] SetEvent (hEvent=0x27c) returned 1
	[0314.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.388] SetEvent (hEvent=0x160) returned 1
	[0314.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.409] SetEvent (hEvent=0x234) returned 1
	[0314.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.425] SetEvent (hEvent=0x164) returned 1
	[0314.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.435] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0314.435] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0314.436] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0314.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.502] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0314.502] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0314.506] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0314.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.532] SetEvent (hEvent=0x1e8) returned 1
	[0314.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.623] SetEvent (hEvent=0x1e8) returned 1
	[0314.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.652] SetEvent (hEvent=0x234) returned 1
	[0314.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.733] SetEvent (hEvent=0x27c) returned 1
	[0314.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.735] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0314.736] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0314.737] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0314.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.786] SetEvent (hEvent=0x234) returned 1
	[0314.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.840] SetEvent (hEvent=0x218) returned 1
	[0314.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.845] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0314.846] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0314.850] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0314.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.895] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0314.895] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0314.898] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0314.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.915] SetEvent (hEvent=0x27c) returned 1
	[0314.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.933] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0314.938] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0314.945] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0314.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.965] SetEvent (hEvent=0x234) returned 1
	[0314.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.966] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0314.967] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0314.967] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0314.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0314.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.047] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.148] SetEvent (hEvent=0x1e0) returned 1
	[0315.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.158] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0315.158] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0315.162] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0315.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.341] SetEvent (hEvent=0x24c) returned 1
	[0315.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.394] SetEvent (hEvent=0x1e8) returned 1
	[0315.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.443] SetEvent (hEvent=0x1e8) returned 1
	[0315.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.751] SetEvent (hEvent=0x1e8) returned 1
	[0315.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.841] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0315.843] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0315.857] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0315.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0315.937] SetEvent (hEvent=0x1e8) returned 1
	[0315.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.137] SetEvent (hEvent=0x234) returned 1
	[0316.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.195] SetEvent (hEvent=0x134) returned 1
	[0316.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.233] SetEvent (hEvent=0x1c4) returned 1
	[0316.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.263] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0316.263] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0316.271] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0316.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.478] SetEvent (hEvent=0x1e0) returned 1
	[0316.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.479] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0316.480] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0316.481] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0316.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.510] SetEvent (hEvent=0x1e8) returned 1
	[0316.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.523] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0316.524] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0316.525] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0316.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.541] SetEvent (hEvent=0x24c) returned 1
	[0316.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.549] SetEvent (hEvent=0x218) returned 1
	[0316.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.558] SetEvent (hEvent=0x1c4) returned 1
	[0316.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.577] SetEvent (hEvent=0x1c4) returned 1
	[0316.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.612] SetEvent (hEvent=0x22c) returned 1
	[0316.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.665] SetEvent (hEvent=0x27c) returned 1
	[0316.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.824] SetEvent (hEvent=0x27c) returned 1
	[0316.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.922] SetEvent (hEvent=0x24c) returned 1
	[0316.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.938] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0316.939] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0316.974] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0316.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0316.993] SetEvent (hEvent=0x1e0) returned 1
	[0316.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.125] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0317.125] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0317.141] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0317.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.167] SetEvent (hEvent=0x1c4) returned 1
	[0317.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.181] SetEvent (hEvent=0x134) returned 1
	[0317.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.199] SetEvent (hEvent=0x160) returned 1
	[0317.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.231] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0317.232] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0317.233] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0317.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.253] SetEvent (hEvent=0x1e8) returned 1
	[0317.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.255] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0317.255] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0317.256] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0317.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.393] SetEvent (hEvent=0x234) returned 1
	[0317.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.471] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0317.472] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0317.474] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0317.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.551] SetEvent (hEvent=0x1c4) returned 1
	[0317.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.561] SetEvent (hEvent=0x1c4) returned 1
	[0317.561] SetEvent (hEvent=0x234) returned 1
	[0317.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.568] SetEvent (hEvent=0x234) returned 1
	[0317.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.570] SetEvent (hEvent=0x27c) returned 1
	[0317.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.582] SetEvent (hEvent=0x22c) returned 1
	[0317.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.592] SetEvent (hEvent=0x1b0) returned 1
	[0317.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.595] SetEvent (hEvent=0x1b0) returned 1
	[0317.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.601] SetEvent (hEvent=0x164) returned 1
	[0317.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.616] SetEvent (hEvent=0x1bc) returned 1
	[0317.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.621] SetEvent (hEvent=0x1bc) returned 1
	[0317.621] SetEvent (hEvent=0x118) returned 1
	[0317.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.630] SetEvent (hEvent=0x210) returned 1
	[0317.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.638] SetEvent (hEvent=0x284) returned 1
	[0317.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.648] SetEvent (hEvent=0x2a8) returned 1
	[0317.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.691] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.767] SetEvent (hEvent=0x27c) returned 1
	[0317.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.809] SetEvent (hEvent=0x134) returned 1
	[0317.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.815] SetEvent (hEvent=0x160) returned 1
	[0317.816] SetEvent (hEvent=0x27c) returned 1
	[0317.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.821] SetEvent (hEvent=0x27c) returned 1
	[0317.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.831] SetEvent (hEvent=0x164) returned 1
	[0317.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.883] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0317.884] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0317.887] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0317.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.901] SetEvent (hEvent=0x2a8) returned 1
	[0317.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.979] SetEvent (hEvent=0x160) returned 1
	[0317.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.990] SetEvent (hEvent=0x2a8) returned 1
	[0317.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0317.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.057] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.090] SetEvent (hEvent=0x2a8) returned 1
	[0318.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.341] SetEvent (hEvent=0x2a8) returned 1
	[0318.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.348] SetEvent (hEvent=0x2a8) returned 1
	[0318.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.573] SetEvent (hEvent=0x25c) returned 1
	[0318.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.706] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.722] SetEvent (hEvent=0x160) returned 1
	[0318.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.731] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.778] SetEvent (hEvent=0x1bc) returned 1
	[0318.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.814] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0318.815] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0318.817] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0318.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.831] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.835] SetEvent (hEvent=0x1e8) returned 1
	[0318.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.837] SetEvent (hEvent=0x1e8) returned 1
	[0318.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.839] SetEvent (hEvent=0x1e8) returned 1
	[0318.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.854] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0318.855] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0318.856] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0318.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.914] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0318.915] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0318.916] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0318.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.942] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0318.942] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0318.945] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0318.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.963] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0318.964] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0318.965] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0318.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.981] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0318.982] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0318.983] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0318.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0318.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.036] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.036] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.037] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.053] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.053] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.055] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.059] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.084] SetEvent (hEvent=0x25c) returned 1
	[0319.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.103] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.103] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.104] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.172] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.174] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.175] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.177] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.195] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.196] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.197] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.214] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.214] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.217] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.236] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.237] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.238] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.257] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.258] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.260] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.624] SetEvent (hEvent=0x1e8) returned 1
	[0319.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.650] SetEvent (hEvent=0x1e8) returned 1
	[0319.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.653] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.653] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.654] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.668] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.669] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.670] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.686] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.686] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.689] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.729] SetEvent (hEvent=0x2a8) returned 1
	[0319.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.748] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.749] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.750] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.764] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.765] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.766] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.785] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.785] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.787] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.844] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.844] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.845] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.846] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.852] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.950] SetEvent (hEvent=0x160) returned 1
	[0319.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.983] SetEvent (hEvent=0x2a8) returned 1
	[0319.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.985] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0319.986] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0319.987] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0319.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0319.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.030] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.031] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.033] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.052] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.052] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.055] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.090] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.091] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.093] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.113] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.113] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.115] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.146] SetEvent (hEvent=0x27c) returned 1
	[0320.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.161] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.162] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.163] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.176] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.177] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.179] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.209] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.209] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.210] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.249] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.250] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.251] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.263] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.304] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.307] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.307] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.308] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.325] SetEvent (hEvent=0x27c) returned 1
	[0320.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.347] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.348] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.349] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.349] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.387] SetEvent (hEvent=0x164) returned 1
	[0320.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.402] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.402] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.404] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.422] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.422] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.425] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.445] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.445] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.448] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.484] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.485] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.488] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.505] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.506] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.509] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.587] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.588] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.590] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.633] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.633] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.636] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.813] SetEvent (hEvent=0x284) returned 1
	[0320.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.816] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.816] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.818] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.840] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.840] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.842] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.857] SetEvent (hEvent=0x160) returned 1
	[0320.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.873] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.873] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.875] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.891] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.892] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.894] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.911] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.911] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.913] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.959] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0320.959] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0320.961] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0320.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.986] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0320.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.041] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.041] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.044] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.105] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.105] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.108] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.124] SetEvent (hEvent=0x164) returned 1
	[0321.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.126] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.126] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.127] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.144] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.145] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.147] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.166] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.166] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.168] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.183] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.184] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.185] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.186] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.187] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.211] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.211] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.214] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.251] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.251] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.253] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.302] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.303] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.306] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.339] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.340] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.342] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.360] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.360] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.361] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.399] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.400] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.402] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.473] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.473] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.474] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.507] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.507] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.509] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.526] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.527] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.529] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.544] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.545] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.547] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.564] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.565] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.566] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.580] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.583] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.583] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.586] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.606] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.607] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.608] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.625] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.625] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.628] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.646] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.646] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.647] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.683] SetEvent (hEvent=0x164) returned 1
	[0321.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.702] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.703] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.704] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.723] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.724] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.726] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.743] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.744] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.745] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.746] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.780] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.780] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.783] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.801] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.802] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) returned 0x0
	[0321.803] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0321.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0xc9fed8) returned 0x102
	[0321.828] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0321.829] WaitForSingleObject (hHandle=0x150, dwMilliseconds=0xea60) 

Thread:
	id = 5
	os_tid = 0x714

	[0098.896] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x310fff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x310fff30*=0x120) returned 1
	[0098.896] VirtualQuery (in: lpAddress=0x310fff40, lpBuffer=0x310fff40, dwLength=0x1c | out: lpBuffer=0x310fff40*(BaseAddress=0x310ff000, AllocationBase=0x31000000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0098.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11036000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124
	[0098.898] CloseHandle (hObject=0x124) returned 1
	[0098.898] SetEvent (hEvent=0x118) returned 1
	[0098.899] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x124
	[0098.899] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0101.434] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0101.514] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0111.158] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0114.523] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0114.745] SetEvent (hEvent=0x134) returned 1
	[0114.745] SetEvent (hEvent=0x118) returned 1
	[0114.745] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0115.030] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0115.120] SetEvent (hEvent=0x134) returned 1
	[0115.120] SetEvent (hEvent=0x118) returned 1
	[0115.120] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0117.863] CreateFileW (lpFileName="K:\\" (normalized: "k:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.863] FindFirstFileW (in: lpFileName="K:\\*", lpFindFileData=0x11377bd8 | out: lpFindFileData=0x11377bd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.869] CreateFileW (lpFileName="L:\\" (normalized: "l:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.870] FindFirstFileW (in: lpFileName="L:\\*", lpFindFileData=0x11377bd8 | out: lpFindFileData=0x11377bd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.876] CreateFileW (lpFileName="I:\\" (normalized: "i:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.876] FindFirstFileW (in: lpFileName="I:\\*", lpFindFileData=0x11377bd8 | out: lpFindFileData=0x11377bd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.876] GetProcAddress (hModule=0x75e90000, lpProcName="GetFileAttributesW") returned 0x75efef10
	[0117.877] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20
	[0118.340] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", dwFileAttributes=0x20) returned 1
	[0118.341] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.tl30z" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.tl30z"), dwFlags=0x1) returned 1
	[0121.105] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.tl30z" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0121.479] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0121.479] ReadFile (in: hFile=0x154, lpBuffer=0x113ca000, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x113ca000*, lpNumberOfBytesRead=0x11023e18*=0x28, lpOverlapped=0x0) returned 1
	[0121.490] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xe990) returned 0x102
	[0181.521] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0181.749] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0181.924] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0182.277] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0212.651] GetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 0x20
	[0212.651] SetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx", dwFileAttributes=0x20) returned 1
	[0212.652] MoveFileExW (lpExistingFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), lpNewFileName="C:\\Logs\\Internet Explorer.evtx.tl30z" (normalized: "c:\\logs\\internet explorer.evtx.tl30z"), dwFlags=0x1) returned 1
	[0219.857] CreateFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx.tl30z" (normalized: "c:\\logs\\internet explorer.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210
	[0219.884] GetConsoleMode (in: hConsoleHandle=0x210, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0219.885] ReadFile (in: hFile=0x210, lpBuffer=0x1161e000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1161e000*, lpNumberOfBytesRead=0x11288e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0219.893] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0219.893] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324e8 | out: pbBuffer=0x113324e8) returned 1
	[0219.893] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1163c002 | out: pbBuffer=0x1163c002) returned 1
	[0219.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0219.894] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x102
	[0219.950] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0219.950] SetEvent (hEvent=0x150) returned 1
	[0219.950] SetEvent (hEvent=0x118) returned 1
	[0219.951] GetFileType (hFile=0x210) returned 0x1
	[0219.951] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x115d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0219.951] WriteFile (in: hFile=0x210, lpBuffer=0x11664000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x115d7dfc, lpOverlapped=0x115d7e08 | out: lpBuffer=0x11664000*, lpNumberOfBytesWritten=0x115d7dfc*=0x6ccc, lpOverlapped=0x115d7e08) returned 1
	[0219.952] GetFileType (hFile=0x210) returned 0x1
	[0219.952] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x115d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0219.952] GetFileType (hFile=0x210) returned 0x1
	[0219.952] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x115d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0219.952] WriteFile (in: hFile=0x210, lpBuffer=0x1163a700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x115d7dfc, lpOverlapped=0x115d7e08 | out: lpBuffer=0x1163a700*, lpNumberOfBytesWritten=0x115d7dfc*=0x230, lpOverlapped=0x115d7e08) returned 1
	[0219.953] GetFileType (hFile=0x210) returned 0x1
	[0219.953] SetFilePointerEx (in: hFile=0x210, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x115d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0219.953] CloseHandle (hObject=0x210) returned 1
	[0220.072] GetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx.tl30z" (normalized: "c:\\logs\\internet explorer.evtx.tl30z")) returned 0x20
	[0220.072] SetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0220.283] CreateFileW (lpFileName="C:\\Logs\\Key Management Service.evtx.tl30z" (normalized: "c:\\logs\\key management service.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244
	[0220.746] GetConsoleMode (in: hConsoleHandle=0x244, lpMode=0x1102be08 | out: lpMode=0x1102be08) returned 0
	[0220.746] ReadFile (in: hFile=0x244, lpBuffer=0x1139d000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1102be18, lpOverlapped=0x0 | out: lpBuffer=0x1139d000*, lpNumberOfBytesRead=0x1102be18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0220.848] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e2d0 | out: pbBuffer=0x1104e2d0) returned 1
	[0220.848] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107b302 | out: pbBuffer=0x1107b302) returned 1
	[0220.849] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e300 | out: pbBuffer=0x1104e300) returned 1
	[0220.850] GetFileType (hFile=0x244) returned 0x1
	[0220.850] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0220.850] WriteFile (in: hFile=0x244, lpBuffer=0x112ba000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112ba000*, lpNumberOfBytesWritten=0x1102bdfc*=0x6ccc, lpOverlapped=0x1102be08) returned 1
	[0220.850] GetFileType (hFile=0x244) returned 0x1
	[0220.851] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0220.851] GetFileType (hFile=0x244) returned 0x1
	[0220.851] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0220.851] WriteFile (in: hFile=0x244, lpBuffer=0x1163bc00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1163bc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0220.852] GetFileType (hFile=0x244) returned 0x1
	[0220.852] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0220.852] CloseHandle (hObject=0x244) returned 1
	[0221.213] GetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx.tl30z" (normalized: "c:\\logs\\key management service.evtx.tl30z")) returned 0x20
	[0221.213] SetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0221.624] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0242.257] SetEvent (hEvent=0x218) returned 1
	[0242.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 0x20
	[0242.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", dwFileAttributes=0x20) returned 1
	[0242.258] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.tl30z"), dwFlags=0x1) returned 1
	[0244.956] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0245.280] SetEvent (hEvent=0x1b0) returned 1
	[0245.280] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0253.971] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0254.464] SetEvent (hEvent=0x218) returned 1
	[0254.464] SetEvent (hEvent=0x24c) returned 1
	[0254.464] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0254.590] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0254.640] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0300.101] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0300.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf")) returned 0x220
	[0300.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF", dwFileAttributes=0x220) returned 1
	[0300.109] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0300.164] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0300.164] ReadFile (in: hFile=0x1c8, lpBuffer=0x11464000, nNumberOfBytesToRead=0x80d4, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11464000*, lpNumberOfBytesRead=0x1131ce18*=0x80d4, lpOverlapped=0x0) returned 1
	[0300.983] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6870 | out: pbBuffer=0x113e6870) returned 1
	[0300.983] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c4ea02 | out: pbBuffer=0x11c4ea02) returned 1
	[0300.984] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e68a0 | out: pbBuffer=0x113e68a0) returned 1
	[0300.985] GetFileType (hFile=0x1c8) returned 0x1
	[0300.985] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.985] WriteFile (in: hFile=0x1c8, lpBuffer=0x11112000*, nNumberOfBytesToWrite=0x80d4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11112000*, lpNumberOfBytesWritten=0x1102bdfc*=0x80d4, lpOverlapped=0x1102be08) returned 1
	[0300.986] GetFileType (hFile=0x1c8) returned 0x1
	[0300.986] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x80d4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.986] GetFileType (hFile=0x1c8) returned 0x1
	[0300.986] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.987] WriteFile (in: hFile=0x1c8, lpBuffer=0x11c08e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c08e00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0300.987] GetFileType (hFile=0x1c8) returned 0x1
	[0300.987] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x80d4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.987] CloseHandle (hObject=0x1c8) returned 1
	[0301.018] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.111] SetEvent (hEvent=0x150) returned 1
	[0301.111] SetEvent (hEvent=0x1e0) returned 1
	[0301.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf.tl30z")) returned 0x220
	[0301.111] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.154] SetEvent (hEvent=0x164) returned 1
	[0301.154] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.156] SetEvent (hEvent=0x27c) returned 1
	[0301.156] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.159] GetFileType (hFile=0x29c) returned 0x1
	[0301.159] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11361de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.159] WriteFile (in: hFile=0x29c, lpBuffer=0x113c2e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11361dfc, lpOverlapped=0x11361e08 | out: lpBuffer=0x113c2e00*, lpNumberOfBytesWritten=0x11361dfc*=0x233, lpOverlapped=0x11361e08) returned 1
	[0301.174] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.175] GetFileType (hFile=0x29c) returned 0x1
	[0301.176] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x1df8, lpNewFilePointer=0x0, dwMoveMethod=0x11361de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.176] CloseHandle (hObject=0x29c) returned 1
	[0301.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf.tl30z")) returned 0x220
	[0301.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.200] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.214] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.217] SetEvent (hEvent=0x1e0) returned 1
	[0301.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf")) returned 0x220
	[0301.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF", dwFileAttributes=0x220) returned 1
	[0301.218] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0301.293] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0301.293] ReadFile (in: hFile=0x1d8, lpBuffer=0x1122a000, nNumberOfBytesToRead=0x7938, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1122a000*, lpNumberOfBytesRead=0x11316e18*=0x7938, lpOverlapped=0x0) returned 1
	[0301.299] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0301.299] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332508 | out: pbBuffer=0x11332508) returned 1
	[0301.299] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11413c02 | out: pbBuffer=0x11413c02) returned 1
	[0301.299] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11413ca0 | out: pbBuffer=0x11413ca0) returned 1
	[0301.299] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332540 | out: pbBuffer=0x11332540) returned 1
	[0301.300] GetFileType (hFile=0x1d8) returned 0x1
	[0301.301] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.301] WriteFile (in: hFile=0x1d8, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x7938, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x11339dfc*=0x7938, lpOverlapped=0x11339e08) returned 1
	[0301.301] GetFileType (hFile=0x1d8) returned 0x1
	[0301.302] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7938, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.302] GetFileType (hFile=0x1d8) returned 0x1
	[0301.302] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.302] WriteFile (in: hFile=0x1d8, lpBuffer=0x11216a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11216a80*, lpNumberOfBytesWritten=0x11339dfc*=0x230, lpOverlapped=0x11339e08) returned 1
	[0301.302] GetFileType (hFile=0x1d8) returned 0x1
	[0301.302] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7938, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.303] CloseHandle (hObject=0x1d8) returned 1
	[0301.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf.tl30z")) returned 0x220
	[0301.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.306] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.309] SetEvent (hEvent=0x1b0) returned 1
	[0301.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf")) returned 0x220
	[0301.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF", dwFileAttributes=0x220) returned 1
	[0301.310] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0301.407] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0301.407] ReadFile (in: hFile=0x250, lpBuffer=0x1113d000, nNumberOfBytesToRead=0xf6a, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1113d000*, lpNumberOfBytesRead=0x11316e18*=0xf6a, lpOverlapped=0x0) returned 1
	[0301.413] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0301.413] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c59d02 | out: pbBuffer=0x11c59d02) returned 1
	[0301.413] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0301.414] GetFileType (hFile=0x250) returned 0x1
	[0301.414] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.414] WriteFile (in: hFile=0x250, lpBuffer=0x111e8000*, nNumberOfBytesToWrite=0xf6a, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x111e8000*, lpNumberOfBytesWritten=0x113b3dfc*=0xf6a, lpOverlapped=0x113b3e08) returned 1
	[0301.414] GetFileType (hFile=0x250) returned 0x1
	[0301.414] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xf6a, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.414] GetFileType (hFile=0x250) returned 0x1
	[0301.415] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.415] WriteFile (in: hFile=0x250, lpBuffer=0x1139f880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x1139f880*, lpNumberOfBytesWritten=0x113b3dfc*=0x230, lpOverlapped=0x113b3e08) returned 1
	[0301.415] GetFileType (hFile=0x250) returned 0x1
	[0301.415] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xf6a, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.415] CloseHandle (hObject=0x250) returned 1
	[0301.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf.tl30z")) returned 0x220
	[0301.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.419] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.423] SetEvent (hEvent=0x24c) returned 1
	[0301.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf")) returned 0x220
	[0301.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF", dwFileAttributes=0x220) returned 1
	[0301.424] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0301.553] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0301.553] ReadFile (in: hFile=0x1b4, lpBuffer=0x1136e000, nNumberOfBytesToRead=0x31dc, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x11316e18*=0x31dc, lpOverlapped=0x0) returned 1
	[0301.559] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158280 | out: pbBuffer=0x11158280) returned 1
	[0301.559] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267302 | out: pbBuffer=0x11267302) returned 1
	[0301.560] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267397 | out: pbBuffer=0x11267397) returned 1
	[0301.560] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582b0 | out: pbBuffer=0x111582b0) returned 1
	[0301.560] GetFileType (hFile=0x1b4) returned 0x1
	[0301.560] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.561] WriteFile (in: hFile=0x1b4, lpBuffer=0x11c32000*, nNumberOfBytesToWrite=0x31dc, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11c32000*, lpNumberOfBytesWritten=0x11339dfc*=0x31dc, lpOverlapped=0x11339e08) returned 1
	[0301.561] GetFileType (hFile=0x1b4) returned 0x1
	[0301.561] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x31dc, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.561] GetFileType (hFile=0x1b4) returned 0x1
	[0301.562] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.562] WriteFile (in: hFile=0x1b4, lpBuffer=0x11455c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11455c00*, lpNumberOfBytesWritten=0x11339dfc*=0x230, lpOverlapped=0x11339e08) returned 1
	[0301.562] GetFileType (hFile=0x1b4) returned 0x1
	[0301.562] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x31dc, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.562] CloseHandle (hObject=0x1b4) returned 1
	[0301.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf.tl30z")) returned 0x220
	[0301.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.565] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.569] SetEvent (hEvent=0x284) returned 1
	[0301.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf")) returned 0x220
	[0301.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF", dwFileAttributes=0x220) returned 1
	[0301.570] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0301.647] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0301.647] ReadFile (in: hFile=0x250, lpBuffer=0x110b2000, nNumberOfBytesToRead=0x8166, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110b2000*, lpNumberOfBytesRead=0x11316e18*=0x8166, lpOverlapped=0x0) returned 1
	[0301.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0301.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e7202 | out: pbBuffer=0x112e7202) returned 1
	[0301.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0301.654] GetFileType (hFile=0x250) returned 0x1
	[0301.654] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.655] WriteFile (in: hFile=0x250, lpBuffer=0x1143e000*, nNumberOfBytesToWrite=0x8166, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1143e000*, lpNumberOfBytesWritten=0x1102ddfc*=0x8166, lpOverlapped=0x1102de08) returned 1
	[0301.655] GetFileType (hFile=0x250) returned 0x1
	[0301.655] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x8166, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.656] GetFileType (hFile=0x250) returned 0x1
	[0301.656] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.656] WriteFile (in: hFile=0x250, lpBuffer=0x11145880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11145880*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0301.656] GetFileType (hFile=0x250) returned 0x1
	[0301.656] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x8166, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.656] CloseHandle (hObject=0x250) returned 1
	[0301.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf.tl30z")) returned 0x220
	[0301.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.659] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.663] SetEvent (hEvent=0x284) returned 1
	[0301.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf")) returned 0x220
	[0301.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF", dwFileAttributes=0x220) returned 1
	[0301.664] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0301.745] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0301.745] ReadFile (in: hFile=0x1d8, lpBuffer=0x110f8000, nNumberOfBytesToRead=0x523e, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110f8000*, lpNumberOfBytesRead=0x11316e18*=0x523e, lpOverlapped=0x0) returned 1
	[0301.753] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158880 | out: pbBuffer=0x11158880) returned 1
	[0301.753] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158878 | out: pbBuffer=0x11158878) returned 1
	[0301.753] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c59c02 | out: pbBuffer=0x11c59c02) returned 1
	[0301.754] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111588b0 | out: pbBuffer=0x111588b0) returned 1
	[0301.755] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0x1) returned 0x0
	[0301.757] SetEvent (hEvent=0x150) returned 1
	[0301.757] SetEvent (hEvent=0x164) returned 1
	[0301.757] SetEvent (hEvent=0x24c) returned 1
	[0301.758] GetFileType (hFile=0x1d8) returned 0x1
	[0301.758] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.758] WriteFile (in: hFile=0x1d8, lpBuffer=0x11134000*, nNumberOfBytesToWrite=0x523e, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11134000*, lpNumberOfBytesWritten=0x11339dfc*=0x523e, lpOverlapped=0x11339e08) returned 1
	[0301.759] GetFileType (hFile=0x1d8) returned 0x1
	[0301.759] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x523e, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.759] GetFileType (hFile=0x1d8) returned 0x1
	[0301.759] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.759] WriteFile (in: hFile=0x1d8, lpBuffer=0x11463500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11463500*, lpNumberOfBytesWritten=0x11339dfc*=0x230, lpOverlapped=0x11339e08) returned 1
	[0301.759] GetFileType (hFile=0x1d8) returned 0x1
	[0301.759] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x523e, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.760] CloseHandle (hObject=0x1d8) returned 1
	[0301.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf.tl30z")) returned 0x220
	[0301.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.770] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.772] SetEvent (hEvent=0x160) returned 1
	[0301.772] SetEvent (hEvent=0x24c) returned 1
	[0301.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0301.777] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11ce1e08 | out: lpMode=0x11ce1e08) returned 0
	[0301.777] ReadFile (in: hFile=0x2a0, lpBuffer=0x11124000, nNumberOfBytesToRead=0x2eb4, lpNumberOfBytesRead=0x11ce1e18, lpOverlapped=0x0 | out: lpBuffer=0x11124000*, lpNumberOfBytesRead=0x11ce1e18*=0x2eb4, lpOverlapped=0x0) returned 1
	[0301.788] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0301.788] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11260802 | out: pbBuffer=0x11260802) returned 1
	[0301.788] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126085e | out: pbBuffer=0x1126085e) returned 1
	[0301.788] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0301.789] GetFileType (hFile=0x2a0) returned 0x1
	[0301.789] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11ce1de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.789] WriteFile (in: hFile=0x2a0, lpBuffer=0x11418000*, nNumberOfBytesToWrite=0x2eb4, lpNumberOfBytesWritten=0x11ce1dfc, lpOverlapped=0x11ce1e08 | out: lpBuffer=0x11418000*, lpNumberOfBytesWritten=0x11ce1dfc*=0x2eb4, lpOverlapped=0x11ce1e08) returned 1
	[0301.789] GetFileType (hFile=0x2a0) returned 0x1
	[0301.790] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x2eb4, lpNewFilePointer=0x0, dwMoveMethod=0x11ce1de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.790] GetFileType (hFile=0x2a0) returned 0x1
	[0301.790] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11ce1de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.790] WriteFile (in: hFile=0x2a0, lpBuffer=0x11462a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11ce1dfc, lpOverlapped=0x11ce1e08 | out: lpBuffer=0x11462a80*, lpNumberOfBytesWritten=0x11ce1dfc*=0x230, lpOverlapped=0x11ce1e08) returned 1
	[0301.791] GetFileType (hFile=0x2a0) returned 0x1
	[0301.791] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x2eb4, lpNewFilePointer=0x0, dwMoveMethod=0x11ce1de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.791] CloseHandle (hObject=0x2a0) returned 1
	[0301.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf.tl30z")) returned 0x220
	[0301.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.800] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.806] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.824] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.843] SetEvent (hEvent=0x24c) returned 1
	[0301.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf")) returned 0x220
	[0301.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF", dwFileAttributes=0x220) returned 1
	[0301.844] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.951] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0301.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0301.966] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0301.966] ReadFile (in: hFile=0x1b4, lpBuffer=0x11172000, nNumberOfBytesToRead=0xc6d2, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11172000*, lpNumberOfBytesRead=0x11022e18*=0xc6d2, lpOverlapped=0x0) returned 1
	[0301.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0301.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ff202 | out: pbBuffer=0x112ff202) returned 1
	[0301.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ff2df | out: pbBuffer=0x112ff2df) returned 1
	[0301.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0301.976] GetFileType (hFile=0x1b4) returned 0x1
	[0301.976] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.976] WriteFile (in: hFile=0x1b4, lpBuffer=0x111da000*, nNumberOfBytesToWrite=0xc6d2, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111da000*, lpNumberOfBytesWritten=0x1102ddfc*=0xc6d2, lpOverlapped=0x1102de08) returned 1
	[0301.977] GetFileType (hFile=0x1b4) returned 0x1
	[0301.977] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xc6d2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.977] GetFileType (hFile=0x1b4) returned 0x1
	[0301.978] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.978] WriteFile (in: hFile=0x1b4, lpBuffer=0x11313880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11313880*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0301.978] GetFileType (hFile=0x1b4) returned 0x1
	[0301.978] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xc6d2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.978] CloseHandle (hObject=0x1b4) returned 1
	[0301.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf.tl30z")) returned 0x220
	[0301.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg")) returned 0x220
	[0301.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG", dwFileAttributes=0x220) returned 1
	[0301.985] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg.tl30z"), dwFlags=0x1) returned 1
	[0302.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0302.133] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0302.133] ReadFile (in: hFile=0x2a0, lpBuffer=0x112fe000, nNumberOfBytesToRead=0x42d1, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112fe000*, lpNumberOfBytesRead=0x1128be18*=0x42d1, lpOverlapped=0x0) returned 1
	[0302.141] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0302.141] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11be0802 | out: pbBuffer=0x11be0802) returned 1
	[0302.142] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0302.142] GetFileType (hFile=0x2a0) returned 0x1
	[0302.143] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11bd9de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.143] WriteFile (in: hFile=0x2a0, lpBuffer=0x11120000*, nNumberOfBytesToWrite=0x42d1, lpNumberOfBytesWritten=0x11bd9dfc, lpOverlapped=0x11bd9e08 | out: lpBuffer=0x11120000*, lpNumberOfBytesWritten=0x11bd9dfc*=0x42d1, lpOverlapped=0x11bd9e08) returned 1
	[0302.144] GetFileType (hFile=0x2a0) returned 0x1
	[0302.144] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x42d1, lpNewFilePointer=0x0, dwMoveMethod=0x11bd9de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.144] GetFileType (hFile=0x2a0) returned 0x1
	[0302.144] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11bd9de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.145] WriteFile (in: hFile=0x2a0, lpBuffer=0x11bf6a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11bd9dfc, lpOverlapped=0x11bd9e08 | out: lpBuffer=0x11bf6a80*, lpNumberOfBytesWritten=0x11bd9dfc*=0x22a, lpOverlapped=0x11bd9e08) returned 1
	[0302.145] GetFileType (hFile=0x2a0) returned 0x1
	[0302.145] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x42d1, lpNewFilePointer=0x0, dwMoveMethod=0x11bd9de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.145] CloseHandle (hObject=0x2a0) returned 1
	[0302.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg.tl30z")) returned 0x220
	[0302.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0302.149] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0302.152] SetEvent (hEvent=0x248) returned 1
	[0302.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf")) returned 0x220
	[0302.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF", dwFileAttributes=0x220) returned 1
	[0302.152] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.220] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0302.228] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0304.831] SetEvent (hEvent=0x1e0) returned 1
	[0304.831] SetEvent (hEvent=0x174) returned 1
	[0304.831] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0305.331] SetEvent (hEvent=0x1e0) returned 1
	[0305.331] SetEvent (hEvent=0x284) returned 1
	[0305.331] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0305.561] SetEvent (hEvent=0x1e0) returned 1
	[0305.561] SetEvent (hEvent=0x248) returned 1
	[0305.561] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0305.567] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0305.949] SetEvent (hEvent=0x248) returned 1
	[0305.949] SetEvent (hEvent=0x1b0) returned 1
	[0305.949] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0306.324] SetEvent (hEvent=0x24c) returned 1
	[0306.324] SetEvent (hEvent=0x160) returned 1
	[0306.324] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0306.745] SetEvent (hEvent=0x248) returned 1
	[0306.745] SetEvent (hEvent=0x24c) returned 1
	[0306.745] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0307.155] SetEvent (hEvent=0x24c) returned 1
	[0307.155] SetEvent (hEvent=0x248) returned 1
	[0307.156] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0307.504] SetEvent (hEvent=0x160) returned 1
	[0307.504] SetEvent (hEvent=0x24c) returned 1
	[0307.504] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0307.792] SetEvent (hEvent=0x24c) returned 1
	[0307.792] SetEvent (hEvent=0x160) returned 1
	[0307.792] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0308.209] SetEvent (hEvent=0x174) returned 1
	[0308.209] SetEvent (hEvent=0x24c) returned 1
	[0308.210] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0308.539] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0308.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf")) returned 0x220
	[0308.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF", dwFileAttributes=0x220) returned 1
	[0308.543] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208
	[0308.599] GetConsoleMode (in: hConsoleHandle=0x208, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0308.599] ReadFile (in: hFile=0x208, lpBuffer=0x112bc000, nNumberOfBytesToRead=0x1434, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x112bc000*, lpNumberOfBytesRead=0x11023e18*=0x1434, lpOverlapped=0x0) returned 1
	[0308.864] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) returned 0x0
	[0308.888] SetEvent (hEvent=0x1e0) returned 1
	[0308.888] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3e0 | out: pbBuffer=0x1140f3e0) returned 1
	[0308.888] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3d8 | out: pbBuffer=0x1140f3d8) returned 1
	[0308.888] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11467c02 | out: pbBuffer=0x11467c02) returned 1
	[0308.889] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0308.889] GetFileType (hFile=0x208) returned 0x1
	[0308.889] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.889] WriteFile (in: hFile=0x208, lpBuffer=0x11c08000*, nNumberOfBytesToWrite=0x1434, lpNumberOfBytesWritten=0x1145ddfc, lpOverlapped=0x1145de08 | out: lpBuffer=0x11c08000*, lpNumberOfBytesWritten=0x1145ddfc*=0x1434, lpOverlapped=0x1145de08) returned 1
	[0308.889] GetFileType (hFile=0x208) returned 0x1
	[0308.890] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x1434, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.890] GetFileType (hFile=0x208) returned 0x1
	[0308.890] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.890] WriteFile (in: hFile=0x208, lpBuffer=0x11bf0700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1145ddfc, lpOverlapped=0x1145de08 | out: lpBuffer=0x11bf0700*, lpNumberOfBytesWritten=0x1145ddfc*=0x227, lpOverlapped=0x1145de08) returned 1
	[0308.890] GetFileType (hFile=0x208) returned 0x1
	[0308.890] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x1434, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.890] CloseHandle (hObject=0x208) returned 1
	[0308.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf.tl30z")) returned 0x220
	[0308.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.891] SetEvent (hEvent=0x164) returned 1
	[0308.891] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xffffffff) 

Thread:
	id = 6
	os_tid = 0xb64

	[0098.900] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x311fff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x311fff30*=0x128) returned 1
	[0098.901] VirtualQuery (in: lpAddress=0x311fff40, lpBuffer=0x311fff40, dwLength=0x1c | out: lpBuffer=0x311fff40*(BaseAddress=0x311ff000, AllocationBase=0x31100000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0098.901] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x12c
	[0098.901] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0099.574] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.092] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0101.235] SetEvent (hEvent=0x134) returned 1
	[0101.235] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x31300000
	[0101.236] GetProcAddress (hModule=0x75e90000, lpProcName="ReadFile") returned 0x75eff090
	[0101.236] ReadFile (in: hFile=0x15c, lpBuffer=0x110c0000, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x11020eb8, lpOverlapped=0x0 | out: lpBuffer=0x110c0000*, lpNumberOfBytesRead=0x11020eb8*=0x1c2, lpOverlapped=0x0) returned 1
	[0110.354] SetEvent (hEvent=0x150) returned 1
	[0110.357] ReadFile (in: hFile=0x15c, lpBuffer=0x110cc1c2, nNumberOfBytesToRead=0x43e, lpNumberOfBytesRead=0x11020eb8, lpOverlapped=0x0 | out: lpBuffer=0x110cc1c2*, lpNumberOfBytesRead=0x11020eb8*=0x43e, lpOverlapped=0x0) returned 1
	[0110.364] ReadFile (in: hFile=0x15c, lpBuffer=0x110ce600, nNumberOfBytesToRead=0x800, lpNumberOfBytesRead=0x11020eb8, lpOverlapped=0x0 | out: lpBuffer=0x110ce600*, lpNumberOfBytesRead=0x11020eb8*=0x800, lpOverlapped=0x0) returned 1
	[0110.375] ReadFile (in: hFile=0x15c, lpBuffer=0x110d0e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x11020eb8, lpOverlapped=0x0 | out: lpBuffer=0x110d0e00*, lpNumberOfBytesRead=0x11020eb8*=0x1000, lpOverlapped=0x0) returned 1
	[0110.390] ReadFile (in: hFile=0x15c, lpBuffer=0x110d3e00, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x11020eb8, lpOverlapped=0x0 | out: lpBuffer=0x110d3e00*, lpNumberOfBytesRead=0x11020eb8*=0x11b7, lpOverlapped=0x0) returned 1
	[0110.403] ReadFile (in: hFile=0x15c, lpBuffer=0x110d4fb7, nNumberOfBytesToRead=0xe49, lpNumberOfBytesRead=0x11020eb8, lpOverlapped=0x0 | out: lpBuffer=0x110d4fb7*, lpNumberOfBytesRead=0x11020eb8*=0xe49, lpOverlapped=0x0) returned 1
	[0110.425] ReadFile (in: hFile=0x15c, lpBuffer=0x110d9e00, nNumberOfBytesToRead=0x4000, lpNumberOfBytesRead=0x11020eb8, lpOverlapped=0x0 | out: lpBuffer=0x110d9e00*, lpNumberOfBytesRead=0x11020eb8*=0x1199, lpOverlapped=0x0) returned 1
	[0110.443] ReadFile (in: hFile=0x15c, lpBuffer=0x110daf99, nNumberOfBytesToRead=0x2e67, lpNumberOfBytesRead=0x11020eb8, lpOverlapped=0x0 | out: lpBuffer=0x110daf99*, lpNumberOfBytesRead=0x11020eb8*=0x117b, lpOverlapped=0x0) returned 1
	[0110.455] ReadFile (in: hFile=0x15c, lpBuffer=0x110dc114, nNumberOfBytesToRead=0x1cec, lpNumberOfBytesRead=0x11020eb8, lpOverlapped=0x0 | out: lpBuffer=0x110dc114*, lpNumberOfBytesRead=0x11020eb8*=0x1021, lpOverlapped=0x0) returned 1
	[0110.469] ReadFile (in: hFile=0x15c, lpBuffer=0x110dd135, nNumberOfBytesToRead=0xccb, lpNumberOfBytesRead=0x11020eb8, lpOverlapped=0x0 | out: lpBuffer=0x110dd135*, lpNumberOfBytesRead=0x11020eb8*=0xacd, lpOverlapped=0x0) returned 1
	[0110.471] ReadFile (in: hFile=0x15c, lpBuffer=0x110e5c02, nNumberOfBytesToRead=0x81fe, lpNumberOfBytesRead=0x11020eb8, lpOverlapped=0x0 | out: lpBuffer=0x110e5c02, lpNumberOfBytesRead=0x11020eb8*=0x0, lpOverlapped=0x0) returned 0
	[0112.259] SetEvent (hEvent=0x150) returned 1
	[0112.259] CloseHandle (hObject=0x15c) returned 1
	[0112.261] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.371] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.746] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.980] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0115.120] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0115.514] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0116.892] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.302] SetEvent (hEvent=0x134) returned 1
	[0117.308] CreateFileW (lpFileName="M:\\" (normalized: "m:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.309] FindFirstFileW (in: lpFileName="M:\\*", lpFindFileData=0x11341bd8 | out: lpFindFileData=0x11341bd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.314] CreateFileW (lpFileName="B:\\" (normalized: "b:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.317] FindFirstFileW (in: lpFileName="B:\\*", lpFindFileData=0x11341bd8 | out: lpFindFileData=0x11341bd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.317] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.317] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x11341bd8 | out: lpFindFileData=0x11341bd8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x7eff88
	[0117.318] GetProcAddress (hModule=0x75e90000, lpProcName="FindNextFileW") returned 0x75efee40
	[0117.318] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0117.318] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0117.318] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0117.319] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0117.319] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0117.319] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1
	[0117.319] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0117.319] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0117.319] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1
	[0117.319] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3d7ebe9, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0117.320] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0117.320] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0117.320] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0117.320] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x15e2d9e1, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x15e2d9e1, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0117.320] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
	[0117.320] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
	[0117.320] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0117.320] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1
	[0117.320] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1
	[0117.320] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0117.321] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0117.321] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1
	[0117.321] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341c54 | out: lpFindFileData=0x11341c54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0117.321] GetProcAddress (hModule=0x75e90000, lpProcName="FindClose") returned 0x75efed70
	[0117.321] FindClose (in: hFindFile=0x7eff88 | out: hFindFile=0x7eff88) returned 1
	[0117.322] CreateFileW (lpFileName="C:\\$GetCurrent\\" (normalized: "c:\\$getcurrent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.322] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x11341b54 | out: lpFindFileData=0x11341b54*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eff88
	[0117.326] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0117.326] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0117.327] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0117.327] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0117.327] FindClose (in: hFindFile=0x7eff88 | out: hFindFile=0x7eff88) returned 1
	[0117.327] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\" (normalized: "c:\\$getcurrent\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.327] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eff88
	[0117.333] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0117.333] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1
	[0117.333] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1
	[0117.333] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1
	[0117.333] FindNextFileW (in: hFindFile=0x7eff88, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0117.334] FindClose (in: hFindFile=0x7eff88 | out: hFindFile=0x7eff88) returned 1
	[0117.336] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1
	[0117.852] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2)) returned 1
	[0117.930] SetEvent (hEvent=0x118) returned 1
	[0117.930] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1
	[0118.462] SetEvent (hEvent=0x134) returned 1
	[0118.462] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\$getcurrent\\logs\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154
	[0119.562] SetEvent (hEvent=0x150) returned 1
	[0119.563] GetConsoleMode (in: hConsoleHandle=0x154, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0119.565] GetProcAddress (hModule=0x75e90000, lpProcName="WriteFile") returned 0x75eff180
	[0119.565] WriteFile (in: hFile=0x154, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0119.569] CloseHandle (hObject=0x154) returned 1
	[0119.875] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs" (normalized: "c:\\$getcurrent\\logs"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x4aea91a9, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x4aea91a9, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0122.227] SetEvent (hEvent=0x150) returned 1
	[0122.228] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\" (normalized: "c:\\$getcurrent\\safeos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.228] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f21b0
	[0122.517] FindNextFileW (in: hFindFile=0x7f21b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.161] SetEvent (hEvent=0x150) returned 1
	[0126.161] FindNextFileW (in: hFindFile=0x7f21b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1
	[0126.161] FindNextFileW (in: hFindFile=0x7f21b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1
	[0126.161] FindNextFileW (in: hFindFile=0x7f21b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1
	[0126.161] FindNextFileW (in: hFindFile=0x7f21b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1
	[0126.161] FindNextFileW (in: hFindFile=0x7f21b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1
	[0126.161] FindNextFileW (in: hFindFile=0x7f21b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.162] FindClose (in: hFindFile=0x7f21b0 | out: hFindFile=0x7f21b0) returned 1
	[0126.165] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8)) returned 1
	[0126.177] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c)) returned 1
	[0126.399] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241)) returned 1
	[0126.400] SetEvent (hEvent=0x134) returned 1
	[0126.400] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133)) returned 1
	[0127.432] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a)) returned 1
	[0130.126] SetEvent (hEvent=0x150) returned 1
	[0130.126] SetEvent (hEvent=0x164) returned 1
	[0130.257] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\$getcurrent\\safeos\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac
	[0131.852] GetConsoleMode (in: hConsoleHandle=0x1ac, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0131.853] WriteFile (in: hFile=0x1ac, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0132.572] SetEvent (hEvent=0x150) returned 1
	[0132.572] CloseHandle (hObject=0x1ac) returned 1
	[0133.092] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\SafeOS" (normalized: "c:\\$getcurrent\\safeos"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x529e10a7, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x529e10a7, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0134.840] CreateFileW (lpFileName="C:\\$GetCurrent\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\$getcurrent\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0134.853] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11341e34 | out: lpMode=0x11341e34) returned 0
	[0134.853] WriteFile (in: hFile=0x184, lpBuffer=0x111fe000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341e04, lpOverlapped=0x0 | out: lpBuffer=0x111fe000*, lpNumberOfBytesWritten=0x11341e04*=0x292, lpOverlapped=0x0) returned 1
	[0134.859] CloseHandle (hObject=0x184) returned 1
	[0134.863] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent" (normalized: "c:\\$getcurrent"), fInfoLevelId=0x0, lpFileInformation=0x11341cac | out: lpFileInformation=0x11341cac*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x53d76468, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x53d76468, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.864] GetFileAttributesExW (in: lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), fInfoLevelId=0x0, lpFileInformation=0x11341cac | out: lpFileInformation=0x11341cac*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.876] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\" (normalized: "c:\\588bce7c90097ed212"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.877] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x11341b54 | out: lpFindFileData=0x11341b54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2030
	[0134.982] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.094] SetEvent (hEvent=0x150) returned 1
	[0135.094] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1
	[0135.094] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1
	[0135.094] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1
	[0135.094] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1
	[0135.094] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1
	[0135.094] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1
	[0135.094] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0135.094] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1
	[0135.094] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0135.094] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1
	[0135.094] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1
	[0135.095] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0135.096] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
	[0135.096] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1
	[0135.096] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1
	[0135.096] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1
	[0135.096] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0135.096] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1
	[0135.096] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1
	[0135.096] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1
	[0135.096] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1
	[0135.096] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1
	[0135.096] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1
	[0135.096] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1
	[0135.628] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0135.628] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1
	[0135.628] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1
	[0135.628] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0135.629] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1
	[0135.629] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1
	[0135.629] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1
	[0135.629] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1
	[0135.629] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1
	[0135.629] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0135.629] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1
	[0135.629] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0135.629] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1
	[0135.629] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0135.629] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1
	[0135.630] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1
	[0135.630] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1
	[0135.630] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.630] FindClose (in: hFindFile=0x7f2030 | out: hFindFile=0x7f2030) returned 1
	[0135.634] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\" (normalized: "c:\\588bce7c90097ed212\\1025"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.695] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22b0
	[0135.794] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.795] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0135.795] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0135.795] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0135.795] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.795] FindClose (in: hFindFile=0x7f22b0 | out: hFindFile=0x7f22b0) returned 1
	[0135.796] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1
	[0135.876] SetEvent (hEvent=0x164) returned 1
	[0135.876] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358)) returned 1
	[0135.882] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1
	[0136.036] SetEvent (hEvent=0x118) returned 1
	[0136.036] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1025\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0136.772] SetEvent (hEvent=0x150) returned 1
	[0136.772] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0136.774] WriteFile (in: hFile=0x174, lpBuffer=0x11218000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x11218000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0136.777] CloseHandle (hObject=0x174) returned 1
	[0136.920] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025" (normalized: "c:\\588bce7c90097ed212\\1025"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x5506d683, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x5506d683, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0138.525] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\" (normalized: "c:\\588bce7c90097ed212\\1028"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.526] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1df0
	[0138.664] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.665] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0138.665] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0138.665] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0138.665] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.665] FindClose (in: hFindFile=0x7f1df0 | out: hFindFile=0x7f1df0) returned 1
	[0138.666] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1
	[0138.802] SetEvent (hEvent=0x160) returned 1
	[0138.802] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1
	[0139.171] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1
	[0139.684] SetEvent (hEvent=0x150) returned 1
	[0139.684] SetEvent (hEvent=0x164) returned 1
	[0139.685] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1028\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0140.400] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0140.401] WriteFile (in: hFile=0x184, lpBuffer=0x111fe000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x111fe000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0140.404] CloseHandle (hObject=0x184) returned 1
	[0140.668] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0140.794] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80
	[0140.794] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0140.794] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0142.717] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0142.718] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0142.718] ReadFile (in: hFile=0x170, lpBuffer=0x1141c000, nNumberOfBytesToRead=0xe8e, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1141c000*, lpNumberOfBytesRead=0x11425e18*=0xe8e, lpOverlapped=0x0) returned 1
	[0142.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0142.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11406802 | out: pbBuffer=0x11406802) returned 1
	[0142.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140683f | out: pbBuffer=0x1140683f) returned 1
	[0142.756] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e1c0 | out: pbBuffer=0x1104e1c0) returned 1
	[0142.757] GetFileType (hFile=0x170) returned 0x1
	[0142.757] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0142.757] WriteFile (in: hFile=0x170, lpBuffer=0x112fa000*, nNumberOfBytesToWrite=0xe8e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112fa000*, lpNumberOfBytesWritten=0x11031dfc*=0xe8e, lpOverlapped=0x11031e08) returned 1
	[0142.758] GetFileType (hFile=0x170) returned 0x1
	[0142.758] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xe8e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0142.758] GetFileType (hFile=0x170) returned 0x1
	[0142.758] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0142.759] WriteFile (in: hFile=0x170, lpBuffer=0x113a2a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113a2a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0142.760] GetFileType (hFile=0x170) returned 0x1
	[0142.760] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xe8e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0142.760] CloseHandle (hObject=0x170) returned 1
	[0142.764] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.tl30z")) returned 0x20
	[0142.764] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0142.765] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80
	[0142.765] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0142.766] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0144.620] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x170
	[0144.620] GetConsoleMode (in: hConsoleHandle=0x170, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0144.621] ReadFile (in: hFile=0x170, lpBuffer=0x110d6000, nNumberOfBytesToRead=0xcf2, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x110d6000*, lpNumberOfBytesRead=0x11022e18*=0xcf2, lpOverlapped=0x0) returned 1
	[0144.631] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e460 | out: pbBuffer=0x1104e460) returned 1
	[0144.632] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e458 | out: pbBuffer=0x1104e458) returned 1
	[0144.632] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11407c02 | out: pbBuffer=0x11407c02) returned 1
	[0144.632] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e490 | out: pbBuffer=0x1104e490) returned 1
	[0144.633] GetFileType (hFile=0x170) returned 0x1
	[0144.633] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0144.634] WriteFile (in: hFile=0x170, lpBuffer=0x11094000*, nNumberOfBytesToWrite=0xcf2, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11094000*, lpNumberOfBytesWritten=0x11031dfc*=0xcf2, lpOverlapped=0x11031e08) returned 1
	[0144.634] GetFileType (hFile=0x170) returned 0x1
	[0144.634] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xcf2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0144.634] GetFileType (hFile=0x170) returned 0x1
	[0144.634] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0144.635] WriteFile (in: hFile=0x170, lpBuffer=0x110ea700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110ea700*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0144.635] GetFileType (hFile=0x170) returned 0x1
	[0144.635] SetFilePointerEx (in: hFile=0x170, liDistanceToMove=0xcf2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0144.635] CloseHandle (hObject=0x170) returned 1
	[0144.639] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.tl30z")) returned 0x20
	[0144.639] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0144.640] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80
	[0144.640] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0144.640] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0145.495] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0145.639] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0145.639] ReadFile (in: hFile=0x1cc, lpBuffer=0x110d6d80, nNumberOfBytesToRead=0xd5b, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x110d6d80*, lpNumberOfBytesRead=0x1131ae18*=0xd5b, lpOverlapped=0x0) returned 1
	[0145.646] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e5d0 | out: pbBuffer=0x1104e5d0) returned 1
	[0145.646] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e5c8 | out: pbBuffer=0x1104e5c8) returned 1
	[0145.646] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d4602 | out: pbBuffer=0x111d4602) returned 1
	[0145.646] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d468f | out: pbBuffer=0x111d468f) returned 1
	[0145.647] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d46a4 | out: pbBuffer=0x111d46a4) returned 1
	[0145.647] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e600 | out: pbBuffer=0x1104e600) returned 1
	[0145.648] GetFileType (hFile=0x1cc) returned 0x1
	[0145.648] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0145.648] WriteFile (in: hFile=0x1cc, lpBuffer=0x111e4000*, nNumberOfBytesToWrite=0xd5b, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111e4000*, lpNumberOfBytesWritten=0x11031dfc*=0xd5b, lpOverlapped=0x11031e08) returned 1
	[0145.648] GetFileType (hFile=0x1cc) returned 0x1
	[0145.649] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xd5b, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0145.649] GetFileType (hFile=0x1cc) returned 0x1
	[0145.649] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0145.649] WriteFile (in: hFile=0x1cc, lpBuffer=0x110eb500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110eb500*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0145.649] GetFileType (hFile=0x1cc) returned 0x1
	[0145.649] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xd5b, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0145.650] CloseHandle (hObject=0x1cc) returned 1
	[0145.713] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.tl30z")) returned 0x20
	[0145.713] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0145.714] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0146.059] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80
	[0146.059] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0146.060] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0146.792] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0146.792] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0146.793] ReadFile (in: hFile=0x184, lpBuffer=0x1115f000, nNumberOfBytesToRead=0xe76, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1115f000*, lpNumberOfBytesRead=0x1131de18*=0xe76, lpOverlapped=0x0) returned 1
	[0146.861] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0147.307] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0147.449] SetEvent (hEvent=0x134) returned 1
	[0147.449] ReadFile (in: hFile=0x16c, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x7858, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x1131be18*=0x7858, lpOverlapped=0x0) returned 1
	[0147.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0147.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11062802 | out: pbBuffer=0x11062802) returned 1
	[0147.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11062861 | out: pbBuffer=0x11062861) returned 1
	[0147.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110628e7 | out: pbBuffer=0x110628e7) returned 1
	[0147.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0147.574] GetFileType (hFile=0x16c) returned 0x1
	[0147.574] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0147.574] WriteFile (in: hFile=0x16c, lpBuffer=0x113da000*, nNumberOfBytesToWrite=0x7858, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113da000*, lpNumberOfBytesWritten=0x11031dfc*=0x7858, lpOverlapped=0x11031e08) returned 1
	[0147.575] GetFileType (hFile=0x16c) returned 0x1
	[0147.575] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x7858, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0147.575] GetFileType (hFile=0x16c) returned 0x1
	[0147.576] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0147.576] WriteFile (in: hFile=0x16c, lpBuffer=0x11398a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11398a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0147.576] GetFileType (hFile=0x16c) returned 0x1
	[0147.576] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x7858, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0147.576] CloseHandle (hObject=0x16c) returned 1
	[0147.585] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.tl30z")) returned 0x20
	[0147.585] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0147.588] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e2e0 | out: pbBuffer=0x1104e2e0) returned 1
	[0147.588] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11063202 | out: pbBuffer=0x11063202) returned 1
	[0147.588] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1106323b | out: pbBuffer=0x1106323b) returned 1
	[0147.589] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e310 | out: pbBuffer=0x1104e310) returned 1
	[0147.589] GetFileType (hFile=0x184) returned 0x1
	[0147.589] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0147.589] WriteFile (in: hFile=0x184, lpBuffer=0x110a6000*, nNumberOfBytesToWrite=0xe76, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110a6000*, lpNumberOfBytesWritten=0x11031dfc*=0xe76, lpOverlapped=0x11031e08) returned 1
	[0147.590] GetFileType (hFile=0x184) returned 0x1
	[0147.590] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xe76, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0147.590] GetFileType (hFile=0x184) returned 0x1
	[0147.590] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0147.590] WriteFile (in: hFile=0x184, lpBuffer=0x11399880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11399880*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0147.591] GetFileType (hFile=0x184) returned 0x1
	[0147.591] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xe76, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0147.591] CloseHandle (hObject=0x184) returned 1
	[0147.597] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.tl30z")) returned 0x20
	[0147.598] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0147.599] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e450 | out: pbBuffer=0x1104e450) returned 1
	[0147.599] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e448 | out: pbBuffer=0x1104e448) returned 1
	[0147.600] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11063c02 | out: pbBuffer=0x11063c02) returned 1
	[0147.600] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11063cdd | out: pbBuffer=0x11063cdd) returned 1
	[0147.600] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e480 | out: pbBuffer=0x1104e480) returned 1
	[0147.602] GetFileType (hFile=0x1b4) returned 0x1
	[0147.602] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0147.708] WriteFile (in: hFile=0x1b4, lpBuffer=0x113c0000*, nNumberOfBytesToWrite=0x81a0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113c0000*, lpNumberOfBytesWritten=0x11031dfc*=0x81a0, lpOverlapped=0x11031e08) returned 1
	[0147.709] GetFileType (hFile=0x1b4) returned 0x1
	[0147.709] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x81a0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0147.709] GetFileType (hFile=0x1b4) returned 0x1
	[0147.709] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0147.709] WriteFile (in: hFile=0x1b4, lpBuffer=0x110b6700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110b6700*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0147.710] GetFileType (hFile=0x1b4) returned 0x1
	[0147.710] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x81a0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0147.710] CloseHandle (hObject=0x1b4) returned 1
	[0147.720] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.tl30z")) returned 0x20
	[0147.720] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0147.721] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80
	[0147.721] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0147.722] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0149.084] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0149.084] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0149.085] ReadFile (in: hFile=0x1b4, lpBuffer=0x11292000, nNumberOfBytesToRead=0x109e, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11292000*, lpNumberOfBytesRead=0x11023e18*=0x109e, lpOverlapped=0x0) returned 1
	[0149.156] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e5b0 | out: pbBuffer=0x1104e5b0) returned 1
	[0149.156] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a4702 | out: pbBuffer=0x112a4702) returned 1
	[0149.156] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a4734 | out: pbBuffer=0x112a4734) returned 1
	[0149.156] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a4752 | out: pbBuffer=0x112a4752) returned 1
	[0149.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e5e0 | out: pbBuffer=0x1104e5e0) returned 1
	[0149.157] GetFileType (hFile=0x1b4) returned 0x1
	[0149.157] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0149.157] WriteFile (in: hFile=0x1b4, lpBuffer=0x112b8000*, nNumberOfBytesToWrite=0x109e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112b8000*, lpNumberOfBytesWritten=0x11031dfc*=0x109e, lpOverlapped=0x11031e08) returned 1
	[0149.158] GetFileType (hFile=0x1b4) returned 0x1
	[0149.158] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x109e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0149.158] GetFileType (hFile=0x1b4) returned 0x1
	[0149.158] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0149.159] WriteFile (in: hFile=0x1b4, lpBuffer=0x110b7500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110b7500*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0149.159] GetFileType (hFile=0x1b4) returned 0x1
	[0149.159] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x109e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0149.159] CloseHandle (hObject=0x1b4) returned 1
	[0149.161] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.tl30z")) returned 0x20
	[0149.161] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0149.161] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80
	[0149.162] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0149.162] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0150.463] SetEvent (hEvent=0x150) returned 1
	[0150.463] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0150.516] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11027e08 | out: lpMode=0x11027e08) returned 0
	[0150.516] ReadFile (in: hFile=0x1b4, lpBuffer=0x11212000, nNumberOfBytesToRead=0x7d18, lpNumberOfBytesRead=0x11027e18, lpOverlapped=0x0 | out: lpBuffer=0x11212000*, lpNumberOfBytesRead=0x11027e18*=0x7d18, lpOverlapped=0x0) returned 1
	[0150.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e740 | out: pbBuffer=0x1104e740) returned 1
	[0150.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e738 | out: pbBuffer=0x1104e738) returned 1
	[0150.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a5102 | out: pbBuffer=0x112a5102) returned 1
	[0150.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a5184 | out: pbBuffer=0x112a5184) returned 1
	[0150.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e770 | out: pbBuffer=0x1104e770) returned 1
	[0150.525] GetFileType (hFile=0x1b4) returned 0x1
	[0150.525] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0150.525] WriteFile (in: hFile=0x1b4, lpBuffer=0x11246000*, nNumberOfBytesToWrite=0x7d18, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11246000*, lpNumberOfBytesWritten=0x11031dfc*=0x7d18, lpOverlapped=0x11031e08) returned 1
	[0150.526] GetFileType (hFile=0x1b4) returned 0x1
	[0150.526] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7d18, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0150.526] GetFileType (hFile=0x1b4) returned 0x1
	[0150.526] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0150.526] WriteFile (in: hFile=0x1b4, lpBuffer=0x11222380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11222380*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0150.526] GetFileType (hFile=0x1b4) returned 0x1
	[0150.527] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7d18, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0150.527] CloseHandle (hObject=0x1b4) returned 1
	[0150.591] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.tl30z")) returned 0x20
	[0150.594] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0150.640] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0150.783] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0150.830] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0150.901] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0150.945] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0151.327] SetEvent (hEvent=0x118) returned 1
	[0151.327] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80
	[0151.328] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0151.328] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0151.795] SetEvent (hEvent=0x150) returned 1
	[0151.795] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0152.165] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0152.328] SetEvent (hEvent=0x134) returned 1
	[0152.328] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11318e08 | out: lpMode=0x11318e08) returned 0
	[0152.328] SwitchToThread () returned 1
	[0152.417] SwitchToThread () returned 1
	[0152.463] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0152.628] SetEvent (hEvent=0x1b0) returned 1
	[0152.628] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80
	[0152.629] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0152.629] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0154.943] SetEvent (hEvent=0x150) returned 1
	[0154.943] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0155.137] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0155.137] ReadFile (in: hFile=0x1b4, lpBuffer=0x11404000, nNumberOfBytesToRead=0x7c6d, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11404000*, lpNumberOfBytesRead=0x1131ce18*=0x7c6d, lpOverlapped=0x0) returned 1
	[0155.207] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364440 | out: pbBuffer=0x11364440) returned 1
	[0155.207] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1131fd02 | out: pbBuffer=0x1131fd02) returned 1
	[0155.207] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1131fd9b | out: pbBuffer=0x1131fd9b) returned 1
	[0155.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364470 | out: pbBuffer=0x11364470) returned 1
	[0155.211] GetFileType (hFile=0x1b4) returned 0x1
	[0155.211] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0155.211] WriteFile (in: hFile=0x1b4, lpBuffer=0x11296000*, nNumberOfBytesToWrite=0x7c6d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11296000*, lpNumberOfBytesWritten=0x1133ddfc*=0x7c6d, lpOverlapped=0x1133de08) returned 1
	[0155.212] GetFileType (hFile=0x1b4) returned 0x1
	[0155.212] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7c6d, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0155.212] GetFileType (hFile=0x1b4) returned 0x1
	[0155.212] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0155.212] WriteFile (in: hFile=0x1b4, lpBuffer=0x11446700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11446700*, lpNumberOfBytesWritten=0x1133ddfc*=0x236, lpOverlapped=0x1133de08) returned 1
	[0155.212] GetFileType (hFile=0x1b4) returned 0x1
	[0155.213] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7c6d, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0155.213] CloseHandle (hObject=0x1b4) returned 1
	[0155.225] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.tl30z")) returned 0x20
	[0155.225] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0155.226] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.609] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.736] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0157.234] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0158.634] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0158.756] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.043] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.766] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.907] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.954] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0160.774] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0161.413] SetEvent (hEvent=0x118) returned 1
	[0161.413] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0161.741] SetEvent (hEvent=0x118) returned 1
	[0161.741] SetEvent (hEvent=0x1b0) returned 1
	[0161.741] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80
	[0161.741] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0161.742] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0163.764] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0164.097] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0164.098] ReadFile (in: hFile=0x1cc, lpBuffer=0x11058000, nNumberOfBytesToRead=0x7960, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x1131be18*=0x7960, lpOverlapped=0x0) returned 1
	[0164.256] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e320 | out: pbBuffer=0x1104e320) returned 1
	[0164.256] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e318 | out: pbBuffer=0x1104e318) returned 1
	[0164.257] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11151202 | out: pbBuffer=0x11151202) returned 1
	[0164.257] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0164.259] GetFileType (hFile=0x1cc) returned 0x1
	[0164.259] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0164.259] WriteFile (in: hFile=0x1cc, lpBuffer=0x1139a000*, nNumberOfBytesToWrite=0x7960, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1139a000*, lpNumberOfBytesWritten=0x1133bdfc*=0x7960, lpOverlapped=0x1133be08) returned 1
	[0164.260] GetFileType (hFile=0x1cc) returned 0x1
	[0164.260] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x7960, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0164.260] GetFileType (hFile=0x1cc) returned 0x1
	[0164.260] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0164.260] WriteFile (in: hFile=0x1cc, lpBuffer=0x11321880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11321880*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0164.261] GetFileType (hFile=0x1cc) returned 0x1
	[0164.261] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x7960, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0164.262] CloseHandle (hObject=0x1cc) returned 1
	[0164.268] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.tl30z")) returned 0x20
	[0164.268] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0164.269] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0164.685] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0165.201] SetEvent (hEvent=0x160) returned 1
	[0165.201] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80
	[0165.201] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0165.202] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0166.634] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0166.712] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0166.749] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11317e08 | out: lpMode=0x11317e08) returned 0
	[0166.751] ReadFile (in: hFile=0x1b4, lpBuffer=0x113ec000, nNumberOfBytesToRead=0xed0c, lpNumberOfBytesRead=0x11317e18, lpOverlapped=0x0 | out: lpBuffer=0x113ec000*, lpNumberOfBytesRead=0x11317e18*=0xed0c, lpOverlapped=0x0) returned 1
	[0166.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332890 | out: pbBuffer=0x11332890) returned 1
	[0166.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113fe802 | out: pbBuffer=0x113fe802) returned 1
	[0166.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113fe89b | out: pbBuffer=0x113fe89b) returned 1
	[0166.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113328c0 | out: pbBuffer=0x113328c0) returned 1
	[0166.764] GetFileType (hFile=0x1b4) returned 0x1
	[0166.766] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0166.766] WriteFile (in: hFile=0x1b4, lpBuffer=0x11164000*, nNumberOfBytesToWrite=0xed0c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11164000*, lpNumberOfBytesWritten=0x11031dfc*=0xed0c, lpOverlapped=0x11031e08) returned 1
	[0166.767] GetFileType (hFile=0x1b4) returned 0x1
	[0166.767] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xed0c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0166.767] GetFileType (hFile=0x1b4) returned 0x1
	[0166.767] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0166.767] WriteFile (in: hFile=0x1b4, lpBuffer=0x111a9500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111a9500*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0166.768] GetFileType (hFile=0x1b4) returned 0x1
	[0166.768] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xed0c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0166.768] CloseHandle (hObject=0x1b4) returned 1
	[0166.772] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.tl30z")) returned 0x20
	[0166.772] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0166.773] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0166.791] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0166.848] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.274] SetEvent (hEvent=0x118) returned 1
	[0167.274] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80
	[0167.276] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0167.277] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0167.995] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0168.127] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11317e08 | out: lpMode=0x11317e08) returned 0
	[0168.127] ReadFile (in: hFile=0x1cc, lpBuffer=0x111c4000, nNumberOfBytesToRead=0xed90, lpNumberOfBytesRead=0x11317e18, lpOverlapped=0x0 | out: lpBuffer=0x111c4000*, lpNumberOfBytesRead=0x11317e18*=0xed90, lpOverlapped=0x0) returned 1
	[0168.177] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.418] SetEvent (hEvent=0x118) returned 1
	[0168.418] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.430] SetEvent (hEvent=0x118) returned 1
	[0168.430] SetEvent (hEvent=0x160) returned 1
	[0168.430] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0168.433] CloseHandle (hObject=0x16c) returned 1
	[0168.617] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082" (normalized: "c:\\588bce7c90097ed212\\3082"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x67cfe660, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x67cfe660, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0169.476] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\" (normalized: "c:\\588bce7c90097ed212\\client"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.477] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22b0
	[0169.532] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.533] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0169.533] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0169.533] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.533] FindClose (in: hFindFile=0x7f22b0 | out: hFindFile=0x7f22b0) returned 1
	[0169.533] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1
	[0169.534] SetEvent (hEvent=0x1b0) returned 1
	[0169.534] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1
	[0169.747] SetEvent (hEvent=0x160) returned 1
	[0169.747] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\client\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0169.968] SetEvent (hEvent=0x150) returned 1
	[0169.968] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0169.969] WriteFile (in: hFile=0x1cc, lpBuffer=0x110ec000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x110ec000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0169.971] CloseHandle (hObject=0x1cc) returned 1
	[0170.076] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client" (normalized: "c:\\588bce7c90097ed212\\client"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x68d52720, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x68d52720, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0171.018] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1
	[0171.019] SetEvent (hEvent=0x160) returned 1
	[0171.019] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1
	[0171.222] SetEvent (hEvent=0x160) returned 1
	[0171.222] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\" (normalized: "c:\\588bce7c90097ed212\\extended"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.384] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1e70
	[0172.165] SetEvent (hEvent=0x150) returned 1
	[0172.165] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.165] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0172.165] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0172.165] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0172.166] FindClose (in: hFindFile=0x7f1e70 | out: hFindFile=0x7f1e70) returned 1
	[0172.172] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1
	[0172.418] SetEvent (hEvent=0x118) returned 1
	[0172.418] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1
	[0172.666] SetEvent (hEvent=0x118) returned 1
	[0172.666] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\extended\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0173.117] SetEvent (hEvent=0x150) returned 1
	[0173.117] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0173.117] WriteFile (in: hFile=0x1c8, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0173.120] CloseHandle (hObject=0x1c8) returned 1
	[0173.371] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended" (normalized: "c:\\588bce7c90097ed212\\extended"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x6aeb2334, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x6aeb2334, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0174.631] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\" (normalized: "c:\\588bce7c90097ed212\\graphics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0174.633] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1fb0
	[0174.637] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0174.637] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1
	[0174.637] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1
	[0174.637] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1
	[0174.637] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1
	[0174.637] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1
	[0174.637] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1
	[0174.638] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1
	[0174.639] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1
	[0174.639] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1
	[0174.639] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1
	[0174.639] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1
	[0174.640] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1
	[0174.640] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1
	[0174.640] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1
	[0174.640] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1
	[0174.640] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0174.640] FindClose (in: hFindFile=0x7f1fb0 | out: hFindFile=0x7f1fb0) returned 1
	[0174.643] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1
	[0174.646] SetEvent (hEvent=0x134) returned 1
	[0174.646] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0174.655] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0174.656] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0174.656] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0174.657] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0174.658] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0174.658] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0174.658] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0174.906] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.972] SetEvent (hEvent=0x118) returned 1
	[0174.972] SetEvent (hEvent=0x1b0) returned 1
	[0174.972] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 0x80
	[0174.972] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico", dwFileAttributes=0x80) returned 1
	[0174.973] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.tl30z"), dwFlags=0x1) returned 1
	[0181.748] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0181.920] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0181.920] ReadFile (in: hFile=0x1cc, lpBuffer=0x11076480, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11076480*, lpNumberOfBytesRead=0x11319e18*=0x47e, lpOverlapped=0x0) returned 1
	[0182.007] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0182.008] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11067302 | out: pbBuffer=0x11067302) returned 1
	[0182.008] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110673bb | out: pbBuffer=0x110673bb) returned 1
	[0182.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323d0 | out: pbBuffer=0x113323d0) returned 1
	[0182.009] GetFileType (hFile=0x1cc) returned 0x1
	[0182.009] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0182.010] WriteFile (in: hFile=0x1cc, lpBuffer=0x113e1000*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113e1000*, lpNumberOfBytesWritten=0x11031dfc*=0x47e, lpOverlapped=0x11031e08) returned 1
	[0182.010] GetFileType (hFile=0x1cc) returned 0x1
	[0182.010] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0182.010] GetFileType (hFile=0x1cc) returned 0x1
	[0182.011] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0182.011] WriteFile (in: hFile=0x1cc, lpBuffer=0x1105bc00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1105bc00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0182.011] GetFileType (hFile=0x1cc) returned 0x1
	[0182.011] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0182.011] CloseHandle (hObject=0x1cc) returned 1
	[0182.271] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.tl30z")) returned 0x20
	[0182.271] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0182.585] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0182.636] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0198.304] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20
	[0198.305] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf", dwFileAttributes=0x20) returned 0
	[0198.305] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0198.386] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0198.544] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0198.646] SetEvent (hEvent=0x1b0) returned 1
	[0198.646] GetFileAttributesW (lpFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui")) returned 0x20
	[0198.646] SetFileAttributesW (lpFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui", dwFileAttributes=0x20) returned 0
	[0198.646] MoveFileExW (lpExistingFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), lpNewFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui.tl30z" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui.tl30z"), dwFlags=0x1) returned 0
	[0198.647] GetFileAttributesW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20
	[0198.647] SetFileAttributesW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0198.647] MoveFileExW (lpExistingFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0198.811] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0199.005] SetEvent (hEvent=0x1b0) returned 1
	[0199.005] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20
	[0199.006] SetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0199.006] MoveFileExW (lpExistingFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0199.061] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0199.349] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0199.786] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0200.913] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0201.259] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0201.339] SetEvent (hEvent=0x1b0) returned 1
	[0201.339] GetFileAttributesW (lpFileName="C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui")) returned 0x20
	[0201.339] SetFileAttributesW (lpFileName="C:\\Boot\\es-ES\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0201.339] MoveFileExW (lpExistingFileName="C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\es-ES\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\es-es\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0201.530] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0201.730] SetEvent (hEvent=0x1b0) returned 1
	[0201.730] GetFileAttributesW (lpFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui")) returned 0x20
	[0201.730] SetFileAttributesW (lpFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0201.730] MoveFileExW (lpExistingFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0201.731] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0201.827] SetEvent (hEvent=0x1c4) returned 1
	[0201.827] GetFileAttributesW (lpFileName="C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui")) returned 0x20
	[0201.827] SetFileAttributesW (lpFileName="C:\\Boot\\fi-FI\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0201.828] MoveFileExW (lpExistingFileName="C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\fi-FI\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0201.936] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.045] SetEvent (hEvent=0x1c4) returned 1
	[0202.045] GetFileAttributesW (lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20
	[0202.046] SetFileAttributesW (lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0202.046] MoveFileExW (lpExistingFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0202.046] GetFileAttributesW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20
	[0202.046] SetFileAttributesW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0202.047] MoveFileExW (lpExistingFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0202.047] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.277] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0202.631] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.088] SetEvent (hEvent=0x1c4) returned 1
	[0203.089] GetFileAttributesW (lpFileName="C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui")) returned 0x20
	[0203.089] SetFileAttributesW (lpFileName="C:\\Boot\\it-IT\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0203.089] MoveFileExW (lpExistingFileName="C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\it-IT\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\it-it\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0203.171] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0203.702] SetEvent (hEvent=0x1c4) returned 1
	[0203.702] GetFileAttributesW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20
	[0203.702] SetFileAttributesW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0203.703] MoveFileExW (lpExistingFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0203.768] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.101] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.452] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.529] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.716] SetEvent (hEvent=0x1e0) returned 1
	[0205.716] GetFileAttributesW (lpFileName="C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui")) returned 0x20
	[0205.716] SetFileAttributesW (lpFileName="C:\\Boot\\pl-PL\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0205.717] MoveFileExW (lpExistingFileName="C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\pl-PL\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0205.826] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0205.958] GetFileAttributesW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20
	[0205.959] SetFileAttributesW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0205.959] MoveFileExW (lpExistingFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0206.157] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.476] SetEvent (hEvent=0x1b0) returned 1
	[0206.477] GetFileAttributesW (lpFileName="C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui")) returned 0x20
	[0206.477] SetFileAttributesW (lpFileName="C:\\Boot\\pt-PT\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0206.477] MoveFileExW (lpExistingFileName="C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\pt-PT\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0206.549] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0206.701] SetEvent (hEvent=0x1e0) returned 1
	[0206.701] GetFileAttributesW (lpFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui")) returned 0x20
	[0206.701] SetFileAttributesW (lpFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0206.703] MoveFileExW (lpExistingFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0206.778] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.253] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.336] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.559] SetEvent (hEvent=0x1b0) returned 1
	[0207.559] GetFileAttributesW (lpFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui")) returned 0x20
	[0207.560] SetFileAttributesW (lpFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0207.562] MoveFileExW (lpExistingFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0207.562] GetFileAttributesW (lpFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui")) returned 0x20
	[0207.563] SetFileAttributesW (lpFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0207.563] MoveFileExW (lpExistingFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0207.616] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0207.876] SetEvent (hEvent=0x1b0) returned 1
	[0207.877] GetFileAttributesW (lpFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui")) returned 0x20
	[0207.877] SetFileAttributesW (lpFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0207.877] MoveFileExW (lpExistingFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0207.978] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0208.734] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0209.335] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0210.192] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0212.555] GetFileAttributesW (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 0x20
	[0212.560] SetFileAttributesW (lpFileName="C:\\Logs\\Application.evtx", dwFileAttributes=0x20) returned 1
	[0212.560] MoveFileExW (lpExistingFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), lpNewFileName="C:\\Logs\\Application.evtx.tl30z" (normalized: "c:\\logs\\application.evtx.tl30z"), dwFlags=0x1) returned 1
	[0216.780] CreateFileW (lpFileName="C:\\Logs\\Application.evtx.tl30z" (normalized: "c:\\logs\\application.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0216.839] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0216.839] ReadFile (in: hFile=0x184, lpBuffer=0x11306000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11306000*, lpNumberOfBytesRead=0x11286e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0216.854] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0216.854] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113640f8 | out: pbBuffer=0x113640f8) returned 1
	[0216.854] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c2c02 | out: pbBuffer=0x111c2c02) returned 1
	[0216.855] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0216.856] GetFileType (hFile=0x184) returned 0x1
	[0216.857] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0216.857] WriteFile (in: hFile=0x184, lpBuffer=0x112a8000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112a8000*, lpNumberOfBytesWritten=0x11031dfc*=0x6ccc, lpOverlapped=0x11031e08) returned 1
	[0216.857] GetFileType (hFile=0x184) returned 0x1
	[0216.858] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0216.858] GetFileType (hFile=0x184) returned 0x1
	[0216.858] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0216.859] WriteFile (in: hFile=0x184, lpBuffer=0x110e2a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110e2a80*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0216.859] GetFileType (hFile=0x184) returned 0x1
	[0216.859] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0216.859] CloseHandle (hObject=0x184) returned 1
	[0216.906] SetEvent (hEvent=0x150) returned 1
	[0216.906] GetFileAttributesW (lpFileName="C:\\Logs\\Application.evtx.tl30z" (normalized: "c:\\logs\\application.evtx.tl30z")) returned 0x20
	[0216.907] SetFileAttributesW (lpFileName="C:\\Logs\\Application.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0216.937] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0217.106] SetEvent (hEvent=0x1bc) returned 1
	[0217.106] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 0x20
	[0217.107] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0217.107] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0223.872] SetEvent (hEvent=0x150) returned 1
	[0223.872] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0223.973] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1155be08 | out: lpMode=0x1155be08) returned 0
	[0223.973] VirtualAlloc (lpAddress=0x11710000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0x11710000
	[0223.974] VirtualFree (lpAddress=0x11b10000, dwSize=0x2f0000, dwFreeType=0x4000) returned 1
	[0224.024] VirtualFree (lpAddress=0x119b6000, dwSize=0x64a000, dwFreeType=0x4000) returned 1
	[0224.072] ReadFile (in: hFile=0x1c8, lpBuffer=0x11710000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1155be18, lpOverlapped=0x0 | out: lpBuffer=0x11710000*, lpNumberOfBytesRead=0x1155be18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0224.092] VirtualAlloc (lpAddress=0x1171e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1171e000
	[0224.093] VirtualAlloc (lpAddress=0x11720000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11720000
	[0224.094] VirtualAlloc (lpAddress=0x11722000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11722000
	[0224.095] VirtualAlloc (lpAddress=0x11724000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11724000
	[0224.096] VirtualAlloc (lpAddress=0x11726000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11726000
	[0224.097] VirtualAlloc (lpAddress=0x11728000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11728000
	[0224.098] VirtualAlloc (lpAddress=0x1172c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1172c000
	[0224.099] VirtualAlloc (lpAddress=0x1172e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1172e000
	[0224.101] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e440 | out: pbBuffer=0x1104e440) returned 1
	[0224.101] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1172e102 | out: pbBuffer=0x1172e102) returned 1
	[0224.101] VirtualAlloc (lpAddress=0x11730000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11730000
	[0224.102] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e470 | out: pbBuffer=0x1104e470) returned 1
	[0224.103] VirtualAlloc (lpAddress=0x11732000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11732000
	[0224.104] GetFileType (hFile=0x1c8) returned 0x1
	[0224.104] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11299de0 | out: lpNewFilePointer=0x0) returned 1
	[0224.104] WriteFile (in: hFile=0x1c8, lpBuffer=0x11576000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x11299dfc, lpOverlapped=0x11299e08 | out: lpBuffer=0x11576000*, lpNumberOfBytesWritten=0x11299dfc*=0x6ccc, lpOverlapped=0x11299e08) returned 1
	[0224.105] GetFileType (hFile=0x1c8) returned 0x1
	[0224.105] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11299de0 | out: lpNewFilePointer=0x0) returned 1
	[0224.105] GetFileType (hFile=0x1c8) returned 0x1
	[0224.105] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11299de0 | out: lpNewFilePointer=0x0) returned 1
	[0224.105] WriteFile (in: hFile=0x1c8, lpBuffer=0x1172c700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11299dfc, lpOverlapped=0x11299e08 | out: lpBuffer=0x1172c700*, lpNumberOfBytesWritten=0x11299dfc*=0x230, lpOverlapped=0x11299e08) returned 1
	[0224.106] GetFileType (hFile=0x1c8) returned 0x1
	[0224.106] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11299de0 | out: lpNewFilePointer=0x0) returned 1
	[0224.106] CloseHandle (hObject=0x1c8) returned 1
	[0224.295] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.tl30z")) returned 0x20
	[0224.296] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0224.323] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.448] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.459] SetEvent (hEvent=0x23c) returned 1
	[0225.459] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.571] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.653] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.709] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.774] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0226.199] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0226.217] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0226.230] SetEvent (hEvent=0x25c) returned 1
	[0226.230] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 0x20
	[0226.230] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx", dwFileAttributes=0x20) returned 1
	[0226.231] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.tl30z"), dwFlags=0x1) returned 1
	[0226.866] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0226.873] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11554e08 | out: lpMode=0x11554e08) returned 0
	[0226.874] ReadFile (in: hFile=0x1cc, lpBuffer=0x1123b000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11554e18, lpOverlapped=0x0 | out: lpBuffer=0x1123b000*, lpNumberOfBytesRead=0x11554e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0226.881] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0226.881] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332668 | out: pbBuffer=0x11332668) returned 1
	[0226.882] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11252b02 | out: pbBuffer=0x11252b02) returned 1
	[0226.882] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11252b5c | out: pbBuffer=0x11252b5c) returned 1
	[0226.882] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11252b72 | out: pbBuffer=0x11252b72) returned 1
	[0226.882] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11252bb1 | out: pbBuffer=0x11252bb1) returned 1
	[0226.882] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11252bbd | out: pbBuffer=0x11252bbd) returned 1
	[0226.882] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0226.883] GetFileType (hFile=0x1cc) returned 0x1
	[0226.883] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.884] WriteFile (in: hFile=0x1cc, lpBuffer=0x11166000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11166000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0226.884] GetFileType (hFile=0x1cc) returned 0x1
	[0226.884] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.884] GetFileType (hFile=0x1cc) returned 0x1
	[0226.884] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.885] WriteFile (in: hFile=0x1cc, lpBuffer=0x11251500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11251500*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0226.885] GetFileType (hFile=0x1cc) returned 0x1
	[0226.885] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.885] CloseHandle (hObject=0x1cc) returned 1
	[0226.894] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.tl30z")) returned 0x20
	[0226.895] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0226.899] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0226.912] SetEvent (hEvent=0x25c) returned 1
	[0226.912] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 0x20
	[0226.912] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0226.913] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0227.749] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0227.763] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11554e08 | out: lpMode=0x11554e08) returned 0
	[0227.763] ReadFile (in: hFile=0x1b4, lpBuffer=0x111c6000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11554e18, lpOverlapped=0x0 | out: lpBuffer=0x111c6000*, lpNumberOfBytesRead=0x11554e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0227.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0227.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11253c02 | out: pbBuffer=0x11253c02) returned 1
	[0227.772] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0227.772] GetFileType (hFile=0x1b4) returned 0x1
	[0227.773] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.773] WriteFile (in: hFile=0x1b4, lpBuffer=0x1146e000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1146e000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0227.774] GetFileType (hFile=0x1b4) returned 0x1
	[0227.774] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.774] GetFileType (hFile=0x1b4) returned 0x1
	[0227.774] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.775] WriteFile (in: hFile=0x1b4, lpBuffer=0x11486700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11486700*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0227.775] GetFileType (hFile=0x1b4) returned 0x1
	[0227.775] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.775] CloseHandle (hObject=0x1b4) returned 1
	[0227.786] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.tl30z")) returned 0x20
	[0227.786] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0227.798] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.860] SetEvent (hEvent=0x26c) returned 1
	[0227.860] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 0x20
	[0227.860] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", dwFileAttributes=0x20) returned 1
	[0227.861] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.tl30z"), dwFlags=0x1) returned 1
	[0228.270] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0228.357] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11554e08 | out: lpMode=0x11554e08) returned 0
	[0228.357] ReadFile (in: hFile=0x1b4, lpBuffer=0x111cd000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11554e18, lpOverlapped=0x0 | out: lpBuffer=0x111cd000*, lpNumberOfBytesRead=0x11554e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0228.363] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0228.363] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11092702 | out: pbBuffer=0x11092702) returned 1
	[0228.363] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0228.364] GetFileType (hFile=0x1b4) returned 0x1
	[0228.364] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0228.365] WriteFile (in: hFile=0x1b4, lpBuffer=0x110ba000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110ba000*, lpNumberOfBytesWritten=0x1102ddfc*=0x6ccc, lpOverlapped=0x1102de08) returned 1
	[0228.366] GetFileType (hFile=0x1b4) returned 0x1
	[0228.366] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0228.366] GetFileType (hFile=0x1b4) returned 0x1
	[0228.366] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0228.366] WriteFile (in: hFile=0x1b4, lpBuffer=0x11487500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11487500*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0228.367] GetFileType (hFile=0x1b4) returned 0x1
	[0228.367] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0228.367] CloseHandle (hObject=0x1b4) returned 1
	[0228.381] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.tl30z")) returned 0x20
	[0228.381] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0228.419] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.056] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.104] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.199] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.250] SetEvent (hEvent=0x23c) returned 1
	[0229.250] SetEvent (hEvent=0x1e0) returned 1
	[0229.250] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102
	[0229.256] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.256] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x0
	[0229.261] SetEvent (hEvent=0x264) returned 1
	[0229.261] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102
	[0229.283] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.284] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0230.986] SetEvent (hEvent=0x25c) returned 1
	[0230.986] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0230.991] SetEvent (hEvent=0x25c) returned 1
	[0230.991] SetEvent (hEvent=0x1e8) returned 1
	[0230.991] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0230.998] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x112efe08 | out: lpMode=0x112efe08) returned 0
	[0230.998] ReadFile (in: hFile=0x1b4, lpBuffer=0x11058000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x112efe18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x112efe18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0231.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0231.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1142c802 | out: pbBuffer=0x1142c802) returned 1
	[0231.006] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142c84c | out: pbBuffer=0x1142c84c) returned 1
	[0231.006] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0231.007] GetFileType (hFile=0x1b4) returned 0x1
	[0231.007] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0231.008] WriteFile (in: hFile=0x1b4, lpBuffer=0x1140e000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x1140e000*, lpNumberOfBytesWritten=0x112efdfc*=0x6ccc, lpOverlapped=0x112efe08) returned 1
	[0231.008] GetFileType (hFile=0x1b4) returned 0x1
	[0231.008] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0231.009] GetFileType (hFile=0x1b4) returned 0x1
	[0231.009] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0231.009] WriteFile (in: hFile=0x1b4, lpBuffer=0x11322a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11322a80*, lpNumberOfBytesWritten=0x112efdfc*=0x230, lpOverlapped=0x112efe08) returned 1
	[0231.009] GetFileType (hFile=0x1b4) returned 0x1
	[0231.010] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0231.010] CloseHandle (hObject=0x1b4) returned 1
	[0231.055] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.tl30z")) returned 0x20
	[0231.055] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0231.098] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0231.172] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0231.318] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0231.392] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0231.409] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0231.846] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0231.961] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.154] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.206] SetEvent (hEvent=0x23c) returned 1
	[0232.206] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 0x20
	[0232.207] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx", dwFileAttributes=0x20) returned 1
	[0232.207] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.tl30z"), dwFlags=0x1) returned 1
	[0232.720] SetEvent (hEvent=0x150) returned 1
	[0232.720] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0232.735] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11559e08 | out: lpMode=0x11559e08) returned 0
	[0232.735] ReadFile (in: hFile=0x1cc, lpBuffer=0x1111d000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11559e18, lpOverlapped=0x0 | out: lpBuffer=0x1111d000*, lpNumberOfBytesRead=0x11559e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0232.745] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332950 | out: pbBuffer=0x11332950) returned 1
	[0232.745] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11275a02 | out: pbBuffer=0x11275a02) returned 1
	[0232.746] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332980 | out: pbBuffer=0x11332980) returned 1
	[0232.746] GetFileType (hFile=0x1cc) returned 0x1
	[0232.746] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.747] WriteFile (in: hFile=0x1cc, lpBuffer=0x1144a000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1144a000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0232.747] GetFileType (hFile=0x1cc) returned 0x1
	[0232.747] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.747] GetFileType (hFile=0x1cc) returned 0x1
	[0232.747] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.748] WriteFile (in: hFile=0x1cc, lpBuffer=0x11133180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11133180*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0232.748] GetFileType (hFile=0x1cc) returned 0x1
	[0232.748] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.748] CloseHandle (hObject=0x1cc) returned 1
	[0232.759] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.tl30z")) returned 0x20
	[0232.759] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0232.774] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.820] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.823] SetEvent (hEvent=0x1f0) returned 1
	[0232.823] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.837] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.977] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0233.032] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0233.137] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0233.577] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0233.705] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0233.937] SetEvent (hEvent=0x25c) returned 1
	[0233.937] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 0x20
	[0233.937] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0233.938] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0235.018] SetEvent (hEvent=0x150) returned 1
	[0235.018] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0235.026] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11555e08 | out: lpMode=0x11555e08) returned 0
	[0235.027] ReadFile (in: hFile=0x204, lpBuffer=0x11465000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11555e18, lpOverlapped=0x0 | out: lpBuffer=0x11465000*, lpNumberOfBytesRead=0x11555e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0235.040] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e5e0 | out: pbBuffer=0x1104e5e0) returned 1
	[0235.040] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e5d8 | out: pbBuffer=0x1104e5d8) returned 1
	[0235.040] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11172a02 | out: pbBuffer=0x11172a02) returned 1
	[0235.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e610 | out: pbBuffer=0x1104e610) returned 1
	[0235.043] GetFileType (hFile=0x204) returned 0x1
	[0235.043] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.043] WriteFile (in: hFile=0x204, lpBuffer=0x11246000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112a9dfc, lpOverlapped=0x112a9e08 | out: lpBuffer=0x11246000*, lpNumberOfBytesWritten=0x112a9dfc*=0x6ccc, lpOverlapped=0x112a9e08) returned 1
	[0235.044] GetFileType (hFile=0x204) returned 0x1
	[0235.044] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.044] GetFileType (hFile=0x204) returned 0x1
	[0235.044] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.045] WriteFile (in: hFile=0x204, lpBuffer=0x11165880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112a9dfc, lpOverlapped=0x112a9e08 | out: lpBuffer=0x11165880*, lpNumberOfBytesWritten=0x112a9dfc*=0x230, lpOverlapped=0x112a9e08) returned 1
	[0235.045] GetFileType (hFile=0x204) returned 0x1
	[0235.046] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.046] CloseHandle (hObject=0x204) returned 1
	[0235.061] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.tl30z")) returned 0x20
	[0235.062] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0235.095] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0235.107] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0235.133] SetEvent (hEvent=0x23c) returned 1
	[0235.133] SetEvent (hEvent=0x1e8) returned 1
	[0235.133] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102
	[0235.171] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0235.171] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102
	[0235.278] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0235.278] SetEvent (hEvent=0x23c) returned 1
	[0235.278] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102
	[0235.345] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0235.346] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0238.123] SetEvent (hEvent=0x1e8) returned 1
	[0238.124] SetEvent (hEvent=0x1e0) returned 1
	[0238.124] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102
	[0238.269] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0238.269] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102
	[0238.351] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0238.352] SetEvent (hEvent=0x1e8) returned 1
	[0238.352] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102
	[0238.431] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0238.432] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e100 | out: pbBuffer=0x1142e100) returned 1
	[0238.432] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ea802 | out: pbBuffer=0x112ea802) returned 1
	[0238.433] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e130 | out: pbBuffer=0x1142e130) returned 1
	[0238.433] GetFileType (hFile=0x250) returned 0x1
	[0238.433] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1127bde0 | out: lpNewFilePointer=0x0) returned 1
	[0238.433] WriteFile (in: hFile=0x250, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0x562, lpNumberOfBytesWritten=0x1127bdfc, lpOverlapped=0x1127be08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x1127bdfc*=0x562, lpOverlapped=0x1127be08) returned 1
	[0238.434] GetFileType (hFile=0x250) returned 0x1
	[0238.434] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x562, lpNewFilePointer=0x0, dwMoveMethod=0x1127bde0 | out: lpNewFilePointer=0x0) returned 1
	[0238.434] GetFileType (hFile=0x250) returned 0x1
	[0238.434] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1127bde0 | out: lpNewFilePointer=0x0) returned 1
	[0238.434] WriteFile (in: hFile=0x250, lpBuffer=0x11252a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1127bdfc, lpOverlapped=0x1127be08 | out: lpBuffer=0x11252a80*, lpNumberOfBytesWritten=0x1127bdfc*=0x227, lpOverlapped=0x1127be08) returned 1
	[0238.435] GetFileType (hFile=0x250) returned 0x1
	[0238.435] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x562, lpNewFilePointer=0x0, dwMoveMethod=0x1127bde0 | out: lpNewFilePointer=0x0) returned 1
	[0238.435] CloseHandle (hObject=0x250) returned 1
	[0238.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.tl30z")) returned 0x20
	[0238.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0238.437] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0239.976] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0240.025] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0241.065] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0241.072] SetEvent (hEvent=0x23c) returned 1
	[0241.072] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0241.077] SetEvent (hEvent=0x23c) returned 1
	[0241.077] SwitchToThread () returned 1
	[0241.084] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0241.087] SetEvent (hEvent=0x1f0) returned 1
	[0241.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 0x20
	[0241.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", dwFileAttributes=0x20) returned 1
	[0241.087] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.tl30z"), dwFlags=0x1) returned 1
	[0241.789] SetEvent (hEvent=0x150) returned 1
	[0241.789] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0241.793] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0241.793] ReadFile (in: hFile=0x1b4, lpBuffer=0x11058000, nNumberOfBytesToRead=0x218e, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11316e18*=0x218e, lpOverlapped=0x0) returned 1
	[0241.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0241.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11383e02 | out: pbBuffer=0x11383e02) returned 1
	[0241.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11383e09 | out: pbBuffer=0x11383e09) returned 1
	[0241.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11383ea8 | out: pbBuffer=0x11383ea8) returned 1
	[0241.805] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0241.805] GetFileType (hFile=0x1b4) returned 0x1
	[0241.805] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.805] WriteFile (in: hFile=0x1b4, lpBuffer=0x113da000*, nNumberOfBytesToWrite=0x218e, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x113da000*, lpNumberOfBytesWritten=0x112efdfc*=0x218e, lpOverlapped=0x112efe08) returned 1
	[0241.806] GetFileType (hFile=0x1b4) returned 0x1
	[0241.806] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x218e, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.806] GetFileType (hFile=0x1b4) returned 0x1
	[0241.806] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.806] WriteFile (in: hFile=0x1b4, lpBuffer=0x1139c700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x1139c700*, lpNumberOfBytesWritten=0x112efdfc*=0x22a, lpOverlapped=0x112efe08) returned 1
	[0241.807] GetFileType (hFile=0x1b4) returned 0x1
	[0241.808] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x218e, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.808] CloseHandle (hObject=0x1b4) returned 1
	[0241.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.tl30z")) returned 0x20
	[0241.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.tl30z", dwFileAttributes=0x21) returned 1
	[0241.822] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0241.851] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0241.947] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0242.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0x20
	[0242.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", dwFileAttributes=0x20) returned 1
	[0242.181] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.tl30z"), dwFlags=0x1) returned 1
	[0242.376] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x28c
	[0242.400] GetConsoleMode (in: hConsoleHandle=0x28c, lpMode=0x113ade08 | out: lpMode=0x113ade08) returned 0
	[0242.400] ReadFile (in: hFile=0x28c, lpBuffer=0x11274000, nNumberOfBytesToRead=0x2948, lpNumberOfBytesRead=0x113ade18, lpOverlapped=0x0 | out: lpBuffer=0x11274000*, lpNumberOfBytesRead=0x113ade18*=0x2948, lpOverlapped=0x0) returned 1
	[0242.435] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332960 | out: pbBuffer=0x11332960) returned 1
	[0242.435] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332958 | out: pbBuffer=0x11332958) returned 1
	[0242.436] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11282302 | out: pbBuffer=0x11282302) returned 1
	[0242.436] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332990 | out: pbBuffer=0x11332990) returned 1
	[0242.437] GetFileType (hFile=0x28c) returned 0x1
	[0242.437] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0242.437] WriteFile (in: hFile=0x28c, lpBuffer=0x1109e000*, nNumberOfBytesToWrite=0x2948, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x1109e000*, lpNumberOfBytesWritten=0x112efdfc*=0x2948, lpOverlapped=0x112efe08) returned 1
	[0242.437] GetFileType (hFile=0x28c) returned 0x1
	[0242.438] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x2948, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0242.438] GetFileType (hFile=0x28c) returned 0x1
	[0242.438] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0242.438] WriteFile (in: hFile=0x28c, lpBuffer=0x1126f180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x1126f180*, lpNumberOfBytesWritten=0x112efdfc*=0x227, lpOverlapped=0x112efe08) returned 1
	[0242.438] GetFileType (hFile=0x28c) returned 0x1
	[0242.438] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x2948, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0242.439] CloseHandle (hObject=0x28c) returned 1
	[0242.482] SetEvent (hEvent=0x150) returned 1
	[0242.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.tl30z")) returned 0x20
	[0242.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.tl30z", dwFileAttributes=0x21) returned 1
	[0242.510] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0242.588] SetEvent (hEvent=0x1e0) returned 1
	[0242.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20
	[0242.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf", dwFileAttributes=0x20) returned 1
	[0242.589] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.tl30z"), dwFlags=0x1) returned 1
	[0244.164] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0244.182] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x113ade08 | out: lpMode=0x113ade08) returned 0
	[0244.183] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.224] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.309] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.362] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.633] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.717] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.800] SetEvent (hEvent=0x22c) returned 1
	[0244.800] SetEvent (hEvent=0x284) returned 1
	[0244.800] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.154] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf")) returned 0x220
	[0300.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF", dwFileAttributes=0x220) returned 1
	[0300.158] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0300.204] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11446e08 | out: lpMode=0x11446e08) returned 0
	[0300.204] ReadFile (in: hFile=0x1d4, lpBuffer=0x111ea000, nNumberOfBytesToRead=0x51be, lpNumberOfBytesRead=0x11446e18, lpOverlapped=0x0 | out: lpBuffer=0x111ea000*, lpNumberOfBytesRead=0x11446e18*=0x51be, lpOverlapped=0x0) returned 1
	[0300.545] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.561] SetEvent (hEvent=0x1e0) returned 1
	[0300.561] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf")) returned 0x220
	[0300.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF", dwFileAttributes=0x220) returned 1
	[0300.609] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0300.669] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11447e08 | out: lpMode=0x11447e08) returned 0
	[0300.669] ReadFile (in: hFile=0x250, lpBuffer=0x11382000, nNumberOfBytesToRead=0xcd8, lpNumberOfBytesRead=0x11447e18, lpOverlapped=0x0 | out: lpBuffer=0x11382000*, lpNumberOfBytesRead=0x11447e18*=0xcd8, lpOverlapped=0x0) returned 1
	[0301.007] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.022] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.031] SetEvent (hEvent=0x26c) returned 1
	[0301.031] SetEvent (hEvent=0x1bc) returned 1
	[0301.031] SetEvent (hEvent=0x27c) returned 1
	[0301.031] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.076] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158990 | out: pbBuffer=0x11158990) returned 1
	[0301.076] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125c702 | out: pbBuffer=0x1125c702) returned 1
	[0301.076] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111589c0 | out: pbBuffer=0x111589c0) returned 1
	[0301.077] GetFileType (hFile=0x208) returned 0x1
	[0301.077] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.077] WriteFile (in: hFile=0x208, lpBuffer=0x110ba000*, nNumberOfBytesToWrite=0x1bc8, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x110ba000*, lpNumberOfBytesWritten=0x113b7dfc*=0x1bc8, lpOverlapped=0x113b7e08) returned 1
	[0301.089] GetFileType (hFile=0x208) returned 0x1
	[0301.089] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x1bc8, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.089] GetFileType (hFile=0x208) returned 0x1
	[0301.089] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.089] WriteFile (in: hFile=0x208, lpBuffer=0x11c13500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x11c13500*, lpNumberOfBytesWritten=0x113b7dfc*=0x22d, lpOverlapped=0x113b7e08) returned 1
	[0301.103] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.126] GetFileType (hFile=0x208) returned 0x1
	[0301.126] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x1bc8, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.126] CloseHandle (hObject=0x208) returned 1
	[0301.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf.tl30z")) returned 0x220
	[0301.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.178] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.602] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.606] SetEvent (hEvent=0x1e0) returned 1
	[0308.606] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf")) returned 0x220
	[0308.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF", dwFileAttributes=0x220) returned 1
	[0308.608] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0308.664] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0308.664] ReadFile (in: hFile=0x2a0, lpBuffer=0x1107d200, nNumberOfBytesToRead=0x8a0, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1107d200*, lpNumberOfBytesRead=0x1128be18*=0x8a0, lpOverlapped=0x0) returned 1
	[0308.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126c40 | out: pbBuffer=0x11126c40) returned 1
	[0308.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113fbb02 | out: pbBuffer=0x113fbb02) returned 1
	[0308.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113fbb3f | out: pbBuffer=0x113fbb3f) returned 1
	[0308.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126c70 | out: pbBuffer=0x11126c70) returned 1
	[0308.833] GetFileType (hFile=0x2a0) returned 0x1
	[0308.833] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.833] WriteFile (in: hFile=0x2a0, lpBuffer=0x1144c000*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1144c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x8a0, lpOverlapped=0x1102be08) returned 1
	[0308.833] GetFileType (hFile=0x2a0) returned 0x1
	[0308.834] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x8a0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.834] GetFileType (hFile=0x2a0) returned 0x1
	[0308.834] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.834] WriteFile (in: hFile=0x2a0, lpBuffer=0x1139dc00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1139dc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x221, lpOverlapped=0x1102be08) returned 1
	[0308.834] GetFileType (hFile=0x2a0) returned 0x1
	[0308.834] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x8a0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.834] CloseHandle (hObject=0x2a0) returned 1
	[0308.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf.tl30z")) returned 0x220
	[0308.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6c)) returned 1
	[0308.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid")) returned 0x220
	[0308.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID", dwFileAttributes=0x220) returned 1
	[0308.836] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0308.838] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0308.838] ReadFile (in: hFile=0x2a0, lpBuffer=0x1144e000, nNumberOfBytesToRead=0x1cb3, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1144e000*, lpNumberOfBytesRead=0x1128be18*=0x1cb3, lpOverlapped=0x0) returned 1
	[0308.873] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.902] SetEvent (hEvent=0x150) returned 1
	[0308.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0308.902] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.096] SetEvent (hEvent=0x27c) returned 1
	[0309.096] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf")) returned 0x220
	[0309.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF", dwFileAttributes=0x220) returned 1
	[0309.105] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0309.108] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11095e08 | out: lpMode=0x11095e08) returned 0
	[0309.108] ReadFile (in: hFile=0x224, lpBuffer=0x11244000, nNumberOfBytesToRead=0x8da8, lpNumberOfBytesRead=0x11095e18, lpOverlapped=0x0 | out: lpBuffer=0x11244000*, lpNumberOfBytesRead=0x11095e18*=0x8da8, lpOverlapped=0x0) returned 1
	[0309.161] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f470 | out: pbBuffer=0x1140f470) returned 1
	[0309.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c44502 | out: pbBuffer=0x11c44502) returned 1
	[0309.267] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f4f0 | out: pbBuffer=0x1140f4f0) returned 1
	[0309.268] SetEvent (hEvent=0x1b0) returned 1
	[0309.268] SetEvent (hEvent=0x1c4) returned 1
	[0309.268] SetEvent (hEvent=0x210) returned 1
	[0309.269] GetFileType (hFile=0x224) returned 0x1
	[0309.269] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.270] WriteFile (in: hFile=0x224, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0x8da8, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x1133fdfc*=0x8da8, lpOverlapped=0x1133fe08) returned 1
	[0309.270] GetFileType (hFile=0x224) returned 0x1
	[0309.270] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x8da8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.270] GetFileType (hFile=0x224) returned 0x1
	[0309.270] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.271] WriteFile (in: hFile=0x224, lpBuffer=0x11c0f500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11c0f500*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0309.271] GetFileType (hFile=0x224) returned 0x1
	[0309.271] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x8da8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.271] CloseHandle (hObject=0x224) returned 1
	[0309.274] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf.tl30z")) returned 0x220
	[0309.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.296] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12c)) returned 1
	[0309.311] SetEvent (hEvent=0x1e0) returned 1
	[0309.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6028)) returned 1
	[0309.334] SetEvent (hEvent=0x150) returned 1
	[0309.334] SetEvent (hEvent=0x234) returned 1
	[0309.334] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108a)) returned 1
	[0309.366] SetEvent (hEvent=0x27c) returned 1
	[0309.366] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112e)) returned 1
	[0309.433] SetEvent (hEvent=0x1e8) returned 1
	[0309.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1
	[0309.476] SetEvent (hEvent=0x1b0) returned 1
	[0309.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1
	[0309.495] SetEvent (hEvent=0x1b0) returned 1
	[0309.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1afc)) returned 1
	[0309.516] SetEvent (hEvent=0x1b0) returned 1
	[0309.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1a4)) returned 1
	[0309.533] SetEvent (hEvent=0x1b0) returned 1
	[0309.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e2c)) returned 1
	[0309.558] SetEvent (hEvent=0x1b0) returned 1
	[0309.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0)) returned 1
	[0309.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1908)) returned 1
	[0309.598] SetEvent (hEvent=0x218) returned 1
	[0309.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3100)) returned 1
	[0309.618] SetEvent (hEvent=0x218) returned 1
	[0309.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2904)) returned 1
	[0309.637] SetEvent (hEvent=0x218) returned 1
	[0309.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1
	[0309.659] SetEvent (hEvent=0x27c) returned 1
	[0309.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59c)) returned 1
	[0309.678] SetEvent (hEvent=0x27c) returned 1
	[0309.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f9c)) returned 1
	[0309.696] SetEvent (hEvent=0x27c) returned 1
	[0309.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1
	[0309.720] SetEvent (hEvent=0x27c) returned 1
	[0309.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1
	[0309.930] SetEvent (hEvent=0x27c) returned 1
	[0309.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1
	[0310.890] SetEvent (hEvent=0x27c) returned 1
	[0310.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc4)) returned 1
	[0310.908] SetEvent (hEvent=0x27c) returned 1
	[0310.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75e2)) returned 1
	[0310.923] SetEvent (hEvent=0x27c) returned 1
	[0310.923] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824e)) returned 1
	[0310.942] SetEvent (hEvent=0x1e0) returned 1
	[0310.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b2)) returned 1
	[0310.959] SetEvent (hEvent=0x1e0) returned 1
	[0310.959] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78e0)) returned 1
	[0311.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f26)) returned 1
	[0311.046] SetEvent (hEvent=0x22c) returned 1
	[0311.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9c4)) returned 1
	[0311.068] SetEvent (hEvent=0x22c) returned 1
	[0311.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6928)) returned 1
	[0311.079] SetEvent (hEvent=0x27c) returned 1
	[0311.079] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7400)) returned 1
	[0311.103] SetEvent (hEvent=0x234) returned 1
	[0311.103] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090)) returned 1
	[0311.426] SetEvent (hEvent=0x234) returned 1
	[0311.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1
	[0311.622] SetEvent (hEvent=0x234) returned 1
	[0311.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76e0)) returned 1
	[0311.643] SetEvent (hEvent=0x164) returned 1
	[0311.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5850)) returned 1
	[0311.657] SetEvent (hEvent=0x164) returned 1
	[0311.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5328)) returned 1
	[0311.672] SetEvent (hEvent=0x27c) returned 1
	[0311.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1
	[0311.683] SetEvent (hEvent=0x27c) returned 1
	[0311.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39f8)) returned 1
	[0311.698] SetEvent (hEvent=0x118) returned 1
	[0311.698] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2a)) returned 1
	[0311.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc70)) returned 1
	[0311.737] SetEvent (hEvent=0x234) returned 1
	[0311.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1
	[0311.758] SetEvent (hEvent=0x164) returned 1
	[0311.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1
	[0311.774] SetEvent (hEvent=0x218) returned 1
	[0311.774] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3380)) returned 1
	[0311.793] SetEvent (hEvent=0x27c) returned 1
	[0311.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x692)) returned 1
	[0311.805] SetEvent (hEvent=0x27c) returned 1
	[0311.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x282c)) returned 1
	[0311.831] SetEvent (hEvent=0x234) returned 1
	[0311.831] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2108)) returned 1
	[0311.847] SetEvent (hEvent=0x164) returned 1
	[0311.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f24)) returned 1
	[0311.863] SetEvent (hEvent=0x218) returned 1
	[0311.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1
	[0311.881] SetEvent (hEvent=0x150) returned 1
	[0311.881] SetEvent (hEvent=0x118) returned 1
	[0311.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1664)) returned 1
	[0311.908] SetEvent (hEvent=0x150) returned 1
	[0311.908] SetEvent (hEvent=0x27c) returned 1
	[0311.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41a0)) returned 1
	[0311.927] SetEvent (hEvent=0x234) returned 1
	[0311.927] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3998)) returned 1
	[0311.943] SetEvent (hEvent=0x150) returned 1
	[0311.944] SetEvent (hEvent=0x164) returned 1
	[0311.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1
	[0311.962] SetEvent (hEvent=0x150) returned 1
	[0311.962] SetEvent (hEvent=0x218) returned 1
	[0311.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1868)) returned 1
	[0312.011] SetEvent (hEvent=0x150) returned 1
	[0312.011] SetEvent (hEvent=0x118) returned 1
	[0312.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1
	[0312.028] SetEvent (hEvent=0x27c) returned 1
	[0312.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78a)) returned 1
	[0312.048] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1020)) returned 1
	[0312.070] SetEvent (hEvent=0x150) returned 1
	[0312.070] SetEvent (hEvent=0x164) returned 1
	[0312.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37f8)) returned 1
	[0312.088] SetEvent (hEvent=0x218) returned 1
	[0312.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x167c)) returned 1
	[0312.097] SetEvent (hEvent=0x234) returned 1
	[0312.097] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1
	[0312.121] SetEvent (hEvent=0x150) returned 1
	[0312.121] SetEvent (hEvent=0x27c) returned 1
	[0312.121] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1
	[0312.137] SetEvent (hEvent=0x118) returned 1
	[0312.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fce)) returned 1
	[0312.152] SetEvent (hEvent=0x118) returned 1
	[0312.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1
	[0312.168] SetEvent (hEvent=0x150) returned 1
	[0312.168] SetEvent (hEvent=0x218) returned 1
	[0312.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4048)) returned 1
	[0312.185] SetEvent (hEvent=0x150) returned 1
	[0312.185] SetEvent (hEvent=0x234) returned 1
	[0312.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x629)) returned 1
	[0312.201] SetEvent (hEvent=0x150) returned 1
	[0312.202] SetEvent (hEvent=0x27c) returned 1
	[0312.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8628)) returned 1
	[0312.220] SetEvent (hEvent=0x150) returned 1
	[0312.220] SetEvent (hEvent=0x1e8) returned 1
	[0312.220] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e90)) returned 1
	[0312.239] SetEvent (hEvent=0x164) returned 1
	[0312.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x211bb)) returned 1
	[0312.247] SetEvent (hEvent=0x118) returned 1
	[0312.248] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa202)) returned 1
	[0312.272] SetEvent (hEvent=0x150) returned 1
	[0312.272] SetEvent (hEvent=0x234) returned 1
	[0312.272] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18be)) returned 1
	[0312.302] SetEvent (hEvent=0x27c) returned 1
	[0312.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c94)) returned 1
	[0312.326] SetEvent (hEvent=0x150) returned 1
	[0312.326] SetEvent (hEvent=0x1e8) returned 1
	[0312.326] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0312.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0312.406] SetEvent (hEvent=0x150) returned 1
	[0312.406] SetEvent (hEvent=0x118) returned 1
	[0312.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1764)) returned 1
	[0312.427] SetEvent (hEvent=0x150) returned 1
	[0312.427] SetEvent (hEvent=0x234) returned 1
	[0312.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c08)) returned 1
	[0312.444] SetEvent (hEvent=0x27c) returned 1
	[0312.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e55)) returned 1
	[0312.460] SetEvent (hEvent=0x164) returned 1
	[0312.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10208b6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c08)) returned 1
	[0313.221] SetEvent (hEvent=0x150) returned 1
	[0313.222] SetEvent (hEvent=0x22c) returned 1
	[0313.222] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0313.542] SetEvent (hEvent=0x150) returned 1
	[0313.542] SetEvent (hEvent=0x118) returned 1
	[0313.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0313.562] SetEvent (hEvent=0x150) returned 1
	[0313.562] SetEvent (hEvent=0x234) returned 1
	[0313.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0313.586] SetEvent (hEvent=0x150) returned 1
	[0313.586] SetEvent (hEvent=0x27c) returned 1
	[0313.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10208b6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0313.605] SetEvent (hEvent=0x1e8) returned 1
	[0313.605] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9abe)) returned 1
	[0313.623] SetEvent (hEvent=0x150) returned 1
	[0313.623] SetEvent (hEvent=0x22c) returned 1
	[0313.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10208b6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x451e)) returned 1
	[0313.632] SetEvent (hEvent=0x164) returned 1
	[0313.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10208b6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0313.639] SetEvent (hEvent=0x218) returned 1
	[0313.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0313.647] SetEvent (hEvent=0x1b0) returned 1
	[0313.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10208b6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6afc)) returned 1
	[0313.654] SetEvent (hEvent=0x284) returned 1
	[0313.655] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10208b6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0313.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0313.674] SetEvent (hEvent=0x26c) returned 1
	[0313.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7297)) returned 1
	[0313.686] SetEvent (hEvent=0x1e0) returned 1
	[0313.686] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0313.700] SetEvent (hEvent=0x210) returned 1
	[0313.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0313.714] SetEvent (hEvent=0x1bc) returned 1
	[0313.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0313.722] SetEvent (hEvent=0x134) returned 1
	[0313.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0313.731] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0313.740] SetEvent (hEvent=0x24c) returned 1
	[0313.740] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0313.767] SetEvent (hEvent=0x1e8) returned 1
	[0313.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd5)) returned 1
	[0313.837] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0314.415] SetEvent (hEvent=0x1e0) returned 1
	[0314.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c08)) returned 1
	[0314.436] SetEvent (hEvent=0x150) returned 1
	[0314.436] SetEvent (hEvent=0x27c) returned 1
	[0314.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48fc)) returned 1
	[0314.461] SetEvent (hEvent=0x134) returned 1
	[0314.461] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0314.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8499)) returned 1
	[0314.538] SetEvent (hEvent=0x218) returned 1
	[0314.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1025500d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x639b)) returned 1
	[0314.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e90)) returned 1
	[0314.736] SetEvent (hEvent=0x150) returned 1
	[0314.736] SetEvent (hEvent=0x27c) returned 1
	[0314.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8118)) returned 1
	[0314.774] SetEvent (hEvent=0x1e0) returned 1
	[0314.774] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1025500d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f2b)) returned 1
	[0314.782] SetEvent (hEvent=0x1e0) returned 1
	[0314.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1
	[0314.801] SetEvent (hEvent=0x24c) returned 1
	[0314.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50a5)) returned 1
	[0314.819] SetEvent (hEvent=0x234) returned 1
	[0314.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0314.829] SetEvent (hEvent=0x218) returned 1
	[0314.829] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d86)) returned 1
	[0314.893] SwitchToThread () returned 1
	[0314.896] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5e7b)) returned 1
	[0314.947] SetEvent (hEvent=0x1e0) returned 1
	[0314.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d84)) returned 1
	[0314.967] SetEvent (hEvent=0x150) returned 1
	[0314.967] SetEvent (hEvent=0x234) returned 1
	[0314.967] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6090)) returned 1
	[0314.973] SetEvent (hEvent=0x1e0) returned 1
	[0314.973] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1025500d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1025500d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e90)) returned 1
	[0315.037] SetEvent (hEvent=0x134) returned 1
	[0315.037] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8795)) returned 1
	[0315.051] SetEvent (hEvent=0x27c) returned 1
	[0315.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8118)) returned 1
	[0315.073] SetEvent (hEvent=0x24c) returned 1
	[0315.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1025500d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1025500d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c7)) returned 1
	[0315.090] SetEvent (hEvent=0x234) returned 1
	[0315.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f40)) returned 1
	[0315.152] SetEvent (hEvent=0x1e0) returned 1
	[0315.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc382)) returned 1
	[0315.202] SetEvent (hEvent=0x1e8) returned 1
	[0315.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c08)) returned 1
	[0315.283] SetEvent (hEvent=0x27c) returned 1
	[0315.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b8)) returned 1
	[0315.347] SetEvent (hEvent=0x24c) returned 1
	[0315.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8)) returned 1
	[0315.413] SetEvent (hEvent=0x234) returned 1
	[0315.413] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8)) returned 1
	[0315.470] SetEvent (hEvent=0x1e0) returned 1
	[0315.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30408)) returned 1
	[0315.619] SetEvent (hEvent=0x1e8) returned 1
	[0315.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30408)) returned 1
	[0315.640] SetEvent (hEvent=0x27c) returned 1
	[0315.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x307f8)) returned 1
	[0315.806] SetEvent (hEvent=0x1e8) returned 1
	[0315.806] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0d2)) returned 1
	[0315.892] SetEvent (hEvent=0x160) returned 1
	[0315.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc5d7)) returned 1
	[0315.933] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf438)) returned 1
	[0316.165] SetEvent (hEvent=0x218) returned 1
	[0316.165] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1
	[0316.179] SetEvent (hEvent=0x1e0) returned 1
	[0316.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c45)) returned 1
	[0316.192] SetEvent (hEvent=0x234) returned 1
	[0316.192] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c76)) returned 1
	[0316.204] SetEvent (hEvent=0x134) returned 1
	[0316.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1
	[0316.259] SetEvent (hEvent=0x27c) returned 1
	[0316.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49d2)) returned 1
	[0316.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78af)) returned 1
	[0316.485] SetEvent (hEvent=0x1e0) returned 1
	[0316.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7450)) returned 1
	[0316.500] SetEvent (hEvent=0x234) returned 1
	[0316.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa343)) returned 1
	[0316.524] SetEvent (hEvent=0x150) returned 1
	[0316.524] SetEvent (hEvent=0x134) returned 1
	[0316.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa445)) returned 1
	[0316.536] SetEvent (hEvent=0x1e8) returned 1
	[0316.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ba2)) returned 1
	[0316.546] SetEvent (hEvent=0x24c) returned 1
	[0316.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x321f)) returned 1
	[0316.556] SetEvent (hEvent=0x218) returned 1
	[0316.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbdae)) returned 1
	[0316.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef6)) returned 1
	[0316.636] SetEvent (hEvent=0x234) returned 1
	[0316.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aac)) returned 1
	[0316.700] SetEvent (hEvent=0x1e8) returned 1
	[0316.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d6)) returned 1
	[0316.816] SetEvent (hEvent=0x134) returned 1
	[0316.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe0a)) returned 1
	[0316.973] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x776)) returned 1
	[0316.989] SetEvent (hEvent=0x218) returned 1
	[0316.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12)) returned 1
	[0317.088] SetEvent (hEvent=0x234) returned 1
	[0317.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ec)) returned 1
	[0317.125] SetEvent (hEvent=0x150) returned 1
	[0317.126] SetEvent (hEvent=0x1e8) returned 1
	[0317.126] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1
	[0317.167] SetEvent (hEvent=0x1e0) returned 1
	[0317.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175f)) returned 1
	[0317.187] SetEvent (hEvent=0x134) returned 1
	[0317.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x278a)) returned 1
	[0317.196] SetEvent (hEvent=0x1e0) returned 1
	[0317.196] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c2)) returned 1
	[0317.205] SetEvent (hEvent=0x160) returned 1
	[0317.206] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18f8)) returned 1
	[0317.232] SetEvent (hEvent=0x150) returned 1
	[0317.232] SetEvent (hEvent=0x218) returned 1
	[0317.232] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0a)) returned 1
	[0317.255] SetEvent (hEvent=0x150) returned 1
	[0317.256] SetEvent (hEvent=0x24c) returned 1
	[0317.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ca4)) returned 1
	[0317.264] SetEvent (hEvent=0x1e8) returned 1
	[0317.264] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5c)) returned 1
	[0317.452] SetEvent (hEvent=0x134) returned 1
	[0317.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dac)) returned 1
	[0317.473] SetEvent (hEvent=0x150) returned 1
	[0317.473] SetEvent (hEvent=0x160) returned 1
	[0317.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1268)) returned 1
	[0317.538] SetEvent (hEvent=0x218) returned 1
	[0317.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e0)) returned 1
	[0317.547] SetEvent (hEvent=0x1e0) returned 1
	[0317.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae4)) returned 1
	[0317.559] SetEvent (hEvent=0x1c4) returned 1
	[0317.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1
	[0317.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1db8)) returned 1
	[0317.578] SetEvent (hEvent=0x27c) returned 1
	[0317.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcdc)) returned 1
	[0317.587] SetEvent (hEvent=0x22c) returned 1
	[0317.587] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c)) returned 1
	[0317.598] SetEvent (hEvent=0x1b0) returned 1
	[0317.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b04)) returned 1
	[0317.610] SetEvent (hEvent=0x164) returned 1
	[0317.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1
	[0317.619] SetEvent (hEvent=0x1bc) returned 1
	[0317.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cc4)) returned 1
	[0317.627] SetEvent (hEvent=0x118) returned 1
	[0317.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36aa)) returned 1
	[0317.635] SetEvent (hEvent=0x210) returned 1
	[0317.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f6)) returned 1
	[0317.644] SetEvent (hEvent=0x284) returned 1
	[0317.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a80)) returned 1
	[0317.655] SetEvent (hEvent=0x2a8) returned 1
	[0317.655] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4754)) returned 1
	[0317.741] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1
	[0317.778] SetEvent (hEvent=0x1e8) returned 1
	[0317.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35b2)) returned 1
	[0317.784] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1
	[0317.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2242)) returned 1
	[0317.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0e)) returned 1
	[0317.888] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x283c)) returned 1
	[0317.898] SetEvent (hEvent=0x284) returned 1
	[0317.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514c)) returned 1
	[0317.912] SetEvent (hEvent=0x1e8) returned 1
	[0317.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2090)) returned 1
	[0317.960] SetEvent (hEvent=0x134) returned 1
	[0317.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x280c)) returned 1
	[0317.984] SetEvent (hEvent=0x160) returned 1
	[0317.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27c0)) returned 1
	[0318.062] SetEvent (hEvent=0x164) returned 1
	[0318.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x238c)) returned 1
	[0318.072] SetEvent (hEvent=0x27c) returned 1
	[0318.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fe)) returned 1
	[0318.109] SetEvent (hEvent=0x1e8) returned 1
	[0318.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2926)) returned 1
	[0318.258] SetEvent (hEvent=0x284) returned 1
	[0318.258] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0)) returned 1
	[0318.330] SetEvent (hEvent=0x284) returned 1
	[0318.330] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f72)) returned 1
	[0318.356] SetEvent (hEvent=0x2a8) returned 1
	[0318.356] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f74)) returned 1
	[0318.447] SetEvent (hEvent=0x27c) returned 1
	[0318.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e5c)) returned 1
	[0318.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3642)) returned 1
	[0318.608] SetEvent (hEvent=0x134) returned 1
	[0318.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x476e)) returned 1
	[0318.643] SetEvent (hEvent=0x25c) returned 1
	[0318.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8e0)) returned 1
	[0318.665] SetEvent (hEvent=0x25c) returned 1
	[0318.665] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10cb8)) returned 1
	[0318.714] SetEvent (hEvent=0x25c) returned 1
	[0318.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a04)) returned 1
	[0318.738] SetEvent (hEvent=0x160) returned 1
	[0318.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee4a)) returned 1
	[0318.765] SetEvent (hEvent=0x27c) returned 1
	[0318.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b96)) returned 1
	[0318.774] SetEvent (hEvent=0x2a8) returned 1
	[0318.774] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbe0)) returned 1
	[0318.816] SetEvent (hEvent=0x150) returned 1
	[0318.816] SetEvent (hEvent=0x284) returned 1
	[0318.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x934c)) returned 1
	[0318.832] SetEvent (hEvent=0x164) returned 1
	[0318.832] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1948)) returned 1
	[0318.855] SetEvent (hEvent=0x150) returned 1
	[0318.855] SetEvent (hEvent=0x160) returned 1
	[0318.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51ea)) returned 1
	[0318.889] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3308)) returned 1
	[0318.915] SetEvent (hEvent=0x150) returned 1
	[0318.915] SetEvent (hEvent=0x2a8) returned 1
	[0318.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27f4)) returned 1
	[0318.944] SetEvent (hEvent=0x150) returned 1
	[0318.944] SetEvent (hEvent=0x284) returned 1
	[0318.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb7c)) returned 1
	[0318.964] SetEvent (hEvent=0x150) returned 1
	[0318.964] SetEvent (hEvent=0x164) returned 1
	[0318.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x828)) returned 1
	[0318.982] SetEvent (hEvent=0x150) returned 1
	[0318.982] SetEvent (hEvent=0x160) returned 1
	[0318.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x704e)) returned 1
	[0319.036] SetEvent (hEvent=0x150) returned 1
	[0319.036] SetEvent (hEvent=0x1e8) returned 1
	[0319.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x143c)) returned 1
	[0319.055] SetEvent (hEvent=0x150) returned 1
	[0319.055] SetEvent (hEvent=0x2a8) returned 1
	[0319.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1544)) returned 1
	[0319.070] SetEvent (hEvent=0x284) returned 1
	[0319.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x878)) returned 1
	[0319.080] SetEvent (hEvent=0x27c) returned 1
	[0319.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ec)) returned 1
	[0319.104] SetEvent (hEvent=0x150) returned 1
	[0319.104] SetEvent (hEvent=0x160) returned 1
	[0319.104] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6c)) returned 1
	[0319.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac8)) returned 1
	[0319.176] SetEvent (hEvent=0x150) returned 1
	[0319.176] SetEvent (hEvent=0x2a8) returned 1
	[0319.177] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1
	[0319.196] SetEvent (hEvent=0x150) returned 1
	[0319.196] SetEvent (hEvent=0x284) returned 1
	[0319.196] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b08)) returned 1
	[0319.216] SetEvent (hEvent=0x150) returned 1
	[0319.216] SetEvent (hEvent=0x27c) returned 1
	[0319.216] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb8)) returned 1
	[0319.237] SetEvent (hEvent=0x150) returned 1
	[0319.237] SetEvent (hEvent=0x160) returned 1
	[0319.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e58)) returned 1
	[0319.258] SetEvent (hEvent=0x150) returned 1
	[0319.259] SetEvent (hEvent=0x25c) returned 1
	[0319.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa4)) returned 1
	[0319.280] SetEvent (hEvent=0x2a8) returned 1
	[0319.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1724)) returned 1
	[0319.654] SetEvent (hEvent=0x150) returned 1
	[0319.654] SetEvent (hEvent=0x1e8) returned 1
	[0319.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2602)) returned 1
	[0319.669] SetEvent (hEvent=0x150) returned 1
	[0319.669] SetEvent (hEvent=0x27c) returned 1
	[0319.669] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6260)) returned 1
	[0319.688] SetEvent (hEvent=0x150) returned 1
	[0319.688] SetEvent (hEvent=0x160) returned 1
	[0319.688] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c80)) returned 1
	[0319.714] SetEvent (hEvent=0x25c) returned 1
	[0319.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe6)) returned 1
	[0319.732] SetEvent (hEvent=0x2a8) returned 1
	[0319.732] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5006)) returned 1
	[0319.749] SetEvent (hEvent=0x150) returned 1
	[0319.749] SetEvent (hEvent=0x1e8) returned 1
	[0319.749] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba)) returned 1
	[0319.765] SetEvent (hEvent=0x150) returned 1
	[0319.765] SetEvent (hEvent=0x27c) returned 1
	[0319.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x584)) returned 1
	[0319.787] SetEvent (hEvent=0x150) returned 1
	[0319.787] SetEvent (hEvent=0x160) returned 1
	[0319.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1652)) returned 1
	[0319.797] SetEvent (hEvent=0x284) returned 1
	[0319.797] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1
	[0319.821] SetEvent (hEvent=0x2a8) returned 1
	[0319.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1
	[0319.844] SetEvent (hEvent=0x150) returned 1
	[0319.844] SetEvent (hEvent=0x1e8) returned 1
	[0319.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b6)) returned 1
	[0319.936] SetEvent (hEvent=0x27c) returned 1
	[0319.936] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6302)) returned 1
	[0319.952] SetEvent (hEvent=0x160) returned 1
	[0319.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00704_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3636)) returned 1
	[0319.968] SetEvent (hEvent=0x284) returned 1
	[0319.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00726_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16478)) returned 1
	[0319.986] SetEvent (hEvent=0x150) returned 1
	[0319.986] SetEvent (hEvent=0x2a8) returned 1
	[0319.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00728_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1758)) returned 1
	[0320.032] SetEvent (hEvent=0x150) returned 1
	[0320.032] SetEvent (hEvent=0x1e8) returned 1
	[0320.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00732_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13fc)) returned 1
	[0320.054] SetEvent (hEvent=0x150) returned 1
	[0320.054] SetEvent (hEvent=0x27c) returned 1
	[0320.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00734_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x660)) returned 1
	[0320.072] SetEvent (hEvent=0x160) returned 1
	[0320.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00735_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cc)) returned 1
	[0320.092] SetEvent (hEvent=0x150) returned 1
	[0320.092] SetEvent (hEvent=0x284) returned 1
	[0320.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00736_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184c)) returned 1
	[0320.114] SetEvent (hEvent=0x150) returned 1
	[0320.114] SetEvent (hEvent=0x2a8) returned 1
	[0320.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00768_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x543a)) returned 1
	[0320.131] SetEvent (hEvent=0x1e8) returned 1
	[0320.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00783_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ee)) returned 1
	[0320.147] SetEvent (hEvent=0x164) returned 1
	[0320.147] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00820_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41c2)) returned 1
	[0320.162] SetEvent (hEvent=0x150) returned 1
	[0320.162] SetEvent (hEvent=0x160) returned 1
	[0320.162] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ae)) returned 1
	[0320.178] SetEvent (hEvent=0x150) returned 1
	[0320.178] SetEvent (hEvent=0x284) returned 1
	[0320.178] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00834_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36da)) returned 1
	[0320.193] SetEvent (hEvent=0x2a8) returned 1
	[0320.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00837_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe8)) returned 1
	[0320.209] SetEvent (hEvent=0x150) returned 1
	[0320.209] SetEvent (hEvent=0x1e8) returned 1
	[0320.210] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00910_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1898)) returned 1
	[0320.233] SetEvent (hEvent=0x27c) returned 1
	[0320.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00911_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29f8)) returned 1
	[0320.250] SetEvent (hEvent=0x150) returned 1
	[0320.250] SetEvent (hEvent=0x160) returned 1
	[0320.250] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00913_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28b4)) returned 1
	[0320.267] SetEvent (hEvent=0x284) returned 1
	[0320.267] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b0c)) returned 1
	[0320.282] SetEvent (hEvent=0x2a8) returned 1
	[0320.282] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00915_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf8)) returned 1
	[0320.308] SetEvent (hEvent=0x150) returned 1
	[0320.308] SetEvent (hEvent=0x1e8) returned 1
	[0320.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00916_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1270)) returned 1
	[0320.325] SetEvent (hEvent=0x25c) returned 1
	[0320.325] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00917_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ac)) returned 1
	[0320.348] SetEvent (hEvent=0x150) returned 1
	[0320.348] SetEvent (hEvent=0x160) returned 1
	[0320.348] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00918_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f5c)) returned 1
	[0320.366] SetEvent (hEvent=0x284) returned 1
	[0320.366] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00935_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2944)) returned 1
	[0320.377] SetEvent (hEvent=0x25c) returned 1
	[0320.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00938_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1960)) returned 1
	[0320.403] SetEvent (hEvent=0x150) returned 1
	[0320.403] SetEvent (hEvent=0x1e8) returned 1
	[0320.403] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00941_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1708)) returned 1
	[0320.424] SetEvent (hEvent=0x150) returned 1
	[0320.424] SetEvent (hEvent=0x27c) returned 1
	[0320.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00942_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1
	[0320.447] SetEvent (hEvent=0x150) returned 1
	[0320.447] SetEvent (hEvent=0x160) returned 1
	[0320.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00943_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d84)) returned 1
	[0320.460] SetEvent (hEvent=0x2a8) returned 1
	[0320.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae1a)) returned 1
	[0320.487] SetEvent (hEvent=0x150) returned 1
	[0320.487] SetEvent (hEvent=0x25c) returned 1
	[0320.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01063_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b38)) returned 1
	[0320.508] SetEvent (hEvent=0x150) returned 1
	[0320.508] SetEvent (hEvent=0x1e8) returned 1
	[0320.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1075e)) returned 1
	[0320.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01560_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b0)) returned 1
	[0320.589] SetEvent (hEvent=0x150) returned 1
	[0320.589] SetEvent (hEvent=0x160) returned 1
	[0320.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01561_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59d8)) returned 1
	[0320.610] SetEvent (hEvent=0x2a8) returned 1
	[0320.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01563_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ca)) returned 1
	[0320.635] SetEvent (hEvent=0x150) returned 1
	[0320.635] SetEvent (hEvent=0x25c) returned 1
	[0320.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01566_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51a8)) returned 1
	[0320.817] SetEvent (hEvent=0x150) returned 1
	[0320.817] SetEvent (hEvent=0x284) returned 1
	[0320.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01568_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54b0)) returned 1
	[0320.840] SetEvent (hEvent=0x150) returned 1
	[0320.841] SetEvent (hEvent=0x164) returned 1
	[0320.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01569_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a0)) returned 1
	[0320.858] SetEvent (hEvent=0x1e8) returned 1
	[0320.858] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01575_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8a6)) returned 1
	[0320.875] SetEvent (hEvent=0x150) returned 1
	[0320.875] SetEvent (hEvent=0x2a8) returned 1
	[0320.875] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01777_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2566)) returned 1
	[0320.893] SetEvent (hEvent=0x150) returned 1
	[0320.893] SetEvent (hEvent=0x25c) returned 1
	[0320.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01785_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ca8)) returned 1
	[0320.912] SetEvent (hEvent=0x150) returned 1
	[0320.912] SetEvent (hEvent=0x284) returned 1
	[0320.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01805_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088)) returned 1
	[0320.931] SetEvent (hEvent=0x164) returned 1
	[0320.931] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01905_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1
	[0320.960] SetEvent (hEvent=0x150) returned 1
	[0320.960] SetEvent (hEvent=0x160) returned 1
	[0320.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01954_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3086)) returned 1
	[0320.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02009_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d14)) returned 1
	[0321.043] SetEvent (hEvent=0x150) returned 1
	[0321.043] SetEvent (hEvent=0x25c) returned 1
	[0321.043] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02022_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d68)) returned 1
	[0321.107] SetEvent (hEvent=0x150) returned 1
	[0321.107] SetEvent (hEvent=0x284) returned 1
	[0321.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02024_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23a8)) returned 1
	[0321.126] SetEvent (hEvent=0x150) returned 1
	[0321.127] SetEvent (hEvent=0x164) returned 1
	[0321.127] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02025_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2016)) returned 1
	[0321.146] SetEvent (hEvent=0x150) returned 1
	[0321.146] SetEvent (hEvent=0x160) returned 1
	[0321.146] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02028_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24c8)) returned 1
	[0321.167] SetEvent (hEvent=0x150) returned 1
	[0321.167] SetEvent (hEvent=0x2a8) returned 1
	[0321.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x266c)) returned 1
	[0321.185] SetEvent (hEvent=0x150) returned 1
	[0321.185] SetEvent (hEvent=0x25c) returned 1
	[0321.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02048_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fde)) returned 1
	[0321.213] SetEvent (hEvent=0x150) returned 1
	[0321.213] SetEvent (hEvent=0x284) returned 1
	[0321.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02051_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c2c)) returned 1
	[0321.234] SetEvent (hEvent=0x164) returned 1
	[0321.234] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02054_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30ca)) returned 1
	[0321.253] SetEvent (hEvent=0x150) returned 1
	[0321.253] SetEvent (hEvent=0x160) returned 1
	[0321.253] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02055_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c)) returned 1
	[0321.272] SetEvent (hEvent=0x2a8) returned 1
	[0321.272] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02067_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x382a)) returned 1
	[0321.305] SetEvent (hEvent=0x150) returned 1
	[0321.305] SetEvent (hEvent=0x25c) returned 1
	[0321.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02094_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b4a)) returned 1
	[0321.322] SetEvent (hEvent=0x284) returned 1
	[0321.323] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02227_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1
	[0321.342] SetEvent (hEvent=0x150) returned 1
	[0321.342] SetEvent (hEvent=0x164) returned 1
	[0321.342] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02228_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x334)) returned 1
	[0321.360] SetEvent (hEvent=0x150) returned 1
	[0321.361] SetEvent (hEvent=0x160) returned 1
	[0321.361] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02233_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1
	[0321.381] SetEvent (hEvent=0x2a8) returned 1
	[0321.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe88)) returned 1
	[0321.401] SetEvent (hEvent=0x150) returned 1
	[0321.401] SetEvent (hEvent=0x25c) returned 1
	[0321.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02253_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1
	[0321.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x818)) returned 1
	[0321.474] SetEvent (hEvent=0x150) returned 1
	[0321.474] SetEvent (hEvent=0x164) returned 1
	[0321.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02263_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa94)) returned 1
	[0321.508] SetEvent (hEvent=0x150) returned 1
	[0321.508] SetEvent (hEvent=0x160) returned 1
	[0321.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c)) returned 1
	[0321.528] SetEvent (hEvent=0x150) returned 1
	[0321.528] SetEvent (hEvent=0x2a8) returned 1
	[0321.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02268_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10491364, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10491364, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1
	[0321.547] SetEvent (hEvent=0x150) returned 1
	[0321.547] SetEvent (hEvent=0x25c) returned 1
	[0321.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf0)) returned 1
	[0321.565] SetEvent (hEvent=0x150) returned 1
	[0321.565] SetEvent (hEvent=0x1e8) returned 1
	[0321.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1041ec4b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1041ec4b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1041ec4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa68)) returned 1
	[0321.585] SetEvent (hEvent=0x150) returned 1
	[0321.585] SetEvent (hEvent=0x164) returned 1
	[0321.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02276_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1041ec4b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1041ec4b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1041ec4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e4)) returned 1
	[0321.607] SetEvent (hEvent=0x150) returned 1
	[0321.607] SetEvent (hEvent=0x160) returned 1
	[0321.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17a1c)) returned 1
	[0321.627] SetEvent (hEvent=0x150) returned 1
	[0321.627] SetEvent (hEvent=0x2a8) returned 1
	[0321.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02431_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1
	[0321.646] SetEvent (hEvent=0x150) returned 1
	[0321.646] SetEvent (hEvent=0x25c) returned 1
	[0321.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02437_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b4)) returned 1
	[0321.664] SetEvent (hEvent=0x1e8) returned 1
	[0321.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1
	[0321.683] SetEvent (hEvent=0x27c) returned 1
	[0321.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02464_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a54)) returned 1
	[0321.703] SetEvent (hEvent=0x150) returned 1
	[0321.703] SetEvent (hEvent=0x160) returned 1
	[0321.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02465_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x574)) returned 1
	[0321.726] SetEvent (hEvent=0x150) returned 1
	[0321.726] SetEvent (hEvent=0x2a8) returned 1
	[0321.726] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02578_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1041ec4b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1041ec4b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1041ec4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ca)) returned 1
	[0321.744] SetEvent (hEvent=0x150) returned 1
	[0321.744] SetEvent (hEvent=0x25c) returned 1
	[0321.744] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02617_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fec)) returned 1
	[0321.763] SetEvent (hEvent=0x1e8) returned 1
	[0321.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f4e)) returned 1
	[0321.782] SetEvent (hEvent=0x150) returned 1
	[0321.782] SetEvent (hEvent=0x164) returned 1
	[0321.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02791_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x430c)) returned 1
	[0321.802] SetEvent (hEvent=0x150) returned 1
	[0321.802] SetEvent (hEvent=0x160) returned 1
	[0321.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02793_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b70)) returned 1
	[0321.829] SetEvent (hEvent=0x150) returned 1
	[0321.829] SetEvent (hEvent=0x2a8) returned 1
	[0321.829] GetFileAttributesExW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02794_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18) 

Thread:
	id = 7
	os_tid = 0x6c0

	[0098.957] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x312fff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x312fff30*=0x130) returned 1
	[0098.957] VirtualQuery (in: lpAddress=0x312fff40, lpBuffer=0x312fff40, dwLength=0x1c | out: lpBuffer=0x312fff40*(BaseAddress=0x312ff000, AllocationBase=0x31200000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0098.957] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x134
	[0098.958] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0099.144] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0099.477] SetEvent (hEvent=0x12c) returned 1
	[0099.477] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0101.333] SetEvent (hEvent=0x124) returned 1
	[0101.333] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x31750000
	[0101.335] ReadFile (in: hFile=0x164, lpBuffer=0x110c2000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x11021ef4, lpOverlapped=0x0 | out: lpBuffer=0x110c2000, lpNumberOfBytesRead=0x11021ef4*=0x0, lpOverlapped=0x0) returned 0
	[0112.262] CloseHandle (hObject=0x164) returned 1
	[0112.262] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0112.423] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0112.680] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0114.370] SetEvent (hEvent=0x124) returned 1
	[0114.371] SetEvent (hEvent=0x118) returned 1
	[0114.371] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0114.883] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0114.979] SetEvent (hEvent=0x124) returned 1
	[0114.979] SetEvent (hEvent=0x118) returned 1
	[0114.979] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0115.205] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0115.253] SetEvent (hEvent=0x118) returned 1
	[0115.253] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0115.299] SetEvent (hEvent=0x118) returned 1
	[0115.299] SwitchToThread () returned 1
	[0115.411] SetEvent (hEvent=0x12c) returned 1
	[0115.411] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0117.539] SetEvent (hEvent=0x124) returned 1
	[0117.546] CreateFileW (lpFileName="V:\\" (normalized: "v:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.551] FindFirstFileW (in: lpFileName="V:\\*", lpFindFileData=0x1133dbd8 | out: lpFindFileData=0x1133dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.557] CreateFileW (lpFileName="T:\\" (normalized: "t:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.557] FindFirstFileW (in: lpFileName="T:\\*", lpFindFileData=0x1133dbd8 | out: lpFindFileData=0x1133dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.563] CreateFileW (lpFileName="U:\\" (normalized: "u:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.564] FindFirstFileW (in: lpFileName="U:\\*", lpFindFileData=0x1133dbd8 | out: lpFindFileData=0x1133dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.569] CreateFileW (lpFileName="X:\\" (normalized: "x:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.569] FindFirstFileW (in: lpFileName="X:\\*", lpFindFileData=0x1133dbd8 | out: lpFindFileData=0x1133dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.575] CreateFileW (lpFileName="W:\\" (normalized: "w:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.576] FindFirstFileW (in: lpFileName="W:\\*", lpFindFileData=0x1133dbd8 | out: lpFindFileData=0x1133dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.581] CreateFileW (lpFileName="Y:\\" (normalized: "y:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0117.878] FindFirstFileW (in: lpFileName="Y:\\*", lpFindFileData=0x1133dbd8 | out: lpFindFileData=0x1133dbd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0117.878] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0118.360] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0118.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x110361c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c
	[0118.563] CloseHandle (hObject=0x17c) returned 1
	[0118.564] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20
	[0118.564] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", dwFileAttributes=0x20) returned 1
	[0118.565] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.tl30z" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.tl30z"), dwFlags=0x1) returned 1
	[0122.511] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.tl30z" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0122.512] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0122.513] ReadFile (in: hFile=0x184, lpBuffer=0x1112c000, nNumberOfBytesToRead=0x1774, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1112c000*, lpNumberOfBytesRead=0x1131be18*=0x1774, lpOverlapped=0x0) returned 1
	[0126.156] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0126.696] SetEvent (hEvent=0x160) returned 1
	[0126.697] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0x20
	[0126.697] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd", dwFileAttributes=0x20) returned 1
	[0126.698] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.tl30z" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.tl30z"), dwFlags=0x1) returned 1
	[0130.980] SetEvent (hEvent=0x150) returned 1
	[0130.981] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.tl30z" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0131.837] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0131.841] ReadFile (in: hFile=0x174, lpBuffer=0x111b6000, nNumberOfBytesToRead=0x241, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x111b6000*, lpNumberOfBytesRead=0x1131be18*=0x241, lpOverlapped=0x0) returned 1
	[0132.076] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332330 | out: pbBuffer=0x11332330) returned 1
	[0132.077] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332328 | out: pbBuffer=0x11332328) returned 1
	[0132.077] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c6802 | out: pbBuffer=0x111c6802) returned 1
	[0132.078] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c688c | out: pbBuffer=0x111c688c) returned 1
	[0132.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332360 | out: pbBuffer=0x11332360) returned 1
	[0132.079] GetFileType (hFile=0x174) returned 0x1
	[0132.080] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0132.080] WriteFile (in: hFile=0x174, lpBuffer=0x111cc600*, nNumberOfBytesToWrite=0x241, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111cc600*, lpNumberOfBytesWritten=0x1102bdfc*=0x241, lpOverlapped=0x1102be08) returned 1
	[0132.671] GetFileType (hFile=0x174) returned 0x1
	[0132.671] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x241, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0132.671] GetFileType (hFile=0x174) returned 0x1
	[0132.672] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0132.672] WriteFile (in: hFile=0x174, lpBuffer=0x111d6a80*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111d6a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x221, lpOverlapped=0x1102be08) returned 1
	[0132.889] GetFileType (hFile=0x174) returned 0x1
	[0132.890] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x241, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0132.890] CloseHandle (hObject=0x174) returned 1
	[0133.466] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.tl30z" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.tl30z")) returned 0x20
	[0133.467] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.tl30z", dwFileAttributes=0x21) returned 1
	[0133.986] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0142.785] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0142.798] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0142.867] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0143.743] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0144.641] SetEvent (hEvent=0x164) returned 1
	[0144.641] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80
	[0144.642] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0144.643] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0145.684] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0145.685] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0145.685] ReadFile (in: hFile=0x184, lpBuffer=0x11146000, nNumberOfBytesToRead=0x80aa, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11146000*, lpNumberOfBytesRead=0x1131be18*=0x80aa, lpOverlapped=0x0) returned 1
	[0145.719] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e290 | out: pbBuffer=0x1142e290) returned 1
	[0145.719] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136f302 | out: pbBuffer=0x1136f302) returned 1
	[0145.719] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136f30b | out: pbBuffer=0x1136f30b) returned 1
	[0145.719] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2c0 | out: pbBuffer=0x1142e2c0) returned 1
	[0145.722] GetFileType (hFile=0x184) returned 0x1
	[0145.722] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0145.722] WriteFile (in: hFile=0x184, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x80aa, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x1133fdfc*=0x80aa, lpOverlapped=0x1133fe08) returned 1
	[0145.723] GetFileType (hFile=0x184) returned 0x1
	[0145.723] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x80aa, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0145.723] GetFileType (hFile=0x184) returned 0x1
	[0145.723] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0145.724] WriteFile (in: hFile=0x184, lpBuffer=0x1132bc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1132bc00*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0145.724] GetFileType (hFile=0x184) returned 0x1
	[0145.724] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x80aa, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0145.724] CloseHandle (hObject=0x184) returned 1
	[0145.729] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.tl30z")) returned 0x20
	[0145.730] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0145.730] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0146.026] SetEvent (hEvent=0x12c) returned 1
	[0146.026] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80
	[0146.027] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0146.027] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0146.727] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0146.859] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0147.306] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0147.306] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0147.560] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80
	[0147.561] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0147.561] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0147.562] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0147.562] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11027e08 | out: lpMode=0x11027e08) returned 0
	[0147.563] ReadFile (in: hFile=0x1cc, lpBuffer=0x11090000, nNumberOfBytesToRead=0x1ac3, lpNumberOfBytesRead=0x11027e18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x11027e18*=0x1ac3, lpOverlapped=0x0) returned 1
	[0147.698] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0147.698] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e108 | out: pbBuffer=0x1142e108) returned 1
	[0147.698] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11174802 | out: pbBuffer=0x11174802) returned 1
	[0147.698] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0147.699] GetFileType (hFile=0x1cc) returned 0x1
	[0147.699] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0147.699] WriteFile (in: hFile=0x1cc, lpBuffer=0x1119e000*, nNumberOfBytesToWrite=0x1ac3, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1119e000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1ac3, lpOverlapped=0x1133de08) returned 1
	[0147.700] GetFileType (hFile=0x1cc) returned 0x1
	[0147.700] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x1ac3, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0147.700] GetFileType (hFile=0x1cc) returned 0x1
	[0147.700] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0147.700] WriteFile (in: hFile=0x1cc, lpBuffer=0x11186a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11186a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0147.700] GetFileType (hFile=0x1cc) returned 0x1
	[0147.701] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x1ac3, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0147.701] CloseHandle (hObject=0x1cc) returned 1
	[0147.705] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.tl30z")) returned 0x20
	[0147.705] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0147.706] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80
	[0147.706] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0147.707] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0148.936] SetEvent (hEvent=0x150) returned 1
	[0148.936] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0149.088] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0149.089] ReadFile (in: hFile=0x1cc, lpBuffer=0x11298000, nNumberOfBytesToRead=0x8710, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11298000*, lpNumberOfBytesRead=0x11022e18*=0x8710, lpOverlapped=0x0) returned 1
	[0149.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2a0 | out: pbBuffer=0x1142e2a0) returned 1
	[0149.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e298 | out: pbBuffer=0x1142e298) returned 1
	[0149.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11175202 | out: pbBuffer=0x11175202) returned 1
	[0149.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2d0 | out: pbBuffer=0x1142e2d0) returned 1
	[0149.169] GetFileType (hFile=0x1cc) returned 0x1
	[0149.169] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0149.169] WriteFile (in: hFile=0x1cc, lpBuffer=0x111fa000*, nNumberOfBytesToWrite=0x8710, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111fa000*, lpNumberOfBytesWritten=0x1133ddfc*=0x8710, lpOverlapped=0x1133de08) returned 1
	[0149.170] GetFileType (hFile=0x1cc) returned 0x1
	[0149.170] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x8710, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0149.170] GetFileType (hFile=0x1cc) returned 0x1
	[0149.170] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0149.170] WriteFile (in: hFile=0x1cc, lpBuffer=0x11187880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11187880*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0149.171] GetFileType (hFile=0x1cc) returned 0x1
	[0149.171] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x8710, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0149.171] CloseHandle (hObject=0x1cc) returned 1
	[0149.177] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.tl30z")) returned 0x20
	[0149.177] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0149.178] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0150.094] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0150.420] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0150.595] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0150.644] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0150.773] SetEvent (hEvent=0x12c) returned 1
	[0150.773] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80
	[0150.773] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0150.774] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0151.318] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0151.319] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0151.319] ReadFile (in: hFile=0x1b4, lpBuffer=0x110fe000, nNumberOfBytesToRead=0x278d, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110fe000*, lpNumberOfBytesRead=0x1131ce18*=0x278d, lpOverlapped=0x0) returned 1
	[0151.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0151.429] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332518 | out: pbBuffer=0x11332518) returned 1
	[0151.429] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134fd02 | out: pbBuffer=0x1134fd02) returned 1
	[0151.429] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134fd64 | out: pbBuffer=0x1134fd64) returned 1
	[0151.429] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134fd92 | out: pbBuffer=0x1134fd92) returned 1
	[0151.429] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134fd97 | out: pbBuffer=0x1134fd97) returned 1
	[0151.430] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332570 | out: pbBuffer=0x11332570) returned 1
	[0151.430] GetFileType (hFile=0x1b4) returned 0x1
	[0151.430] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0151.430] WriteFile (in: hFile=0x1b4, lpBuffer=0x1114a000*, nNumberOfBytesToWrite=0x278d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1114a000*, lpNumberOfBytesWritten=0x1102ddfc*=0x278d, lpOverlapped=0x1102de08) returned 1
	[0151.436] GetFileType (hFile=0x1b4) returned 0x1
	[0151.437] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x278d, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0151.437] GetFileType (hFile=0x1b4) returned 0x1
	[0151.437] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0151.437] WriteFile (in: hFile=0x1b4, lpBuffer=0x11124700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11124700*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0151.437] GetFileType (hFile=0x1b4) returned 0x1
	[0151.437] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x278d, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0151.438] CloseHandle (hObject=0x1b4) returned 1
	[0151.439] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.tl30z")) returned 0x20
	[0151.440] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0151.441] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80
	[0151.441] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0151.441] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0152.158] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0152.159] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0152.159] ReadFile (in: hFile=0x1b4, lpBuffer=0x1145a000, nNumberOfBytesToRead=0x318f, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1145a000*, lpNumberOfBytesRead=0x11022e18*=0x318f, lpOverlapped=0x0) returned 1
	[0152.164] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x0
	[0152.185] SetEvent (hEvent=0x150) returned 1
	[0152.185] SetEvent (hEvent=0x118) returned 1
	[0152.186] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0152.326] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0152.327] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0152.416] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0152.416] SwitchToThread () returned 1
	[0152.462] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0152.511] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0152.514] SetEvent (hEvent=0x150) returned 1
	[0152.514] SetEvent (hEvent=0x118) returned 1
	[0152.514] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0152.574] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0152.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e100 | out: pbBuffer=0x1142e100) returned 1
	[0152.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1106a802 | out: pbBuffer=0x1106a802) returned 1
	[0152.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1106a884 | out: pbBuffer=0x1106a884) returned 1
	[0152.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e130 | out: pbBuffer=0x1142e130) returned 1
	[0152.576] GetFileType (hFile=0x1b4) returned 0x1
	[0152.577] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0152.577] WriteFile (in: hFile=0x1b4, lpBuffer=0x11434000*, nNumberOfBytesToWrite=0x318f, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11434000*, lpNumberOfBytesWritten=0x1133fdfc*=0x318f, lpOverlapped=0x1133fe08) returned 1
	[0152.578] GetFileType (hFile=0x1b4) returned 0x1
	[0152.578] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x318f, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0152.578] GetFileType (hFile=0x1b4) returned 0x1
	[0152.578] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0152.579] WriteFile (in: hFile=0x1b4, lpBuffer=0x11418a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11418a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0152.579] GetFileType (hFile=0x1b4) returned 0x1
	[0152.579] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x318f, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0152.579] CloseHandle (hObject=0x1b4) returned 1
	[0152.585] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.tl30z")) returned 0x20
	[0152.585] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0152.586] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1
	[0152.587] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1043\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0153.236] SetEvent (hEvent=0x150) returned 1
	[0153.236] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0153.236] WriteFile (in: hFile=0x1cc, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0153.241] CloseHandle (hObject=0x1cc) returned 1
	[0153.554] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043" (normalized: "c:\\588bce7c90097ed212\\1043"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x5efd657e, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x5efd657e, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0154.997] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\" (normalized: "c:\\588bce7c90097ed212\\1044"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0154.998] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22b0
	[0155.001] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.001] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0155.001] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0155.001] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0155.001] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0155.001] FindClose (in: hFindFile=0x7f22b0 | out: hFindFile=0x7f22b0) returned 1
	[0155.001] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1
	[0155.002] SetEvent (hEvent=0x1b0) returned 1
	[0155.002] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1
	[0155.002] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1
	[0155.002] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1044\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0155.594] SetEvent (hEvent=0x150) returned 1
	[0155.594] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0155.595] WriteFile (in: hFile=0x1b4, lpBuffer=0x113b8000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x113b8000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0155.600] CloseHandle (hObject=0x1b4) returned 1
	[0155.703] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044" (normalized: "c:\\588bce7c90097ed212\\1044"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x6051b01e, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x6051b01e, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0156.442] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\" (normalized: "c:\\588bce7c90097ed212\\1045"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.442] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1df0
	[0156.446] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.446] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0156.446] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0156.447] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0156.447] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.447] FindClose (in: hFindFile=0x7f1df0 | out: hFindFile=0x7f1df0) returned 1
	[0156.447] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1
	[0156.447] SetEvent (hEvent=0x160) returned 1
	[0156.448] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0156.448] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1
	[0156.448] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1045\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0156.793] SetEvent (hEvent=0x150) returned 1
	[0156.793] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0156.793] WriteFile (in: hFile=0x1cc, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0156.795] CloseHandle (hObject=0x1cc) returned 1
	[0157.046] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045" (normalized: "c:\\588bce7c90097ed212\\1045"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x6120151e, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x6120151e, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0158.440] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\" (normalized: "c:\\588bce7c90097ed212\\1046"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0158.440] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22b0
	[0158.502] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0158.502] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0158.502] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0158.502] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0158.502] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0158.503] FindClose (in: hFindFile=0x7f22b0 | out: hFindFile=0x7f22b0) returned 1
	[0158.503] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1
	[0158.504] SetEvent (hEvent=0x160) returned 1
	[0158.504] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0158.504] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1
	[0158.506] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1046\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0158.852] SetEvent (hEvent=0x150) returned 1
	[0158.852] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0158.853] WriteFile (in: hFile=0x1cc, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0158.855] CloseHandle (hObject=0x1cc) returned 1
	[0158.954] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046" (normalized: "c:\\588bce7c90097ed212\\1046"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x623bd958, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x623bd958, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0159.701] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\" (normalized: "c:\\588bce7c90097ed212\\1049"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0159.701] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22b0
	[0159.701] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.701] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0159.702] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0159.702] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0159.702] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0159.702] FindClose (in: hFindFile=0x7f22b0 | out: hFindFile=0x7f22b0) returned 1
	[0159.702] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1
	[0159.702] SetEvent (hEvent=0x12c) returned 1
	[0159.702] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0159.703] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1
	[0159.866] SetEvent (hEvent=0x12c) returned 1
	[0159.866] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1049\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0160.221] SetEvent (hEvent=0x150) returned 1
	[0160.221] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0160.221] WriteFile (in: hFile=0x1cc, lpBuffer=0x11198000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x11198000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0160.224] CloseHandle (hObject=0x1cc) returned 1
	[0160.609] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049" (normalized: "c:\\588bce7c90097ed212\\1049"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x632b025c, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x632b025c, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0161.504] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\" (normalized: "c:\\588bce7c90097ed212\\1053"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0161.505] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2130
	[0161.506] FindNextFileW (in: hFindFile=0x7f2130, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0161.506] FindNextFileW (in: hFindFile=0x7f2130, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0161.507] FindNextFileW (in: hFindFile=0x7f2130, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0161.508] FindNextFileW (in: hFindFile=0x7f2130, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0161.508] FindNextFileW (in: hFindFile=0x7f2130, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0161.508] FindClose (in: hFindFile=0x7f2130 | out: hFindFile=0x7f2130) returned 1
	[0161.508] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1
	[0161.523] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1
	[0161.523] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1
	[0161.523] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1053\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0162.193] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0162.193] WriteFile (in: hFile=0x1cc, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0162.196] CloseHandle (hObject=0x1cc) returned 1
	[0162.544] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053" (normalized: "c:\\588bce7c90097ed212\\1053"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x6493677e, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x6493677e, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0163.706] SetEvent (hEvent=0x150) returned 1
	[0163.706] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\" (normalized: "c:\\588bce7c90097ed212\\1055"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0163.707] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1eb0
	[0163.708] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0163.708] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0163.708] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0163.708] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0163.708] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0163.708] FindClose (in: hFindFile=0x7f1eb0 | out: hFindFile=0x7f1eb0) returned 1
	[0163.708] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1
	[0163.709] SetEvent (hEvent=0x1c4) returned 1
	[0163.709] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558)) returned 1
	[0163.709] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1
	[0163.709] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1055\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0164.103] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0164.103] WriteFile (in: hFile=0x1b4, lpBuffer=0x11442000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x11442000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0164.107] CloseHandle (hObject=0x1b4) returned 1
	[0164.530] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055" (normalized: "c:\\588bce7c90097ed212\\1055"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x6598d972, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x6598d972, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0165.123] SetEvent (hEvent=0x150) returned 1
	[0165.123] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\" (normalized: "c:\\588bce7c90097ed212\\2052"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0165.172] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2070
	[0165.172] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0165.172] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0165.173] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0165.173] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0165.173] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0165.173] FindClose (in: hFindFile=0x7f2070 | out: hFindFile=0x7f2070) returned 1
	[0165.173] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1
	[0165.173] SetEvent (hEvent=0x12c) returned 1
	[0165.173] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1
	[0165.174] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1
	[0165.174] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\2052\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0165.569] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0165.569] WriteFile (in: hFile=0x1b4, lpBuffer=0x11442000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x11442000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0165.573] CloseHandle (hObject=0x1b4) returned 1
	[0165.759] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052" (normalized: "c:\\588bce7c90097ed212\\2052"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x665c5fb1, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x665c5fb1, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0166.610] SetEvent (hEvent=0x150) returned 1
	[0166.611] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\" (normalized: "c:\\588bce7c90097ed212\\2070"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0166.611] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1e70
	[0166.612] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0166.612] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0166.612] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0166.612] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0166.612] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0166.613] FindClose (in: hFindFile=0x7f1e70 | out: hFindFile=0x7f1e70) returned 1
	[0166.613] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1
	[0166.613] SetEvent (hEvent=0x1c4) returned 1
	[0166.613] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0166.614] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1
	[0166.622] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\2070\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0166.726] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0166.726] WriteFile (in: hFile=0x184, lpBuffer=0x113ea000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x113ea000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0166.729] CloseHandle (hObject=0x184) returned 1
	[0166.774] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070" (normalized: "c:\\588bce7c90097ed212\\2070"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x66e25d7e, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x66e25d7e, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0167.256] SetEvent (hEvent=0x150) returned 1
	[0167.256] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\" (normalized: "c:\\588bce7c90097ed212\\3076"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0167.256] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2070
	[0167.257] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0167.257] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0167.257] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0167.257] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0167.257] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0167.257] FindClose (in: hFindFile=0x7f2070 | out: hFindFile=0x7f2070) returned 1
	[0167.257] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1
	[0167.257] SetEvent (hEvent=0x12c) returned 1
	[0167.257] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758)) returned 1
	[0167.258] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1
	[0167.258] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\3076\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0167.448] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0167.448] WriteFile (in: hFile=0x1cc, lpBuffer=0x113ea000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x113ea000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0167.452] CloseHandle (hObject=0x1cc) returned 1
	[0167.524] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076" (normalized: "c:\\588bce7c90097ed212\\3076"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x6755f99e, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x6755f99e, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0167.974] SetEvent (hEvent=0x150) returned 1
	[0167.974] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\" (normalized: "c:\\588bce7c90097ed212\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0167.975] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22b0
	[0167.975] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0167.975] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0167.975] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0167.975] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0167.975] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0167.975] FindClose (in: hFindFile=0x7f22b0 | out: hFindFile=0x7f22b0) returned 1
	[0167.976] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1
	[0167.976] SetEvent (hEvent=0x1c4) returned 1
	[0167.976] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0167.976] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1
	[0167.976] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\3082\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0168.155] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0168.354] SetEvent (hEvent=0x118) returned 1
	[0168.354] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0168.354] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0172.788] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0172.862] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0173.567] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0174.727] SetEvent (hEvent=0x1c4) returned 1
	[0174.727] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 0x80
	[0174.727] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", dwFileAttributes=0x80) returned 1
	[0174.728] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.tl30z"), dwFlags=0x1) returned 1
	[0179.405] SetEvent (hEvent=0x150) returned 1
	[0179.405] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0179.644] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0179.644] ReadFile (in: hFile=0x1c8, lpBuffer=0x1105a000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1105a000*, lpNumberOfBytesRead=0x1131de18*=0x37e, lpOverlapped=0x0) returned 1
	[0179.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0179.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11066802 | out: pbBuffer=0x11066802) returned 1
	[0179.650] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0179.650] GetFileType (hFile=0x1c8) returned 0x1
	[0179.650] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0179.650] WriteFile (in: hFile=0x1c8, lpBuffer=0x113a2000*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113a2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x37e, lpOverlapped=0x1102be08) returned 1
	[0179.651] GetFileType (hFile=0x1c8) returned 0x1
	[0179.651] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0179.651] GetFileType (hFile=0x1c8) returned 0x1
	[0179.651] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0179.652] WriteFile (in: hFile=0x1c8, lpBuffer=0x1105ae00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1105ae00*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0179.652] GetFileType (hFile=0x1c8) returned 0x1
	[0179.652] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0179.652] CloseHandle (hObject=0x1c8) returned 1
	[0179.854] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.tl30z")) returned 0x20
	[0179.854] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0180.055] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 0x80
	[0180.055] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", dwFileAttributes=0x80) returned 1
	[0180.056] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.tl30z"), dwFlags=0x1) returned 1
	[0187.124] SetEvent (hEvent=0x150) returned 1
	[0187.124] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0187.254] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0187.255] ReadFile (in: hFile=0x1c8, lpBuffer=0x113f0000, nNumberOfBytesToRead=0x8f66, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x113f0000*, lpNumberOfBytesRead=0x1131de18*=0x8f66, lpOverlapped=0x0) returned 1
	[0187.414] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0187.415] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11406802 | out: pbBuffer=0x11406802) returned 1
	[0187.415] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114068e8 | out: pbBuffer=0x114068e8) returned 1
	[0187.415] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0187.418] GetFileType (hFile=0x1c8) returned 0x1
	[0187.418] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0187.418] WriteFile (in: hFile=0x1c8, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x8f66, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1133bdfc*=0x8f66, lpOverlapped=0x1133be08) returned 1
	[0187.419] GetFileType (hFile=0x1c8) returned 0x1
	[0187.419] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8f66, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0187.419] GetFileType (hFile=0x1c8) returned 0x1
	[0187.419] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0187.420] WriteFile (in: hFile=0x1c8, lpBuffer=0x11418a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11418a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x236, lpOverlapped=0x1133be08) returned 1
	[0187.420] GetFileType (hFile=0x1c8) returned 0x1
	[0187.421] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8f66, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0187.421] CloseHandle (hObject=0x1c8) returned 1
	[0187.487] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.tl30z")) returned 0x20
	[0187.487] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0187.545] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0188.916] SetEvent (hEvent=0x118) returned 1
	[0188.916] SetEvent (hEvent=0x1f0) returned 1
	[0188.916] SetEvent (hEvent=0x1e8) returned 1
	[0188.916] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0189.471] SetEvent (hEvent=0x1e0) returned 1
	[0189.471] SetEvent (hEvent=0x164) returned 1
	[0189.471] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0190.283] SetEvent (hEvent=0x164) returned 1
	[0190.283] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0198.106] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20
	[0198.106] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf", dwFileAttributes=0x20) returned 0
	[0198.106] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0198.216] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20
	[0198.217] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf", dwFileAttributes=0x20) returned 0
	[0198.217] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0198.301] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0198.388] SetEvent (hEvent=0x1b0) returned 1
	[0198.388] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0212.600] GetFileAttributesW (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 0x20
	[0212.600] SetFileAttributesW (lpFileName="C:\\Logs\\HardwareEvents.evtx", dwFileAttributes=0x20) returned 1
	[0212.601] MoveFileExW (lpExistingFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), lpNewFileName="C:\\Logs\\HardwareEvents.evtx.tl30z" (normalized: "c:\\logs\\hardwareevents.evtx.tl30z"), dwFlags=0x1) returned 1
	[0217.932] SetEvent (hEvent=0x150) returned 1
	[0217.932] CreateFileW (lpFileName="C:\\Logs\\HardwareEvents.evtx.tl30z" (normalized: "c:\\logs\\hardwareevents.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0218.060] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0218.060] ReadFile (in: hFile=0x1f4, lpBuffer=0x1140a000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1140a000*, lpNumberOfBytesRead=0x1128ce18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0218.069] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364420 | out: pbBuffer=0x11364420) returned 1
	[0218.069] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11564002 | out: pbBuffer=0x11564002) returned 1
	[0218.069] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x115640c2 | out: pbBuffer=0x115640c2) returned 1
	[0218.069] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x115640e7 | out: pbBuffer=0x115640e7) returned 1
	[0218.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364450 | out: pbBuffer=0x11364450) returned 1
	[0218.071] GetFileType (hFile=0x1f4) returned 0x1
	[0218.071] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0218.071] WriteFile (in: hFile=0x1f4, lpBuffer=0x11586000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11586000*, lpNumberOfBytesWritten=0x11031dfc*=0x6ccc, lpOverlapped=0x11031e08) returned 1
	[0218.072] GetFileType (hFile=0x1f4) returned 0x1
	[0218.072] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0218.072] GetFileType (hFile=0x1f4) returned 0x1
	[0218.074] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0218.074] WriteFile (in: hFile=0x1f4, lpBuffer=0x11562700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11562700*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0218.075] GetFileType (hFile=0x1f4) returned 0x1
	[0218.075] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0218.075] CloseHandle (hObject=0x1f4) returned 1
	[0218.164] GetFileAttributesW (lpFileName="C:\\Logs\\HardwareEvents.evtx.tl30z" (normalized: "c:\\logs\\hardwareevents.evtx.tl30z")) returned 0x20
	[0218.164] SetFileAttributesW (lpFileName="C:\\Logs\\HardwareEvents.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0218.296] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0218.319] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0218.445] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0218.708] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0218.772] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0220.037] SetEvent (hEvent=0x210) returned 1
	[0220.037] SetEvent (hEvent=0x118) returned 1
	[0220.037] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0242.283] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0242.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20
	[0242.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf", dwFileAttributes=0x20) returned 1
	[0242.360] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.tl30z"), dwFlags=0x1) returned 1
	[0243.843] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0243.902] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0243.902] ReadFile (in: hFile=0x288, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x7561, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x1131de18*=0x7561, lpOverlapped=0x0) returned 1
	[0243.912] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0243.912] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0243.912] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1149b302 | out: pbBuffer=0x1149b302) returned 1
	[0243.912] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1149b3b2 | out: pbBuffer=0x1149b3b2) returned 1
	[0243.913] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0243.913] GetFileType (hFile=0x288) returned 0x1
	[0243.913] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0243.914] WriteFile (in: hFile=0x288, lpBuffer=0x113b2000*, nNumberOfBytesToWrite=0x7561, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x113b2000*, lpNumberOfBytesWritten=0x112f3dfc*=0x7561, lpOverlapped=0x112f3e08) returned 1
	[0243.914] GetFileType (hFile=0x288) returned 0x1
	[0243.915] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x7561, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0243.915] GetFileType (hFile=0x288) returned 0x1
	[0243.915] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0243.915] WriteFile (in: hFile=0x288, lpBuffer=0x11499880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11499880*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0243.915] GetFileType (hFile=0x288) returned 0x1
	[0243.915] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x7561, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0243.916] CloseHandle (hObject=0x288) returned 1
	[0243.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.tl30z")) returned 0x20
	[0243.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.tl30z", dwFileAttributes=0x21) returned 1
	[0243.934] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0244.130] SetEvent (hEvent=0x118) returned 1
	[0244.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20
	[0244.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf", dwFileAttributes=0x20) returned 1
	[0244.131] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.tl30z"), dwFlags=0x1) returned 1
	[0244.834] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0244.929] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0244.936] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0244.936] SetEvent (hEvent=0x284) returned 1
	[0244.936] SetEvent (hEvent=0x1e8) returned 1
	[0244.936] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0244.986] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0244.987] SetEvent (hEvent=0x1e8) returned 1
	[0244.987] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0245.281] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0245.281] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0245.336] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0245.336] SetEvent (hEvent=0x150) returned 1
	[0245.337] SetEvent (hEvent=0x218) returned 1
	[0245.337] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0245.421] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0245.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.tl30z")) returned 0x20
	[0245.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0245.422] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0245.422] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x112f5e08 | out: lpMode=0x112f5e08) returned 0
	[0245.423] ReadFile (in: hFile=0x288, lpBuffer=0x113b2000, nNumberOfBytesToRead=0x205e, lpNumberOfBytesRead=0x112f5e18, lpOverlapped=0x0 | out: lpBuffer=0x113b2000*, lpNumberOfBytesRead=0x112f5e18*=0x205e, lpOverlapped=0x0) returned 1
	[0245.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0245.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e3b8 | out: pbBuffer=0x1104e3b8) returned 1
	[0245.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11418802 | out: pbBuffer=0x11418802) returned 1
	[0245.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11418863 | out: pbBuffer=0x11418863) returned 1
	[0245.640] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0245.641] GetFileType (hFile=0x288) returned 0x1
	[0245.641] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0245.641] WriteFile (in: hFile=0x288, lpBuffer=0x1149c000*, nNumberOfBytesToWrite=0x205e, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x1149c000*, lpNumberOfBytesWritten=0x112f5dfc*=0x205e, lpOverlapped=0x112f5e08) returned 1
	[0245.641] GetFileType (hFile=0x288) returned 0x1
	[0245.641] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x205e, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0245.642] GetFileType (hFile=0x288) returned 0x1
	[0245.642] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0245.642] WriteFile (in: hFile=0x288, lpBuffer=0x11408e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11408e00*, lpNumberOfBytesWritten=0x112f5dfc*=0x22a, lpOverlapped=0x112f5e08) returned 1
	[0245.642] GetFileType (hFile=0x288) returned 0x1
	[0245.642] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x205e, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0245.642] CloseHandle (hObject=0x288) returned 1
	[0245.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.tl30z")) returned 0x20
	[0245.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0245.646] ReadFile (in: hFile=0x1fc, lpBuffer=0x112f6000, nNumberOfBytesToRead=0xade4, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112f6000*, lpNumberOfBytesRead=0x11423e18*=0xade4, lpOverlapped=0x0) returned 1
	[0245.780] SwitchToThread () returned 1
	[0245.855] SwitchToThread () returned 1
	[0245.874] SetEvent (hEvent=0x248) returned 1
	[0245.874] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0245.886] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0245.887] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0245.887] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0245.887] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11392802 | out: pbBuffer=0x11392802) returned 1
	[0245.888] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113928af | out: pbBuffer=0x113928af) returned 1
	[0245.888] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0245.889] VirtualAlloc (lpAddress=0x11f4c000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x11f4c000
	[0245.891] VirtualAlloc (lpAddress=0x11f54000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x11f54000
	[0245.896] GetFileType (hFile=0x1fc) returned 0x1
	[0245.896] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0245.896] WriteFile (in: hFile=0x1fc, lpBuffer=0x11f54000*, nNumberOfBytesToWrite=0xade4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11f54000*, lpNumberOfBytesWritten=0x11031dfc*=0xade4, lpOverlapped=0x11031e08) returned 1
	[0245.897] GetFileType (hFile=0x1fc) returned 0x1
	[0245.897] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xade4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0245.897] GetFileType (hFile=0x1fc) returned 0x1
	[0245.898] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0245.898] WriteFile (in: hFile=0x1fc, lpBuffer=0x11382a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11382a80*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0245.898] GetFileType (hFile=0x1fc) returned 0x1
	[0245.898] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xade4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0245.899] CloseHandle (hObject=0x1fc) returned 1
	[0245.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.tl30z")) returned 0x20
	[0245.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0245.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0245.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11393402 | out: pbBuffer=0x11393402) returned 1
	[0245.905] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0245.906] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0245.912] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0245.912] SetEvent (hEvent=0x150) returned 1
	[0245.912] SetEvent (hEvent=0x1b0) returned 1
	[0245.912] SetEvent (hEvent=0x210) returned 1
	[0245.913] VirtualAlloc (lpAddress=0x11f64000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x11f64000
	[0245.919] GetFileType (hFile=0x1d8) returned 0x1
	[0245.920] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0245.920] WriteFile (in: hFile=0x1d8, lpBuffer=0x11f64000*, nNumberOfBytesToWrite=0x110bf, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11f64000*, lpNumberOfBytesWritten=0x112efdfc*=0x110bf, lpOverlapped=0x112efe08) returned 1
	[0245.921] GetFileType (hFile=0x1d8) returned 0x1
	[0245.921] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x110bf, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0245.921] GetFileType (hFile=0x1d8) returned 0x1
	[0245.921] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0245.921] WriteFile (in: hFile=0x1d8, lpBuffer=0x11383880*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11383880*, lpNumberOfBytesWritten=0x112efdfc*=0x23c, lpOverlapped=0x112efe08) returned 1
	[0245.931] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0245.937] SetEvent (hEvent=0x1b0) returned 1
	[0245.937] GetFileType (hFile=0x1d8) returned 0x1
	[0245.937] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x110bf, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0245.937] CloseHandle (hObject=0x1d8) returned 1
	[0245.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.tl30z")) returned 0x20
	[0245.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.tl30z", dwFileAttributes=0x21) returned 1
	[0246.016] SwitchToThread () returned 1
	[0246.040] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0246.059] SetEvent (hEvent=0x1b0) returned 1
	[0246.059] SwitchToThread () returned 1
	[0246.153] SetEvent (hEvent=0x26c) returned 1
	[0246.154] SetEvent (hEvent=0x1b0) returned 1
	[0246.154] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0246.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20
	[0246.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x20) returned 1
	[0246.623] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.tl30z"), dwFlags=0x1) returned 1
	[0248.287] SetEvent (hEvent=0x150) returned 1
	[0248.287] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0248.301] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0248.301] ReadFile (in: hFile=0x1fc, lpBuffer=0x111b83c0, nNumberOfBytesToRead=0x99, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111b83c0*, lpNumberOfBytesRead=0x11023e18*=0x99, lpOverlapped=0x0) returned 1
	[0248.306] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e120 | out: pbBuffer=0x1142e120) returned 1
	[0248.306] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11392802 | out: pbBuffer=0x11392802) returned 1
	[0248.307] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113928b1 | out: pbBuffer=0x113928b1) returned 1
	[0248.307] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113928db | out: pbBuffer=0x113928db) returned 1
	[0248.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e150 | out: pbBuffer=0x1142e150) returned 1
	[0248.308] GetFileType (hFile=0x1fc) returned 0x1
	[0248.308] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.308] WriteFile (in: hFile=0x1fc, lpBuffer=0x1135c600*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x1135c600*, lpNumberOfBytesWritten=0x112efdfc*=0x99, lpOverlapped=0x112efe08) returned 1
	[0248.309] GetFileType (hFile=0x1fc) returned 0x1
	[0248.309] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x99, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.309] GetFileType (hFile=0x1fc) returned 0x1
	[0248.309] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.309] WriteFile (in: hFile=0x1fc, lpBuffer=0x11398e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11398e00*, lpNumberOfBytesWritten=0x112efdfc*=0x224, lpOverlapped=0x112efe08) returned 1
	[0248.316] GetFileType (hFile=0x1fc) returned 0x1
	[0248.317] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x99, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.317] CloseHandle (hObject=0x1fc) returned 1
	[0248.422] SetEvent (hEvent=0x150) returned 1
	[0248.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.tl30z")) returned 0x20
	[0248.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.tl30z", dwFileAttributes=0x21) returned 1
	[0248.500] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0250.909] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0250.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar")) returned 0x20
	[0250.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", dwFileAttributes=0x20) returned 1
	[0250.922] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.tl30z"), dwFlags=0x1) returned 1
	[0251.726] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0251.741] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0251.742] ReadFile (in: hFile=0x1f4, lpBuffer=0x11c68000, nNumberOfBytesToRead=0x3bb00, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11c68000*, lpNumberOfBytesRead=0x11425e18*=0x3bb00, lpOverlapped=0x0) returned 1
	[0251.756] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e410 | out: pbBuffer=0x1142e410) returned 1
	[0251.756] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e408 | out: pbBuffer=0x1142e408) returned 1
	[0251.756] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11411c02 | out: pbBuffer=0x11411c02) returned 1
	[0251.757] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e440 | out: pbBuffer=0x1142e440) returned 1
	[0251.761] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0251.845] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0251.846] SetEvent (hEvent=0x150) returned 1
	[0251.846] SetEvent (hEvent=0x1f0) returned 1
	[0251.852] GetFileType (hFile=0x1f4) returned 0x1
	[0251.852] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0251.852] WriteFile (in: hFile=0x1f4, lpBuffer=0x11498000*, nNumberOfBytesToWrite=0x3bb00, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11498000*, lpNumberOfBytesWritten=0x112efdfc*=0x3bb00, lpOverlapped=0x112efe08) returned 1
	[0251.854] GetFileType (hFile=0x1f4) returned 0x1
	[0251.854] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3bb00, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0251.855] GetFileType (hFile=0x1f4) returned 0x1
	[0251.855] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0251.855] WriteFile (in: hFile=0x1f4, lpBuffer=0x113cc000*, nNumberOfBytesToWrite=0x251, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x113cc000*, lpNumberOfBytesWritten=0x112efdfc*=0x251, lpOverlapped=0x112efe08) returned 1
	[0251.867] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0251.890] GetFileType (hFile=0x1f4) returned 0x1
	[0251.890] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x3bb00, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0251.890] CloseHandle (hObject=0x1f4) returned 1
	[0251.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.tl30z")) returned 0x20
	[0251.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0251.892] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0252.421] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0252.490] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0252.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 0x20
	[0252.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy", dwFileAttributes=0x20) returned 1
	[0252.508] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.tl30z"), dwFlags=0x1) returned 1
	[0252.854] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0252.859] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0252.859] ReadFile (in: hFile=0x1d8, lpBuffer=0x113da3f0, nNumberOfBytesToRead=0x62, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x113da3f0*, lpNumberOfBytesRead=0x11287e18*=0x62, lpOverlapped=0x0) returned 1
	[0252.862] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0252.862] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138bd02 | out: pbBuffer=0x1138bd02) returned 1
	[0252.862] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138bd21 | out: pbBuffer=0x1138bd21) returned 1
	[0252.863] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326d0 | out: pbBuffer=0x113326d0) returned 1
	[0252.863] GetFileType (hFile=0x1d8) returned 0x1
	[0252.863] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.863] WriteFile (in: hFile=0x1d8, lpBuffer=0x11416000*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x113ebdfc, lpOverlapped=0x113ebe08 | out: lpBuffer=0x11416000*, lpNumberOfBytesWritten=0x113ebdfc*=0x62, lpOverlapped=0x113ebe08) returned 1
	[0252.863] GetFileType (hFile=0x1d8) returned 0x1
	[0252.864] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x62, lpNewFilePointer=0x0, dwMoveMethod=0x113ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.864] GetFileType (hFile=0x1d8) returned 0x1
	[0252.864] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.864] WriteFile (in: hFile=0x1d8, lpBuffer=0x11412a80*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x113ebdfc, lpOverlapped=0x113ebe08 | out: lpBuffer=0x11412a80*, lpNumberOfBytesWritten=0x113ebdfc*=0x221, lpOverlapped=0x113ebe08) returned 1
	[0252.867] GetFileType (hFile=0x1d8) returned 0x1
	[0252.867] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x62, lpNewFilePointer=0x0, dwMoveMethod=0x113ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.867] CloseHandle (hObject=0x1d8) returned 1
	[0252.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.tl30z")) returned 0x20
	[0252.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.tl30z", dwFileAttributes=0x21) returned 1
	[0252.963] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0252.982] SetEvent (hEvent=0x248) returned 1
	[0252.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 0x20
	[0252.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", dwFileAttributes=0x20) returned 1
	[0252.983] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.tl30z"), dwFlags=0x1) returned 1
	[0253.290] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0253.478] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0253.502] SetEvent (hEvent=0x1e8) returned 1
	[0253.506] GetFileType (hFile=0x288) returned 0x1
	[0253.507] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1128bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.507] WriteFile (in: hFile=0x288, lpBuffer=0x111ea000*, nNumberOfBytesToWrite=0x488f2, lpNumberOfBytesWritten=0x1128bdfc, lpOverlapped=0x1128be08 | out: lpBuffer=0x111ea000*, lpNumberOfBytesWritten=0x1128bdfc*=0x488f2, lpOverlapped=0x1128be08) returned 1
	[0253.510] GetFileType (hFile=0x288) returned 0x1
	[0253.510] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x488f2, lpNewFilePointer=0x0, dwMoveMethod=0x1128bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.510] GetFileType (hFile=0x288) returned 0x1
	[0253.510] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1128bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.511] WriteFile (in: hFile=0x288, lpBuffer=0x11082800*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x1128bdfc, lpOverlapped=0x1128be08 | out: lpBuffer=0x11082800*, lpNumberOfBytesWritten=0x1128bdfc*=0x260, lpOverlapped=0x1128be08) returned 1
	[0253.513] GetFileType (hFile=0x288) returned 0x1
	[0253.513] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x488f2, lpNewFilePointer=0x0, dwMoveMethod=0x1128bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.513] CloseHandle (hObject=0x288) returned 1
	[0253.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.tl30z")) returned 0x20
	[0253.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0253.515] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0253.515] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11097e08 | out: lpMode=0x11097e08) returned 0
	[0253.515] ReadFile (in: hFile=0x288, lpBuffer=0x11058000, nNumberOfBytesToRead=0x20d0, lpNumberOfBytesRead=0x11097e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11097e18*=0x20d0, lpOverlapped=0x0) returned 1
	[0253.521] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e120 | out: pbBuffer=0x1142e120) returned 1
	[0253.521] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11344802 | out: pbBuffer=0x11344802) returned 1
	[0253.521] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134484d | out: pbBuffer=0x1134484d) returned 1
	[0253.521] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11344871 | out: pbBuffer=0x11344871) returned 1
	[0253.522] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e150 | out: pbBuffer=0x1142e150) returned 1
	[0253.522] GetFileType (hFile=0x288) returned 0x1
	[0253.522] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11097de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.522] WriteFile (in: hFile=0x288, lpBuffer=0x110c4000*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x11097dfc, lpOverlapped=0x11097e08 | out: lpBuffer=0x110c4000*, lpNumberOfBytesWritten=0x11097dfc*=0x20d0, lpOverlapped=0x11097e08) returned 1
	[0253.523] GetFileType (hFile=0x288) returned 0x1
	[0253.523] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x20d0, lpNewFilePointer=0x0, dwMoveMethod=0x11097de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.523] GetFileType (hFile=0x288) returned 0x1
	[0253.523] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11097de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.523] WriteFile (in: hFile=0x288, lpBuffer=0x11090a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11097dfc, lpOverlapped=0x11097e08 | out: lpBuffer=0x11090a80*, lpNumberOfBytesWritten=0x11097dfc*=0x224, lpOverlapped=0x11097e08) returned 1
	[0253.524] GetFileType (hFile=0x288) returned 0x1
	[0253.524] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x20d0, lpNewFilePointer=0x0, dwMoveMethod=0x11097de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.524] CloseHandle (hObject=0x288) returned 1
	[0253.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.tl30z")) returned 0x20
	[0253.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.tl30z", dwFileAttributes=0x21) returned 1
	[0253.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0253.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1
	[0253.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0253.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1
	[0253.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0253.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e)) returned 1
	[0253.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1
	[0253.607] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0253.620] SwitchToThread () returned 1
	[0253.631] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0253.639] SetEvent (hEvent=0x234) returned 1
	[0253.639] SetEvent (hEvent=0x118) returned 1
	[0253.640] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332200 | out: pbBuffer=0x11332200) returned 1
	[0253.640] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113321f8 | out: pbBuffer=0x113321f8) returned 1
	[0253.640] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11ef8802 | out: pbBuffer=0x11ef8802) returned 1
	[0253.641] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332230 | out: pbBuffer=0x11332230) returned 1
	[0253.641] GetFileType (hFile=0x1d8) returned 0x1
	[0253.642] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.642] WriteFile (in: hFile=0x1d8, lpBuffer=0x112d4000*, nNumberOfBytesToWrite=0x939a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112d4000*, lpNumberOfBytesWritten=0x1102bdfc*=0x939a, lpOverlapped=0x1102be08) returned 1
	[0253.642] GetFileType (hFile=0x1d8) returned 0x1
	[0253.643] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x939a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.643] GetFileType (hFile=0x1d8) returned 0x1
	[0253.643] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.644] WriteFile (in: hFile=0x1d8, lpBuffer=0x11372a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11372a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0253.644] GetFileType (hFile=0x1d8) returned 0x1
	[0253.644] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x939a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.644] CloseHandle (hObject=0x1d8) returned 1
	[0253.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.tl30z" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.tl30z")) returned 0x20
	[0253.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.tl30z", dwFileAttributes=0x21) returned 1
	[0253.645] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0253.646] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1102be08 | out: lpMode=0x1102be08) returned 0
	[0253.646] ReadFile (in: hFile=0x1d8, lpBuffer=0x1127e000, nNumberOfBytesToRead=0x7ba2, lpNumberOfBytesRead=0x1102be18, lpOverlapped=0x0 | out: lpBuffer=0x1127e000*, lpNumberOfBytesRead=0x1102be18*=0x7ba2, lpOverlapped=0x0) returned 1
	[0253.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0253.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332388 | out: pbBuffer=0x11332388) returned 1
	[0253.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11ef9302 | out: pbBuffer=0x11ef9302) returned 1
	[0253.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11ef9315 | out: pbBuffer=0x11ef9315) returned 1
	[0253.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11ef9370 | out: pbBuffer=0x11ef9370) returned 1
	[0253.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11ef9393 | out: pbBuffer=0x11ef9393) returned 1
	[0253.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0253.740] VirtualAlloc (lpAddress=0x11f9e000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0x11f9e000
	[0253.741] VirtualFree (lpAddress=0x11478000, dwSize=0x432000, dwFreeType=0x4000) returned 1
	[0253.817] VirtualFree (lpAddress=0x11478000, dwSize=0x74e000, dwFreeType=0x4000) returned 1
	[0253.860] SetEvent (hEvent=0x210) returned 1
	[0253.864] SetEvent (hEvent=0x234) returned 1
	[0253.864] GetFileType (hFile=0x1d8) returned 0x1
	[0253.864] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.865] WriteFile (in: hFile=0x1d8, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0x7ba2, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7ba2, lpOverlapped=0x1102be08) returned 1
	[0253.866] GetFileType (hFile=0x1d8) returned 0x1
	[0253.866] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7ba2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.866] GetFileType (hFile=0x1d8) returned 0x1
	[0253.866] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.866] WriteFile (in: hFile=0x1d8, lpBuffer=0x11373c00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11373c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0253.866] GetFileType (hFile=0x1d8) returned 0x1
	[0253.866] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7ba2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.867] CloseHandle (hObject=0x1d8) returned 1
	[0253.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.tl30z")) returned 0x20
	[0253.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.tl30z", dwFileAttributes=0x21) returned 1
	[0253.868] SwitchToThread () returned 1
	[0253.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3)) returned 1
	[0253.963] SetEvent (hEvent=0x1b0) returned 1
	[0253.963] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0254.100] SetEvent (hEvent=0x150) returned 1
	[0254.100] SetEvent (hEvent=0x1e8) returned 1
	[0254.100] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0254.449] SetEvent (hEvent=0x150) returned 1
	[0254.449] SetEvent (hEvent=0x218) returned 1
	[0254.449] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0254.456] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0254.456] SetEvent (hEvent=0x218) returned 1
	[0254.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1
	[0254.631] SetEvent (hEvent=0x150) returned 1
	[0254.631] SetEvent (hEvent=0x118) returned 1
	[0254.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1
	[0254.889] SetEvent (hEvent=0x234) returned 1
	[0254.889] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1
	[0254.975] SetEvent (hEvent=0x26c) returned 1
	[0254.975] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0255.165] SetEvent (hEvent=0x26c) returned 1
	[0255.166] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0255.334] SetEvent (hEvent=0x26c) returned 1
	[0255.334] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1
	[0255.419] SetEvent (hEvent=0x150) returned 1
	[0255.419] SetEvent (hEvent=0x118) returned 1
	[0255.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1
	[0255.459] SetEvent (hEvent=0x150) returned 1
	[0255.460] SetEvent (hEvent=0x234) returned 1
	[0255.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1
	[0255.723] SetEvent (hEvent=0x150) returned 1
	[0255.723] SetEvent (hEvent=0x1b0) returned 1
	[0255.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0255.880] SetEvent (hEvent=0x150) returned 1
	[0255.880] SetEvent (hEvent=0x1e8) returned 1
	[0255.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1
	[0255.982] SetEvent (hEvent=0x150) returned 1
	[0255.982] SetEvent (hEvent=0x210) returned 1
	[0255.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0256.024] SetEvent (hEvent=0x150) returned 1
	[0256.024] SetEvent (hEvent=0x118) returned 1
	[0256.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0256.183] SetEvent (hEvent=0x150) returned 1
	[0256.183] SetEvent (hEvent=0x234) returned 1
	[0256.183] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1
	[0256.241] SetEvent (hEvent=0x150) returned 1
	[0256.241] SetEvent (hEvent=0x1b0) returned 1
	[0256.241] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0256.387] SetEvent (hEvent=0x150) returned 1
	[0256.388] SetEvent (hEvent=0x26c) returned 1
	[0256.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1
	[0256.556] SetEvent (hEvent=0x150) returned 1
	[0256.557] SetEvent (hEvent=0x1e8) returned 1
	[0256.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0256.685] SetEvent (hEvent=0x150) returned 1
	[0256.685] SetEvent (hEvent=0x210) returned 1
	[0256.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1
	[0256.849] SetEvent (hEvent=0x150) returned 1
	[0256.849] SetEvent (hEvent=0x118) returned 1
	[0256.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0256.894] SetEvent (hEvent=0x150) returned 1
	[0256.894] SetEvent (hEvent=0x1b0) returned 1
	[0256.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1
	[0257.033] SetEvent (hEvent=0x150) returned 1
	[0257.033] SetEvent (hEvent=0x26c) returned 1
	[0257.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0257.198] SetEvent (hEvent=0x150) returned 1
	[0257.198] SetEvent (hEvent=0x1e8) returned 1
	[0257.198] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0257.265] SetEvent (hEvent=0x150) returned 1
	[0257.265] SetEvent (hEvent=0x210) returned 1
	[0257.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0257.396] SetEvent (hEvent=0x150) returned 1
	[0257.396] SetEvent (hEvent=0x118) returned 1
	[0257.397] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56)) returned 1
	[0257.497] SetEvent (hEvent=0x150) returned 1
	[0257.498] SetEvent (hEvent=0x1b0) returned 1
	[0257.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1
	[0257.605] SetEvent (hEvent=0x150) returned 1
	[0257.605] SetEvent (hEvent=0x26c) returned 1
	[0257.605] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1
	[0257.759] SetEvent (hEvent=0x1e8) returned 1
	[0257.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876)) returned 1
	[0257.891] SetEvent (hEvent=0x150) returned 1
	[0257.891] SetEvent (hEvent=0x218) returned 1
	[0257.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1
	[0257.930] SetEvent (hEvent=0x150) returned 1
	[0257.930] SetEvent (hEvent=0x118) returned 1
	[0257.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1
	[0257.989] SetEvent (hEvent=0x150) returned 1
	[0257.989] SetEvent (hEvent=0x1b0) returned 1
	[0257.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0258.407] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1102dd2c | out: lpMode=0x1102dd2c) returned 0
	[0258.407] WriteFile (in: hFile=0x1fc, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102dcfc, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102dcfc*=0x292, lpOverlapped=0x0) returned 1
	[0258.449] CloseHandle (hObject=0x1fc) returned 1
	[0258.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests" (normalized: "c:\\program files\\microsoft office\\packagemanifests"), fInfoLevelId=0x0, lpFileInformation=0x1102dba4 | out: lpFileInformation=0x1102dba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x9d85eba6, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x9d85eba6, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1
	[0258.740] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\member_romania_liberia.exe" (normalized: "c:\\program files\\microsoft office\\member_romania_liberia.exe"), fInfoLevelId=0x0, lpFileInformation=0x1102dba4 | out: lpFileInformation=0x1102dba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ded4a0, ftCreationTime.dwHighDateTime=0x1d5875c, ftLastAccessTime.dwLowDateTime=0x87940e00, ftLastAccessTime.dwHighDateTime=0x1d5adc4, ftLastWriteTime.dwLowDateTime=0x87940e00, ftLastWriteTime.dwHighDateTime=0x1d5adc4, nFileSizeHigh=0x0, nFileSizeLow=0x13200)) returned 1
	[0258.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\" (normalized: "c:\\program files\\microsoft office\\root"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0258.741] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x1102da4c | out: lpFindFileData=0x1102da4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2430
	[0258.741] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.742] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1
	[0258.742] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0258.742] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1
	[0258.742] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1
	[0258.742] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1
	[0258.742] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1
	[0258.742] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1
	[0258.742] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1
	[0258.743] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1
	[0258.743] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1
	[0258.743] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1
	[0258.743] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0258.743] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0258.743] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1
	[0258.743] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0258.743] FindClose (in: hFindFile=0x7f2430 | out: hFindFile=0x7f2430) returned 1
	[0258.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\" (normalized: "c:\\program files\\microsoft office\\root\\clipart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0258.744] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x1102d9c8 | out: lpFindFileData=0x1102d9c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1ef0
	[0258.744] FindNextFileW (in: hFindFile=0x7f1ef0, lpFindFileData=0x1102da44 | out: lpFindFileData=0x1102da44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.744] FindNextFileW (in: hFindFile=0x7f1ef0, lpFindFileData=0x1102da44 | out: lpFindFileData=0x1102da44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1
	[0258.744] FindNextFileW (in: hFindFile=0x7f1ef0, lpFindFileData=0x1102da44 | out: lpFindFileData=0x1102da44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0258.744] FindNextFileW (in: hFindFile=0x7f1ef0, lpFindFileData=0x1102da44 | out: lpFindFileData=0x1102da44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0258.745] FindClose (in: hFindFile=0x7f1ef0 | out: hFindFile=0x7f1ef0) returned 1
	[0258.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0258.745] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x1102d944 | out: lpFindFileData=0x1102d944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1df0
	[0258.750] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0258.750] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1
	[0258.750] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1
	[0258.750] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1
	[0258.750] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1
	[0258.750] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1
	[0258.750] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1
	[0258.750] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1
	[0258.751] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1
	[0258.751] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1
	[0258.751] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1
	[0258.751] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1
	[0258.751] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1
	[0258.751] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1
	[0258.751] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1
	[0258.751] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1
	[0258.751] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1
	[0258.751] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1
	[0258.751] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1
	[0258.751] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1
	[0258.752] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1
	[0258.753] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1
	[0258.753] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1
	[0258.753] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1
	[0258.753] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1
	[0258.753] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1
	[0258.753] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1
	[0258.753] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1
	[0258.753] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1
	[0258.753] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1
	[0258.753] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1
	[0258.754] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1
	[0258.755] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1
	[0258.755] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1
	[0258.755] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1
	[0258.755] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1
	[0258.755] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1
	[0258.755] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1
	[0258.755] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1
	[0258.755] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1
	[0258.755] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1
	[0258.755] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1
	[0258.755] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1
	[0258.755] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1
	[0258.756] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1
	[0258.756] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1
	[0258.756] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1
	[0258.756] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1
	[0258.756] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1
	[0258.756] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1
	[0258.756] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1
	[0258.756] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1
	[0258.756] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1
	[0258.757] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1
	[0258.757] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1
	[0258.757] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1
	[0258.757] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1
	[0258.757] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1
	[0258.757] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1
	[0258.757] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1
	[0258.757] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1
	[0258.757] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1
	[0258.757] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1
	[0258.757] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1
	[0258.757] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1
	[0258.758] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1
	[0258.759] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1
	[0258.759] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1
	[0258.759] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1
	[0258.759] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1
	[0258.759] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1
	[0258.759] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1
	[0258.759] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1
	[0258.759] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1
	[0258.759] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1
	[0258.759] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1
	[0258.760] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1
	[0258.761] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1
	[0258.761] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1
	[0258.761] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1
	[0258.761] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1
	[0258.761] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1
	[0258.761] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1
	[0258.761] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1
	[0258.761] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1
	[0258.761] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1
	[0258.761] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1
	[0258.762] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1
	[0258.762] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1
	[0258.762] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1
	[0258.762] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1
	[0258.762] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1
	[0258.762] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1
	[0258.762] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1
	[0258.762] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1
	[0258.762] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1
	[0258.762] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1
	[0258.763] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1
	[0258.764] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1
	[0258.764] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1
	[0258.764] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1
	[0258.764] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1
	[0258.764] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1
	[0258.764] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1
	[0258.764] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1
	[0258.764] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1
	[0258.764] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1
	[0258.764] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1
	[0258.765] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1
	[0258.766] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1
	[0258.767] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1
	[0258.767] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1
	[0258.767] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1
	[0258.767] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1
	[0258.767] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1
	[0258.767] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1
	[0258.767] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1
	[0258.767] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1
	[0258.767] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1
	[0258.767] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1
	[0258.768] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1
	[0258.769] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1
	[0258.769] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1
	[0258.769] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1
	[0258.769] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1
	[0258.769] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1
	[0258.769] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1
	[0258.769] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1
	[0258.769] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102d9c0 | out: lpFindFileData=0x1102d9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1
	[0259.116] SwitchToThread () returned 1
	[0259.124] SetEvent (hEvent=0x150) returned 1
	[0259.124] SetEvent (hEvent=0x210) returned 1
	[0259.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1
	[0259.245] SetEvent (hEvent=0x234) returned 1
	[0259.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1
	[0259.465] SetEvent (hEvent=0x118) returned 1
	[0259.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1
	[0259.606] SetEvent (hEvent=0x1e8) returned 1
	[0259.606] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1
	[0259.754] SetEvent (hEvent=0x218) returned 1
	[0259.754] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1
	[0259.801] SetEvent (hEvent=0x210) returned 1
	[0259.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1
	[0259.834] SetEvent (hEvent=0x234) returned 1
	[0259.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1
	[0259.976] SetEvent (hEvent=0x26c) returned 1
	[0259.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1
	[0260.010] SetEvent (hEvent=0x1e8) returned 1
	[0260.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1
	[0260.185] SetEvent (hEvent=0x218) returned 1
	[0260.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1
	[0260.300] SetEvent (hEvent=0x210) returned 1
	[0260.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1
	[0260.336] SetEvent (hEvent=0x234) returned 1
	[0260.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1
	[0260.456] SetEvent (hEvent=0x26c) returned 1
	[0260.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1
	[0260.528] SetEvent (hEvent=0x1e8) returned 1
	[0260.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1
	[0260.642] SetEvent (hEvent=0x218) returned 1
	[0260.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1
	[0260.796] SetEvent (hEvent=0x210) returned 1
	[0260.796] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1
	[0260.910] SetEvent (hEvent=0x234) returned 1
	[0260.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1
	[0260.946] SetEvent (hEvent=0x26c) returned 1
	[0260.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1
	[0261.121] SetEvent (hEvent=0x1b0) returned 1
	[0261.121] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1
	[0261.163] SetEvent (hEvent=0x218) returned 1
	[0261.163] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1
	[0261.299] SetEvent (hEvent=0x210) returned 1
	[0261.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186)) returned 1
	[0261.335] SetEvent (hEvent=0x234) returned 1
	[0261.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e)) returned 1
	[0261.370] SetEvent (hEvent=0x26c) returned 1
	[0261.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1
	[0261.490] SetEvent (hEvent=0x1b0) returned 1
	[0261.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1
	[0261.525] SetEvent (hEvent=0x218) returned 1
	[0261.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398)) returned 1
	[0261.613] SetEvent (hEvent=0x218) returned 1
	[0261.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126)) returned 1
	[0261.659] SetEvent (hEvent=0x234) returned 1
	[0261.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e)) returned 1
	[0261.798] SetEvent (hEvent=0x26c) returned 1
	[0261.798] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1
	[0261.896] SetEvent (hEvent=0x26c) returned 1
	[0261.896] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1
	[0261.941] SetEvent (hEvent=0x210) returned 1
	[0261.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1
	[0262.140] SetEvent (hEvent=0x218) returned 1
	[0262.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1
	[0262.250] SetEvent (hEvent=0x218) returned 1
	[0262.251] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634)) returned 1
	[0262.306] SetEvent (hEvent=0x248) returned 1
	[0262.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062)) returned 1
	[0262.415] SetEvent (hEvent=0x26c) returned 1
	[0262.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1
	[0262.539] SetEvent (hEvent=0x1b0) returned 1
	[0262.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c)) returned 1
	[0262.572] SetEvent (hEvent=0x234) returned 1
	[0262.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1
	[0262.680] SetEvent (hEvent=0x218) returned 1
	[0262.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1
	[0262.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c)) returned 1
	[0262.988] SetEvent (hEvent=0x118) returned 1
	[0262.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1
	[0263.167] SetEvent (hEvent=0x1b0) returned 1
	[0263.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1
	[0263.221] SetEvent (hEvent=0x234) returned 1
	[0263.221] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc)) returned 1
	[0263.458] SetEvent (hEvent=0x26c) returned 1
	[0263.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2)) returned 1
	[0263.514] SetEvent (hEvent=0x248) returned 1
	[0263.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2)) returned 1
	[0263.545] SetEvent (hEvent=0x118) returned 1
	[0263.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1
	[0263.670] SetEvent (hEvent=0x1b0) returned 1
	[0263.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1
	[0263.802] SetEvent (hEvent=0x234) returned 1
	[0263.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1
	[0263.949] SetEvent (hEvent=0x26c) returned 1
	[0263.949] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc)) returned 1
	[0263.989] SetEvent (hEvent=0x26c) returned 1
	[0263.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74)) returned 1
	[0264.028] SetEvent (hEvent=0x118) returned 1
	[0264.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8)) returned 1
	[0264.236] SetEvent (hEvent=0x218) returned 1
	[0264.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1
	[0264.335] SetEvent (hEvent=0x234) returned 1
	[0264.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418)) returned 1
	[0264.386] SetEvent (hEvent=0x1b0) returned 1
	[0264.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1
	[0264.504] SetEvent (hEvent=0x26c) returned 1
	[0264.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac)) returned 1
	[0264.613] SetEvent (hEvent=0x210) returned 1
	[0264.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1
	[0264.766] SetEvent (hEvent=0x218) returned 1
	[0264.766] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1
	[0264.797] SetEvent (hEvent=0x234) returned 1
	[0264.797] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec)) returned 1
	[0264.918] SetEvent (hEvent=0x150) returned 1
	[0264.918] SetEvent (hEvent=0x248) returned 1
	[0264.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1
	[0264.957] SetEvent (hEvent=0x26c) returned 1
	[0264.958] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1
	[0265.095] SetEvent (hEvent=0x150) returned 1
	[0265.095] SetEvent (hEvent=0x210) returned 1
	[0265.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4)) returned 1
	[0265.453] SetEvent (hEvent=0x150) returned 1
	[0265.453] SetEvent (hEvent=0x218) returned 1
	[0265.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c)) returned 1
	[0265.601] SetEvent (hEvent=0x150) returned 1
	[0265.601] SetEvent (hEvent=0x234) returned 1
	[0265.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1
	[0265.854] SetEvent (hEvent=0x150) returned 1
	[0265.854] SetEvent (hEvent=0x248) returned 1
	[0265.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1
	[0265.897] SetEvent (hEvent=0x150) returned 1
	[0265.897] SetEvent (hEvent=0x26c) returned 1
	[0265.897] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1
	[0265.932] SetEvent (hEvent=0x150) returned 1
	[0265.932] SetEvent (hEvent=0x210) returned 1
	[0265.932] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1
	[0266.047] SetEvent (hEvent=0x150) returned 1
	[0266.047] SetEvent (hEvent=0x218) returned 1
	[0266.047] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1
	[0266.091] SetEvent (hEvent=0x150) returned 1
	[0266.091] SetEvent (hEvent=0x234) returned 1
	[0266.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1
	[0266.197] SetEvent (hEvent=0x150) returned 1
	[0266.197] SetEvent (hEvent=0x248) returned 1
	[0266.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c)) returned 1
	[0266.233] SetEvent (hEvent=0x150) returned 1
	[0266.233] SetEvent (hEvent=0x26c) returned 1
	[0266.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1
	[0266.279] SetEvent (hEvent=0x150) returned 1
	[0266.279] SetEvent (hEvent=0x210) returned 1
	[0266.279] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1
	[0266.355] SetEvent (hEvent=0x150) returned 1
	[0266.355] SetEvent (hEvent=0x218) returned 1
	[0266.355] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1
	[0266.393] SetEvent (hEvent=0x150) returned 1
	[0266.393] SetEvent (hEvent=0x234) returned 1
	[0266.393] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1
	[0266.574] SetEvent (hEvent=0x150) returned 1
	[0266.574] SetEvent (hEvent=0x248) returned 1
	[0266.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306)) returned 1
	[0266.674] SetEvent (hEvent=0x150) returned 1
	[0266.674] SetEvent (hEvent=0x26c) returned 1
	[0266.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906)) returned 1
	[0266.747] SetEvent (hEvent=0x150) returned 1
	[0266.747] SetEvent (hEvent=0x210) returned 1
	[0266.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114)) returned 1
	[0266.864] SetEvent (hEvent=0x150) returned 1
	[0266.864] SetEvent (hEvent=0x218) returned 1
	[0266.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74)) returned 1
	[0266.971] SetEvent (hEvent=0x150) returned 1
	[0266.971] SetEvent (hEvent=0x234) returned 1
	[0266.971] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4)) returned 1
	[0267.104] SetEvent (hEvent=0x150) returned 1
	[0267.104] SetEvent (hEvent=0x248) returned 1
	[0267.104] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34)) returned 1
	[0267.287] SetEvent (hEvent=0x150) returned 1
	[0267.287] SetEvent (hEvent=0x118) returned 1
	[0267.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354)) returned 1
	[0267.405] SetEvent (hEvent=0x150) returned 1
	[0267.406] SetEvent (hEvent=0x210) returned 1
	[0267.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0)) returned 1
	[0267.447] SetEvent (hEvent=0x150) returned 1
	[0267.447] SetEvent (hEvent=0x218) returned 1
	[0267.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1
	[0267.488] SetEvent (hEvent=0x150) returned 1
	[0267.488] SetEvent (hEvent=0x234) returned 1
	[0267.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c)) returned 1
	[0267.536] SetEvent (hEvent=0x150) returned 1
	[0267.536] SetEvent (hEvent=0x248) returned 1
	[0267.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c)) returned 1
	[0267.577] SetEvent (hEvent=0x150) returned 1
	[0267.577] SetEvent (hEvent=0x118) returned 1
	[0267.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1
	[0267.661] SetEvent (hEvent=0x150) returned 1
	[0267.661] SetEvent (hEvent=0x210) returned 1
	[0267.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00)) returned 1
	[0267.733] SetEvent (hEvent=0x150) returned 1
	[0267.733] SetEvent (hEvent=0x218) returned 1
	[0267.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca)) returned 1
	[0267.770] SetEvent (hEvent=0x150) returned 1
	[0267.770] SetEvent (hEvent=0x234) returned 1
	[0267.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1
	[0267.803] SetEvent (hEvent=0x150) returned 1
	[0267.803] SetEvent (hEvent=0x248) returned 1
	[0267.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e)) returned 1
	[0267.854] SetEvent (hEvent=0x150) returned 1
	[0267.854] SetEvent (hEvent=0x118) returned 1
	[0267.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa)) returned 1
	[0267.908] SetEvent (hEvent=0x150) returned 1
	[0267.908] SetEvent (hEvent=0x1b0) returned 1
	[0267.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc)) returned 1
	[0267.946] SetEvent (hEvent=0x150) returned 1
	[0267.946] SetEvent (hEvent=0x218) returned 1
	[0267.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a)) returned 1
	[0267.988] SetEvent (hEvent=0x150) returned 1
	[0267.988] SetEvent (hEvent=0x234) returned 1
	[0267.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e)) returned 1
	[0268.035] SetEvent (hEvent=0x150) returned 1
	[0268.035] SetEvent (hEvent=0x248) returned 1
	[0268.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb)) returned 1
	[0268.077] SetEvent (hEvent=0x150) returned 1
	[0268.077] SetEvent (hEvent=0x118) returned 1
	[0268.077] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1
	[0268.124] SetEvent (hEvent=0x150) returned 1
	[0268.124] SetEvent (hEvent=0x1b0) returned 1
	[0268.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6)) returned 1
	[0268.170] SetEvent (hEvent=0x150) returned 1
	[0268.170] SetEvent (hEvent=0x218) returned 1
	[0268.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75)) returned 1
	[0268.203] SetEvent (hEvent=0x150) returned 1
	[0268.203] SetEvent (hEvent=0x234) returned 1
	[0268.203] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6)) returned 1
	[0268.231] SetEvent (hEvent=0x150) returned 1
	[0268.232] SetEvent (hEvent=0x248) returned 1
	[0268.232] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1
	[0268.299] SetEvent (hEvent=0x150) returned 1
	[0268.299] SetEvent (hEvent=0x118) returned 1
	[0268.299] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244)) returned 1
	[0268.327] SetEvent (hEvent=0x150) returned 1
	[0268.327] SetEvent (hEvent=0x1b0) returned 1
	[0268.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896)) returned 1
	[0268.366] SetEvent (hEvent=0x150) returned 1
	[0268.366] SetEvent (hEvent=0x218) returned 1
	[0268.366] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780)) returned 1
	[0268.409] SetEvent (hEvent=0x150) returned 1
	[0268.409] SetEvent (hEvent=0x26c) returned 1
	[0268.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32)) returned 1
	[0268.453] SetEvent (hEvent=0x150) returned 1
	[0268.453] SetEvent (hEvent=0x248) returned 1
	[0268.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8)) returned 1
	[0268.488] SetEvent (hEvent=0x150) returned 1
	[0268.489] SetEvent (hEvent=0x118) returned 1
	[0268.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1
	[0268.527] SetEvent (hEvent=0x150) returned 1
	[0268.527] SetEvent (hEvent=0x1b0) returned 1
	[0268.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6)) returned 1
	[0268.558] SetEvent (hEvent=0x150) returned 1
	[0268.558] SetEvent (hEvent=0x218) returned 1
	[0268.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1
	[0268.592] SetEvent (hEvent=0x150) returned 1
	[0268.592] SetEvent (hEvent=0x26c) returned 1
	[0268.592] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1
	[0268.630] SetEvent (hEvent=0x150) returned 1
	[0268.630] SetEvent (hEvent=0x248) returned 1
	[0268.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2)) returned 1
	[0268.665] SetEvent (hEvent=0x150) returned 1
	[0268.666] SetEvent (hEvent=0x118) returned 1
	[0268.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8)) returned 1
	[0268.729] SetEvent (hEvent=0x150) returned 1
	[0268.729] SetEvent (hEvent=0x1b0) returned 1
	[0268.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1
	[0268.762] SetEvent (hEvent=0x150) returned 1
	[0268.762] SetEvent (hEvent=0x218) returned 1
	[0268.762] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec)) returned 1
	[0268.918] SetEvent (hEvent=0x150) returned 1
	[0268.918] SetEvent (hEvent=0x26c) returned 1
	[0268.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92)) returned 1
	[0268.951] SetEvent (hEvent=0x150) returned 1
	[0268.951] SetEvent (hEvent=0x248) returned 1
	[0268.951] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1
	[0268.975] SetEvent (hEvent=0x150) returned 1
	[0268.975] SetEvent (hEvent=0x118) returned 1
	[0268.975] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458)) returned 1
	[0269.016] SetEvent (hEvent=0x150) returned 1
	[0269.016] SetEvent (hEvent=0x1b0) returned 1
	[0269.016] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8)) returned 1
	[0269.063] SetEvent (hEvent=0x150) returned 1
	[0269.063] SetEvent (hEvent=0x218) returned 1
	[0269.063] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1
	[0269.109] SetEvent (hEvent=0x150) returned 1
	[0269.109] SetEvent (hEvent=0x26c) returned 1
	[0269.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1
	[0269.142] SetEvent (hEvent=0x150) returned 1
	[0269.143] SetEvent (hEvent=0x248) returned 1
	[0269.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1
	[0269.180] SetEvent (hEvent=0x150) returned 1
	[0269.180] SetEvent (hEvent=0x118) returned 1
	[0269.181] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1
	[0269.217] SetEvent (hEvent=0x150) returned 1
	[0269.218] SetEvent (hEvent=0x1b0) returned 1
	[0269.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1
	[0269.256] SetEvent (hEvent=0x150) returned 1
	[0269.256] SetEvent (hEvent=0x234) returned 1
	[0269.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1
	[0269.300] SetEvent (hEvent=0x150) returned 1
	[0269.301] SetEvent (hEvent=0x26c) returned 1
	[0269.301] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678)) returned 1
	[0269.366] SetEvent (hEvent=0x150) returned 1
	[0269.367] SetEvent (hEvent=0x248) returned 1
	[0269.367] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1
	[0269.414] SetEvent (hEvent=0x118) returned 1
	[0269.414] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1
	[0269.447] SetEvent (hEvent=0x150) returned 1
	[0269.447] SetEvent (hEvent=0x1b0) returned 1
	[0269.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1
	[0269.484] SetEvent (hEvent=0x150) returned 1
	[0269.484] SetEvent (hEvent=0x234) returned 1
	[0269.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1
	[0269.518] SetEvent (hEvent=0x150) returned 1
	[0269.518] SetEvent (hEvent=0x26c) returned 1
	[0269.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044)) returned 1
	[0269.546] SetEvent (hEvent=0x150) returned 1
	[0269.546] SetEvent (hEvent=0x248) returned 1
	[0269.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1
	[0269.574] SetEvent (hEvent=0x150) returned 1
	[0269.574] SetEvent (hEvent=0x118) returned 1
	[0269.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e)) returned 1
	[0269.610] SetEvent (hEvent=0x150) returned 1
	[0269.610] SetEvent (hEvent=0x1b0) returned 1
	[0269.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa)) returned 1
	[0269.638] SetEvent (hEvent=0x150) returned 1
	[0269.638] SetEvent (hEvent=0x234) returned 1
	[0269.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54)) returned 1
	[0269.675] SetEvent (hEvent=0x150) returned 1
	[0269.675] SetEvent (hEvent=0x26c) returned 1
	[0269.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576)) returned 1
	[0269.748] SetEvent (hEvent=0x150) returned 1
	[0269.748] SetEvent (hEvent=0x248) returned 1
	[0269.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0)) returned 1
	[0269.778] SetEvent (hEvent=0x150) returned 1
	[0269.778] SetEvent (hEvent=0x118) returned 1
	[0269.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec)) returned 1
	[0269.821] SetEvent (hEvent=0x150) returned 1
	[0269.821] SetEvent (hEvent=0x1b0) returned 1
	[0269.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1
	[0269.861] SetEvent (hEvent=0x150) returned 1
	[0269.861] SetEvent (hEvent=0x234) returned 1
	[0269.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1
	[0269.895] SetEvent (hEvent=0x150) returned 1
	[0269.895] SetEvent (hEvent=0x26c) returned 1
	[0269.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14)) returned 1
	[0269.936] SetEvent (hEvent=0x150) returned 1
	[0269.936] SetEvent (hEvent=0x210) returned 1
	[0269.936] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1
	[0269.966] SetEvent (hEvent=0x150) returned 1
	[0269.966] SetEvent (hEvent=0x118) returned 1
	[0269.966] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1
	[0270.059] SetEvent (hEvent=0x150) returned 1
	[0270.059] SetEvent (hEvent=0x1b0) returned 1
	[0270.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c)) returned 1
	[0270.097] SetEvent (hEvent=0x150) returned 1
	[0270.098] SetEvent (hEvent=0x234) returned 1
	[0270.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1
	[0270.130] SetEvent (hEvent=0x150) returned 1
	[0270.130] SetEvent (hEvent=0x26c) returned 1
	[0270.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1
	[0270.161] SetEvent (hEvent=0x150) returned 1
	[0270.162] SetEvent (hEvent=0x210) returned 1
	[0270.162] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26)) returned 1
	[0270.189] SetEvent (hEvent=0x150) returned 1
	[0270.189] SetEvent (hEvent=0x118) returned 1
	[0270.189] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1
	[0270.224] SetEvent (hEvent=0x150) returned 1
	[0270.224] SetEvent (hEvent=0x1b0) returned 1
	[0270.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1
	[0270.279] SetEvent (hEvent=0x150) returned 1
	[0270.280] SetEvent (hEvent=0x234) returned 1
	[0270.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1
	[0270.316] SetEvent (hEvent=0x150) returned 1
	[0270.316] SetEvent (hEvent=0x26c) returned 1
	[0270.316] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1
	[0270.351] SetEvent (hEvent=0x150) returned 1
	[0270.351] SetEvent (hEvent=0x210) returned 1
	[0270.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae)) returned 1
	[0270.386] SetEvent (hEvent=0x150) returned 1
	[0270.386] SetEvent (hEvent=0x118) returned 1
	[0270.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370)) returned 1
	[0270.429] SetEvent (hEvent=0x150) returned 1
	[0270.429] SetEvent (hEvent=0x1b0) returned 1
	[0270.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4)) returned 1
	[0270.469] SetEvent (hEvent=0x150) returned 1
	[0270.469] SetEvent (hEvent=0x234) returned 1
	[0270.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1
	[0270.503] SetEvent (hEvent=0x150) returned 1
	[0270.503] SetEvent (hEvent=0x26c) returned 1
	[0270.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1
	[0270.539] SetEvent (hEvent=0x150) returned 1
	[0270.539] SetEvent (hEvent=0x210) returned 1
	[0270.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc)) returned 1
	[0270.679] SetEvent (hEvent=0x150) returned 1
	[0270.679] SetEvent (hEvent=0x118) returned 1
	[0270.679] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1
	[0270.753] SetEvent (hEvent=0x150) returned 1
	[0270.753] SetEvent (hEvent=0x1b0) returned 1
	[0270.753] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc)) returned 1
	[0270.790] SetEvent (hEvent=0x150) returned 1
	[0270.790] SetEvent (hEvent=0x234) returned 1
	[0270.790] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1
	[0270.830] SetEvent (hEvent=0x150) returned 1
	[0270.830] SetEvent (hEvent=0x26c) returned 1
	[0270.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1
	[0270.863] SetEvent (hEvent=0x150) returned 1
	[0270.863] SetEvent (hEvent=0x210) returned 1
	[0270.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c)) returned 1
	[0270.898] SetEvent (hEvent=0x150) returned 1
	[0270.898] SetEvent (hEvent=0x118) returned 1
	[0270.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1
	[0270.934] SetEvent (hEvent=0x150) returned 1
	[0270.934] SetEvent (hEvent=0x1b0) returned 1
	[0270.934] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1
	[0270.974] SetEvent (hEvent=0x150) returned 1
	[0270.974] SetEvent (hEvent=0x234) returned 1
	[0270.974] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1
	[0271.013] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1
	[0271.039] SetEvent (hEvent=0x150) returned 1
	[0271.039] SetEvent (hEvent=0x210) returned 1
	[0271.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08)) returned 1
	[0271.078] SetEvent (hEvent=0x150) returned 1
	[0271.079] SetEvent (hEvent=0x118) returned 1
	[0271.079] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6)) returned 1
	[0271.118] SetEvent (hEvent=0x150) returned 1
	[0271.119] SetEvent (hEvent=0x1b0) returned 1
	[0271.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1
	[0271.158] SetEvent (hEvent=0x150) returned 1
	[0271.158] SetEvent (hEvent=0x234) returned 1
	[0271.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1
	[0271.321] SetEvent (hEvent=0x150) returned 1
	[0271.321] SetEvent (hEvent=0x248) returned 1
	[0271.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c)) returned 1
	[0271.429] SetEvent (hEvent=0x150) returned 1
	[0271.429] SetEvent (hEvent=0x210) returned 1
	[0271.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a)) returned 1
	[0271.464] SetEvent (hEvent=0x150) returned 1
	[0271.464] SetEvent (hEvent=0x118) returned 1
	[0271.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c)) returned 1
	[0271.501] SetEvent (hEvent=0x150) returned 1
	[0271.501] SetEvent (hEvent=0x1b0) returned 1
	[0271.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a)) returned 1
	[0271.554] SetEvent (hEvent=0x150) returned 1
	[0271.554] SetEvent (hEvent=0x234) returned 1
	[0271.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1
	[0271.588] SetEvent (hEvent=0x150) returned 1
	[0271.589] SetEvent (hEvent=0x248) returned 1
	[0271.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976)) returned 1
	[0271.617] SetEvent (hEvent=0x150) returned 1
	[0271.617] SetEvent (hEvent=0x210) returned 1
	[0271.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1
	[0271.653] SetEvent (hEvent=0x150) returned 1
	[0271.653] SetEvent (hEvent=0x118) returned 1
	[0271.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1
	[0271.691] SetEvent (hEvent=0x150) returned 1
	[0271.691] SetEvent (hEvent=0x1b0) returned 1
	[0271.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1
	[0271.775] SetEvent (hEvent=0x150) returned 1
	[0271.775] SetEvent (hEvent=0x234) returned 1
	[0271.775] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496)) returned 1
	[0271.812] SetEvent (hEvent=0x150) returned 1
	[0271.812] SetEvent (hEvent=0x248) returned 1
	[0271.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a)) returned 1
	[0271.847] SetEvent (hEvent=0x150) returned 1
	[0271.847] SetEvent (hEvent=0x210) returned 1
	[0271.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1
	[0271.872] SetEvent (hEvent=0x150) returned 1
	[0271.872] SetEvent (hEvent=0x118) returned 1
	[0271.872] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856)) returned 1
	[0271.896] SetEvent (hEvent=0x150) returned 1
	[0271.896] SetEvent (hEvent=0x1b0) returned 1
	[0271.896] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992)) returned 1
	[0271.934] SetEvent (hEvent=0x150) returned 1
	[0271.934] SetEvent (hEvent=0x234) returned 1
	[0271.934] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1
	[0271.969] SetEvent (hEvent=0x150) returned 1
	[0271.969] SetEvent (hEvent=0x248) returned 1
	[0271.970] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc)) returned 1
	[0272.005] SetEvent (hEvent=0x150) returned 1
	[0272.005] SetEvent (hEvent=0x210) returned 1
	[0272.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82)) returned 1
	[0272.037] SetEvent (hEvent=0x150) returned 1
	[0272.037] SetEvent (hEvent=0x118) returned 1
	[0272.037] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0272.081] SetEvent (hEvent=0x218) returned 1
	[0272.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456)) returned 1
	[0272.108] SetEvent (hEvent=0x150) returned 1
	[0272.108] SetEvent (hEvent=0x234) returned 1
	[0272.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e)) returned 1
	[0272.149] SetEvent (hEvent=0x150) returned 1
	[0272.149] SetEvent (hEvent=0x248) returned 1
	[0272.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1
	[0272.198] SetEvent (hEvent=0x150) returned 1
	[0272.198] SetEvent (hEvent=0x210) returned 1
	[0272.198] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0)) returned 1
	[0272.235] SetEvent (hEvent=0x150) returned 1
	[0272.235] SetEvent (hEvent=0x118) returned 1
	[0272.235] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94)) returned 1
	[0272.304] SetEvent (hEvent=0x150) returned 1
	[0272.305] SetEvent (hEvent=0x218) returned 1
	[0272.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0)) returned 1
	[0272.353] SetEvent (hEvent=0x150) returned 1
	[0272.353] SetEvent (hEvent=0x234) returned 1
	[0272.353] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c)) returned 1
	[0272.441] SetEvent (hEvent=0x150) returned 1
	[0272.441] SetEvent (hEvent=0x248) returned 1
	[0272.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1
	[0272.478] SetEvent (hEvent=0x150) returned 1
	[0272.478] SetEvent (hEvent=0x210) returned 1
	[0272.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c)) returned 1
	[0272.510] SetEvent (hEvent=0x150) returned 1
	[0272.510] SetEvent (hEvent=0x118) returned 1
	[0272.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88)) returned 1
	[0272.559] SetEvent (hEvent=0x150) returned 1
	[0272.559] SetEvent (hEvent=0x218) returned 1
	[0272.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708)) returned 1
	[0272.589] SetEvent (hEvent=0x150) returned 1
	[0272.590] SetEvent (hEvent=0x234) returned 1
	[0272.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130)) returned 1
	[0272.634] SetEvent (hEvent=0x150) returned 1
	[0272.634] SetEvent (hEvent=0x248) returned 1
	[0272.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c)) returned 1
	[0272.666] SetEvent (hEvent=0x150) returned 1
	[0272.666] SetEvent (hEvent=0x210) returned 1
	[0272.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1
	[0272.733] SetEvent (hEvent=0x150) returned 1
	[0272.733] SetEvent (hEvent=0x118) returned 1
	[0272.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4)) returned 1
	[0272.771] SetEvent (hEvent=0x150) returned 1
	[0272.771] SetEvent (hEvent=0x26c) returned 1
	[0272.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c)) returned 1
	[0272.809] SetEvent (hEvent=0x150) returned 1
	[0272.809] SetEvent (hEvent=0x234) returned 1
	[0272.809] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1
	[0272.854] SetEvent (hEvent=0x150) returned 1
	[0272.854] SetEvent (hEvent=0x248) returned 1
	[0272.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1
	[0272.894] SetEvent (hEvent=0x150) returned 1
	[0272.894] SetEvent (hEvent=0x210) returned 1
	[0272.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c)) returned 1
	[0272.941] SetEvent (hEvent=0x150) returned 1
	[0272.941] SetEvent (hEvent=0x118) returned 1
	[0272.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc)) returned 1
	[0272.972] SetEvent (hEvent=0x150) returned 1
	[0272.972] SetEvent (hEvent=0x26c) returned 1
	[0272.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1
	[0273.011] SetEvent (hEvent=0x150) returned 1
	[0273.011] SetEvent (hEvent=0x234) returned 1
	[0273.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1
	[0273.041] SetEvent (hEvent=0x150) returned 1
	[0273.041] SetEvent (hEvent=0x248) returned 1
	[0273.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1
	[0273.083] SetEvent (hEvent=0x150) returned 1
	[0273.083] SetEvent (hEvent=0x210) returned 1
	[0273.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04)) returned 1
	[0273.114] SetEvent (hEvent=0x150) returned 1
	[0273.114] SetEvent (hEvent=0x118) returned 1
	[0273.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1
	[0273.149] SetEvent (hEvent=0x150) returned 1
	[0273.149] SetEvent (hEvent=0x26c) returned 1
	[0273.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1
	[0273.185] SetEvent (hEvent=0x150) returned 1
	[0273.185] SetEvent (hEvent=0x234) returned 1
	[0273.186] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1
	[0273.213] SetEvent (hEvent=0x150) returned 1
	[0273.213] SetEvent (hEvent=0x248) returned 1
	[0273.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1
	[0273.256] SetEvent (hEvent=0x150) returned 1
	[0273.256] SetEvent (hEvent=0x210) returned 1
	[0273.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1
	[0273.308] SetEvent (hEvent=0x150) returned 1
	[0273.308] SetEvent (hEvent=0x118) returned 1
	[0273.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1
	[0273.351] SetEvent (hEvent=0x150) returned 1
	[0273.351] SetEvent (hEvent=0x26c) returned 1
	[0273.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1
	[0273.385] SetEvent (hEvent=0x150) returned 1
	[0273.385] SetEvent (hEvent=0x234) returned 1
	[0273.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964)) returned 1
	[0273.413] SetEvent (hEvent=0x150) returned 1
	[0273.413] SetEvent (hEvent=0x248) returned 1
	[0273.413] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1
	[0273.455] SetEvent (hEvent=0x150) returned 1
	[0273.456] SetEvent (hEvent=0x210) returned 1
	[0273.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1
	[0273.496] SetEvent (hEvent=0x150) returned 1
	[0273.496] SetEvent (hEvent=0x118) returned 1
	[0273.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c)) returned 1
	[0273.643] SetEvent (hEvent=0x150) returned 1
	[0273.643] SetEvent (hEvent=0x26c) returned 1
	[0273.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1
	[0273.694] SetEvent (hEvent=0x150) returned 1
	[0273.694] SetEvent (hEvent=0x218) returned 1
	[0273.694] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1
	[0273.745] SetEvent (hEvent=0x150) returned 1
	[0273.745] SetEvent (hEvent=0x248) returned 1
	[0273.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8)) returned 1
	[0273.791] SetEvent (hEvent=0x150) returned 1
	[0273.791] SetEvent (hEvent=0x1b0) returned 1
	[0273.791] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824)) returned 1
	[0273.828] SetEvent (hEvent=0x150) returned 1
	[0273.828] SetEvent (hEvent=0x118) returned 1
	[0273.828] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8)) returned 1
	[0273.865] SetEvent (hEvent=0x150) returned 1
	[0273.865] SetEvent (hEvent=0x26c) returned 1
	[0273.866] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4)) returned 1
	[0273.895] SetEvent (hEvent=0x150) returned 1
	[0273.895] SetEvent (hEvent=0x218) returned 1
	[0273.896] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1
	[0273.947] SetEvent (hEvent=0x150) returned 1
	[0273.948] SetEvent (hEvent=0x248) returned 1
	[0273.948] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174)) returned 1
	[0273.985] SetEvent (hEvent=0x150) returned 1
	[0273.985] SetEvent (hEvent=0x1b0) returned 1
	[0273.985] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8)) returned 1
	[0274.008] SetEvent (hEvent=0x150) returned 1
	[0274.008] SetEvent (hEvent=0x118) returned 1
	[0274.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1
	[0274.053] SetEvent (hEvent=0x150) returned 1
	[0274.053] SetEvent (hEvent=0x26c) returned 1
	[0274.053] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc)) returned 1
	[0274.088] SetEvent (hEvent=0x150) returned 1
	[0274.088] SetEvent (hEvent=0x218) returned 1
	[0274.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914)) returned 1
	[0274.123] SetEvent (hEvent=0x150) returned 1
	[0274.123] SetEvent (hEvent=0x248) returned 1
	[0274.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c)) returned 1
	[0274.174] SetEvent (hEvent=0x150) returned 1
	[0274.174] SetEvent (hEvent=0x1b0) returned 1
	[0274.174] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1
	[0274.225] SetEvent (hEvent=0x150) returned 1
	[0274.225] SetEvent (hEvent=0x118) returned 1
	[0274.225] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1
	[0274.281] SetEvent (hEvent=0x150) returned 1
	[0274.281] SetEvent (hEvent=0x26c) returned 1
	[0274.281] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1
	[0274.317] SetEvent (hEvent=0x150) returned 1
	[0274.317] SetEvent (hEvent=0x218) returned 1
	[0274.317] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1
	[0274.416] SetEvent (hEvent=0x150) returned 1
	[0274.416] SetEvent (hEvent=0x248) returned 1
	[0274.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc)) returned 1
	[0274.452] SetEvent (hEvent=0x150) returned 1
	[0274.452] SetEvent (hEvent=0x1b0) returned 1
	[0274.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4)) returned 1
	[0274.493] SetEvent (hEvent=0x150) returned 1
	[0274.493] SetEvent (hEvent=0x118) returned 1
	[0274.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815)) returned 1
	[0274.522] SetEvent (hEvent=0x150) returned 1
	[0274.522] SetEvent (hEvent=0x26c) returned 1
	[0274.522] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1
	[0274.564] SetEvent (hEvent=0x150) returned 1
	[0274.564] SetEvent (hEvent=0x218) returned 1
	[0274.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2)) returned 1
	[0274.598] SetEvent (hEvent=0x150) returned 1
	[0274.598] SetEvent (hEvent=0x248) returned 1
	[0274.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c)) returned 1
	[0274.636] SetEvent (hEvent=0x150) returned 1
	[0274.636] SetEvent (hEvent=0x1b0) returned 1
	[0274.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e)) returned 1
	[0274.676] SetEvent (hEvent=0x150) returned 1
	[0274.676] SetEvent (hEvent=0x118) returned 1
	[0274.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670)) returned 1
	[0274.849] SetEvent (hEvent=0x150) returned 1
	[0274.849] SetEvent (hEvent=0x26c) returned 1
	[0274.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a)) returned 1
	[0274.894] SetEvent (hEvent=0x150) returned 1
	[0274.894] SetEvent (hEvent=0x218) returned 1
	[0274.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044)) returned 1
	[0274.945] SetEvent (hEvent=0x150) returned 1
	[0274.946] SetEvent (hEvent=0x248) returned 1
	[0274.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c)) returned 1
	[0275.006] SetEvent (hEvent=0x150) returned 1
	[0275.006] SetEvent (hEvent=0x1b0) returned 1
	[0275.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8)) returned 1
	[0275.054] SetEvent (hEvent=0x150) returned 1
	[0275.054] SetEvent (hEvent=0x118) returned 1
	[0275.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1
	[0275.124] SetEvent (hEvent=0x150) returned 1
	[0275.124] SetEvent (hEvent=0x234) returned 1
	[0275.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c)) returned 1
	[0275.170] SetEvent (hEvent=0x150) returned 1
	[0275.170] SetEvent (hEvent=0x218) returned 1
	[0275.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08)) returned 1
	[0275.215] SetEvent (hEvent=0x150) returned 1
	[0275.215] SetEvent (hEvent=0x248) returned 1
	[0275.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942)) returned 1
	[0275.257] SetEvent (hEvent=0x150) returned 1
	[0275.257] SetEvent (hEvent=0x1b0) returned 1
	[0275.257] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee)) returned 1
	[0275.361] SetEvent (hEvent=0x118) returned 1
	[0275.361] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba)) returned 1
	[0275.442] SetEvent (hEvent=0x150) returned 1
	[0275.443] SetEvent (hEvent=0x234) returned 1
	[0275.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda)) returned 1
	[0275.500] SetEvent (hEvent=0x150) returned 1
	[0275.500] SetEvent (hEvent=0x218) returned 1
	[0275.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620)) returned 1
	[0275.566] SetEvent (hEvent=0x150) returned 1
	[0275.566] SetEvent (hEvent=0x248) returned 1
	[0275.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c)) returned 1
	[0275.611] SetEvent (hEvent=0x150) returned 1
	[0275.611] SetEvent (hEvent=0x1b0) returned 1
	[0275.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772)) returned 1
	[0275.659] SetEvent (hEvent=0x150) returned 1
	[0275.659] SetEvent (hEvent=0x118) returned 1
	[0275.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e)) returned 1
	[0275.739] SetEvent (hEvent=0x150) returned 1
	[0275.739] SetEvent (hEvent=0x234) returned 1
	[0275.739] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0)) returned 1
	[0275.796] SetEvent (hEvent=0x150) returned 1
	[0275.796] SetEvent (hEvent=0x218) returned 1
	[0275.796] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712)) returned 1
	[0275.862] SetEvent (hEvent=0x150) returned 1
	[0275.862] SetEvent (hEvent=0x248) returned 1
	[0275.862] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de)) returned 1
	[0275.889] SetEvent (hEvent=0x150) returned 1
	[0275.889] SetEvent (hEvent=0x1b0) returned 1
	[0275.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4)) returned 1
	[0276.010] SetEvent (hEvent=0x150) returned 1
	[0276.010] SetEvent (hEvent=0x26c) returned 1
	[0276.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea)) returned 1
	[0276.052] SetEvent (hEvent=0x150) returned 1
	[0276.052] SetEvent (hEvent=0x234) returned 1
	[0276.053] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1
	[0276.094] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8)) returned 1
	[0276.134] SetEvent (hEvent=0x150) returned 1
	[0276.134] SetEvent (hEvent=0x248) returned 1
	[0276.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1
	[0276.182] SetEvent (hEvent=0x150) returned 1
	[0276.182] SetEvent (hEvent=0x1b0) returned 1
	[0276.182] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6)) returned 1
	[0276.220] SetEvent (hEvent=0x150) returned 1
	[0276.220] SetEvent (hEvent=0x26c) returned 1
	[0276.220] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa)) returned 1
	[0276.261] SetEvent (hEvent=0x150) returned 1
	[0276.261] SetEvent (hEvent=0x234) returned 1
	[0276.262] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c)) returned 1
	[0276.314] SetEvent (hEvent=0x150) returned 1
	[0276.314] SetEvent (hEvent=0x210) returned 1
	[0276.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1
	[0276.355] SetEvent (hEvent=0x150) returned 1
	[0276.355] SetEvent (hEvent=0x248) returned 1
	[0276.355] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1
	[0276.397] SetEvent (hEvent=0x150) returned 1
	[0276.397] SetEvent (hEvent=0x1b0) returned 1
	[0276.397] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea)) returned 1
	[0276.493] SetEvent (hEvent=0x150) returned 1
	[0276.493] SetEvent (hEvent=0x26c) returned 1
	[0276.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de)) returned 1
	[0276.533] SetEvent (hEvent=0x150) returned 1
	[0276.533] SetEvent (hEvent=0x234) returned 1
	[0276.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe)) returned 1
	[0276.574] SetEvent (hEvent=0x150) returned 1
	[0276.574] SetEvent (hEvent=0x210) returned 1
	[0276.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1
	[0276.610] SetEvent (hEvent=0x150) returned 1
	[0276.610] SetEvent (hEvent=0x248) returned 1
	[0276.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c)) returned 1
	[0276.641] SetEvent (hEvent=0x150) returned 1
	[0276.641] SetEvent (hEvent=0x1b0) returned 1
	[0276.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1
	[0276.670] SetEvent (hEvent=0x150) returned 1
	[0276.670] SetEvent (hEvent=0x26c) returned 1
	[0276.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1
	[0276.704] SetEvent (hEvent=0x150) returned 1
	[0276.704] SetEvent (hEvent=0x234) returned 1
	[0276.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1
	[0276.765] SetEvent (hEvent=0x150) returned 1
	[0276.765] SetEvent (hEvent=0x210) returned 1
	[0276.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332)) returned 1
	[0276.794] SetEvent (hEvent=0x150) returned 1
	[0276.794] SetEvent (hEvent=0x248) returned 1
	[0276.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690)) returned 1
	[0276.833] SetEvent (hEvent=0x150) returned 1
	[0276.834] SetEvent (hEvent=0x118) returned 1
	[0276.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0)) returned 1
	[0276.864] SetEvent (hEvent=0x150) returned 1
	[0276.864] SetEvent (hEvent=0x26c) returned 1
	[0276.864] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c)) returned 1
	[0276.897] SetEvent (hEvent=0x150) returned 1
	[0276.897] SetEvent (hEvent=0x234) returned 1
	[0276.897] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a)) returned 1
	[0276.925] SetEvent (hEvent=0x150) returned 1
	[0276.925] SetEvent (hEvent=0x210) returned 1
	[0276.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c)) returned 1
	[0277.003] SetEvent (hEvent=0x150) returned 1
	[0277.004] SetEvent (hEvent=0x248) returned 1
	[0277.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1
	[0277.033] SetEvent (hEvent=0x150) returned 1
	[0277.033] SetEvent (hEvent=0x118) returned 1
	[0277.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1
	[0277.103] SetEvent (hEvent=0x150) returned 1
	[0277.103] SetEvent (hEvent=0x26c) returned 1
	[0277.103] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488)) returned 1
	[0277.297] SetEvent (hEvent=0x150) returned 1
	[0277.297] SetEvent (hEvent=0x1b0) returned 1
	[0277.297] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c)) returned 1
	[0277.342] SetEvent (hEvent=0x150) returned 1
	[0277.342] SetEvent (hEvent=0x210) returned 1
	[0277.342] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c)) returned 1
	[0277.376] SetEvent (hEvent=0x150) returned 1
	[0277.376] SetEvent (hEvent=0x248) returned 1
	[0277.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce)) returned 1
	[0277.404] SetEvent (hEvent=0x150) returned 1
	[0277.404] SetEvent (hEvent=0x118) returned 1
	[0277.404] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604)) returned 1
	[0277.443] SetEvent (hEvent=0x26c) returned 1
	[0277.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc)) returned 1
	[0277.475] SetEvent (hEvent=0x150) returned 1
	[0277.477] SetEvent (hEvent=0x1b0) returned 1
	[0277.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e)) returned 1
	[0277.504] SetEvent (hEvent=0x210) returned 1
	[0277.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1
	[0277.569] SetEvent (hEvent=0x150) returned 1
	[0277.569] SetEvent (hEvent=0x234) returned 1
	[0277.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1
	[0277.604] SetEvent (hEvent=0x150) returned 1
	[0277.604] SetEvent (hEvent=0x118) returned 1
	[0277.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c)) returned 1
	[0277.643] SetEvent (hEvent=0x150) returned 1
	[0277.643] SetEvent (hEvent=0x218) returned 1
	[0277.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1
	[0277.689] SetEvent (hEvent=0x150) returned 1
	[0277.689] SetEvent (hEvent=0x1b0) returned 1
	[0277.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1
	[0277.723] SetEvent (hEvent=0x150) returned 1
	[0277.723] SetEvent (hEvent=0x210) returned 1
	[0277.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234)) returned 1
	[0277.747] SetEvent (hEvent=0x150) returned 1
	[0277.747] SetEvent (hEvent=0x234) returned 1
	[0277.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94)) returned 1
	[0277.819] SetEvent (hEvent=0x150) returned 1
	[0277.819] SetEvent (hEvent=0x118) returned 1
	[0277.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1
	[0277.874] SetEvent (hEvent=0x150) returned 1
	[0277.874] SetEvent (hEvent=0x218) returned 1
	[0277.874] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510)) returned 1
	[0277.988] SetEvent (hEvent=0x150) returned 1
	[0277.988] SetEvent (hEvent=0x1b0) returned 1
	[0277.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1
	[0278.022] SetEvent (hEvent=0x150) returned 1
	[0278.022] SetEvent (hEvent=0x210) returned 1
	[0278.022] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38)) returned 1
	[0278.063] SetEvent (hEvent=0x150) returned 1
	[0278.063] SetEvent (hEvent=0x234) returned 1
	[0278.063] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5)) returned 1
	[0278.188] SetEvent (hEvent=0x150) returned 1
	[0278.188] SetEvent (hEvent=0x118) returned 1
	[0278.188] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466)) returned 1
	[0278.232] SetEvent (hEvent=0x150) returned 1
	[0278.232] SetEvent (hEvent=0x218) returned 1
	[0278.232] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1
	[0278.284] SetEvent (hEvent=0x150) returned 1
	[0278.284] SetEvent (hEvent=0x1b0) returned 1
	[0278.284] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1
	[0278.329] SetEvent (hEvent=0x150) returned 1
	[0278.329] SetEvent (hEvent=0x210) returned 1
	[0278.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb)) returned 1
	[0278.376] SetEvent (hEvent=0x150) returned 1
	[0278.376] SetEvent (hEvent=0x234) returned 1
	[0278.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4)) returned 1
	[0278.412] SetEvent (hEvent=0x150) returned 1
	[0278.412] SetEvent (hEvent=0x118) returned 1
	[0278.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8)) returned 1
	[0278.548] SetEvent (hEvent=0x150) returned 1
	[0278.548] SetEvent (hEvent=0x218) returned 1
	[0278.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8)) returned 1
	[0278.587] SetEvent (hEvent=0x150) returned 1
	[0278.587] SetEvent (hEvent=0x1b0) returned 1
	[0278.587] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1
	[0278.616] SetEvent (hEvent=0x150) returned 1
	[0278.616] SetEvent (hEvent=0x210) returned 1
	[0278.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6)) returned 1
	[0278.654] SetEvent (hEvent=0x150) returned 1
	[0278.654] SetEvent (hEvent=0x234) returned 1
	[0278.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8)) returned 1
	[0278.707] SetEvent (hEvent=0x150) returned 1
	[0278.707] SetEvent (hEvent=0x118) returned 1
	[0278.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e)) returned 1
	[0278.756] SetEvent (hEvent=0x248) returned 1
	[0278.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1
	[0278.786] SetEvent (hEvent=0x1b0) returned 1
	[0278.786] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8)) returned 1
	[0278.875] SetEvent (hEvent=0x150) returned 1
	[0278.875] SetEvent (hEvent=0x210) returned 1
	[0278.875] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2)) returned 1
	[0278.919] SetEvent (hEvent=0x150) returned 1
	[0278.919] SetEvent (hEvent=0x234) returned 1
	[0278.920] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332)) returned 1
	[0278.963] SetEvent (hEvent=0x150) returned 1
	[0278.963] SetEvent (hEvent=0x118) returned 1
	[0278.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1
	[0278.995] SetEvent (hEvent=0x248) returned 1
	[0278.996] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2)) returned 1
	[0279.025] SetEvent (hEvent=0x150) returned 1
	[0279.025] SetEvent (hEvent=0x1b0) returned 1
	[0279.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6)) returned 1
	[0279.067] SetEvent (hEvent=0x150) returned 1
	[0279.067] SetEvent (hEvent=0x210) returned 1
	[0279.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86)) returned 1
	[0279.098] SetEvent (hEvent=0x150) returned 1
	[0279.098] SetEvent (hEvent=0x234) returned 1
	[0279.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc)) returned 1
	[0279.132] SetEvent (hEvent=0x150) returned 1
	[0279.132] SetEvent (hEvent=0x118) returned 1
	[0279.132] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1
	[0279.170] SetEvent (hEvent=0x150) returned 1
	[0279.170] SetEvent (hEvent=0x248) returned 1
	[0279.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158)) returned 1
	[0279.204] SetEvent (hEvent=0x150) returned 1
	[0279.204] SetEvent (hEvent=0x1b0) returned 1
	[0279.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994)) returned 1
	[0279.263] SetEvent (hEvent=0x150) returned 1
	[0279.263] SetEvent (hEvent=0x210) returned 1
	[0279.264] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844)) returned 1
	[0279.310] SetEvent (hEvent=0x150) returned 1
	[0279.310] SetEvent (hEvent=0x234) returned 1
	[0279.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1
	[0279.340] SetEvent (hEvent=0x150) returned 1
	[0279.340] SetEvent (hEvent=0x118) returned 1
	[0279.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2)) returned 1
	[0279.380] SetEvent (hEvent=0x150) returned 1
	[0279.380] SetEvent (hEvent=0x248) returned 1
	[0279.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454)) returned 1
	[0279.423] SetEvent (hEvent=0x150) returned 1
	[0279.423] SetEvent (hEvent=0x1b0) returned 1
	[0279.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1
	[0279.469] SetEvent (hEvent=0x150) returned 1
	[0279.469] SetEvent (hEvent=0x210) returned 1
	[0279.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4)) returned 1
	[0279.505] SetEvent (hEvent=0x150) returned 1
	[0279.505] SetEvent (hEvent=0x234) returned 1
	[0279.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac)) returned 1
	[0279.528] SetEvent (hEvent=0x150) returned 1
	[0279.528] SetEvent (hEvent=0x118) returned 1
	[0279.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba)) returned 1
	[0279.560] SetEvent (hEvent=0x150) returned 1
	[0279.561] SetEvent (hEvent=0x248) returned 1
	[0279.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1
	[0279.597] SetEvent (hEvent=0x150) returned 1
	[0279.597] SetEvent (hEvent=0x1b0) returned 1
	[0279.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c)) returned 1
	[0279.634] SetEvent (hEvent=0x150) returned 1
	[0279.634] SetEvent (hEvent=0x210) returned 1
	[0279.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1
	[0279.675] SetEvent (hEvent=0x150) returned 1
	[0279.675] SetEvent (hEvent=0x234) returned 1
	[0279.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1
	[0279.835] SetEvent (hEvent=0x150) returned 1
	[0279.835] SetEvent (hEvent=0x118) returned 1
	[0279.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1
	[0279.896] SetEvent (hEvent=0x150) returned 1
	[0279.896] SetEvent (hEvent=0x248) returned 1
	[0279.896] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac)) returned 1
	[0279.941] SetEvent (hEvent=0x150) returned 1
	[0279.941] SetEvent (hEvent=0x1b0) returned 1
	[0279.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe)) returned 1
	[0279.957] SetEvent (hEvent=0x218) returned 1
	[0279.958] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780)) returned 1
	[0280.003] SetEvent (hEvent=0x150) returned 1
	[0280.003] SetEvent (hEvent=0x234) returned 1
	[0280.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746)) returned 1
	[0280.045] SetEvent (hEvent=0x150) returned 1
	[0280.045] SetEvent (hEvent=0x118) returned 1
	[0280.045] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1
	[0280.088] SetEvent (hEvent=0x150) returned 1
	[0280.088] SetEvent (hEvent=0x248) returned 1
	[0280.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526)) returned 1
	[0280.122] SetEvent (hEvent=0x150) returned 1
	[0280.122] SetEvent (hEvent=0x1b0) returned 1
	[0280.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38)) returned 1
	[0280.159] SetEvent (hEvent=0x150) returned 1
	[0280.159] SetEvent (hEvent=0x218) returned 1
	[0280.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852)) returned 1
	[0280.193] SetEvent (hEvent=0x150) returned 1
	[0280.193] SetEvent (hEvent=0x234) returned 1
	[0280.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1
	[0280.220] SetEvent (hEvent=0x150) returned 1
	[0280.220] SetEvent (hEvent=0x118) returned 1
	[0280.220] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c)) returned 1
	[0280.253] SetEvent (hEvent=0x150) returned 1
	[0280.253] SetEvent (hEvent=0x248) returned 1
	[0280.253] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc)) returned 1
	[0280.336] SetEvent (hEvent=0x150) returned 1
	[0280.336] SetEvent (hEvent=0x1b0) returned 1
	[0280.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1
	[0280.418] SetEvent (hEvent=0x150) returned 1
	[0280.418] SetEvent (hEvent=0x218) returned 1
	[0280.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1
	[0280.490] SetEvent (hEvent=0x150) returned 1
	[0280.490] SetEvent (hEvent=0x210) returned 1
	[0280.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a)) returned 1
	[0280.585] SetEvent (hEvent=0x150) returned 1
	[0280.586] SetEvent (hEvent=0x118) returned 1
	[0280.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04)) returned 1
	[0280.615] SetEvent (hEvent=0x150) returned 1
	[0280.615] SetEvent (hEvent=0x248) returned 1
	[0280.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664)) returned 1
	[0280.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec)) returned 1
	[0280.701] SetEvent (hEvent=0x150) returned 1
	[0280.701] SetEvent (hEvent=0x218) returned 1
	[0280.701] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1
	[0280.733] SetEvent (hEvent=0x150) returned 1
	[0280.733] SetEvent (hEvent=0x210) returned 1
	[0280.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8)) returned 1
	[0280.769] SetEvent (hEvent=0x150) returned 1
	[0280.769] SetEvent (hEvent=0x118) returned 1
	[0280.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a)) returned 1
	[0280.831] SetEvent (hEvent=0x150) returned 1
	[0280.832] SetEvent (hEvent=0x1b0) returned 1
	[0280.832] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1
	[0280.883] SetEvent (hEvent=0x150) returned 1
	[0280.883] SetEvent (hEvent=0x26c) returned 1
	[0280.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1
	[0280.911] SetEvent (hEvent=0x150) returned 1
	[0280.911] SetEvent (hEvent=0x218) returned 1
	[0280.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1
	[0281.030] SetEvent (hEvent=0x150) returned 1
	[0281.030] SetEvent (hEvent=0x210) returned 1
	[0281.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738)) returned 1
	[0281.065] SetEvent (hEvent=0x150) returned 1
	[0281.065] SetEvent (hEvent=0x118) returned 1
	[0281.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6)) returned 1
	[0281.103] SetEvent (hEvent=0x150) returned 1
	[0281.103] SetEvent (hEvent=0x1b0) returned 1
	[0281.103] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764)) returned 1
	[0281.136] SetEvent (hEvent=0x150) returned 1
	[0281.137] SetEvent (hEvent=0x26c) returned 1
	[0281.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1
	[0281.172] SetEvent (hEvent=0x150) returned 1
	[0281.172] SetEvent (hEvent=0x218) returned 1
	[0281.172] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1
	[0281.202] SetEvent (hEvent=0x150) returned 1
	[0281.202] SetEvent (hEvent=0x210) returned 1
	[0281.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4)) returned 1
	[0281.236] SetEvent (hEvent=0x150) returned 1
	[0281.236] SetEvent (hEvent=0x118) returned 1
	[0281.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc)) returned 1
	[0281.291] SetEvent (hEvent=0x150) returned 1
	[0281.291] SetEvent (hEvent=0x1b0) returned 1
	[0281.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08)) returned 1
	[0281.333] SetEvent (hEvent=0x150) returned 1
	[0281.333] SetEvent (hEvent=0x26c) returned 1
	[0281.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1
	[0281.363] SetEvent (hEvent=0x150) returned 1
	[0281.363] SetEvent (hEvent=0x218) returned 1
	[0281.363] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1
	[0281.392] SetEvent (hEvent=0x150) returned 1
	[0281.392] SetEvent (hEvent=0x210) returned 1
	[0281.392] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178)) returned 1
	[0281.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1
	[0281.783] SetEvent (hEvent=0x150) returned 1
	[0281.783] SetEvent (hEvent=0x248) returned 1
	[0281.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606)) returned 1
	[0281.990] SetEvent (hEvent=0x150) returned 1
	[0281.990] SetEvent (hEvent=0x26c) returned 1
	[0281.990] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c)) returned 1
	[0282.024] SetEvent (hEvent=0x150) returned 1
	[0282.024] SetEvent (hEvent=0x218) returned 1
	[0282.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278)) returned 1
	[0282.050] SetEvent (hEvent=0x150) returned 1
	[0282.050] SetEvent (hEvent=0x210) returned 1
	[0282.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516)) returned 1
	[0282.080] SetEvent (hEvent=0x150) returned 1
	[0282.080] SetEvent (hEvent=0x234) returned 1
	[0282.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12)) returned 1
	[0282.111] SetEvent (hEvent=0x150) returned 1
	[0282.111] SetEvent (hEvent=0x248) returned 1
	[0282.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a)) returned 1
	[0282.150] SetEvent (hEvent=0x150) returned 1
	[0282.150] SetEvent (hEvent=0x26c) returned 1
	[0282.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e)) returned 1
	[0282.186] SetEvent (hEvent=0x150) returned 1
	[0282.187] SetEvent (hEvent=0x218) returned 1
	[0282.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba)) returned 1
	[0282.222] SetEvent (hEvent=0x150) returned 1
	[0282.222] SetEvent (hEvent=0x210) returned 1
	[0282.222] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40)) returned 1
	[0282.388] SetEvent (hEvent=0x150) returned 1
	[0282.388] SetEvent (hEvent=0x234) returned 1
	[0282.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314)) returned 1
	[0282.464] SetEvent (hEvent=0x150) returned 1
	[0282.464] SetEvent (hEvent=0x248) returned 1
	[0282.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758)) returned 1
	[0282.529] SetEvent (hEvent=0x150) returned 1
	[0282.529] SetEvent (hEvent=0x26c) returned 1
	[0282.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90)) returned 1
	[0282.560] SetEvent (hEvent=0x218) returned 1
	[0282.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34)) returned 1
	[0282.669] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6)) returned 1
	[0282.724] SetEvent (hEvent=0x150) returned 1
	[0282.724] SetEvent (hEvent=0x234) returned 1
	[0282.724] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1
	[0282.802] SetEvent (hEvent=0x210) returned 1
	[0282.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1
	[0282.880] SetEvent (hEvent=0x150) returned 1
	[0282.880] SetEvent (hEvent=0x26c) returned 1
	[0282.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2)) returned 1
	[0282.922] SetEvent (hEvent=0x150) returned 1
	[0282.922] SetEvent (hEvent=0x218) returned 1
	[0282.922] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16)) returned 1
	[0282.951] SetEvent (hEvent=0x150) returned 1
	[0282.951] SetEvent (hEvent=0x118) returned 1
	[0282.951] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442)) returned 1
	[0282.985] SetEvent (hEvent=0x150) returned 1
	[0282.985] SetEvent (hEvent=0x234) returned 1
	[0282.985] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a)) returned 1
	[0283.016] SetEvent (hEvent=0x150) returned 1
	[0283.016] SetEvent (hEvent=0x248) returned 1
	[0283.016] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7)) returned 1
	[0283.056] SetEvent (hEvent=0x150) returned 1
	[0283.057] SetEvent (hEvent=0x26c) returned 1
	[0283.057] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1
	[0283.084] SetEvent (hEvent=0x210) returned 1
	[0283.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39)) returned 1
	[0283.146] SetEvent (hEvent=0x150) returned 1
	[0283.146] SetEvent (hEvent=0x118) returned 1
	[0283.146] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752)) returned 1
	[0283.187] SetEvent (hEvent=0x150) returned 1
	[0283.187] SetEvent (hEvent=0x234) returned 1
	[0283.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe)) returned 1
	[0283.234] SetEvent (hEvent=0x150) returned 1
	[0283.234] SetEvent (hEvent=0x248) returned 1
	[0283.234] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a)) returned 1
	[0283.291] SetEvent (hEvent=0x150) returned 1
	[0283.291] SetEvent (hEvent=0x1b0) returned 1
	[0283.292] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6)) returned 1
	[0283.359] SetEvent (hEvent=0x150) returned 1
	[0283.359] SetEvent (hEvent=0x218) returned 1
	[0283.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae)) returned 1
	[0283.410] SetEvent (hEvent=0x150) returned 1
	[0283.410] SetEvent (hEvent=0x118) returned 1
	[0283.410] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632)) returned 1
	[0283.452] SetEvent (hEvent=0x150) returned 1
	[0283.452] SetEvent (hEvent=0x234) returned 1
	[0283.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11)) returned 1
	[0283.492] SetEvent (hEvent=0x150) returned 1
	[0283.492] SetEvent (hEvent=0x248) returned 1
	[0283.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a)) returned 1
	[0283.523] SetEvent (hEvent=0x150) returned 1
	[0283.523] SetEvent (hEvent=0x1b0) returned 1
	[0283.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682)) returned 1
	[0283.567] SetEvent (hEvent=0x150) returned 1
	[0283.567] SetEvent (hEvent=0x218) returned 1
	[0283.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7)) returned 1
	[0283.595] SetEvent (hEvent=0x150) returned 1
	[0283.595] SetEvent (hEvent=0x118) returned 1
	[0283.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630)) returned 1
	[0283.714] SetEvent (hEvent=0x150) returned 1
	[0283.715] SetEvent (hEvent=0x234) returned 1
	[0283.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a)) returned 1
	[0283.744] SetEvent (hEvent=0x150) returned 1
	[0283.744] SetEvent (hEvent=0x248) returned 1
	[0283.744] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1
	[0283.778] SetEvent (hEvent=0x150) returned 1
	[0283.778] SetEvent (hEvent=0x1b0) returned 1
	[0283.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2)) returned 1
	[0283.809] SetEvent (hEvent=0x150) returned 1
	[0283.809] SetEvent (hEvent=0x218) returned 1
	[0283.809] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8)) returned 1
	[0283.861] SetEvent (hEvent=0x150) returned 1
	[0283.861] SetEvent (hEvent=0x118) returned 1
	[0283.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754)) returned 1
	[0283.909] SetEvent (hEvent=0x150) returned 1
	[0283.909] SetEvent (hEvent=0x234) returned 1
	[0283.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba)) returned 1
	[0283.950] SetEvent (hEvent=0x150) returned 1
	[0283.950] SetEvent (hEvent=0x248) returned 1
	[0283.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a)) returned 1
	[0283.976] SetEvent (hEvent=0x150) returned 1
	[0283.976] SetEvent (hEvent=0x1b0) returned 1
	[0283.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff)) returned 1
	[0284.007] SetEvent (hEvent=0x150) returned 1
	[0284.008] SetEvent (hEvent=0x218) returned 1
	[0284.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad)) returned 1
	[0284.032] SetEvent (hEvent=0x150) returned 1
	[0284.032] SetEvent (hEvent=0x118) returned 1
	[0284.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3)) returned 1
	[0284.076] SetEvent (hEvent=0x150) returned 1
	[0284.076] SetEvent (hEvent=0x234) returned 1
	[0284.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0)) returned 1
	[0284.106] SetEvent (hEvent=0x150) returned 1
	[0284.106] SetEvent (hEvent=0x248) returned 1
	[0284.106] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4)) returned 1
	[0284.140] SetEvent (hEvent=0x150) returned 1
	[0284.140] SetEvent (hEvent=0x1b0) returned 1
	[0284.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232)) returned 1
	[0284.186] SetEvent (hEvent=0x150) returned 1
	[0284.186] SetEvent (hEvent=0x218) returned 1
	[0284.186] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392)) returned 1
	[0284.266] SetEvent (hEvent=0x150) returned 1
	[0284.266] SetEvent (hEvent=0x118) returned 1
	[0284.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114)) returned 1
	[0284.315] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846)) returned 1
	[0284.336] SetEvent (hEvent=0x234) returned 1
	[0284.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610)) returned 1
	[0284.377] SetEvent (hEvent=0x150) returned 1
	[0284.377] SetEvent (hEvent=0x1b0) returned 1
	[0284.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1
	[0284.410] SetEvent (hEvent=0x150) returned 1
	[0284.410] SetEvent (hEvent=0x218) returned 1
	[0284.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a)) returned 1
	[0284.507] SetEvent (hEvent=0x150) returned 1
	[0284.508] SetEvent (hEvent=0x234) returned 1
	[0284.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1
	[0284.550] SetEvent (hEvent=0x150) returned 1
	[0284.550] SetEvent (hEvent=0x26c) returned 1
	[0284.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2)) returned 1
	[0284.594] SetEvent (hEvent=0x150) returned 1
	[0284.594] SetEvent (hEvent=0x248) returned 1
	[0284.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1
	[0284.635] SetEvent (hEvent=0x150) returned 1
	[0284.635] SetEvent (hEvent=0x1b0) returned 1
	[0284.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae)) returned 1
	[0284.696] SetEvent (hEvent=0x150) returned 1
	[0284.696] SetEvent (hEvent=0x218) returned 1
	[0284.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1
	[0284.727] SetEvent (hEvent=0x150) returned 1
	[0284.727] SetEvent (hEvent=0x234) returned 1
	[0284.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352)) returned 1
	[0284.770] SetEvent (hEvent=0x150) returned 1
	[0284.771] SetEvent (hEvent=0x26c) returned 1
	[0284.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016)) returned 1
	[0284.814] SetEvent (hEvent=0x150) returned 1
	[0284.814] SetEvent (hEvent=0x248) returned 1
	[0284.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2)) returned 1
	[0284.947] SetEvent (hEvent=0x150) returned 1
	[0284.947] SetEvent (hEvent=0x1b0) returned 1
	[0284.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162)) returned 1
	[0284.992] SetEvent (hEvent=0x150) returned 1
	[0284.992] SetEvent (hEvent=0x218) returned 1
	[0284.992] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0)) returned 1
	[0285.031] SetEvent (hEvent=0x234) returned 1
	[0285.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378)) returned 1
	[0285.076] SetEvent (hEvent=0x150) returned 1
	[0285.076] SetEvent (hEvent=0x26c) returned 1
	[0285.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c)) returned 1
	[0285.111] SetEvent (hEvent=0x150) returned 1
	[0285.111] SetEvent (hEvent=0x248) returned 1
	[0285.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74)) returned 1
	[0285.149] SetEvent (hEvent=0x150) returned 1
	[0285.149] SetEvent (hEvent=0x1b0) returned 1
	[0285.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f)) returned 1
	[0285.185] SetEvent (hEvent=0x150) returned 1
	[0285.185] SetEvent (hEvent=0x218) returned 1
	[0285.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c)) returned 1
	[0285.221] SetEvent (hEvent=0x150) returned 1
	[0285.221] SetEvent (hEvent=0x234) returned 1
	[0285.221] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada)) returned 1
	[0285.260] SetEvent (hEvent=0x150) returned 1
	[0285.260] SetEvent (hEvent=0x26c) returned 1
	[0285.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1)) returned 1
	[0285.344] SetEvent (hEvent=0x150) returned 1
	[0285.344] SetEvent (hEvent=0x248) returned 1
	[0285.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3)) returned 1
	[0285.384] SetEvent (hEvent=0x150) returned 1
	[0285.384] SetEvent (hEvent=0x1b0) returned 1
	[0285.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801)) returned 1
	[0285.422] SetEvent (hEvent=0x150) returned 1
	[0285.422] SetEvent (hEvent=0x218) returned 1
	[0285.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92)) returned 1
	[0285.457] SetEvent (hEvent=0x150) returned 1
	[0285.457] SetEvent (hEvent=0x234) returned 1
	[0285.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b)) returned 1
	[0285.504] SetEvent (hEvent=0x150) returned 1
	[0285.505] SetEvent (hEvent=0x26c) returned 1
	[0285.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7)) returned 1
	[0285.554] SetEvent (hEvent=0x150) returned 1
	[0285.554] SetEvent (hEvent=0x248) returned 1
	[0285.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f)) returned 1
	[0285.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9)) returned 1
	[0285.700] SetEvent (hEvent=0x150) returned 1
	[0285.700] SetEvent (hEvent=0x218) returned 1
	[0285.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367)) returned 1
	[0285.745] SetEvent (hEvent=0x150) returned 1
	[0285.745] SetEvent (hEvent=0x234) returned 1
	[0285.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1
	[0285.784] SetEvent (hEvent=0x150) returned 1
	[0285.784] SetEvent (hEvent=0x26c) returned 1
	[0285.784] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1
	[0285.822] SetEvent (hEvent=0x150) returned 1
	[0285.823] SetEvent (hEvent=0x248) returned 1
	[0285.823] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be)) returned 1
	[0285.908] SetEvent (hEvent=0x150) returned 1
	[0285.908] SetEvent (hEvent=0x118) returned 1
	[0285.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8)) returned 1
	[0285.952] SetEvent (hEvent=0x150) returned 1
	[0285.952] SetEvent (hEvent=0x218) returned 1
	[0285.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0286.005] SetEvent (hEvent=0x150) returned 1
	[0286.005] SetEvent (hEvent=0x234) returned 1
	[0286.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0286.171] SetEvent (hEvent=0x150) returned 1
	[0286.172] SetEvent (hEvent=0x26c) returned 1
	[0286.172] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0286.224] SetEvent (hEvent=0x150) returned 1
	[0286.224] SetEvent (hEvent=0x248) returned 1
	[0286.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0286.269] SetEvent (hEvent=0x150) returned 1
	[0286.269] SetEvent (hEvent=0x118) returned 1
	[0286.269] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0286.336] SetEvent (hEvent=0x150) returned 1
	[0286.336] SetEvent (hEvent=0x218) returned 1
	[0286.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0286.392] SetEvent (hEvent=0x150) returned 1
	[0286.392] SetEvent (hEvent=0x1b0) returned 1
	[0286.392] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0286.435] SetEvent (hEvent=0x150) returned 1
	[0286.435] SetEvent (hEvent=0x26c) returned 1
	[0286.435] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0)) returned 1
	[0286.471] SetEvent (hEvent=0x150) returned 1
	[0286.471] SetEvent (hEvent=0x248) returned 1
	[0286.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0286.546] SetEvent (hEvent=0x150) returned 1
	[0286.546] SetEvent (hEvent=0x118) returned 1
	[0286.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8)) returned 1
	[0286.594] SetEvent (hEvent=0x150) returned 1
	[0286.594] SetEvent (hEvent=0x218) returned 1
	[0286.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68)) returned 1
	[0286.635] SetEvent (hEvent=0x150) returned 1
	[0286.635] SetEvent (hEvent=0x1b0) returned 1
	[0286.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8)) returned 1
	[0286.697] SetEvent (hEvent=0x150) returned 1
	[0286.697] SetEvent (hEvent=0x26c) returned 1
	[0286.697] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74)) returned 1
	[0286.745] SetEvent (hEvent=0x150) returned 1
	[0286.745] SetEvent (hEvent=0x248) returned 1
	[0286.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978)) returned 1
	[0286.784] SetEvent (hEvent=0x150) returned 1
	[0286.784] SetEvent (hEvent=0x118) returned 1
	[0286.784] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0)) returned 1
	[0286.835] SetEvent (hEvent=0x150) returned 1
	[0286.835] SetEvent (hEvent=0x218) returned 1
	[0286.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290)) returned 1
	[0286.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0)) returned 1
	[0286.959] SetEvent (hEvent=0x150) returned 1
	[0286.959] SetEvent (hEvent=0x26c) returned 1
	[0286.959] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264)) returned 1
	[0287.000] SetEvent (hEvent=0x150) returned 1
	[0287.000] SetEvent (hEvent=0x248) returned 1
	[0287.000] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94)) returned 1
	[0287.066] SetEvent (hEvent=0x150) returned 1
	[0287.066] SetEvent (hEvent=0x118) returned 1
	[0287.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1
	[0287.124] SetEvent (hEvent=0x150) returned 1
	[0287.124] SetEvent (hEvent=0x218) returned 1
	[0287.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c)) returned 1
	[0287.173] SetEvent (hEvent=0x150) returned 1
	[0287.173] SetEvent (hEvent=0x210) returned 1
	[0287.173] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1
	[0287.371] SetEvent (hEvent=0x150) returned 1
	[0287.371] SetEvent (hEvent=0x26c) returned 1
	[0287.371] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600)) returned 1
	[0287.433] SetEvent (hEvent=0x150) returned 1
	[0287.433] SetEvent (hEvent=0x248) returned 1
	[0287.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74)) returned 1
	[0287.498] SetEvent (hEvent=0x150) returned 1
	[0287.498] SetEvent (hEvent=0x118) returned 1
	[0287.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314)) returned 1
	[0287.529] SetEvent (hEvent=0x150) returned 1
	[0287.529] SetEvent (hEvent=0x218) returned 1
	[0287.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c)) returned 1
	[0287.574] SetEvent (hEvent=0x150) returned 1
	[0287.574] SetEvent (hEvent=0x210) returned 1
	[0287.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc)) returned 1
	[0287.609] SetEvent (hEvent=0x150) returned 1
	[0287.609] SetEvent (hEvent=0x26c) returned 1
	[0287.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80)) returned 1
	[0287.651] SetEvent (hEvent=0x150) returned 1
	[0287.651] SetEvent (hEvent=0x248) returned 1
	[0287.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214)) returned 1
	[0287.688] SetEvent (hEvent=0x150) returned 1
	[0287.688] SetEvent (hEvent=0x118) returned 1
	[0287.688] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714)) returned 1
	[0287.730] SetEvent (hEvent=0x150) returned 1
	[0287.730] SetEvent (hEvent=0x218) returned 1
	[0287.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540)) returned 1
	[0287.778] SetEvent (hEvent=0x150) returned 1
	[0287.778] SetEvent (hEvent=0x210) returned 1
	[0287.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28)) returned 1
	[0287.827] SetEvent (hEvent=0x150) returned 1
	[0287.827] SetEvent (hEvent=0x26c) returned 1
	[0287.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14)) returned 1
	[0287.876] SetEvent (hEvent=0x150) returned 1
	[0287.876] SetEvent (hEvent=0x248) returned 1
	[0287.876] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc)) returned 1
	[0287.951] SetEvent (hEvent=0x234) returned 1
	[0287.951] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8)) returned 1
	[0288.001] SetEvent (hEvent=0x150) returned 1
	[0288.001] SetEvent (hEvent=0x218) returned 1
	[0288.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8)) returned 1
	[0288.028] SetEvent (hEvent=0x150) returned 1
	[0288.028] SetEvent (hEvent=0x210) returned 1
	[0288.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14)) returned 1
	[0288.068] SetEvent (hEvent=0x150) returned 1
	[0288.068] SetEvent (hEvent=0x26c) returned 1
	[0288.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1
	[0288.107] SetEvent (hEvent=0x150) returned 1
	[0288.107] SetEvent (hEvent=0x248) returned 1
	[0288.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0)) returned 1
	[0288.158] SetEvent (hEvent=0x150) returned 1
	[0288.158] SetEvent (hEvent=0x234) returned 1
	[0288.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1
	[0288.203] SetEvent (hEvent=0x150) returned 1
	[0288.203] SetEvent (hEvent=0x218) returned 1
	[0288.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1
	[0288.245] SetEvent (hEvent=0x150) returned 1
	[0288.245] SetEvent (hEvent=0x210) returned 1
	[0288.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1
	[0288.310] SetEvent (hEvent=0x150) returned 1
	[0288.310] SetEvent (hEvent=0x26c) returned 1
	[0288.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c)) returned 1
	[0288.346] SetEvent (hEvent=0x150) returned 1
	[0288.346] SetEvent (hEvent=0x248) returned 1
	[0288.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54)) returned 1
	[0288.468] SetEvent (hEvent=0x150) returned 1
	[0288.468] SetEvent (hEvent=0x234) returned 1
	[0288.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1
	[0288.514] SetEvent (hEvent=0x218) returned 1
	[0288.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4)) returned 1
	[0288.560] SetEvent (hEvent=0x210) returned 1
	[0288.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c)) returned 1
	[0288.595] SetEvent (hEvent=0x150) returned 1
	[0288.595] SetEvent (hEvent=0x26c) returned 1
	[0288.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c)) returned 1
	[0288.636] SetEvent (hEvent=0x150) returned 1
	[0288.637] SetEvent (hEvent=0x248) returned 1
	[0288.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1
	[0288.674] SetEvent (hEvent=0x150) returned 1
	[0288.674] SetEvent (hEvent=0x234) returned 1
	[0288.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364)) returned 1
	[0288.729] SetEvent (hEvent=0x150) returned 1
	[0288.729] SetEvent (hEvent=0x218) returned 1
	[0288.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1
	[0288.772] SetEvent (hEvent=0x150) returned 1
	[0288.772] SetEvent (hEvent=0x210) returned 1
	[0288.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8)) returned 1
	[0288.816] SetEvent (hEvent=0x150) returned 1
	[0288.816] SetEvent (hEvent=0x26c) returned 1
	[0288.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c)) returned 1
	[0288.864] SetEvent (hEvent=0x150) returned 1
	[0288.864] SetEvent (hEvent=0x248) returned 1
	[0288.864] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c)) returned 1
	[0288.952] SetEvent (hEvent=0x150) returned 1
	[0288.952] SetEvent (hEvent=0x234) returned 1
	[0288.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350)) returned 1
	[0289.001] SetEvent (hEvent=0x150) returned 1
	[0289.001] SetEvent (hEvent=0x218) returned 1
	[0289.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04)) returned 1
	[0289.041] SetEvent (hEvent=0x150) returned 1
	[0289.041] SetEvent (hEvent=0x210) returned 1
	[0289.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1
	[0289.084] SetEvent (hEvent=0x150) returned 1
	[0289.084] SetEvent (hEvent=0x26c) returned 1
	[0289.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc)) returned 1
	[0289.120] SetEvent (hEvent=0x150) returned 1
	[0289.121] SetEvent (hEvent=0x248) returned 1
	[0289.121] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8)) returned 1
	[0289.170] SetEvent (hEvent=0x150) returned 1
	[0289.170] SetEvent (hEvent=0x234) returned 1
	[0289.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864)) returned 1
	[0289.201] SetEvent (hEvent=0x150) returned 1
	[0289.201] SetEvent (hEvent=0x218) returned 1
	[0289.201] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928)) returned 1
	[0289.259] SetEvent (hEvent=0x150) returned 1
	[0289.259] SetEvent (hEvent=0x210) returned 1
	[0289.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424)) returned 1
	[0289.332] SetEvent (hEvent=0x150) returned 1
	[0289.332] SetEvent (hEvent=0x26c) returned 1
	[0289.332] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560)) returned 1
	[0289.376] SetEvent (hEvent=0x150) returned 1
	[0289.376] SetEvent (hEvent=0x248) returned 1
	[0289.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034)) returned 1
	[0289.421] SetEvent (hEvent=0x150) returned 1
	[0289.421] SetEvent (hEvent=0x234) returned 1
	[0289.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1
	[0289.461] SetEvent (hEvent=0x150) returned 1
	[0289.461] SetEvent (hEvent=0x218) returned 1
	[0289.461] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44)) returned 1
	[0289.521] SetEvent (hEvent=0x150) returned 1
	[0289.521] SetEvent (hEvent=0x118) returned 1
	[0289.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4)) returned 1
	[0289.565] SetEvent (hEvent=0x150) returned 1
	[0289.565] SetEvent (hEvent=0x26c) returned 1
	[0289.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1
	[0289.596] SetEvent (hEvent=0x210) returned 1
	[0289.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c)) returned 1
	[0289.686] SetEvent (hEvent=0x150) returned 1
	[0289.686] SetEvent (hEvent=0x234) returned 1
	[0289.686] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8)) returned 1
	[0289.748] SetEvent (hEvent=0x150) returned 1
	[0289.748] SetEvent (hEvent=0x218) returned 1
	[0289.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c)) returned 1
	[0289.817] SetEvent (hEvent=0x150) returned 1
	[0289.817] SetEvent (hEvent=0x118) returned 1
	[0289.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0)) returned 1
	[0289.876] SetEvent (hEvent=0x150) returned 1
	[0289.876] SetEvent (hEvent=0x26c) returned 1
	[0289.876] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030)) returned 1
	[0289.960] SetEvent (hEvent=0x150) returned 1
	[0289.960] SetEvent (hEvent=0x210) returned 1
	[0289.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8)) returned 1
	[0290.034] SetEvent (hEvent=0x150) returned 1
	[0290.034] SetEvent (hEvent=0x234) returned 1
	[0290.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1
	[0290.109] SetEvent (hEvent=0x150) returned 1
	[0290.109] SetEvent (hEvent=0x218) returned 1
	[0290.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c)) returned 1
	[0290.167] SetEvent (hEvent=0x150) returned 1
	[0290.167] SetEvent (hEvent=0x118) returned 1
	[0290.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4)) returned 1
	[0290.207] SetEvent (hEvent=0x150) returned 1
	[0290.207] SetEvent (hEvent=0x26c) returned 1
	[0290.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc)) returned 1
	[0290.262] SetEvent (hEvent=0x150) returned 1
	[0290.262] SetEvent (hEvent=0x210) returned 1
	[0290.262] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c)) returned 1
	[0290.327] SetEvent (hEvent=0x150) returned 1
	[0290.327] SetEvent (hEvent=0x234) returned 1
	[0290.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90)) returned 1
	[0290.364] SetEvent (hEvent=0x150) returned 1
	[0290.364] SetEvent (hEvent=0x218) returned 1
	[0290.364] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1
	[0290.414] SetEvent (hEvent=0x150) returned 1
	[0290.414] SetEvent (hEvent=0x1b0) returned 1
	[0290.414] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04)) returned 1
	[0290.456] SetEvent (hEvent=0x150) returned 1
	[0290.456] SetEvent (hEvent=0x26c) returned 1
	[0290.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8)) returned 1
	[0290.499] SetEvent (hEvent=0x150) returned 1
	[0290.500] SetEvent (hEvent=0x210) returned 1
	[0290.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc)) returned 1
	[0290.558] SetEvent (hEvent=0x150) returned 1
	[0290.558] SetEvent (hEvent=0x234) returned 1
	[0290.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1
	[0290.626] SetEvent (hEvent=0x150) returned 1
	[0290.626] SetEvent (hEvent=0x218) returned 1
	[0290.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358)) returned 1
	[0290.677] SetEvent (hEvent=0x150) returned 1
	[0290.678] SetEvent (hEvent=0x1b0) returned 1
	[0290.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1
	[0290.706] SetEvent (hEvent=0x150) returned 1
	[0290.706] SetEvent (hEvent=0x248) returned 1
	[0290.706] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc)) returned 1
	[0290.768] SetEvent (hEvent=0x150) returned 1
	[0290.769] SetEvent (hEvent=0x210) returned 1
	[0290.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc)) returned 1
	[0290.883] SetEvent (hEvent=0x150) returned 1
	[0290.883] SetEvent (hEvent=0x26c) returned 1
	[0290.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04)) returned 1
	[0290.932] SetEvent (hEvent=0x150) returned 1
	[0290.932] SetEvent (hEvent=0x218) returned 1
	[0290.932] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1
	[0290.982] SetEvent (hEvent=0x150) returned 1
	[0290.982] SetEvent (hEvent=0x1b0) returned 1
	[0290.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1
	[0291.021] SetEvent (hEvent=0x150) returned 1
	[0291.021] SetEvent (hEvent=0x248) returned 1
	[0291.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8)) returned 1
	[0291.072] SetEvent (hEvent=0x150) returned 1
	[0291.072] SetEvent (hEvent=0x210) returned 1
	[0291.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490)) returned 1
	[0291.115] SetEvent (hEvent=0x150) returned 1
	[0291.115] SetEvent (hEvent=0x26c) returned 1
	[0291.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804)) returned 1
	[0291.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c)) returned 1
	[0291.239] SetEvent (hEvent=0x150) returned 1
	[0291.239] SetEvent (hEvent=0x1b0) returned 1
	[0291.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c)) returned 1
	[0291.288] SetEvent (hEvent=0x150) returned 1
	[0291.288] SetEvent (hEvent=0x248) returned 1
	[0291.288] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4)) returned 1
	[0291.339] SetEvent (hEvent=0x150) returned 1
	[0291.339] SetEvent (hEvent=0x210) returned 1
	[0291.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8)) returned 1
	[0291.374] SetEvent (hEvent=0x150) returned 1
	[0291.374] SetEvent (hEvent=0x26c) returned 1
	[0291.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0)) returned 1
	[0291.416] SetEvent (hEvent=0x150) returned 1
	[0291.416] SetEvent (hEvent=0x118) returned 1
	[0291.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4)) returned 1
	[0291.454] SetEvent (hEvent=0x150) returned 1
	[0291.454] SetEvent (hEvent=0x1b0) returned 1
	[0291.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168)) returned 1
	[0291.489] SetEvent (hEvent=0x150) returned 1
	[0291.490] SetEvent (hEvent=0x248) returned 1
	[0291.490] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c)) returned 1
	[0291.508] SetEvent (hEvent=0x210) returned 1
	[0291.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1
	[0291.524] SetEvent (hEvent=0x26c) returned 1
	[0291.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec)) returned 1
	[0291.538] SetEvent (hEvent=0x234) returned 1
	[0291.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64)) returned 1
	[0291.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1
	[0291.577] SetEvent (hEvent=0x150) returned 1
	[0291.577] SetEvent (hEvent=0x248) returned 1
	[0291.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c)) returned 1
	[0291.592] SetEvent (hEvent=0x1b0) returned 1
	[0291.592] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014)) returned 1
	[0291.609] SetEvent (hEvent=0x150) returned 1
	[0291.609] SetEvent (hEvent=0x26c) returned 1
	[0291.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c)) returned 1
	[0291.624] SetEvent (hEvent=0x150) returned 1
	[0291.624] SetEvent (hEvent=0x118) returned 1
	[0291.624] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028)) returned 1
	[0291.641] SetEvent (hEvent=0x150) returned 1
	[0291.641] SetEvent (hEvent=0x218) returned 1
	[0291.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1
	[0291.655] SetEvent (hEvent=0x1b0) returned 1
	[0291.655] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64)) returned 1
	[0291.671] SetEvent (hEvent=0x210) returned 1
	[0291.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18)) returned 1
	[0291.687] SetEvent (hEvent=0x1b0) returned 1
	[0291.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984)) returned 1
	[0291.701] SetEvent (hEvent=0x1b0) returned 1
	[0291.702] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094)) returned 1
	[0291.716] SetEvent (hEvent=0x218) returned 1
	[0291.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4)) returned 1
	[0291.732] SetEvent (hEvent=0x248) returned 1
	[0291.732] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78)) returned 1
	[0291.746] SetEvent (hEvent=0x210) returned 1
	[0291.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c)) returned 1
	[0291.773] SetEvent (hEvent=0x26c) returned 1
	[0291.773] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc)) returned 1
	[0291.794] SetEvent (hEvent=0x150) returned 1
	[0291.794] SetEvent (hEvent=0x118) returned 1
	[0291.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4)) returned 1
	[0291.819] SetEvent (hEvent=0x218) returned 1
	[0291.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680)) returned 1
	[0291.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338)) returned 1
	[0291.900] SetEvent (hEvent=0x210) returned 1
	[0291.900] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0)) returned 1
	[0291.926] SetEvent (hEvent=0x26c) returned 1
	[0291.926] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c)) returned 1
	[0291.964] SetEvent (hEvent=0x150) returned 1
	[0291.965] SetEvent (hEvent=0x118) returned 1
	[0291.965] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1
	[0291.987] SetEvent (hEvent=0x150) returned 1
	[0291.987] SetEvent (hEvent=0x218) returned 1
	[0291.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c)) returned 1
	[0292.007] SetEvent (hEvent=0x234) returned 1
	[0292.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1
	[0292.029] SetEvent (hEvent=0x210) returned 1
	[0292.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374)) returned 1
	[0292.064] SetEvent (hEvent=0x26c) returned 1
	[0292.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1
	[0292.083] SetEvent (hEvent=0x248) returned 1
	[0292.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1
	[0292.142] SetEvent (hEvent=0x150) returned 1
	[0292.143] SetEvent (hEvent=0x218) returned 1
	[0292.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054)) returned 1
	[0292.160] SetEvent (hEvent=0x150) returned 1
	[0292.160] SetEvent (hEvent=0x234) returned 1
	[0292.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc)) returned 1
	[0292.184] SetEvent (hEvent=0x118) returned 1
	[0292.184] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918)) returned 1
	[0292.199] SetEvent (hEvent=0x26c) returned 1
	[0292.199] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0)) returned 1
	[0292.210] SetEvent (hEvent=0x118) returned 1
	[0292.210] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068)) returned 1
	[0292.236] SetEvent (hEvent=0x218) returned 1
	[0292.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54)) returned 1
	[0292.257] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c)) returned 1
	[0292.273] SetEvent (hEvent=0x210) returned 1
	[0292.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac)) returned 1
	[0292.301] SetEvent (hEvent=0x150) returned 1
	[0292.302] SetEvent (hEvent=0x26c) returned 1
	[0292.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8)) returned 1
	[0292.320] SetEvent (hEvent=0x150) returned 1
	[0292.320] SetEvent (hEvent=0x118) returned 1
	[0292.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c)) returned 1
	[0292.342] SetEvent (hEvent=0x150) returned 1
	[0292.342] SetEvent (hEvent=0x218) returned 1
	[0292.342] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88)) returned 1
	[0292.963] SetEvent (hEvent=0x150) returned 1
	[0292.964] SetEvent (hEvent=0x234) returned 1
	[0292.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890)) returned 1
	[0293.005] SetEvent (hEvent=0x150) returned 1
	[0293.005] SetEvent (hEvent=0x1b0) returned 1
	[0293.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1
	[0293.024] SetEvent (hEvent=0x150) returned 1
	[0293.024] SetEvent (hEvent=0x26c) returned 1
	[0293.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1
	[0293.051] SetEvent (hEvent=0x150) returned 1
	[0293.051] SetEvent (hEvent=0x118) returned 1
	[0293.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c)) returned 1
	[0293.070] SetEvent (hEvent=0x218) returned 1
	[0293.071] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8)) returned 1
	[0293.090] SetEvent (hEvent=0x150) returned 1
	[0293.090] SetEvent (hEvent=0x234) returned 1
	[0293.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044)) returned 1
	[0293.110] SetEvent (hEvent=0x150) returned 1
	[0293.111] SetEvent (hEvent=0x1b0) returned 1
	[0293.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68)) returned 1
	[0293.129] SetEvent (hEvent=0x150) returned 1
	[0293.129] SetEvent (hEvent=0x26c) returned 1
	[0293.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574)) returned 1
	[0293.146] SetEvent (hEvent=0x150) returned 1
	[0293.146] SetEvent (hEvent=0x118) returned 1
	[0293.146] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4)) returned 1
	[0293.165] SetEvent (hEvent=0x218) returned 1
	[0293.166] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1
	[0293.183] SetEvent (hEvent=0x150) returned 1
	[0293.183] SetEvent (hEvent=0x234) returned 1
	[0293.183] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1
	[0293.213] SetEvent (hEvent=0x150) returned 1
	[0293.213] SetEvent (hEvent=0x1b0) returned 1
	[0293.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1
	[0293.236] SetEvent (hEvent=0x150) returned 1
	[0293.236] SetEvent (hEvent=0x26c) returned 1
	[0293.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4)) returned 1
	[0293.258] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1
	[0293.271] SetEvent (hEvent=0x248) returned 1
	[0293.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c)) returned 1
	[0293.309] SetEvent (hEvent=0x150) returned 1
	[0293.309] SetEvent (hEvent=0x234) returned 1
	[0293.309] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146)) returned 1
	[0293.330] SetEvent (hEvent=0x218) returned 1
	[0293.330] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27)) returned 1
	[0293.349] SetEvent (hEvent=0x26c) returned 1
	[0293.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379)) returned 1
	[0293.368] SetEvent (hEvent=0x150) returned 1
	[0293.368] SetEvent (hEvent=0x118) returned 1
	[0293.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1)) returned 1
	[0293.392] SetEvent (hEvent=0x248) returned 1
	[0293.392] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056)) returned 1
	[0293.409] SetEvent (hEvent=0x150) returned 1
	[0293.409] SetEvent (hEvent=0x234) returned 1
	[0293.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285)) returned 1
	[0293.425] SetEvent (hEvent=0x218) returned 1
	[0293.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb)) returned 1
	[0293.443] SetEvent (hEvent=0x150) returned 1
	[0293.443] SetEvent (hEvent=0x26c) returned 1
	[0293.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a)) returned 1
	[0293.466] SetEvent (hEvent=0x150) returned 1
	[0293.466] SetEvent (hEvent=0x118) returned 1
	[0293.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4)) returned 1
	[0293.489] SetEvent (hEvent=0x150) returned 1
	[0293.489] SetEvent (hEvent=0x248) returned 1
	[0293.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8)) returned 1
	[0293.517] SetEvent (hEvent=0x150) returned 1
	[0293.517] SetEvent (hEvent=0x234) returned 1
	[0293.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b)) returned 1
	[0293.544] SetEvent (hEvent=0x150) returned 1
	[0293.544] SetEvent (hEvent=0x1b0) returned 1
	[0293.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6)) returned 1
	[0293.567] SetEvent (hEvent=0x150) returned 1
	[0293.567] SetEvent (hEvent=0x26c) returned 1
	[0293.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76)) returned 1
	[0293.589] SetEvent (hEvent=0x150) returned 1
	[0293.589] SetEvent (hEvent=0x118) returned 1
	[0293.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac)) returned 1
	[0293.610] SetEvent (hEvent=0x150) returned 1
	[0293.610] SetEvent (hEvent=0x248) returned 1
	[0293.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a)) returned 1
	[0293.630] SetEvent (hEvent=0x234) returned 1
	[0293.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4)) returned 1
	[0293.749] SetEvent (hEvent=0x150) returned 1
	[0293.749] SetEvent (hEvent=0x1b0) returned 1
	[0293.749] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d)) returned 1
	[0293.769] SetEvent (hEvent=0x26c) returned 1
	[0293.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01)) returned 1
	[0293.789] SetEvent (hEvent=0x150) returned 1
	[0293.789] SetEvent (hEvent=0x118) returned 1
	[0293.789] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22)) returned 1
	[0293.808] SetEvent (hEvent=0x248) returned 1
	[0293.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544)) returned 1
	[0293.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e)) returned 1
	[0293.857] SetEvent (hEvent=0x1f0) returned 1
	[0293.858] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1
	[0293.882] SetEvent (hEvent=0x150) returned 1
	[0293.882] SetEvent (hEvent=0x26c) returned 1
	[0293.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68)) returned 1
	[0293.941] SetEvent (hEvent=0x118) returned 1
	[0293.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844)) returned 1
	[0293.971] SetEvent (hEvent=0x150) returned 1
	[0293.972] SetEvent (hEvent=0x248) returned 1
	[0293.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928)) returned 1
	[0293.989] SetEvent (hEvent=0x234) returned 1
	[0293.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1
	[0294.020] SetEvent (hEvent=0x150) returned 1
	[0294.020] SetEvent (hEvent=0x1f0) returned 1
	[0294.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988)) returned 1
	[0294.036] SetEvent (hEvent=0x26c) returned 1
	[0294.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394)) returned 1
	[0294.057] SetEvent (hEvent=0x150) returned 1
	[0294.057] SetEvent (hEvent=0x118) returned 1
	[0294.057] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418)) returned 1
	[0294.077] SetEvent (hEvent=0x248) returned 1
	[0294.077] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00)) returned 1
	[0294.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c)) returned 1
	[0294.139] SetEvent (hEvent=0x150) returned 1
	[0294.139] SetEvent (hEvent=0x1f0) returned 1
	[0294.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1
	[0294.156] SetEvent (hEvent=0x26c) returned 1
	[0294.157] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c)) returned 1
	[0294.173] SetEvent (hEvent=0x118) returned 1
	[0294.173] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c)) returned 1
	[0294.190] SetEvent (hEvent=0x150) returned 1
	[0294.190] SetEvent (hEvent=0x248) returned 1
	[0294.190] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030)) returned 1
	[0294.211] SetEvent (hEvent=0x218) returned 1
	[0294.211] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4)) returned 1
	[0294.230] SetEvent (hEvent=0x150) returned 1
	[0294.230] SetEvent (hEvent=0x1f0) returned 1
	[0294.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1
	[0294.247] SetEvent (hEvent=0x234) returned 1
	[0294.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1
	[0294.263] SetEvent (hEvent=0x234) returned 1
	[0294.265] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1
	[0294.294] SetEvent (hEvent=0x234) returned 1
	[0294.294] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1
	[0294.314] SetEvent (hEvent=0x150) returned 1
	[0294.314] SetEvent (hEvent=0x218) returned 1
	[0294.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4)) returned 1
	[0294.336] SetEvent (hEvent=0x1f0) returned 1
	[0294.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628)) returned 1
	[0294.356] SetEvent (hEvent=0x150) returned 1
	[0294.356] SetEvent (hEvent=0x26c) returned 1
	[0294.356] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884)) returned 1
	[0294.384] SetEvent (hEvent=0x234) returned 1
	[0294.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8)) returned 1
	[0294.405] SetEvent (hEvent=0x248) returned 1
	[0294.405] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094)) returned 1
	[0294.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748)) returned 1
	[0294.488] SetEvent (hEvent=0x150) returned 1
	[0294.488] SetEvent (hEvent=0x1f0) returned 1
	[0294.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584)) returned 1
	[0294.510] SetEvent (hEvent=0x150) returned 1
	[0294.510] SetEvent (hEvent=0x26c) returned 1
	[0294.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688)) returned 1
	[0294.529] SetEvent (hEvent=0x118) returned 1
	[0294.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c)) returned 1
	[0294.544] SetEvent (hEvent=0x248) returned 1
	[0294.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774)) returned 1
	[0294.562] SetEvent (hEvent=0x150) returned 1
	[0294.562] SetEvent (hEvent=0x210) returned 1
	[0294.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4)) returned 1
	[0294.578] SetEvent (hEvent=0x1f0) returned 1
	[0294.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1
	[0294.597] SetEvent (hEvent=0x26c) returned 1
	[0294.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98)) returned 1
	[0294.613] SetEvent (hEvent=0x118) returned 1
	[0294.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1
	[0294.631] SetEvent (hEvent=0x248) returned 1
	[0294.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1
	[0294.651] SetEvent (hEvent=0x150) returned 1
	[0294.651] SetEvent (hEvent=0x210) returned 1
	[0294.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674)) returned 1
	[0294.666] SetEvent (hEvent=0x1f0) returned 1
	[0294.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c)) returned 1
	[0294.679] SetEvent (hEvent=0x218) returned 1
	[0294.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4)) returned 1
	[0294.703] SetEvent (hEvent=0x118) returned 1
	[0294.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c)) returned 1
	[0294.725] SetEvent (hEvent=0x150) returned 1
	[0294.725] SetEvent (hEvent=0x248) returned 1
	[0294.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4)) returned 1
	[0294.740] SetEvent (hEvent=0x234) returned 1
	[0294.741] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28)) returned 1
	[0294.756] SetEvent (hEvent=0x1f0) returned 1
	[0294.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370)) returned 1
	[0294.765] SetEvent (hEvent=0x234) returned 1
	[0294.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c)) returned 1
	[0294.793] SetEvent (hEvent=0x150) returned 1
	[0294.793] SetEvent (hEvent=0x118) returned 1
	[0294.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794)) returned 1
	[0294.812] SetEvent (hEvent=0x248) returned 1
	[0294.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac)) returned 1
	[0294.829] SetEvent (hEvent=0x150) returned 1
	[0294.829] SetEvent (hEvent=0x210) returned 1
	[0294.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54)) returned 1
	[0294.848] SetEvent (hEvent=0x1f0) returned 1
	[0294.848] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190)) returned 1
	[0294.870] SetEvent (hEvent=0x150) returned 1
	[0294.870] SetEvent (hEvent=0x234) returned 1
	[0294.870] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c)) returned 1
	[0294.887] SetEvent (hEvent=0x118) returned 1
	[0294.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778)) returned 1
	[0295.024] SetEvent (hEvent=0x150) returned 1
	[0295.024] SetEvent (hEvent=0x248) returned 1
	[0295.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8)) returned 1
	[0295.054] SetEvent (hEvent=0x210) returned 1
	[0295.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1
	[0295.070] SetEvent (hEvent=0x150) returned 1
	[0295.070] SetEvent (hEvent=0x1f0) returned 1
	[0295.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1
	[0295.088] SetEvent (hEvent=0x150) returned 1
	[0295.088] SetEvent (hEvent=0x234) returned 1
	[0295.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78)) returned 1
	[0295.106] SetEvent (hEvent=0x118) returned 1
	[0295.106] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1
	[0295.136] SetEvent (hEvent=0x150) returned 1
	[0295.136] SetEvent (hEvent=0x248) returned 1
	[0295.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1
	[0295.161] SetEvent (hEvent=0x150) returned 1
	[0295.161] SetEvent (hEvent=0x210) returned 1
	[0295.161] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c)) returned 1
	[0295.188] SetEvent (hEvent=0x1f0) returned 1
	[0295.188] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850)) returned 1
	[0295.207] SetEvent (hEvent=0x150) returned 1
	[0295.207] SetEvent (hEvent=0x234) returned 1
	[0295.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658)) returned 1
	[0295.223] SetEvent (hEvent=0x218) returned 1
	[0295.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58)) returned 1
	[0295.236] SetEvent (hEvent=0x248) returned 1
	[0295.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238)) returned 1
	[0295.255] SetEvent (hEvent=0x210) returned 1
	[0295.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464)) returned 1
	[0295.271] SetEvent (hEvent=0x150) returned 1
	[0295.271] SetEvent (hEvent=0x1f0) returned 1
	[0295.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0)) returned 1
	[0295.300] SetEvent (hEvent=0x150) returned 1
	[0295.300] SetEvent (hEvent=0x234) returned 1
	[0295.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0)) returned 1
	[0295.322] SetEvent (hEvent=0x150) returned 1
	[0295.322] SetEvent (hEvent=0x118) returned 1
	[0295.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08)) returned 1
	[0295.340] SetEvent (hEvent=0x150) returned 1
	[0295.340] SetEvent (hEvent=0x248) returned 1
	[0295.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0)) returned 1
	[0295.358] SetEvent (hEvent=0x150) returned 1
	[0295.358] SetEvent (hEvent=0x210) returned 1
	[0295.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1
	[0295.377] SetEvent (hEvent=0x150) returned 1
	[0295.377] SetEvent (hEvent=0x1f0) returned 1
	[0295.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e)) returned 1
	[0295.397] SetEvent (hEvent=0x150) returned 1
	[0295.397] SetEvent (hEvent=0x234) returned 1
	[0295.397] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4)) returned 1
	[0295.420] SetEvent (hEvent=0x118) returned 1
	[0295.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8)) returned 1
	[0295.437] SetEvent (hEvent=0x248) returned 1
	[0295.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84)) returned 1
	[0295.455] SetEvent (hEvent=0x150) returned 1
	[0295.455] SetEvent (hEvent=0x210) returned 1
	[0295.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc)) returned 1
	[0295.472] SetEvent (hEvent=0x1f0) returned 1
	[0295.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e)) returned 1
	[0295.493] SetEvent (hEvent=0x150) returned 1
	[0295.493] SetEvent (hEvent=0x234) returned 1
	[0295.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de)) returned 1
	[0295.509] SetEvent (hEvent=0x26c) returned 1
	[0295.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594)) returned 1
	[0295.534] SetEvent (hEvent=0x150) returned 1
	[0295.535] SetEvent (hEvent=0x248) returned 1
	[0295.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa)) returned 1
	[0295.552] SetEvent (hEvent=0x150) returned 1
	[0295.552] SetEvent (hEvent=0x210) returned 1
	[0295.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888)) returned 1
	[0295.569] SetEvent (hEvent=0x118) returned 1
	[0295.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8)) returned 1
	[0295.587] SetEvent (hEvent=0x150) returned 1
	[0295.587] SetEvent (hEvent=0x234) returned 1
	[0295.587] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18)) returned 1
	[0295.606] SetEvent (hEvent=0x26c) returned 1
	[0295.606] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1
	[0295.626] SetEvent (hEvent=0x150) returned 1
	[0295.626] SetEvent (hEvent=0x248) returned 1
	[0295.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198)) returned 1
	[0295.649] SetEvent (hEvent=0x210) returned 1
	[0295.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8)) returned 1
	[0295.666] SetEvent (hEvent=0x1f0) returned 1
	[0295.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608)) returned 1
	[0295.675] SetEvent (hEvent=0x218) returned 1
	[0295.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec)) returned 1
	[0295.699] SetEvent (hEvent=0x26c) returned 1
	[0295.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196)) returned 1
	[0295.730] SetEvent (hEvent=0x150) returned 1
	[0295.730] SetEvent (hEvent=0x248) returned 1
	[0295.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d)) returned 1
	[0295.742] SetEvent (hEvent=0x234) returned 1
	[0295.742] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8)) returned 1
	[0295.769] SetEvent (hEvent=0x1f0) returned 1
	[0295.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e)) returned 1
	[0295.787] SetEvent (hEvent=0x210) returned 1
	[0295.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902)) returned 1
	[0295.805] SetEvent (hEvent=0x218) returned 1
	[0295.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d)) returned 1
	[0295.823] SetEvent (hEvent=0x248) returned 1
	[0295.823] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214)) returned 1
	[0295.862] SetEvent (hEvent=0x234) returned 1
	[0295.862] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3)) returned 1
	[0295.881] SetEvent (hEvent=0x150) returned 1
	[0295.881] SetEvent (hEvent=0x1f0) returned 1
	[0295.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2)) returned 1
	[0295.925] SetEvent (hEvent=0x210) returned 1
	[0295.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a)) returned 1
	[0295.946] SetEvent (hEvent=0x150) returned 1
	[0295.946] SetEvent (hEvent=0x26c) returned 1
	[0295.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26)) returned 1
	[0295.965] SetEvent (hEvent=0x248) returned 1
	[0295.965] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c)) returned 1
	[0296.005] SetEvent (hEvent=0x150) returned 1
	[0296.005] SetEvent (hEvent=0x234) returned 1
	[0296.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e)) returned 1
	[0296.030] SetEvent (hEvent=0x150) returned 1
	[0296.030] SetEvent (hEvent=0x1f0) returned 1
	[0296.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7)) returned 1
	[0296.049] SetEvent (hEvent=0x150) returned 1
	[0296.049] SetEvent (hEvent=0x210) returned 1
	[0296.049] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48)) returned 1
	[0296.068] SetEvent (hEvent=0x150) returned 1
	[0296.068] SetEvent (hEvent=0x26c) returned 1
	[0296.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e)) returned 1
	[0296.090] SetEvent (hEvent=0x248) returned 1
	[0296.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e)) returned 1
	[0296.185] SetEvent (hEvent=0x150) returned 1
	[0296.185] SetEvent (hEvent=0x234) returned 1
	[0296.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2)) returned 1
	[0296.205] SetEvent (hEvent=0x150) returned 1
	[0296.205] SetEvent (hEvent=0x1f0) returned 1
	[0296.205] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c)) returned 1
	[0296.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2)) returned 1
	[0296.299] SetEvent (hEvent=0x150) returned 1
	[0296.299] SetEvent (hEvent=0x26c) returned 1
	[0296.299] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e)) returned 1
	[0296.319] SetEvent (hEvent=0x150) returned 1
	[0296.319] SetEvent (hEvent=0x248) returned 1
	[0296.320] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a)) returned 1
	[0296.339] SetEvent (hEvent=0x150) returned 1
	[0296.339] SetEvent (hEvent=0x234) returned 1
	[0296.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88)) returned 1
	[0296.360] SetEvent (hEvent=0x150) returned 1
	[0296.360] SetEvent (hEvent=0x1f0) returned 1
	[0296.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46)) returned 1
	[0296.381] SetEvent (hEvent=0x150) returned 1
	[0296.381] SetEvent (hEvent=0x218) returned 1
	[0296.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8)) returned 1
	[0296.399] SetEvent (hEvent=0x26c) returned 1
	[0296.399] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0)) returned 1
	[0296.421] SetEvent (hEvent=0x150) returned 1
	[0296.421] SetEvent (hEvent=0x248) returned 1
	[0296.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956)) returned 1
	[0296.441] SetEvent (hEvent=0x150) returned 1
	[0296.441] SetEvent (hEvent=0x234) returned 1
	[0296.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2)) returned 1
	[0296.458] SetEvent (hEvent=0x1f0) returned 1
	[0296.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6)) returned 1
	[0296.496] SetEvent (hEvent=0x150) returned 1
	[0296.496] SetEvent (hEvent=0x218) returned 1
	[0296.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c)) returned 1
	[0296.516] SetEvent (hEvent=0x26c) returned 1
	[0296.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420)) returned 1
	[0296.533] SetEvent (hEvent=0x248) returned 1
	[0296.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae)) returned 1
	[0296.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a)) returned 1
	[0296.568] SetEvent (hEvent=0x118) returned 1
	[0296.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e)) returned 1
	[0296.593] SetEvent (hEvent=0x1f0) returned 1
	[0296.593] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1
	[0296.636] SetEvent (hEvent=0x150) returned 1
	[0296.637] SetEvent (hEvent=0x26c) returned 1
	[0296.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182)) returned 1
	[0296.658] SetEvent (hEvent=0x150) returned 1
	[0296.658] SetEvent (hEvent=0x248) returned 1
	[0296.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4)) returned 1
	[0296.674] SetEvent (hEvent=0x234) returned 1
	[0296.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da)) returned 1
	[0296.691] SetEvent (hEvent=0x1f0) returned 1
	[0296.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a)) returned 1
	[0296.700] SetEvent (hEvent=0x1f0) returned 1
	[0296.701] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe)) returned 1
	[0296.722] SetEvent (hEvent=0x150) returned 1
	[0296.722] SetEvent (hEvent=0x26c) returned 1
	[0296.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724)) returned 1
	[0296.738] SetEvent (hEvent=0x150) returned 1
	[0296.738] SetEvent (hEvent=0x248) returned 1
	[0296.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4)) returned 1
	[0296.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500)) returned 1
	[0296.781] SetEvent (hEvent=0x118) returned 1
	[0296.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c)) returned 1
	[0296.799] SetEvent (hEvent=0x150) returned 1
	[0296.799] SetEvent (hEvent=0x1f0) returned 1
	[0296.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870)) returned 1
	[0296.815] SetEvent (hEvent=0x26c) returned 1
	[0296.828] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c)) returned 1
	[0296.851] SetEvent (hEvent=0x150) returned 1
	[0296.851] SetEvent (hEvent=0x248) returned 1
	[0296.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040)) returned 1
	[0296.871] SetEvent (hEvent=0x150) returned 1
	[0296.871] SetEvent (hEvent=0x210) returned 1
	[0296.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480)) returned 1
	[0296.888] SetEvent (hEvent=0x150) returned 1
	[0296.888] SetEvent (hEvent=0x118) returned 1
	[0296.889] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2)) returned 1
	[0296.910] SetEvent (hEvent=0x1f0) returned 1
	[0296.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc)) returned 1
	[0296.961] SetEvent (hEvent=0x150) returned 1
	[0296.961] SetEvent (hEvent=0x26c) returned 1
	[0296.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc)) returned 1
	[0296.976] SetEvent (hEvent=0x248) returned 1
	[0296.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1
	[0296.995] SetEvent (hEvent=0x150) returned 1
	[0296.995] SetEvent (hEvent=0x210) returned 1
	[0296.996] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c)) returned 1
	[0297.019] SetEvent (hEvent=0x150) returned 1
	[0297.019] SetEvent (hEvent=0x118) returned 1
	[0297.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1
	[0297.040] SetEvent (hEvent=0x1f0) returned 1
	[0297.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394)) returned 1
	[0297.063] SetEvent (hEvent=0x150) returned 1
	[0297.063] SetEvent (hEvent=0x26c) returned 1
	[0297.063] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44)) returned 1
	[0297.079] SetEvent (hEvent=0x150) returned 1
	[0297.079] SetEvent (hEvent=0x248) returned 1
	[0297.079] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258)) returned 1
	[0297.097] SetEvent (hEvent=0x210) returned 1
	[0297.097] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834)) returned 1
	[0297.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4)) returned 1
	[0297.184] SetEvent (hEvent=0x150) returned 1
	[0297.184] SetEvent (hEvent=0x1f0) returned 1
	[0297.184] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1
	[0297.195] SetEvent (hEvent=0x234) returned 1
	[0297.195] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1
	[0297.224] SetEvent (hEvent=0x150) returned 1
	[0297.224] SetEvent (hEvent=0x248) returned 1
	[0297.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc)) returned 1
	[0297.236] SetEvent (hEvent=0x26c) returned 1
	[0297.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004)) returned 1
	[0297.263] SetEvent (hEvent=0x150) returned 1
	[0297.263] SetEvent (hEvent=0x210) returned 1
	[0297.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1
	[0297.343] SetEvent (hEvent=0x150) returned 1
	[0297.343] SetEvent (hEvent=0x1f0) returned 1
	[0297.343] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c)) returned 1
	[0297.367] SetEvent (hEvent=0x150) returned 1
	[0297.367] SetEvent (hEvent=0x234) returned 1
	[0297.367] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e)) returned 1
	[0297.387] SetEvent (hEvent=0x150) returned 1
	[0297.387] SetEvent (hEvent=0x248) returned 1
	[0297.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2)) returned 1
	[0297.407] SetEvent (hEvent=0x150) returned 1
	[0297.407] SetEvent (hEvent=0x26c) returned 1
	[0297.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a)) returned 1
	[0297.426] SetEvent (hEvent=0x210) returned 1
	[0297.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4)) returned 1
	[0297.467] SetEvent (hEvent=0x150) returned 1
	[0297.467] SetEvent (hEvent=0x1f0) returned 1
	[0297.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6)) returned 1
	[0297.491] SetEvent (hEvent=0x150) returned 1
	[0297.492] SetEvent (hEvent=0x234) returned 1
	[0297.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a)) returned 1
	[0297.520] SetEvent (hEvent=0x150) returned 1
	[0297.520] SetEvent (hEvent=0x248) returned 1
	[0297.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8)) returned 1
	[0297.547] SetEvent (hEvent=0x150) returned 1
	[0297.547] SetEvent (hEvent=0x26c) returned 1
	[0297.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350)) returned 1
	[0297.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be)) returned 1
	[0297.652] SetEvent (hEvent=0x1f0) returned 1
	[0297.652] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1
	[0297.671] SetEvent (hEvent=0x234) returned 1
	[0297.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc)) returned 1
	[0297.694] SetEvent (hEvent=0x150) returned 1
	[0297.694] SetEvent (hEvent=0x248) returned 1
	[0297.694] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1
	[0297.713] SetEvent (hEvent=0x150) returned 1
	[0297.713] SetEvent (hEvent=0x26c) returned 1
	[0297.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce)) returned 1
	[0297.738] SetEvent (hEvent=0x150) returned 1
	[0297.738] SetEvent (hEvent=0x118) returned 1
	[0297.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2)) returned 1
	[0297.763] SetEvent (hEvent=0x150) returned 1
	[0297.763] SetEvent (hEvent=0x1f0) returned 1
	[0297.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586)) returned 1
	[0297.785] SetEvent (hEvent=0x150) returned 1
	[0297.785] SetEvent (hEvent=0x234) returned 1
	[0297.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1
	[0297.808] SetEvent (hEvent=0x150) returned 1
	[0297.808] SetEvent (hEvent=0x248) returned 1
	[0297.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c)) returned 1
	[0297.827] SetEvent (hEvent=0x26c) returned 1
	[0297.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26)) returned 1
	[0297.847] SetEvent (hEvent=0x150) returned 1
	[0297.847] SetEvent (hEvent=0x118) returned 1
	[0297.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c)) returned 1
	[0297.867] SetEvent (hEvent=0x150) returned 1
	[0297.867] SetEvent (hEvent=0x1f0) returned 1
	[0297.867] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1
	[0297.890] SetEvent (hEvent=0x234) returned 1
	[0297.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae)) returned 1
	[0297.964] SetEvent (hEvent=0x150) returned 1
	[0297.965] SetEvent (hEvent=0x248) returned 1
	[0297.965] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860)) returned 1
	[0297.987] SetEvent (hEvent=0x26c) returned 1
	[0297.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624)) returned 1
	[0298.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce)) returned 1
	[0298.043] SetEvent (hEvent=0x150) returned 1
	[0298.043] SetEvent (hEvent=0x1f0) returned 1
	[0298.043] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4)) returned 1
	[0298.056] SetEvent (hEvent=0x118) returned 1
	[0298.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520)) returned 1
	[0298.089] SetEvent (hEvent=0x150) returned 1
	[0298.089] SetEvent (hEvent=0x248) returned 1
	[0298.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2)) returned 1
	[0298.141] SetEvent (hEvent=0x150) returned 1
	[0298.142] SetEvent (hEvent=0x26c) returned 1
	[0298.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e)) returned 1
	[0298.155] SetEvent (hEvent=0x234) returned 1
	[0298.155] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c)) returned 1
	[0298.182] SetEvent (hEvent=0x150) returned 1
	[0298.182] SetEvent (hEvent=0x1f0) returned 1
	[0298.182] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c)) returned 1
	[0298.204] SetEvent (hEvent=0x210) returned 1
	[0298.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c)) returned 1
	[0298.227] SetEvent (hEvent=0x150) returned 1
	[0298.227] SetEvent (hEvent=0x248) returned 1
	[0298.227] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08)) returned 1
	[0298.249] SetEvent (hEvent=0x150) returned 1
	[0298.249] SetEvent (hEvent=0x26c) returned 1
	[0298.249] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a)) returned 1
	[0298.269] SetEvent (hEvent=0x150) returned 1
	[0298.269] SetEvent (hEvent=0x234) returned 1
	[0298.269] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e)) returned 1
	[0298.299] SetEvent (hEvent=0x1f0) returned 1
	[0298.299] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e)) returned 1
	[0298.338] SetEvent (hEvent=0x150) returned 1
	[0298.338] SetEvent (hEvent=0x210) returned 1
	[0298.338] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e)) returned 1
	[0298.360] SetEvent (hEvent=0x150) returned 1
	[0298.360] SetEvent (hEvent=0x248) returned 1
	[0298.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a)) returned 1
	[0298.380] SetEvent (hEvent=0x26c) returned 1
	[0298.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1
	[0298.401] SetEvent (hEvent=0x218) returned 1
	[0298.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1
	[0298.426] SetEvent (hEvent=0x150) returned 1
	[0298.426] SetEvent (hEvent=0x1f0) returned 1
	[0298.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc)) returned 1
	[0298.450] SetEvent (hEvent=0x150) returned 1
	[0298.450] SetEvent (hEvent=0x210) returned 1
	[0298.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18)) returned 1
	[0298.472] SetEvent (hEvent=0x248) returned 1
	[0298.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1
	[0298.643] SetEvent (hEvent=0x26c) returned 1
	[0298.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1
	[0298.660] SetEvent (hEvent=0x150) returned 1
	[0298.660] SetEvent (hEvent=0x234) returned 1
	[0298.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c)) returned 1
	[0298.677] SetEvent (hEvent=0x150) returned 1
	[0298.678] SetEvent (hEvent=0x1f0) returned 1
	[0298.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004)) returned 1
	[0298.695] SetEvent (hEvent=0x150) returned 1
	[0298.695] SetEvent (hEvent=0x210) returned 1
	[0298.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c)) returned 1
	[0298.714] SetEvent (hEvent=0x248) returned 1
	[0298.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1
	[0298.728] SetEvent (hEvent=0x26c) returned 1
	[0298.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c)) returned 1
	[0298.735] SetEvent (hEvent=0x118) returned 1
	[0298.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46)) returned 1
	[0298.761] SetEvent (hEvent=0x150) returned 1
	[0298.761] SetEvent (hEvent=0x1f0) returned 1
	[0298.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a)) returned 1
	[0298.782] SetEvent (hEvent=0x150) returned 1
	[0298.782] SetEvent (hEvent=0x210) returned 1
	[0298.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0)) returned 1
	[0298.798] SetEvent (hEvent=0x248) returned 1
	[0298.798] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08)) returned 1
	[0298.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398)) returned 1
	[0298.830] SetEvent (hEvent=0x118) returned 1
	[0298.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e)) returned 1
	[0298.847] SetEvent (hEvent=0x150) returned 1
	[0298.847] SetEvent (hEvent=0x1f0) returned 1
	[0298.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e)) returned 1
	[0298.867] SetEvent (hEvent=0x210) returned 1
	[0298.867] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36)) returned 1
	[0298.884] SetEvent (hEvent=0x248) returned 1
	[0298.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e)) returned 1
	[0298.900] SetEvent (hEvent=0x26c) returned 1
	[0298.900] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74)) returned 1
	[0299.120] SetEvent (hEvent=0x150) returned 1
	[0299.120] SetEvent (hEvent=0x218) returned 1
	[0299.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1
	[0299.140] SetEvent (hEvent=0x150) returned 1
	[0299.140] SetEvent (hEvent=0x1f0) returned 1
	[0299.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc)) returned 1
	[0299.158] SetEvent (hEvent=0x118) returned 1
	[0299.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a)) returned 1
	[0299.175] SetEvent (hEvent=0x150) returned 1
	[0299.175] SetEvent (hEvent=0x248) returned 1
	[0299.175] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c)) returned 1
	[0299.196] SetEvent (hEvent=0x150) returned 1
	[0299.196] SetEvent (hEvent=0x26c) returned 1
	[0299.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a)) returned 1
	[0299.216] SetEvent (hEvent=0x218) returned 1
	[0299.216] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c)) returned 1
	[0299.239] SetEvent (hEvent=0x1f0) returned 1
	[0299.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1
	[0299.266] SetEvent (hEvent=0x150) returned 1
	[0299.266] SetEvent (hEvent=0x210) returned 1
	[0299.267] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6)) returned 1
	[0299.306] SetEvent (hEvent=0x150) returned 1
	[0299.306] SetEvent (hEvent=0x248) returned 1
	[0299.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa)) returned 1
	[0299.325] SetEvent (hEvent=0x150) returned 1
	[0299.325] SetEvent (hEvent=0x26c) returned 1
	[0299.325] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c)) returned 1
	[0299.344] SetEvent (hEvent=0x150) returned 1
	[0299.344] SetEvent (hEvent=0x218) returned 1
	[0299.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50)) returned 1
	[0299.359] SetEvent (hEvent=0x234) returned 1
	[0299.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce)) returned 1
	[0299.377] SetEvent (hEvent=0x150) returned 1
	[0299.377] SetEvent (hEvent=0x210) returned 1
	[0299.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1
	[0299.396] SetEvent (hEvent=0x150) returned 1
	[0299.396] SetEvent (hEvent=0x248) returned 1
	[0299.396] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2)) returned 1
	[0299.418] SetEvent (hEvent=0x150) returned 1
	[0299.418] SetEvent (hEvent=0x26c) returned 1
	[0299.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2)) returned 1
	[0299.434] SetEvent (hEvent=0x234) returned 1
	[0299.434] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783)) returned 1
	[0299.451] SetEvent (hEvent=0x150) returned 1
	[0299.451] SetEvent (hEvent=0x1f0) returned 1
	[0299.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474)) returned 1
	[0299.471] SetEvent (hEvent=0x150) returned 1
	[0299.472] SetEvent (hEvent=0x210) returned 1
	[0299.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488)) returned 1
	[0299.491] SetEvent (hEvent=0x150) returned 1
	[0299.491] SetEvent (hEvent=0x248) returned 1
	[0299.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc)) returned 1
	[0299.513] SetEvent (hEvent=0x26c) returned 1
	[0299.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46)) returned 1
	[0299.533] SetEvent (hEvent=0x150) returned 1
	[0299.533] SetEvent (hEvent=0x218) returned 1
	[0299.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1
	[0299.607] SetEvent (hEvent=0x150) returned 1
	[0299.607] SetEvent (hEvent=0x1f0) returned 1
	[0299.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a)) returned 1
	[0299.657] SetEvent (hEvent=0x150) returned 1
	[0299.657] SetEvent (hEvent=0x210) returned 1
	[0299.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1
	[0299.720] SetEvent (hEvent=0x150) returned 1
	[0299.720] SetEvent (hEvent=0x248) returned 1
	[0299.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a)) returned 1
	[0299.738] SetEvent (hEvent=0x26c) returned 1
	[0299.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8)) returned 1
	[0299.755] SetEvent (hEvent=0x218) returned 1
	[0299.755] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6)) returned 1
	[0299.772] SetEvent (hEvent=0x1f0) returned 1
	[0299.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9)) returned 1
	[0299.794] SetEvent (hEvent=0x210) returned 1
	[0299.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6)) returned 1
	[0299.817] SetEvent (hEvent=0x150) returned 1
	[0299.817] SetEvent (hEvent=0x248) returned 1
	[0299.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c)) returned 1
	[0299.836] SetEvent (hEvent=0x150) returned 1
	[0299.836] SetEvent (hEvent=0x26c) returned 1
	[0299.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa)) returned 1
	[0299.851] SetEvent (hEvent=0x118) returned 1
	[0299.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066)) returned 1
	[0299.877] SetEvent (hEvent=0x150) returned 1
	[0299.877] SetEvent (hEvent=0x1f0) returned 1
	[0299.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a)) returned 1
	[0299.897] SetEvent (hEvent=0x210) returned 1
	[0299.897] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2)) returned 1
	[0299.919] SetEvent (hEvent=0x150) returned 1
	[0299.919] SetEvent (hEvent=0x248) returned 1
	[0299.919] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086)) returned 1
	[0299.972] SetEvent (hEvent=0x26c) returned 1
	[0299.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a)) returned 1
	[0299.991] SetEvent (hEvent=0x150) returned 1
	[0299.991] SetEvent (hEvent=0x218) returned 1
	[0299.992] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c)) returned 1
	[0300.015] SetEvent (hEvent=0x150) returned 1
	[0300.015] SetEvent (hEvent=0x1f0) returned 1
	[0300.015] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6)) returned 1
	[0300.038] SetEvent (hEvent=0x150) returned 1
	[0300.038] SetEvent (hEvent=0x210) returned 1
	[0300.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8)) returned 1
	[0300.057] SetEvent (hEvent=0x248) returned 1
	[0300.057] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c)) returned 1
	[0300.067] SetEvent (hEvent=0x234) returned 1
	[0300.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e)) returned 1
	[0300.076] SetEvent (hEvent=0x118) returned 1
	[0300.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6)) returned 1
	[0300.087] SetEvent (hEvent=0x1b0) returned 1
	[0300.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40)) returned 1
	[0300.097] SetEvent (hEvent=0x1e8) returned 1
	[0300.097] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4)) returned 1
	[0300.107] SetEvent (hEvent=0x124) returned 1
	[0300.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0)) returned 1
	[0300.118] SetEvent (hEvent=0x24c) returned 1
	[0300.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700)) returned 1
	[0300.128] SetEvent (hEvent=0x284) returned 1
	[0300.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2)) returned 1
	[0300.145] SetEvent (hEvent=0x22c) returned 1
	[0300.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be)) returned 1
	[0300.156] SetEvent (hEvent=0x12c) returned 1
	[0300.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0)) returned 1
	[0300.168] SetEvent (hEvent=0x25c) returned 1
	[0300.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334)) returned 1
	[0300.181] SetEvent (hEvent=0x1e0) returned 1
	[0300.181] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c)) returned 1
	[0300.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8)) returned 1
	[0300.203] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284)) returned 1
	[0300.214] SetEvent (hEvent=0x23c) returned 1
	[0300.214] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1
	[0300.229] SetEvent (hEvent=0x160) returned 1
	[0300.229] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294)) returned 1
	[0300.238] SetEvent (hEvent=0x174) returned 1
	[0300.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464)) returned 1
	[0300.248] SetEvent (hEvent=0x164) returned 1
	[0300.248] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424)) returned 1
	[0300.259] SetEvent (hEvent=0x1bc) returned 1
	[0300.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314)) returned 1
	[0300.269] SetEvent (hEvent=0x1c4) returned 1
	[0300.269] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418)) returned 1
	[0300.278] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0300.321] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0300.401] SwitchToThread () returned 1
	[0300.419] SetEvent (hEvent=0x210) returned 1
	[0300.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf")) returned 0x220
	[0300.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF", dwFileAttributes=0x220) returned 1
	[0300.420] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0300.423] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0300.423] ReadFile (in: hFile=0x1d0, lpBuffer=0x11cce000, nNumberOfBytesToRead=0x1998, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11cce000*, lpNumberOfBytesRead=0x1131ae18*=0x1998, lpOverlapped=0x0) returned 1
	[0300.996] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0301.014] SetEvent (hEvent=0x218) returned 1
	[0301.014] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0308.744] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0308.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid")) returned 0x220
	[0308.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID", dwFileAttributes=0x220) returned 1
	[0308.749] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254
	[0308.790] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x110a9e08 | out: lpMode=0x110a9e08) returned 0
	[0308.790] ReadFile (in: hFile=0x254, lpBuffer=0x1110c800, nNumberOfBytesToRead=0x17b6, lpNumberOfBytesRead=0x110a9e18, lpOverlapped=0x0 | out: lpBuffer=0x1110c800*, lpNumberOfBytesRead=0x110a9e18*=0x17b6, lpOverlapped=0x0) returned 1
	[0308.878] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0309.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126820 | out: pbBuffer=0x11126820) returned 1
	[0309.096] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0309.256] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1133245e | out: pbBuffer=0x1133245e) returned 1
	[0309.256] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11467402 | out: pbBuffer=0x11467402) returned 1
	[0309.256] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1146740d | out: pbBuffer=0x1146740d) returned 1
	[0309.256] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114674e0 | out: pbBuffer=0x114674e0) returned 1
	[0309.257] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332480 | out: pbBuffer=0x11332480) returned 1
	[0309.257] GetFileType (hFile=0x254) returned 0x1
	[0309.257] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.257] WriteFile (in: hFile=0x254, lpBuffer=0x11322000*, nNumberOfBytesToWrite=0x17b6, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11322000*, lpNumberOfBytesWritten=0x1133ddfc*=0x17b6, lpOverlapped=0x1133de08) returned 1
	[0309.258] GetFileType (hFile=0x254) returned 0x1
	[0309.258] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x17b6, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.258] GetFileType (hFile=0x254) returned 0x1
	[0309.258] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.258] WriteFile (in: hFile=0x254, lpBuffer=0x111d2e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111d2e00*, lpNumberOfBytesWritten=0x1133ddfc*=0x233, lpOverlapped=0x1133de08) returned 1
	[0309.258] GetFileType (hFile=0x254) returned 0x1
	[0309.259] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x17b6, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.259] CloseHandle (hObject=0x254) returned 1
	[0309.274] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0309.278] SetEvent (hEvent=0x26c) returned 1
	[0309.278] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0313.719] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0313.722] SetEvent (hEvent=0x26c) returned 1
	[0313.722] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0313.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp")) returned 0x220
	[0313.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP", dwFileAttributes=0x220) returned 1
	[0313.724] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.890] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0314.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0314.201] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0314.354] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0314.355] ReadFile (in: hFile=0x290, lpBuffer=0x1130a000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1130a000*, lpNumberOfBytesRead=0x1128ae18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0314.379] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0314.379] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0314.379] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11172802 | out: pbBuffer=0x11172802) returned 1
	[0314.380] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11172861 | out: pbBuffer=0x11172861) returned 1
	[0314.380] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0314.381] GetFileType (hFile=0x290) returned 0x1
	[0314.381] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11147de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.381] WriteFile (in: hFile=0x290, lpBuffer=0x11206000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x11147dfc, lpOverlapped=0x11147e08 | out: lpBuffer=0x11206000*, lpNumberOfBytesWritten=0x11147dfc*=0x7ce0, lpOverlapped=0x11147e08) returned 1
	[0314.412] GetFileType (hFile=0x290) returned 0x1
	[0314.412] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x11147de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.412] GetFileType (hFile=0x290) returned 0x1
	[0314.412] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11147de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.413] WriteFile (in: hFile=0x290, lpBuffer=0x112e8a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11147dfc, lpOverlapped=0x11147e08 | out: lpBuffer=0x112e8a80*, lpNumberOfBytesWritten=0x11147dfc*=0x230, lpOverlapped=0x11147e08) returned 1
	[0314.424] GetFileType (hFile=0x290) returned 0x1
	[0314.424] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x11147de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.424] CloseHandle (hObject=0x290) returned 1
	[0314.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp.tl30z")) returned 0x220
	[0314.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.433] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0314.439] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0314.503] SetEvent (hEvent=0x24c) returned 1
	[0314.503] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0314.507] SetEvent (hEvent=0x218) returned 1
	[0314.507] SetEvent (hEvent=0x1e8) returned 1
	[0314.507] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0314.511] SetEvent (hEvent=0x218) returned 1
	[0314.511] SetEvent (hEvent=0x234) returned 1
	[0314.512] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x0
	[0314.514] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x0
	[0314.517] SetEvent (hEvent=0x218) returned 1
	[0314.518] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x0
	[0314.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp")) returned 0x220
	[0314.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP", dwFileAttributes=0x220) returned 1
	[0314.525] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0314.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0314.743] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0314.743] ReadFile (in: hFile=0x1b4, lpBuffer=0x11128000, nNumberOfBytesToRead=0x48fc, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11128000*, lpNumberOfBytesRead=0x1128ae18*=0x48fc, lpOverlapped=0x0) returned 1
	[0314.764] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263f0 | out: pbBuffer=0x111263f0) returned 1
	[0314.764] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11151e02 | out: pbBuffer=0x11151e02) returned 1
	[0314.764] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11151e19 | out: pbBuffer=0x11151e19) returned 1
	[0314.765] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126420 | out: pbBuffer=0x11126420) returned 1
	[0314.766] GetFileType (hFile=0x1b4) returned 0x1
	[0314.766] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.766] WriteFile (in: hFile=0x1b4, lpBuffer=0x112b4000*, nNumberOfBytesToWrite=0x48fc, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112b4000*, lpNumberOfBytesWritten=0x1102bdfc*=0x48fc, lpOverlapped=0x1102be08) returned 1
	[0314.766] GetFileType (hFile=0x1b4) returned 0x1
	[0314.767] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x48fc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.767] GetFileType (hFile=0x1b4) returned 0x1
	[0314.767] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.767] WriteFile (in: hFile=0x1b4, lpBuffer=0x113a2a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113a2a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0314.767] GetFileType (hFile=0x1b4) returned 0x1
	[0314.767] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x48fc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.768] CloseHandle (hObject=0x1b4) returned 1
	[0314.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp.tl30z")) returned 0x220
	[0314.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp")) returned 0x220
	[0314.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP", dwFileAttributes=0x220) returned 1
	[0314.776] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0314.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0314.845] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0314.855] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0314.855] ReadFile (in: hFile=0x1c8, lpBuffer=0x1116e000, nNumberOfBytesToRead=0x8118, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1116e000*, lpNumberOfBytesRead=0x1128be18*=0x8118, lpOverlapped=0x0) returned 1
	[0314.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332200 | out: pbBuffer=0x11332200) returned 1
	[0314.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b6802 | out: pbBuffer=0x111b6802) returned 1
	[0314.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b6813 | out: pbBuffer=0x111b6813) returned 1
	[0314.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b68bd | out: pbBuffer=0x111b68bd) returned 1
	[0314.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332230 | out: pbBuffer=0x11332230) returned 1
	[0314.904] GetFileType (hFile=0x1c8) returned 0x1
	[0314.904] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.904] WriteFile (in: hFile=0x1c8, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0x8118, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x1133fdfc*=0x8118, lpOverlapped=0x1133fe08) returned 1
	[0314.905] GetFileType (hFile=0x1c8) returned 0x1
	[0314.905] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8118, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.906] GetFileType (hFile=0x1c8) returned 0x1
	[0314.906] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.906] WriteFile (in: hFile=0x1c8, lpBuffer=0x11c34a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11c34a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0314.906] GetFileType (hFile=0x1c8) returned 0x1
	[0314.906] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8118, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.906] CloseHandle (hObject=0x1c8) returned 1
	[0314.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp.tl30z")) returned 0x220
	[0314.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.919] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0314.977] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0315.041] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0315.060] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0315.077] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0315.099] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0315.158] SetEvent (hEvent=0x218) returned 1
	[0315.158] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0315.163] SetEvent (hEvent=0x160) returned 1
	[0315.164] SetEvent (hEvent=0x1e8) returned 1
	[0315.164] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x102
	[0315.167] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0315.167] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x0
	[0315.172] SetEvent (hEvent=0x1e8) returned 1
	[0315.172] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0x1) returned 0x0
	[0315.201] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0315.863] SetEvent (hEvent=0x1e8) returned 1
	[0315.863] SetEvent (hEvent=0x160) returned 1
	[0315.863] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0316.196] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0316.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp")) returned 0x220
	[0316.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP", dwFileAttributes=0x220) returned 1
	[0316.223] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0316.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0316.501] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0316.502] ReadFile (in: hFile=0x184, lpBuffer=0x112c8000, nNumberOfBytesToRead=0x3c76, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x112c8000*, lpNumberOfBytesRead=0x1128ae18*=0x3c76, lpOverlapped=0x0) returned 1
	[0316.513] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0316.513] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6268 | out: pbBuffer=0x113e6268) returned 1
	[0316.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137d202 | out: pbBuffer=0x1137d202) returned 1
	[0316.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137d290 | out: pbBuffer=0x1137d290) returned 1
	[0316.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0316.515] GetFileType (hFile=0x184) returned 0x1
	[0316.515] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.515] WriteFile (in: hFile=0x184, lpBuffer=0x11bca000*, nNumberOfBytesToWrite=0x3c76, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11bca000*, lpNumberOfBytesWritten=0x1102ddfc*=0x3c76, lpOverlapped=0x1102de08) returned 1
	[0316.515] GetFileType (hFile=0x184) returned 0x1
	[0316.516] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x3c76, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.516] GetFileType (hFile=0x184) returned 0x1
	[0316.516] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.516] WriteFile (in: hFile=0x184, lpBuffer=0x113b0700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x113b0700*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0316.516] GetFileType (hFile=0x184) returned 0x1
	[0316.517] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x3c76, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.517] CloseHandle (hObject=0x184) returned 1
	[0316.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp.tl30z")) returned 0x220
	[0316.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0316.522] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0316.526] SetEvent (hEvent=0x1e8) returned 1
	[0316.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg")) returned 0x220
	[0316.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG", dwFileAttributes=0x220) returned 1
	[0316.526] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg.tl30z"), dwFlags=0x1) returned 1
	[0316.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0316.626] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0316.626] ReadFile (in: hFile=0x21c, lpBuffer=0x11110000, nNumberOfBytesToRead=0xa343, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11110000*, lpNumberOfBytesRead=0x1128ae18*=0xa343, lpOverlapped=0x0) returned 1
	[0316.667] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f540 | out: pbBuffer=0x1140f540) returned 1
	[0316.667] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f538 | out: pbBuffer=0x1140f538) returned 1
	[0316.667] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11120702 | out: pbBuffer=0x11120702) returned 1
	[0316.667] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11120780 | out: pbBuffer=0x11120780) returned 1
	[0316.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0316.669] GetFileType (hFile=0x21c) returned 0x1
	[0316.669] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.669] WriteFile (in: hFile=0x21c, lpBuffer=0x11098000*, nNumberOfBytesToWrite=0xa343, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11098000*, lpNumberOfBytesWritten=0x112bddfc*=0xa343, lpOverlapped=0x112bde08) returned 1
	[0316.675] GetFileType (hFile=0x21c) returned 0x1
	[0316.675] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xa343, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.675] GetFileType (hFile=0x21c) returned 0x1
	[0316.675] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.675] WriteFile (in: hFile=0x21c, lpBuffer=0x11124a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11124a80*, lpNumberOfBytesWritten=0x112bddfc*=0x230, lpOverlapped=0x112bde08) returned 1
	[0316.675] GetFileType (hFile=0x21c) returned 0x1
	[0316.676] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xa343, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.676] CloseHandle (hObject=0x21c) returned 1
	[0316.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg.tl30z")) returned 0x220
	[0316.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0316.699] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0316.811] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0316.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf")) returned 0x220
	[0316.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF", dwFileAttributes=0x220) returned 1
	[0316.817] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0317.147] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0317.147] ReadFile (in: hFile=0x21c, lpBuffer=0x11466000, nNumberOfBytesToRead=0x3d6, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11466000*, lpNumberOfBytesRead=0x1128ae18*=0x3d6, lpOverlapped=0x0) returned 1
	[0317.174] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126100 | out: pbBuffer=0x11126100) returned 1
	[0317.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111260f8 | out: pbBuffer=0x111260f8) returned 1
	[0317.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113d6802 | out: pbBuffer=0x113d6802) returned 1
	[0317.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113d6840 | out: pbBuffer=0x113d6840) returned 1
	[0317.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126130 | out: pbBuffer=0x11126130) returned 1
	[0317.175] GetFileType (hFile=0x21c) returned 0x1
	[0317.175] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.176] WriteFile (in: hFile=0x21c, lpBuffer=0x112a8000*, nNumberOfBytesToWrite=0x3d6, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112a8000*, lpNumberOfBytesWritten=0x1133bdfc*=0x3d6, lpOverlapped=0x1133be08) returned 1
	[0317.176] GetFileType (hFile=0x21c) returned 0x1
	[0317.176] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x3d6, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.176] GetFileType (hFile=0x21c) returned 0x1
	[0317.176] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.176] WriteFile (in: hFile=0x21c, lpBuffer=0x11294a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11294a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0317.177] GetFileType (hFile=0x21c) returned 0x1
	[0317.177] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x3d6, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.177] CloseHandle (hObject=0x21c) returned 1
	[0317.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf.tl30z")) returned 0x220
	[0317.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.181] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0317.182] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0317.188] SetEvent (hEvent=0x1e0) returned 1
	[0317.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid")) returned 0x220
	[0317.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID", dwFileAttributes=0x220) returned 1
	[0317.189] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0317.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0317.260] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0317.260] ReadFile (in: hFile=0x1b4, lpBuffer=0x111e4000, nNumberOfBytesToRead=0x175f, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x111e4000*, lpNumberOfBytesRead=0x11288e18*=0x175f, lpOverlapped=0x0) returned 1
	[0317.395] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263f0 | out: pbBuffer=0x111263f0) returned 1
	[0317.395] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111263e8 | out: pbBuffer=0x111263e8) returned 1
	[0317.395] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113d7e02 | out: pbBuffer=0x113d7e02) returned 1
	[0317.429] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126420 | out: pbBuffer=0x11126420) returned 1
	[0317.429] GetFileType (hFile=0x1b4) returned 0x1
	[0317.429] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.431] WriteFile (in: hFile=0x1b4, lpBuffer=0x11452000*, nNumberOfBytesToWrite=0x175f, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11452000*, lpNumberOfBytesWritten=0x1133bdfc*=0x175f, lpOverlapped=0x1133be08) returned 1
	[0317.431] GetFileType (hFile=0x1b4) returned 0x1
	[0317.431] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x175f, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.431] GetFileType (hFile=0x1b4) returned 0x1
	[0317.431] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.432] WriteFile (in: hFile=0x1b4, lpBuffer=0x11440700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11440700*, lpNumberOfBytesWritten=0x1133bdfc*=0x236, lpOverlapped=0x1133be08) returned 1
	[0317.432] GetFileType (hFile=0x1b4) returned 0x1
	[0317.432] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x175f, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.432] CloseHandle (hObject=0x1b4) returned 1
	[0317.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid.tl30z")) returned 0x220
	[0317.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0317.446] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0317.454] SetEvent (hEvent=0x1c4) returned 1
	[0317.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf")) returned 0x220
	[0317.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF", dwFileAttributes=0x220) returned 1
	[0317.456] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.559] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0317.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0317.563] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0317.563] ReadFile (in: hFile=0x1b4, lpBuffer=0x11234000, nNumberOfBytesToRead=0xf5c, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11234000*, lpNumberOfBytesRead=0x11288e18*=0xf5c, lpOverlapped=0x0) returned 1
	[0317.678] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6e0 | out: pbBuffer=0x1140f6e0) returned 1
	[0317.678] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e1302 | out: pbBuffer=0x110e1302) returned 1
	[0317.678] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f720 | out: pbBuffer=0x1140f720) returned 1
	[0317.679] GetFileType (hFile=0x1b4) returned 0x1
	[0317.679] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.679] WriteFile (in: hFile=0x1b4, lpBuffer=0x11c4a000*, nNumberOfBytesToWrite=0xf5c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c4a000*, lpNumberOfBytesWritten=0x11031dfc*=0xf5c, lpOverlapped=0x11031e08) returned 1
	[0317.680] GetFileType (hFile=0x1b4) returned 0x1
	[0317.680] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xf5c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.680] GetFileType (hFile=0x1b4) returned 0x1
	[0317.680] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.682] WriteFile (in: hFile=0x1b4, lpBuffer=0x11c3aa80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c3aa80*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0317.682] GetFileType (hFile=0x1b4) returned 0x1
	[0317.682] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xf5c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.683] CloseHandle (hObject=0x1b4) returned 1
	[0317.696] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0317.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf.tl30z")) returned 0x220
	[0317.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0317.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e1d02 | out: pbBuffer=0x110e1d02) returned 1
	[0317.709] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0317.709] GetFileType (hFile=0x254) returned 0x1
	[0317.710] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.711] WriteFile (in: hFile=0x254, lpBuffer=0x110c2000*, nNumberOfBytesToWrite=0x20e0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110c2000*, lpNumberOfBytesWritten=0x11031dfc*=0x20e0, lpOverlapped=0x11031e08) returned 1
	[0317.711] GetFileType (hFile=0x254) returned 0x1
	[0317.711] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x20e0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.711] GetFileType (hFile=0x254) returned 0x1
	[0317.711] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.711] WriteFile (in: hFile=0x254, lpBuffer=0x110f0700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110f0700*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0317.712] GetFileType (hFile=0x254) returned 0x1
	[0317.712] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x20e0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.712] CloseHandle (hObject=0x254) returned 1
	[0317.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf.tl30z")) returned 0x220
	[0317.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f540 | out: pbBuffer=0x1140f540) returned 1
	[0317.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f538 | out: pbBuffer=0x1140f538) returned 1
	[0317.750] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11321202 | out: pbBuffer=0x11321202) returned 1
	[0317.750] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0317.750] GetFileType (hFile=0x2a0) returned 0x1
	[0317.750] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.750] WriteFile (in: hFile=0x2a0, lpBuffer=0x11063000*, nNumberOfBytesToWrite=0x60c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11063000*, lpNumberOfBytesWritten=0x11031dfc*=0x60c, lpOverlapped=0x11031e08) returned 1
	[0317.751] GetFileType (hFile=0x2a0) returned 0x1
	[0317.751] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x60c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.751] GetFileType (hFile=0x2a0) returned 0x1
	[0317.751] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.751] WriteFile (in: hFile=0x2a0, lpBuffer=0x1132b500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1132b500*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0317.752] GetFileType (hFile=0x2a0) returned 0x1
	[0317.752] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x60c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.752] CloseHandle (hObject=0x2a0) returned 1
	[0317.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf.tl30z")) returned 0x220
	[0317.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.769] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0317.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf")) returned 0x220
	[0317.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF", dwFileAttributes=0x220) returned 1
	[0317.811] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0317.912] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0317.912] ReadFile (in: hFile=0x1d4, lpBuffer=0x113b0000, nNumberOfBytesToRead=0x35b2, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113b0000*, lpNumberOfBytesRead=0x11428e18*=0x35b2, lpOverlapped=0x0) returned 1
	[0317.921] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126260 | out: pbBuffer=0x11126260) returned 1
	[0317.921] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126258 | out: pbBuffer=0x11126258) returned 1
	[0317.921] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11321202 | out: pbBuffer=0x11321202) returned 1
	[0317.922] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126290 | out: pbBuffer=0x11126290) returned 1
	[0317.922] GetFileType (hFile=0x1d4) returned 0x1
	[0317.922] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.923] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ac000*, nNumberOfBytesToWrite=0x35b2, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x112ac000*, lpNumberOfBytesWritten=0x11371dfc*=0x35b2, lpOverlapped=0x11371e08) returned 1
	[0317.923] GetFileType (hFile=0x1d4) returned 0x1
	[0317.923] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x35b2, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.923] GetFileType (hFile=0x1d4) returned 0x1
	[0317.923] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.924] WriteFile (in: hFile=0x1d4, lpBuffer=0x11106700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x11106700*, lpNumberOfBytesWritten=0x11371dfc*=0x230, lpOverlapped=0x11371e08) returned 1
	[0317.924] GetFileType (hFile=0x1d4) returned 0x1
	[0317.924] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x35b2, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.924] CloseHandle (hObject=0x1d4) returned 1
	[0317.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf.tl30z")) returned 0x220
	[0317.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.935] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0317.966] SetEvent (hEvent=0x2a8) returned 1
	[0317.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf")) returned 0x220
	[0317.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF", dwFileAttributes=0x220) returned 1
	[0317.966] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0318.115] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0318.115] ReadFile (in: hFile=0x224, lpBuffer=0x1129c000, nNumberOfBytesToRead=0x2090, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1129c000*, lpNumberOfBytesRead=0x11428e18*=0x2090, lpOverlapped=0x0) returned 1
	[0318.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0318.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119d302 | out: pbBuffer=0x1119d302) returned 1
	[0318.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119d306 | out: pbBuffer=0x1119d306) returned 1
	[0318.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0318.249] GetFileType (hFile=0x224) returned 0x1
	[0318.249] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.250] WriteFile (in: hFile=0x224, lpBuffer=0x112c8000*, nNumberOfBytesToWrite=0x2090, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112c8000*, lpNumberOfBytesWritten=0x1133ddfc*=0x2090, lpOverlapped=0x1133de08) returned 1
	[0318.250] GetFileType (hFile=0x224) returned 0x1
	[0318.250] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2090, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.250] GetFileType (hFile=0x224) returned 0x1
	[0318.250] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.250] WriteFile (in: hFile=0x224, lpBuffer=0x111b1880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111b1880*, lpNumberOfBytesWritten=0x1133ddfc*=0x221, lpOverlapped=0x1133de08) returned 1
	[0318.251] GetFileType (hFile=0x224) returned 0x1
	[0318.251] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2090, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.254] CloseHandle (hObject=0x224) returned 1
	[0318.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf.tl30z")) returned 0x220
	[0318.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf")) returned 0x220
	[0318.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF", dwFileAttributes=0x220) returned 1
	[0318.319] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0318.546] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0318.546] ReadFile (in: hFile=0x1d4, lpBuffer=0x1117ea80, nNumberOfBytesToRead=0x2926, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1117ea80*, lpNumberOfBytesRead=0x11428e18*=0x2926, lpOverlapped=0x0) returned 1
	[0318.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126100 | out: pbBuffer=0x11126100) returned 1
	[0318.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111260f8 | out: pbBuffer=0x111260f8) returned 1
	[0318.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141a802 | out: pbBuffer=0x1141a802) returned 1
	[0318.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1141a812 | out: pbBuffer=0x1141a812) returned 1
	[0318.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126130 | out: pbBuffer=0x11126130) returned 1
	[0318.576] GetFileType (hFile=0x1d4) returned 0x1
	[0318.577] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.577] WriteFile (in: hFile=0x1d4, lpBuffer=0x11168000*, nNumberOfBytesToWrite=0x2926, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11168000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2926, lpOverlapped=0x1102be08) returned 1
	[0318.577] GetFileType (hFile=0x1d4) returned 0x1
	[0318.577] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2926, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.577] GetFileType (hFile=0x1d4) returned 0x1
	[0318.577] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.578] WriteFile (in: hFile=0x1d4, lpBuffer=0x111f4a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111f4a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0318.578] GetFileType (hFile=0x1d4) returned 0x1
	[0318.578] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2926, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.578] CloseHandle (hObject=0x1d4) returned 1
	[0318.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf.tl30z")) returned 0x220
	[0318.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.608] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0318.610] SetEvent (hEvent=0x25c) returned 1
	[0318.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf")) returned 0x220
	[0318.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF", dwFileAttributes=0x220) returned 1
	[0318.611] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0318.750] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0318.751] ReadFile (in: hFile=0x2a0, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x3642, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x11428e18*=0x3642, lpOverlapped=0x0) returned 1
	[0318.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332230 | out: pbBuffer=0x11332230) returned 1
	[0318.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1132a802 | out: pbBuffer=0x1132a802) returned 1
	[0318.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132a83b | out: pbBuffer=0x1132a83b) returned 1
	[0318.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132a887 | out: pbBuffer=0x1132a887) returned 1
	[0318.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132a89a | out: pbBuffer=0x1132a89a) returned 1
	[0318.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132a8b7 | out: pbBuffer=0x1132a8b7) returned 1
	[0318.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332260 | out: pbBuffer=0x11332260) returned 1
	[0318.782] GetFileType (hFile=0x2a0) returned 0x1
	[0318.782] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.782] WriteFile (in: hFile=0x2a0, lpBuffer=0x111b4000*, nNumberOfBytesToWrite=0x3642, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x111b4000*, lpNumberOfBytesWritten=0x11371dfc*=0x3642, lpOverlapped=0x11371e08) returned 1
	[0318.783] GetFileType (hFile=0x2a0) returned 0x1
	[0318.783] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x3642, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.783] GetFileType (hFile=0x2a0) returned 0x1
	[0318.783] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.783] WriteFile (in: hFile=0x2a0, lpBuffer=0x11460a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x11460a80*, lpNumberOfBytesWritten=0x11371dfc*=0x22a, lpOverlapped=0x11371e08) returned 1
	[0318.783] GetFileType (hFile=0x2a0) returned 0x1
	[0318.783] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x3642, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.784] CloseHandle (hObject=0x2a0) returned 1
	[0318.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf.tl30z")) returned 0x220
	[0318.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.812] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0318.881] SetEvent (hEvent=0x25c) returned 1
	[0318.881] SetEvent (hEvent=0x1e8) returned 1
	[0318.881] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0319.124] SetEvent (hEvent=0x164) returned 1
	[0319.124] SetEvent (hEvent=0x25c) returned 1
	[0319.124] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0320.227] SetEvent (hEvent=0x164) returned 1
	[0320.227] SetEvent (hEvent=0x25c) returned 1
	[0320.227] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0320.529] SetEvent (hEvent=0x284) returned 1
	[0320.529] SetEvent (hEvent=0x164) returned 1
	[0320.529] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0320.983] SetEvent (hEvent=0x1e8) returned 1
	[0320.983] SetEvent (hEvent=0x27c) returned 1
	[0320.983] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) returned 0x0
	[0321.417] SetEvent (hEvent=0x27c) returned 1
	[0321.417] SetEvent (hEvent=0x1e8) returned 1
	[0321.417] WaitForSingleObject (hHandle=0x134, dwMilliseconds=0xffffffff) 

Thread:
	id = 18
	os_tid = 0x324

	[0118.688] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x319bff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x319bff30*=0x168) returned 1
	[0118.688] VirtualQuery (in: lpAddress=0x319bff40, lpBuffer=0x319bff40, dwLength=0x1c | out: lpBuffer=0x319bff40*(BaseAddress=0x319bf000, AllocationBase=0x318c0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0118.688] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x160
	[0118.689] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0118.941] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0120.057] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0121.490] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0122.179] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0126.943] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0127.623] SwitchToThread () returned 1
	[0127.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11036380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164
	[0127.883] CloseHandle (hObject=0x164) returned 1
	[0127.884] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113562f0 | out: pbBuffer=0x113562f0) returned 1
	[0127.885] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1135632a | out: pbBuffer=0x1135632a) returned 1
	[0127.885] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11399102 | out: pbBuffer=0x11399102) returned 1
	[0127.886] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11356340 | out: pbBuffer=0x11356340) returned 1
	[0127.888] GetFileType (hFile=0x184) returned 0x1
	[0127.888] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0127.889] WriteFile (in: hFile=0x184, lpBuffer=0x111b0000*, nNumberOfBytesToWrite=0x1774, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111b0000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1774, lpOverlapped=0x1133fe08) returned 1
	[0127.889] GetFileType (hFile=0x184) returned 0x1
	[0127.890] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x1774, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0127.890] GetFileType (hFile=0x184) returned 0x1
	[0127.890] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0127.890] WriteFile (in: hFile=0x184, lpBuffer=0x113c3180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113c3180*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0127.890] GetFileType (hFile=0x184) returned 0x1
	[0127.891] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x1774, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0127.891] CloseHandle (hObject=0x184) returned 1
	[0127.893] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.tl30z" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.tl30z")) returned 0x20
	[0127.893] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.tl30z", dwFileAttributes=0x21) returned 1
	[0127.895] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0x20
	[0127.895] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd", dwFileAttributes=0x20) returned 1
	[0127.896] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.tl30z" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.tl30z"), dwFlags=0x1) returned 1
	[0134.525] SetEvent (hEvent=0x150) returned 1
	[0134.526] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.tl30z" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0134.685] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0134.685] ReadFile (in: hFile=0x184, lpBuffer=0x111e8000, nNumberOfBytesToRead=0x133, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x111e8000*, lpNumberOfBytesRead=0x11425e18*=0x133, lpOverlapped=0x0) returned 1
	[0134.695] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11356490 | out: pbBuffer=0x11356490) returned 1
	[0134.696] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11399c02 | out: pbBuffer=0x11399c02) returned 1
	[0134.697] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11399c2b | out: pbBuffer=0x11399c2b) returned 1
	[0134.697] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113564c0 | out: pbBuffer=0x113564c0) returned 1
	[0134.698] GetFileType (hFile=0x184) returned 0x1
	[0134.698] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0134.698] WriteFile (in: hFile=0x184, lpBuffer=0x113b7800*, nNumberOfBytesToWrite=0x133, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113b7800*, lpNumberOfBytesWritten=0x1133fdfc*=0x133, lpOverlapped=0x1133fe08) returned 1
	[0134.699] GetFileType (hFile=0x184) returned 0x1
	[0134.699] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x133, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0134.699] GetFileType (hFile=0x184) returned 0x1
	[0134.699] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0134.699] WriteFile (in: hFile=0x184, lpBuffer=0x111fc000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111fc000*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0134.755] GetFileType (hFile=0x184) returned 0x1
	[0134.755] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x133, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0134.755] CloseHandle (hObject=0x184) returned 1
	[0134.980] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.tl30z" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.tl30z")) returned 0x20
	[0134.980] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.tl30z", dwFileAttributes=0x21) returned 1
	[0134.981] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0135.981] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0136.118] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80
	[0136.118] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0136.119] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0138.644] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0138.645] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11424e08 | out: lpMode=0x11424e08) returned 0
	[0138.646] ReadFile (in: hFile=0x184, lpBuffer=0x11272000, nNumberOfBytesToRead=0x1d8f, lpNumberOfBytesRead=0x11424e18, lpOverlapped=0x0 | out: lpBuffer=0x11272000*, lpNumberOfBytesRead=0x11424e18*=0x1d8f, lpOverlapped=0x0) returned 1
	[0138.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11356600 | out: pbBuffer=0x11356600) returned 1
	[0138.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113565f8 | out: pbBuffer=0x113565f8) returned 1
	[0138.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11278702 | out: pbBuffer=0x11278702) returned 1
	[0138.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11278747 | out: pbBuffer=0x11278747) returned 1
	[0138.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11278797 | out: pbBuffer=0x11278797) returned 1
	[0138.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11356630 | out: pbBuffer=0x11356630) returned 1
	[0138.796] GetFileType (hFile=0x184) returned 0x1
	[0138.796] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0138.796] WriteFile (in: hFile=0x184, lpBuffer=0x11292000*, nNumberOfBytesToWrite=0x1d8f, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11292000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1d8f, lpOverlapped=0x1133fe08) returned 1
	[0138.797] GetFileType (hFile=0x184) returned 0x1
	[0138.797] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x1d8f, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0138.797] GetFileType (hFile=0x184) returned 0x1
	[0138.797] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0138.797] WriteFile (in: hFile=0x184, lpBuffer=0x111fce00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111fce00*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0138.798] GetFileType (hFile=0x184) returned 0x1
	[0138.798] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x1d8f, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0138.798] CloseHandle (hObject=0x184) returned 1
	[0138.800] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.tl30z")) returned 0x20
	[0138.800] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0138.800] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0138.889] SetEvent (hEvent=0x164) returned 1
	[0138.889] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80
	[0138.889] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0138.893] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0140.344] SetEvent (hEvent=0x150) returned 1
	[0140.344] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0140.461] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0140.462] ReadFile (in: hFile=0x184, lpBuffer=0x11296000, nNumberOfBytesToRead=0xed90, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11296000*, lpNumberOfBytesRead=0x11022e18*=0xed90, lpOverlapped=0x0) returned 1
	[0140.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11356780 | out: pbBuffer=0x11356780) returned 1
	[0140.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11279202 | out: pbBuffer=0x11279202) returned 1
	[0140.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11279231 | out: pbBuffer=0x11279231) returned 1
	[0140.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113567b0 | out: pbBuffer=0x113567b0) returned 1
	[0140.593] SetEvent (hEvent=0x118) returned 1
	[0140.599] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0140.669] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0140.669] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0xd60000
	[0140.671] SetEvent (hEvent=0x118) returned 1
	[0140.671] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0140.733] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0140.798] GetFileType (hFile=0x184) returned 0x1
	[0140.799] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0140.799] WriteFile (in: hFile=0x184, lpBuffer=0x113ba000*, nNumberOfBytesToWrite=0xed90, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113ba000*, lpNumberOfBytesWritten=0x1133fdfc*=0xed90, lpOverlapped=0x1133fe08) returned 1
	[0140.800] GetFileType (hFile=0x184) returned 0x1
	[0140.800] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0140.800] GetFileType (hFile=0x184) returned 0x1
	[0140.801] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0140.801] WriteFile (in: hFile=0x184, lpBuffer=0x1132a000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1132a000*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0140.801] GetFileType (hFile=0x184) returned 0x1
	[0140.801] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xed90, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0140.801] CloseHandle (hObject=0x184) returned 1
	[0140.806] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.tl30z")) returned 0x20
	[0140.806] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0140.807] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0140.930] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0141.685] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0142.726] SetEvent (hEvent=0x134) returned 1
	[0142.727] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80
	[0142.727] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0142.727] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0144.498] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0144.780] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x11027e08 | out: lpMode=0x11027e08) returned 0
	[0144.781] ReadFile (in: hFile=0x16c, lpBuffer=0x11096000, nNumberOfBytesToRead=0x797b, lpNumberOfBytesRead=0x11027e18, lpOverlapped=0x0 | out: lpBuffer=0x11096000*, lpNumberOfBytesRead=0x11027e18*=0x797b, lpOverlapped=0x0) returned 1
	[0144.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113642d0 | out: pbBuffer=0x113642d0) returned 1
	[0144.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113642c8 | out: pbBuffer=0x113642c8) returned 1
	[0144.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11457202 | out: pbBuffer=0x11457202) returned 1
	[0144.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1145723b | out: pbBuffer=0x1145723b) returned 1
	[0144.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114572ae | out: pbBuffer=0x114572ae) returned 1
	[0144.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364300 | out: pbBuffer=0x11364300) returned 1
	[0144.977] GetFileType (hFile=0x16c) returned 0x1
	[0144.977] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0144.978] WriteFile (in: hFile=0x16c, lpBuffer=0x112c4000*, nNumberOfBytesToWrite=0x797b, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112c4000*, lpNumberOfBytesWritten=0x1133ddfc*=0x797b, lpOverlapped=0x1133de08) returned 1
	[0144.978] GetFileType (hFile=0x16c) returned 0x1
	[0144.978] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x797b, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0144.979] GetFileType (hFile=0x16c) returned 0x1
	[0144.979] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0144.979] WriteFile (in: hFile=0x16c, lpBuffer=0x11369880*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11369880*, lpNumberOfBytesWritten=0x1133ddfc*=0x239, lpOverlapped=0x1133de08) returned 1
	[0144.980] GetFileType (hFile=0x16c) returned 0x1
	[0144.980] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x797b, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0144.980] CloseHandle (hObject=0x16c) returned 1
	[0144.986] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.tl30z")) returned 0x20
	[0144.987] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0144.987] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80
	[0144.987] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0144.988] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0145.657] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0145.657] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0145.658] ReadFile (in: hFile=0x16c, lpBuffer=0x111e6000, nNumberOfBytesToRead=0x22ac, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x111e6000*, lpNumberOfBytesRead=0x1131ce18*=0x22ac, lpOverlapped=0x0) returned 1
	[0145.706] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364450 | out: pbBuffer=0x11364450) returned 1
	[0145.707] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11457d02 | out: pbBuffer=0x11457d02) returned 1
	[0145.707] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364480 | out: pbBuffer=0x11364480) returned 1
	[0145.708] GetFileType (hFile=0x16c) returned 0x1
	[0145.708] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0145.709] WriteFile (in: hFile=0x16c, lpBuffer=0x11162000*, nNumberOfBytesToWrite=0x22ac, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11162000*, lpNumberOfBytesWritten=0x1133ddfc*=0x22ac, lpOverlapped=0x1133de08) returned 1
	[0145.709] GetFileType (hFile=0x16c) returned 0x1
	[0145.709] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x22ac, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0145.709] GetFileType (hFile=0x16c) returned 0x1
	[0145.709] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0145.710] WriteFile (in: hFile=0x16c, lpBuffer=0x11156700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11156700*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0145.710] GetFileType (hFile=0x16c) returned 0x1
	[0145.710] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x22ac, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0145.710] CloseHandle (hObject=0x16c) returned 1
	[0145.712] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.tl30z")) returned 0x20
	[0145.712] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0145.713] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0146.103] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0146.147] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0146.862] SetEvent (hEvent=0x1b0) returned 1
	[0146.862] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0146.950] SetEvent (hEvent=0x164) returned 1
	[0146.950] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0147.063] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0147.063] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0147.308] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0147.312] SetEvent (hEvent=0x1b0) returned 1
	[0147.312] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0147.384] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0147.385] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80
	[0147.385] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0147.386] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0147.387] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0147.387] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1102de08 | out: lpMode=0x1102de08) returned 0
	[0147.388] ReadFile (in: hFile=0x1c8, lpBuffer=0x1115e000, nNumberOfBytesToRead=0xdc6, lpNumberOfBytesRead=0x1102de18, lpOverlapped=0x0 | out: lpBuffer=0x1115e000*, lpNumberOfBytesRead=0x1102de18*=0xdc6, lpOverlapped=0x0) returned 1
	[0147.469] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332220 | out: pbBuffer=0x11332220) returned 1
	[0147.469] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134e802 | out: pbBuffer=0x1134e802) returned 1
	[0147.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134e84d | out: pbBuffer=0x1134e84d) returned 1
	[0147.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332250 | out: pbBuffer=0x11332250) returned 1
	[0147.471] GetFileType (hFile=0x1c8) returned 0x1
	[0147.471] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0147.471] WriteFile (in: hFile=0x1c8, lpBuffer=0x1131e000*, nNumberOfBytesToWrite=0xdc6, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1131e000*, lpNumberOfBytesWritten=0x1102ddfc*=0xdc6, lpOverlapped=0x1102de08) returned 1
	[0147.472] GetFileType (hFile=0x1c8) returned 0x1
	[0147.472] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xdc6, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0147.472] GetFileType (hFile=0x1c8) returned 0x1
	[0147.472] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0147.472] WriteFile (in: hFile=0x1c8, lpBuffer=0x11418a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11418a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0147.473] GetFileType (hFile=0x1c8) returned 0x1
	[0147.473] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xdc6, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0147.473] CloseHandle (hObject=0x1c8) returned 1
	[0147.475] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.tl30z")) returned 0x20
	[0147.475] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0147.476] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80
	[0147.476] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0147.476] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0147.477] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0147.477] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0147.478] ReadFile (in: hFile=0x1c8, lpBuffer=0x111b4000, nNumberOfBytesToRead=0x709e, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x111b4000*, lpNumberOfBytesRead=0x1131ae18*=0x709e, lpOverlapped=0x0) returned 1
	[0147.611] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0147.611] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332388 | out: pbBuffer=0x11332388) returned 1
	[0147.611] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134f302 | out: pbBuffer=0x1134f302) returned 1
	[0147.611] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134f366 | out: pbBuffer=0x1134f366) returned 1
	[0147.611] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134f370 | out: pbBuffer=0x1134f370) returned 1
	[0147.612] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0147.614] GetFileType (hFile=0x1c8) returned 0x1
	[0147.614] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0147.614] WriteFile (in: hFile=0x1c8, lpBuffer=0x11402000*, nNumberOfBytesToWrite=0x709e, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11402000*, lpNumberOfBytesWritten=0x1102ddfc*=0x709e, lpOverlapped=0x1102de08) returned 1
	[0147.615] GetFileType (hFile=0x1c8) returned 0x1
	[0147.615] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x709e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0147.615] GetFileType (hFile=0x1c8) returned 0x1
	[0147.616] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0147.616] WriteFile (in: hFile=0x1c8, lpBuffer=0x11419880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11419880*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0147.616] GetFileType (hFile=0x1c8) returned 0x1
	[0147.616] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x709e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0147.616] CloseHandle (hObject=0x1c8) returned 1
	[0147.735] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.tl30z")) returned 0x20
	[0147.735] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0147.737] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0147.795] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0147.982] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0149.178] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0149.527] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0149.714] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0150.010] SetEvent (hEvent=0x134) returned 1
	[0150.010] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80
	[0150.011] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0150.012] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0150.732] SetEvent (hEvent=0x150) returned 1
	[0150.732] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0150.761] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11318e08 | out: lpMode=0x11318e08) returned 0
	[0150.761] ReadFile (in: hFile=0x1cc, lpBuffer=0x111eb000, nNumberOfBytesToRead=0xe3b, lpNumberOfBytesRead=0x11318e18, lpOverlapped=0x0 | out: lpBuffer=0x111eb000*, lpNumberOfBytesRead=0x11318e18*=0xe3b, lpOverlapped=0x0) returned 1
	[0150.766] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e410 | out: pbBuffer=0x1142e410) returned 1
	[0150.766] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11175d02 | out: pbBuffer=0x11175d02) returned 1
	[0150.766] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11175d8c | out: pbBuffer=0x11175d8c) returned 1
	[0150.766] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11175dbc | out: pbBuffer=0x11175dbc) returned 1
	[0150.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e440 | out: pbBuffer=0x1142e440) returned 1
	[0150.767] GetFileType (hFile=0x1cc) returned 0x1
	[0150.767] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0150.768] WriteFile (in: hFile=0x1cc, lpBuffer=0x11272000*, nNumberOfBytesToWrite=0xe3b, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11272000*, lpNumberOfBytesWritten=0x1133ddfc*=0xe3b, lpOverlapped=0x1133de08) returned 1
	[0150.768] GetFileType (hFile=0x1cc) returned 0x1
	[0150.768] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xe3b, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0150.768] GetFileType (hFile=0x1cc) returned 0x1
	[0150.768] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0150.769] WriteFile (in: hFile=0x1cc, lpBuffer=0x11264700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11264700*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0150.769] GetFileType (hFile=0x1cc) returned 0x1
	[0150.770] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xe3b, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0150.770] CloseHandle (hObject=0x1cc) returned 1
	[0150.771] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.tl30z")) returned 0x20
	[0150.771] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0150.772] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80
	[0150.772] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0150.772] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0151.150] SetEvent (hEvent=0x150) returned 1
	[0151.151] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0151.323] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11317e08 | out: lpMode=0x11317e08) returned 0
	[0151.323] ReadFile (in: hFile=0x1cc, lpBuffer=0x11108000, nNumberOfBytesToRead=0x6a9a, lpNumberOfBytesRead=0x11317e18, lpOverlapped=0x0 | out: lpBuffer=0x11108000*, lpNumberOfBytesRead=0x11317e18*=0x6a9a, lpOverlapped=0x0) returned 1
	[0151.446] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e5c0 | out: pbBuffer=0x1142e5c0) returned 1
	[0151.446] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e5b8 | out: pbBuffer=0x1142e5b8) returned 1
	[0151.446] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11150702 | out: pbBuffer=0x11150702) returned 1
	[0151.446] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111507a4 | out: pbBuffer=0x111507a4) returned 1
	[0151.446] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111507e5 | out: pbBuffer=0x111507e5) returned 1
	[0151.447] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e5f0 | out: pbBuffer=0x1142e5f0) returned 1
	[0151.449] GetFileType (hFile=0x1cc) returned 0x1
	[0151.449] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0151.449] WriteFile (in: hFile=0x1cc, lpBuffer=0x1144c000*, nNumberOfBytesToWrite=0x6a9a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1144c000*, lpNumberOfBytesWritten=0x1133ddfc*=0x6a9a, lpOverlapped=0x1133de08) returned 1
	[0151.450] GetFileType (hFile=0x1cc) returned 0x1
	[0151.450] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6a9a, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0151.450] GetFileType (hFile=0x1cc) returned 0x1
	[0151.450] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0151.450] WriteFile (in: hFile=0x1cc, lpBuffer=0x11265500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11265500*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0151.451] GetFileType (hFile=0x1cc) returned 0x1
	[0151.451] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6a9a, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0151.451] CloseHandle (hObject=0x1cc) returned 1
	[0151.456] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.tl30z")) returned 0x20
	[0151.456] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0151.456] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0152.327] SetEvent (hEvent=0x118) returned 1
	[0152.327] SetEvent (hEvent=0x1b0) returned 1
	[0152.327] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0155.226] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0155.478] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0155.842] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0156.515] SetEvent (hEvent=0x12c) returned 1
	[0156.515] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80
	[0156.515] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0156.515] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0158.476] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0158.476] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0158.477] ReadFile (in: hFile=0x1b4, lpBuffer=0x1110a000, nNumberOfBytesToRead=0xfc8, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1110a000*, lpNumberOfBytesRead=0x11428e18*=0xfc8, lpOverlapped=0x0) returned 1
	[0158.487] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e280 | out: pbBuffer=0x1142e280) returned 1
	[0158.487] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e278 | out: pbBuffer=0x1142e278) returned 1
	[0158.487] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1106b302 | out: pbBuffer=0x1106b302) returned 1
	[0158.488] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2b0 | out: pbBuffer=0x1142e2b0) returned 1
	[0158.489] GetFileType (hFile=0x1b4) returned 0x1
	[0158.489] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0158.489] WriteFile (in: hFile=0x1b4, lpBuffer=0x111fa000*, nNumberOfBytesToWrite=0xfc8, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111fa000*, lpNumberOfBytesWritten=0x1133fdfc*=0xfc8, lpOverlapped=0x1133fe08) returned 1
	[0158.490] GetFileType (hFile=0x1b4) returned 0x1
	[0158.490] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xfc8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0158.490] GetFileType (hFile=0x1b4) returned 0x1
	[0158.490] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0158.490] WriteFile (in: hFile=0x1b4, lpBuffer=0x11419880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11419880*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0158.491] GetFileType (hFile=0x1b4) returned 0x1
	[0158.491] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xfc8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0158.491] CloseHandle (hObject=0x1b4) returned 1
	[0158.493] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.tl30z")) returned 0x20
	[0158.493] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0158.494] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0158.577] SetEvent (hEvent=0x12c) returned 1
	[0158.577] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80
	[0158.577] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0158.578] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0159.746] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0159.746] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11255e08 | out: lpMode=0x11255e08) returned 0
	[0159.748] ReadFile (in: hFile=0x1c8, lpBuffer=0x1125e000, nNumberOfBytesToRead=0x7e27, lpNumberOfBytesRead=0x11255e18, lpOverlapped=0x0 | out: lpBuffer=0x1125e000*, lpNumberOfBytesRead=0x11255e18*=0x7e27, lpOverlapped=0x0) returned 1
	[0159.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0159.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0159.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11128802 | out: pbBuffer=0x11128802) returned 1
	[0159.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0159.816] GetFileType (hFile=0x1c8) returned 0x1
	[0159.816] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0159.817] WriteFile (in: hFile=0x1c8, lpBuffer=0x11186000*, nNumberOfBytesToWrite=0x7e27, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x11186000*, lpNumberOfBytesWritten=0x11255dfc*=0x7e27, lpOverlapped=0x11255e08) returned 1
	[0159.817] GetFileType (hFile=0x1c8) returned 0x1
	[0159.818] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x7e27, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0159.818] GetFileType (hFile=0x1c8) returned 0x1
	[0159.818] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0159.818] WriteFile (in: hFile=0x1c8, lpBuffer=0x11140a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x11140a80*, lpNumberOfBytesWritten=0x11255dfc*=0x236, lpOverlapped=0x11255e08) returned 1
	[0159.818] GetFileType (hFile=0x1c8) returned 0x1
	[0159.819] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x7e27, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0159.819] CloseHandle (hObject=0x1c8) returned 1
	[0159.825] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.tl30z")) returned 0x20
	[0159.826] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0159.827] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0159.868] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80
	[0159.869] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0159.869] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0161.833] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0161.833] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0161.837] ReadFile (in: hFile=0x1cc, lpBuffer=0x11486000, nNumberOfBytesToRead=0xd4b8, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11486000*, lpNumberOfBytesRead=0x1131ae18*=0xd4b8, lpOverlapped=0x0) returned 1
	[0162.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0162.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e188 | out: pbBuffer=0x1104e188) returned 1
	[0162.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11150802 | out: pbBuffer=0x11150802) returned 1
	[0162.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e1c0 | out: pbBuffer=0x1104e1c0) returned 1
	[0162.018] GetFileType (hFile=0x1cc) returned 0x1
	[0162.018] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0162.019] WriteFile (in: hFile=0x1cc, lpBuffer=0x1111c000*, nNumberOfBytesToWrite=0xd4b8, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1111c000*, lpNumberOfBytesWritten=0x1133bdfc*=0xd4b8, lpOverlapped=0x1133be08) returned 1
	[0162.020] GetFileType (hFile=0x1cc) returned 0x1
	[0162.020] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xd4b8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0162.020] GetFileType (hFile=0x1cc) returned 0x1
	[0162.020] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0162.020] WriteFile (in: hFile=0x1cc, lpBuffer=0x11320a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11320a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x233, lpOverlapped=0x1133be08) returned 1
	[0162.021] GetFileType (hFile=0x1cc) returned 0x1
	[0162.021] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xd4b8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0162.021] CloseHandle (hObject=0x1cc) returned 1
	[0162.025] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.tl30z")) returned 0x20
	[0162.025] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0162.026] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0163.831] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0165.238] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0166.701] SetEvent (hEvent=0x118) returned 1
	[0166.701] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80
	[0166.701] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0166.702] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0167.338] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0167.339] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0167.339] ReadFile (in: hFile=0x1cc, lpBuffer=0x11174000, nNumberOfBytesToRead=0xfaf, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11174000*, lpNumberOfBytesRead=0x11023e18*=0xfaf, lpOverlapped=0x0) returned 1
	[0167.441] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0167.441] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113640f8 | out: pbBuffer=0x113640f8) returned 1
	[0167.441] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11188802 | out: pbBuffer=0x11188802) returned 1
	[0167.442] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0167.443] GetFileType (hFile=0x1cc) returned 0x1
	[0167.443] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0167.443] WriteFile (in: hFile=0x1cc, lpBuffer=0x110b0000*, nNumberOfBytesToWrite=0xfaf, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110b0000*, lpNumberOfBytesWritten=0x1102ddfc*=0xfaf, lpOverlapped=0x1102de08) returned 1
	[0167.443] GetFileType (hFile=0x1cc) returned 0x1
	[0167.443] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xfaf, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0167.444] GetFileType (hFile=0x1cc) returned 0x1
	[0167.444] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0167.444] WriteFile (in: hFile=0x1cc, lpBuffer=0x11090a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11090a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x236, lpOverlapped=0x1102de08) returned 1
	[0167.445] GetFileType (hFile=0x1cc) returned 0x1
	[0167.445] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xfaf, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0167.445] CloseHandle (hObject=0x1cc) returned 1
	[0167.446] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.tl30z")) returned 0x20
	[0167.446] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0167.447] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0168.155] SetEvent (hEvent=0x118) returned 1
	[0168.155] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0168.219] SetEvent (hEvent=0x118) returned 1
	[0168.219] SetEvent (hEvent=0x164) returned 1
	[0168.219] SetEvent (hEvent=0x134) returned 1
	[0168.219] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0168.418] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0168.560] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0168.769] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0169.389] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0169.782] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0169.866] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0170.077] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0170.174] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0171.069] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0171.336] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0171.385] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0171.875] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0172.419] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 0x80
	[0172.419] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", dwFileAttributes=0x80) returned 1
	[0172.419] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.tl30z"), dwFlags=0x1) returned 1
	[0174.158] SetEvent (hEvent=0x150) returned 1
	[0174.158] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0174.472] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0174.473] ReadFile (in: hFile=0x1cc, lpBuffer=0x113f8000, nNumberOfBytesToRead=0x91cd, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x113f8000*, lpNumberOfBytesRead=0x11319e18*=0x91cd, lpOverlapped=0x0) returned 1
	[0174.545] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364470 | out: pbBuffer=0x11364470) returned 1
	[0174.546] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11364468 | out: pbBuffer=0x11364468) returned 1
	[0174.546] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11391c02 | out: pbBuffer=0x11391c02) returned 1
	[0174.546] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11391ce5 | out: pbBuffer=0x11391ce5) returned 1
	[0174.547] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113644a0 | out: pbBuffer=0x113644a0) returned 1
	[0174.548] GetFileType (hFile=0x1cc) returned 0x1
	[0174.548] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0174.548] WriteFile (in: hFile=0x1cc, lpBuffer=0x1116c000*, nNumberOfBytesToWrite=0x91cd, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1116c000*, lpNumberOfBytesWritten=0x1133ddfc*=0x91cd, lpOverlapped=0x1133de08) returned 1
	[0174.549] GetFileType (hFile=0x1cc) returned 0x1
	[0174.549] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x91cd, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0174.549] GetFileType (hFile=0x1cc) returned 0x1
	[0174.549] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0174.549] WriteFile (in: hFile=0x1cc, lpBuffer=0x1140e700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1140e700*, lpNumberOfBytesWritten=0x1133ddfc*=0x233, lpOverlapped=0x1133de08) returned 1
	[0174.550] GetFileType (hFile=0x1cc) returned 0x1
	[0174.550] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x91cd, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0174.550] CloseHandle (hObject=0x1cc) returned 1
	[0174.723] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.tl30z")) returned 0x20
	[0174.724] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0174.725] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 0x80
	[0174.725] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", dwFileAttributes=0x80) returned 1
	[0174.725] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.tl30z"), dwFlags=0x1) returned 1
	[0177.096] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0177.287] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0177.287] ReadFile (in: hFile=0x1f4, lpBuffer=0x11330380, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11330380*, lpNumberOfBytesRead=0x11423e18*=0x37e, lpOverlapped=0x0) returned 1
	[0177.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0177.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0177.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11320802 | out: pbBuffer=0x11320802) returned 1
	[0177.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11320839 | out: pbBuffer=0x11320839) returned 1
	[0177.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0177.577] GetFileType (hFile=0x1f4) returned 0x1
	[0177.577] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0177.578] WriteFile (in: hFile=0x1f4, lpBuffer=0x11392000*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11392000*, lpNumberOfBytesWritten=0x1133ddfc*=0x37e, lpOverlapped=0x1133de08) returned 1
	[0177.578] GetFileType (hFile=0x1f4) returned 0x1
	[0177.578] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0177.579] GetFileType (hFile=0x1f4) returned 0x1
	[0177.579] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0177.579] WriteFile (in: hFile=0x1f4, lpBuffer=0x11331180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11331180*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0177.579] GetFileType (hFile=0x1f4) returned 0x1
	[0177.580] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0177.580] CloseHandle (hObject=0x1f4) returned 1
	[0177.974] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.tl30z")) returned 0x20
	[0177.974] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0178.428] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0181.480] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0212.653] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 0x20
	[0212.653] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0212.653] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0219.884] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0219.997] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x11555e08 | out: lpMode=0x11555e08) returned 0
	[0219.997] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0242.369] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0242.378] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0300.219] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0300.232] SetEvent (hEvent=0x174) returned 1
	[0300.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf")) returned 0x220
	[0300.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF", dwFileAttributes=0x220) returned 1
	[0300.233] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.270] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0300.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0300.274] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11444e08 | out: lpMode=0x11444e08) returned 0
	[0300.274] ReadFile (in: hFile=0x2a0, lpBuffer=0x11208000, nNumberOfBytesToRead=0x16fc, lpNumberOfBytesRead=0x11444e18, lpOverlapped=0x0 | out: lpBuffer=0x11208000*, lpNumberOfBytesRead=0x11444e18*=0x16fc, lpOverlapped=0x0) returned 1
	[0300.542] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0300.557] SetEvent (hEvent=0x27c) returned 1
	[0300.557] SetEvent (hEvent=0x210) returned 1
	[0300.557] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0300.561] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0300.561] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0300.565] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0300.565] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0300.574] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0300.574] SetEvent (hEvent=0x23c) returned 1
	[0300.575] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0
	[0300.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111580f0 | out: pbBuffer=0x111580f0) returned 1
	[0300.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c5e802 | out: pbBuffer=0x11c5e802) returned 1
	[0300.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158120 | out: pbBuffer=0x11158120) returned 1
	[0300.595] GetFileType (hFile=0x2a0) returned 0x1
	[0300.595] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.595] WriteFile (in: hFile=0x2a0, lpBuffer=0x11ca8000*, nNumberOfBytesToWrite=0x16fc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11ca8000*, lpNumberOfBytesWritten=0x11031dfc*=0x16fc, lpOverlapped=0x11031e08) returned 1
	[0300.595] GetFileType (hFile=0x2a0) returned 0x1
	[0300.596] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x16fc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.596] GetFileType (hFile=0x2a0) returned 0x1
	[0300.596] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.597] WriteFile (in: hFile=0x2a0, lpBuffer=0x11c72a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c72a80*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0300.597] GetFileType (hFile=0x2a0) returned 0x1
	[0300.597] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x16fc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.598] CloseHandle (hObject=0x2a0) returned 1
	[0300.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf.tl30z")) returned 0x220
	[0300.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf")) returned 0x220
	[0300.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF", dwFileAttributes=0x220) returned 1
	[0300.599] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.637] SetEvent (hEvent=0x150) returned 1
	[0300.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0300.639] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0300.640] ReadFile (in: hFile=0x2a0, lpBuffer=0x11cba000, nNumberOfBytesToRead=0xa410, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11cba000*, lpNumberOfBytesRead=0x11319e18*=0xa410, lpOverlapped=0x0) returned 1
	[0301.004] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.022] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.077] SetEvent (hEvent=0x210) returned 1
	[0301.077] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.086] SetEvent (hEvent=0x284) returned 1
	[0301.086] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.090] SetEvent (hEvent=0x1b0) returned 1
	[0301.090] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158c70 | out: pbBuffer=0x11158c70) returned 1
	[0301.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125dc02 | out: pbBuffer=0x1125dc02) returned 1
	[0301.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125dc14 | out: pbBuffer=0x1125dc14) returned 1
	[0301.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125dcb9 | out: pbBuffer=0x1125dcb9) returned 1
	[0301.099] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158ca0 | out: pbBuffer=0x11158ca0) returned 1
	[0301.099] GetFileType (hFile=0x250) returned 0x1
	[0301.099] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.099] WriteFile (in: hFile=0x250, lpBuffer=0x11232000*, nNumberOfBytesToWrite=0xcd8, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11232000*, lpNumberOfBytesWritten=0x112b9dfc*=0xcd8, lpOverlapped=0x112b9e08) returned 1
	[0301.120] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.128] SetEvent (hEvent=0x1bc) returned 1
	[0301.129] GetFileType (hFile=0x250) returned 0x1
	[0301.129] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.138] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xcd8, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.138] GetFileType (hFile=0x250) returned 0x1
	[0301.138] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.138] WriteFile (in: hFile=0x250, lpBuffer=0x113c2380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x113c2380*, lpNumberOfBytesWritten=0x112b9dfc*=0x22a, lpOverlapped=0x112b9e08) returned 1
	[0301.148] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.150] GetFileType (hFile=0x250) returned 0x1
	[0301.150] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xcd8, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.150] CloseHandle (hObject=0x250) returned 1
	[0301.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf.tl30z")) returned 0x220
	[0301.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.193] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.485] SetEvent (hEvent=0x24c) returned 1
	[0301.485] SetEvent (hEvent=0x248) returned 1
	[0301.485] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.765] SetEvent (hEvent=0x24c) returned 1
	[0301.765] SetEvent (hEvent=0x174) returned 1
	[0301.765] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0301.768] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.768] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0
	[0301.770] SetEvent (hEvent=0x124) returned 1
	[0301.771] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0301.773] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf")) returned 0x220
	[0301.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF", dwFileAttributes=0x220) returned 1
	[0301.774] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0301.874] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0301.875] ReadFile (in: hFile=0x1d8, lpBuffer=0x11144000, nNumberOfBytesToRead=0x7898, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11144000*, lpNumberOfBytesRead=0x11316e18*=0x7898, lpOverlapped=0x0) returned 1
	[0301.884] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0301.885] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112fe802 | out: pbBuffer=0x112fe802) returned 1
	[0301.885] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0301.886] GetFileType (hFile=0x1d8) returned 0x1
	[0301.886] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.886] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c2000*, nNumberOfBytesToWrite=0x7898, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x113c2000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7898, lpOverlapped=0x1102de08) returned 1
	[0301.887] GetFileType (hFile=0x1d8) returned 0x1
	[0301.887] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7898, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.887] GetFileType (hFile=0x1d8) returned 0x1
	[0301.887] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.887] WriteFile (in: hFile=0x1d8, lpBuffer=0x11312a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11312a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0301.888] GetFileType (hFile=0x1d8) returned 0x1
	[0301.888] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7898, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.888] CloseHandle (hObject=0x1d8) returned 1
	[0301.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf.tl30z")) returned 0x220
	[0301.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.894] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0301.897] SetEvent (hEvent=0x164) returned 1
	[0301.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf")) returned 0x220
	[0301.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF", dwFileAttributes=0x220) returned 1
	[0301.898] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0302.040] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0302.041] ReadFile (in: hFile=0x250, lpBuffer=0x11140000, nNumberOfBytesToRead=0xa80c, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11140000*, lpNumberOfBytesRead=0x11316e18*=0xa80c, lpOverlapped=0x0) returned 1
	[0302.082] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0302.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111580f8 | out: pbBuffer=0x111580f8) returned 1
	[0302.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11260802 | out: pbBuffer=0x11260802) returned 1
	[0302.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112608c2 | out: pbBuffer=0x112608c2) returned 1
	[0302.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112608e5 | out: pbBuffer=0x112608e5) returned 1
	[0302.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0302.084] GetFileType (hFile=0x250) returned 0x1
	[0302.084] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.085] WriteFile (in: hFile=0x250, lpBuffer=0x11094000*, nNumberOfBytesToWrite=0xa80c, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11094000*, lpNumberOfBytesWritten=0x1133bdfc*=0xa80c, lpOverlapped=0x1133be08) returned 1
	[0302.085] GetFileType (hFile=0x250) returned 0x1
	[0302.086] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xa80c, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.086] GetFileType (hFile=0x250) returned 0x1
	[0302.086] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.086] WriteFile (in: hFile=0x250, lpBuffer=0x111fce00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111fce00*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0302.086] GetFileType (hFile=0x250) returned 0x1
	[0302.086] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xa80c, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.086] CloseHandle (hObject=0x250) returned 1
	[0302.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf.tl30z")) returned 0x220
	[0302.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg")) returned 0x220
	[0302.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG", dwFileAttributes=0x220) returned 1
	[0302.090] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg.tl30z"), dwFlags=0x1) returned 1
	[0302.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.175] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0302.175] ReadFile (in: hFile=0x1d8, lpBuffer=0x11307000, nNumberOfBytesToRead=0x43c5, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11307000*, lpNumberOfBytesRead=0x1131ce18*=0x43c5, lpOverlapped=0x0) returned 1
	[0302.181] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0302.181] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11be1202 | out: pbBuffer=0x11be1202) returned 1
	[0302.182] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0302.182] GetFileType (hFile=0x1d8) returned 0x1
	[0302.182] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11bd9de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.182] WriteFile (in: hFile=0x1d8, lpBuffer=0x11296000*, nNumberOfBytesToWrite=0x43c5, lpNumberOfBytesWritten=0x11bd9dfc, lpOverlapped=0x11bd9e08 | out: lpBuffer=0x11296000*, lpNumberOfBytesWritten=0x11bd9dfc*=0x43c5, lpOverlapped=0x11bd9e08) returned 1
	[0302.183] GetFileType (hFile=0x1d8) returned 0x1
	[0302.183] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x43c5, lpNewFilePointer=0x0, dwMoveMethod=0x11bd9de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.183] GetFileType (hFile=0x1d8) returned 0x1
	[0302.183] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11bd9de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.183] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bf7880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11bd9dfc, lpOverlapped=0x11bd9e08 | out: lpBuffer=0x11bf7880*, lpNumberOfBytesWritten=0x11bd9dfc*=0x22d, lpOverlapped=0x11bd9e08) returned 1
	[0302.184] GetFileType (hFile=0x1d8) returned 0x1
	[0302.184] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x43c5, lpNewFilePointer=0x0, dwMoveMethod=0x11bd9de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.184] CloseHandle (hObject=0x1d8) returned 1
	[0302.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg.tl30z")) returned 0x220
	[0302.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0302.187] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.190] SetEvent (hEvent=0x248) returned 1
	[0302.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf")) returned 0x220
	[0302.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF", dwFileAttributes=0x220) returned 1
	[0302.190] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0302.275] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0302.275] ReadFile (in: hFile=0x250, lpBuffer=0x1115ea00, nNumberOfBytesToRead=0x20e4, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1115ea00*, lpNumberOfBytesRead=0x1131ce18*=0x20e4, lpOverlapped=0x0) returned 1
	[0302.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158280 | out: pbBuffer=0x11158280) returned 1
	[0302.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158278 | out: pbBuffer=0x11158278) returned 1
	[0302.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11413302 | out: pbBuffer=0x11413302) returned 1
	[0302.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582b0 | out: pbBuffer=0x111582b0) returned 1
	[0302.297] GetFileType (hFile=0x250) returned 0x1
	[0302.298] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.298] WriteFile (in: hFile=0x250, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x20e4, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x1133fdfc*=0x20e4, lpOverlapped=0x1133fe08) returned 1
	[0302.298] GetFileType (hFile=0x250) returned 0x1
	[0302.298] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x20e4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.298] GetFileType (hFile=0x250) returned 0x1
	[0302.299] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.299] WriteFile (in: hFile=0x250, lpBuffer=0x11383880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11383880*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0302.299] GetFileType (hFile=0x250) returned 0x1
	[0302.299] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x20e4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.299] CloseHandle (hObject=0x250) returned 1
	[0302.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf.tl30z")) returned 0x220
	[0302.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf")) returned 0x220
	[0302.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF", dwFileAttributes=0x220) returned 1
	[0302.303] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.443] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0302.443] ReadFile (in: hFile=0x1d8, lpBuffer=0x110da000, nNumberOfBytesToRead=0x12a6, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110da000*, lpNumberOfBytesRead=0x1131ce18*=0x12a6, lpOverlapped=0x0) returned 1
	[0302.449] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0302.449] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e358 | out: pbBuffer=0x1104e358) returned 1
	[0302.449] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c3202 | out: pbBuffer=0x112c3202) returned 1
	[0302.449] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c32e4 | out: pbBuffer=0x112c32e4) returned 1
	[0302.450] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0302.450] GetFileType (hFile=0x1d8) returned 0x1
	[0302.450] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.451] WriteFile (in: hFile=0x1d8, lpBuffer=0x112fc000*, nNumberOfBytesToWrite=0x12a6, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112fc000*, lpNumberOfBytesWritten=0x11031dfc*=0x12a6, lpOverlapped=0x11031e08) returned 1
	[0302.451] GetFileType (hFile=0x1d8) returned 0x1
	[0302.451] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x12a6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.451] GetFileType (hFile=0x1d8) returned 0x1
	[0302.452] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.452] WriteFile (in: hFile=0x1d8, lpBuffer=0x113b3880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113b3880*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0302.452] GetFileType (hFile=0x1d8) returned 0x1
	[0302.452] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x12a6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.452] CloseHandle (hObject=0x1d8) returned 1
	[0302.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf.tl30z")) returned 0x220
	[0302.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.456] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.460] SetEvent (hEvent=0x248) returned 1
	[0302.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf")) returned 0x220
	[0302.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF", dwFileAttributes=0x220) returned 1
	[0302.461] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.547] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0302.547] ReadFile (in: hFile=0x1d8, lpBuffer=0x11202000, nNumberOfBytesToRead=0xe42c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11202000*, lpNumberOfBytesRead=0x1131ce18*=0xe42c, lpOverlapped=0x0) returned 1
	[0302.553] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f860 | out: pbBuffer=0x1140f860) returned 1
	[0302.553] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f858 | out: pbBuffer=0x1140f858) returned 1
	[0302.553] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112abf02 | out: pbBuffer=0x112abf02) returned 1
	[0302.553] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112abf47 | out: pbBuffer=0x112abf47) returned 1
	[0302.554] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112abf62 | out: pbBuffer=0x112abf62) returned 1
	[0302.554] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f890 | out: pbBuffer=0x1140f890) returned 1
	[0302.556] SetEvent (hEvent=0x248) returned 1
	[0302.557] GetFileType (hFile=0x1d8) returned 0x1
	[0302.557] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.557] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bfe000*, nNumberOfBytesToWrite=0xe42c, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11bfe000*, lpNumberOfBytesWritten=0x1133bdfc*=0xe42c, lpOverlapped=0x1133be08) returned 1
	[0302.558] GetFileType (hFile=0x1d8) returned 0x1
	[0302.558] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xe42c, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.559] GetFileType (hFile=0x1d8) returned 0x1
	[0302.559] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.559] WriteFile (in: hFile=0x1d8, lpBuffer=0x111a3500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111a3500*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0302.560] GetFileType (hFile=0x1d8) returned 0x1
	[0302.560] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xe42c, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.560] CloseHandle (hObject=0x1d8) returned 1
	[0302.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf.tl30z")) returned 0x220
	[0302.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.566] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.569] SetEvent (hEvent=0x248) returned 1
	[0302.569] SetEvent (hEvent=0x1b0) returned 1
	[0302.569] SwitchToThread () returned 1
	[0302.572] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.594] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.623] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.644] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.663] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.684] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.703] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.720] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.739] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.757] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.774] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.791] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.803] SetEvent (hEvent=0x248) returned 1
	[0302.803] SetEvent (hEvent=0x174) returned 1
	[0302.804] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0302.806] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.806] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0
	[0302.808] SetEvent (hEvent=0x164) returned 1
	[0302.808] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0302.810] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.847] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.867] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.890] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.909] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.949] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.965] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0302.986] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.007] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.027] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.050] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.070] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.092] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.113] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.123] SetEvent (hEvent=0x164) returned 1
	[0303.124] SetEvent (hEvent=0x174) returned 1
	[0303.124] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0
	[0303.126] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0
	[0303.128] SetEvent (hEvent=0x1b0) returned 1
	[0303.128] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0303.130] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.344] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.415] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.601] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.602] SetEvent (hEvent=0x1b0) returned 1
	[0303.602] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg")) returned 0x220
	[0303.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG", dwFileAttributes=0x220) returned 1
	[0303.627] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.693] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.714] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0303.714] ReadFile (in: hFile=0x1d8, lpBuffer=0x113ec000, nNumberOfBytesToRead=0x3260, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x113ec000*, lpNumberOfBytesRead=0x11023e18*=0x3260, lpOverlapped=0x0) returned 1
	[0303.722] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0303.722] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0303.722] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113fa802 | out: pbBuffer=0x113fa802) returned 1
	[0303.722] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0303.723] GetFileType (hFile=0x1d8) returned 0x1
	[0303.723] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.723] WriteFile (in: hFile=0x1d8, lpBuffer=0x1129c000*, nNumberOfBytesToWrite=0x3260, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1129c000*, lpNumberOfBytesWritten=0x1133fdfc*=0x3260, lpOverlapped=0x1133fe08) returned 1
	[0303.723] GetFileType (hFile=0x1d8) returned 0x1
	[0303.723] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3260, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.724] GetFileType (hFile=0x1d8) returned 0x1
	[0303.724] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.724] WriteFile (in: hFile=0x1d8, lpBuffer=0x112e2a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112e2a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0303.724] GetFileType (hFile=0x1d8) returned 0x1
	[0303.724] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3260, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.724] CloseHandle (hObject=0x1d8) returned 1
	[0303.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg.tl30z")) returned 0x220
	[0303.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg")) returned 0x220
	[0303.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG", dwFileAttributes=0x220) returned 1
	[0303.730] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.798] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0303.798] ReadFile (in: hFile=0x1d8, lpBuffer=0x110a6000, nNumberOfBytesToRead=0x52c3, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x110a6000*, lpNumberOfBytesRead=0x11425e18*=0x52c3, lpOverlapped=0x0) returned 1
	[0303.809] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0303.809] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113fbd02 | out: pbBuffer=0x113fbd02) returned 1
	[0303.809] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113fbd28 | out: pbBuffer=0x113fbd28) returned 1
	[0303.810] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0303.810] GetFileType (hFile=0x1d8) returned 0x1
	[0303.810] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.810] WriteFile (in: hFile=0x1d8, lpBuffer=0x11444000*, nNumberOfBytesToWrite=0x52c3, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11444000*, lpNumberOfBytesWritten=0x1133fdfc*=0x52c3, lpOverlapped=0x1133fe08) returned 1
	[0303.811] GetFileType (hFile=0x1d8) returned 0x1
	[0303.811] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x52c3, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.811] GetFileType (hFile=0x1d8) returned 0x1
	[0303.811] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.811] WriteFile (in: hFile=0x1d8, lpBuffer=0x11184700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11184700*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0303.811] GetFileType (hFile=0x1d8) returned 0x1
	[0303.812] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x52c3, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.812] CloseHandle (hObject=0x1d8) returned 1
	[0303.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg.tl30z")) returned 0x220
	[0303.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.816] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.818] SetEvent (hEvent=0x284) returned 1
	[0303.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg")) returned 0x220
	[0303.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG", dwFileAttributes=0x220) returned 1
	[0303.818] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.914] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0303.914] ReadFile (in: hFile=0x1d8, lpBuffer=0x11186000, nNumberOfBytesToRead=0x5a56, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11186000*, lpNumberOfBytesRead=0x11425e18*=0x5a56, lpOverlapped=0x0) returned 1
	[0303.944] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0303.944] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0303.944] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1142c802 | out: pbBuffer=0x1142c802) returned 1
	[0303.945] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0303.945] GetFileType (hFile=0x1d8) returned 0x1
	[0303.945] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.945] WriteFile (in: hFile=0x1d8, lpBuffer=0x113d8000*, nNumberOfBytesToWrite=0x5a56, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113d8000*, lpNumberOfBytesWritten=0x1133fdfc*=0x5a56, lpOverlapped=0x1133fe08) returned 1
	[0303.946] GetFileType (hFile=0x1d8) returned 0x1
	[0303.946] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5a56, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.946] GetFileType (hFile=0x1d8) returned 0x1
	[0303.946] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.946] WriteFile (in: hFile=0x1d8, lpBuffer=0x1136aa80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1136aa80*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0303.947] GetFileType (hFile=0x1d8) returned 0x1
	[0303.947] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5a56, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.947] CloseHandle (hObject=0x1d8) returned 1
	[0303.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg.tl30z")) returned 0x220
	[0303.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.950] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0303.954] SetEvent (hEvent=0x1b0) returned 1
	[0303.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg")) returned 0x220
	[0303.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG", dwFileAttributes=0x220) returned 1
	[0303.954] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0304.047] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0304.047] ReadFile (in: hFile=0x2a0, lpBuffer=0x110be000, nNumberOfBytesToRead=0x1e7b, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x110be000*, lpNumberOfBytesRead=0x11425e18*=0x1e7b, lpOverlapped=0x0) returned 1
	[0304.057] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158540 | out: pbBuffer=0x11158540) returned 1
	[0304.057] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158538 | out: pbBuffer=0x11158538) returned 1
	[0304.057] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c2802 | out: pbBuffer=0x110c2802) returned 1
	[0304.057] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c284d | out: pbBuffer=0x110c284d) returned 1
	[0304.057] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c289c | out: pbBuffer=0x110c289c) returned 1
	[0304.057] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158570 | out: pbBuffer=0x11158570) returned 1
	[0304.058] GetFileType (hFile=0x2a0) returned 0x1
	[0304.058] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.058] WriteFile (in: hFile=0x2a0, lpBuffer=0x112fc000*, nNumberOfBytesToWrite=0x1e7b, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112fc000*, lpNumberOfBytesWritten=0x1102ddfc*=0x1e7b, lpOverlapped=0x1102de08) returned 1
	[0304.058] GetFileType (hFile=0x2a0) returned 0x1
	[0304.059] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1e7b, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.059] GetFileType (hFile=0x2a0) returned 0x1
	[0304.059] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.059] WriteFile (in: hFile=0x2a0, lpBuffer=0x1117d880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1117d880*, lpNumberOfBytesWritten=0x1102ddfc*=0x236, lpOverlapped=0x1102de08) returned 1
	[0304.059] GetFileType (hFile=0x2a0) returned 0x1
	[0304.059] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1e7b, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.060] CloseHandle (hObject=0x2a0) returned 1
	[0304.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg.tl30z")) returned 0x220
	[0304.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.063] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0304.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg")) returned 0x220
	[0304.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG", dwFileAttributes=0x220) returned 1
	[0304.065] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0304.267] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0304.267] ReadFile (in: hFile=0x2a0, lpBuffer=0x111c0000, nNumberOfBytesToRead=0x4ec6, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x11425e18*=0x4ec6, lpOverlapped=0x0) returned 1
	[0304.272] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0304.272] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111580f8 | out: pbBuffer=0x111580f8) returned 1
	[0304.272] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11260802 | out: pbBuffer=0x11260802) returned 1
	[0304.273] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0304.273] GetFileType (hFile=0x2a0) returned 0x1
	[0304.273] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.274] WriteFile (in: hFile=0x2a0, lpBuffer=0x113ec000*, nNumberOfBytesToWrite=0x4ec6, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x113ec000*, lpNumberOfBytesWritten=0x11339dfc*=0x4ec6, lpOverlapped=0x11339e08) returned 1
	[0304.274] GetFileType (hFile=0x2a0) returned 0x1
	[0304.274] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x4ec6, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.274] GetFileType (hFile=0x2a0) returned 0x1
	[0304.274] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.275] WriteFile (in: hFile=0x2a0, lpBuffer=0x1144aa80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1144aa80*, lpNumberOfBytesWritten=0x11339dfc*=0x230, lpOverlapped=0x11339e08) returned 1
	[0304.275] GetFileType (hFile=0x2a0) returned 0x1
	[0304.275] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x4ec6, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.275] CloseHandle (hObject=0x2a0) returned 1
	[0304.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg.tl30z")) returned 0x220
	[0304.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.280] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0304.296] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0304.300] SetEvent (hEvent=0x164) returned 1
	[0304.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg")) returned 0x220
	[0304.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG", dwFileAttributes=0x220) returned 1
	[0304.300] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0304.577] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0304.577] ReadFile (in: hFile=0x1d4, lpBuffer=0x1121e000, nNumberOfBytesToRead=0x8411, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1121e000*, lpNumberOfBytesRead=0x11023e18*=0x8411, lpOverlapped=0x0) returned 1
	[0304.584] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111583e0 | out: pbBuffer=0x111583e0) returned 1
	[0304.584] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111583d8 | out: pbBuffer=0x111583d8) returned 1
	[0304.584] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261c02 | out: pbBuffer=0x11261c02) returned 1
	[0304.584] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11261cb8 | out: pbBuffer=0x11261cb8) returned 1
	[0304.584] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11261cc5 | out: pbBuffer=0x11261cc5) returned 1
	[0304.584] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11261ccf | out: pbBuffer=0x11261ccf) returned 1
	[0304.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158410 | out: pbBuffer=0x11158410) returned 1
	[0304.586] GetFileType (hFile=0x1d4) returned 0x1
	[0304.586] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.586] WriteFile (in: hFile=0x1d4, lpBuffer=0x11166000*, nNumberOfBytesToWrite=0x8411, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11166000*, lpNumberOfBytesWritten=0x11339dfc*=0x8411, lpOverlapped=0x11339e08) returned 1
	[0304.587] GetFileType (hFile=0x1d4) returned 0x1
	[0304.587] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8411, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.587] GetFileType (hFile=0x1d4) returned 0x1
	[0304.587] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.587] WriteFile (in: hFile=0x1d4, lpBuffer=0x1122ca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1122ca80*, lpNumberOfBytesWritten=0x11339dfc*=0x227, lpOverlapped=0x11339e08) returned 1
	[0304.587] GetFileType (hFile=0x1d4) returned 0x1
	[0304.587] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8411, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.588] CloseHandle (hObject=0x1d4) returned 1
	[0304.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg.tl30z")) returned 0x220
	[0304.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.591] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0304.594] SetEvent (hEvent=0x284) returned 1
	[0304.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg")) returned 0x220
	[0304.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG", dwFileAttributes=0x220) returned 1
	[0304.594] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0304.692] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0304.692] ReadFile (in: hFile=0x1d4, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x7f3e, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x11023e18*=0x7f3e, lpOverlapped=0x0) returned 1
	[0304.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0304.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0304.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11376802 | out: pbBuffer=0x11376802) returned 1
	[0304.709] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0304.710] GetFileType (hFile=0x1d4) returned 0x1
	[0304.710] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.710] WriteFile (in: hFile=0x1d4, lpBuffer=0x11302000*, nNumberOfBytesToWrite=0x7f3e, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11302000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7f3e, lpOverlapped=0x1102de08) returned 1
	[0304.711] GetFileType (hFile=0x1d4) returned 0x1
	[0304.711] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7f3e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.711] GetFileType (hFile=0x1d4) returned 0x1
	[0304.711] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.711] WriteFile (in: hFile=0x1d4, lpBuffer=0x11412a80*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11412a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x23c, lpOverlapped=0x1102de08) returned 1
	[0304.712] GetFileType (hFile=0x1d4) returned 0x1
	[0304.712] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7f3e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.712] CloseHandle (hObject=0x1d4) returned 1
	[0304.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg.tl30z")) returned 0x220
	[0304.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.726] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0304.739] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0304.759] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0304.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg")) returned 0x220
	[0304.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG", dwFileAttributes=0x220) returned 1
	[0304.775] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0304.845] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0304.845] ReadFile (in: hFile=0x1d4, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x792b, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x1128ce18*=0x792b, lpOverlapped=0x0) returned 1
	[0304.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f110 | out: pbBuffer=0x1140f110) returned 1
	[0304.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f108 | out: pbBuffer=0x1140f108) returned 1
	[0304.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f6802 | out: pbBuffer=0x111f6802) returned 1
	[0304.852] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f68da | out: pbBuffer=0x111f68da) returned 1
	[0304.852] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f140 | out: pbBuffer=0x1140f140) returned 1
	[0304.853] GetFileType (hFile=0x1d4) returned 0x1
	[0304.853] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.853] WriteFile (in: hFile=0x1d4, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x792b, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1133fdfc*=0x792b, lpOverlapped=0x1133fe08) returned 1
	[0304.853] GetFileType (hFile=0x1d4) returned 0x1
	[0304.853] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x792b, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.853] GetFileType (hFile=0x1d4) returned 0x1
	[0304.854] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.854] WriteFile (in: hFile=0x1d4, lpBuffer=0x11134a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11134a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0304.854] GetFileType (hFile=0x1d4) returned 0x1
	[0304.854] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x792b, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.854] CloseHandle (hObject=0x1d4) returned 1
	[0304.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg.tl30z")) returned 0x220
	[0304.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.864] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0304.872] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0304.894] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0304.913] SetEvent (hEvent=0x174) returned 1
	[0304.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg")) returned 0x220
	[0304.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG", dwFileAttributes=0x220) returned 1
	[0304.914] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0305.084] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0305.084] SetEvent (hEvent=0x284) returned 1
	[0305.084] ReadFile (in: hFile=0x250, lpBuffer=0x111b0000, nNumberOfBytesToRead=0x9d03, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x111b0000*, lpNumberOfBytesRead=0x1131ce18*=0x9d03, lpOverlapped=0x0) returned 1
	[0305.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0305.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4c8 | out: pbBuffer=0x1104e4c8) returned 1
	[0305.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11369e02 | out: pbBuffer=0x11369e02) returned 1
	[0305.099] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0305.100] GetFileType (hFile=0x250) returned 0x1
	[0305.100] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.115] WriteFile (in: hFile=0x250, lpBuffer=0x11c0e000*, nNumberOfBytesToWrite=0x9d03, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11c0e000*, lpNumberOfBytesWritten=0x1102ddfc*=0x9d03, lpOverlapped=0x1102de08) returned 1
	[0305.116] GetFileType (hFile=0x250) returned 0x1
	[0305.116] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x9d03, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.116] GetFileType (hFile=0x250) returned 0x1
	[0305.116] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.117] WriteFile (in: hFile=0x250, lpBuffer=0x11bde700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11bde700*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0305.117] GetFileType (hFile=0x250) returned 0x1
	[0305.117] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x9d03, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.117] CloseHandle (hObject=0x250) returned 1
	[0305.121] SwitchToThread () returned 1
	[0305.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg.tl30z")) returned 0x220
	[0305.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg")) returned 0x220
	[0305.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG", dwFileAttributes=0x220) returned 1
	[0305.127] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0305.215] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0305.216] ReadFile (in: hFile=0x2a0, lpBuffer=0x111e8000, nNumberOfBytesToRead=0x7845, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x111e8000*, lpNumberOfBytesRead=0x1131de18*=0x7845, lpOverlapped=0x0) returned 1
	[0305.229] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0305.229] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f278 | out: pbBuffer=0x1140f278) returned 1
	[0305.229] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bfd402 | out: pbBuffer=0x11bfd402) returned 1
	[0305.230] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0305.231] GetFileType (hFile=0x2a0) returned 0x1
	[0305.231] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.231] WriteFile (in: hFile=0x2a0, lpBuffer=0x110ae000*, nNumberOfBytesToWrite=0x7845, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110ae000*, lpNumberOfBytesWritten=0x1133bdfc*=0x7845, lpOverlapped=0x1133be08) returned 1
	[0305.232] GetFileType (hFile=0x2a0) returned 0x1
	[0305.232] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x7845, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.233] GetFileType (hFile=0x2a0) returned 0x1
	[0305.233] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.234] WriteFile (in: hFile=0x2a0, lpBuffer=0x11090380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11090380*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0305.235] GetFileType (hFile=0x2a0) returned 0x1
	[0305.235] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x7845, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.235] CloseHandle (hObject=0x2a0) returned 1
	[0305.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg.tl30z")) returned 0x220
	[0305.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.241] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0305.247] SetEvent (hEvent=0x1e0) returned 1
	[0305.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg")) returned 0x220
	[0305.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG", dwFileAttributes=0x220) returned 1
	[0305.247] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0305.368] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0305.368] ReadFile (in: hFile=0x1b4, lpBuffer=0x11244000, nNumberOfBytesToRead=0x787a, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11244000*, lpNumberOfBytesRead=0x1131de18*=0x787a, lpOverlapped=0x0) returned 1
	[0305.374] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0305.374] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0305.374] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f0802 | out: pbBuffer=0x112f0802) returned 1
	[0305.375] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0305.375] GetFileType (hFile=0x1b4) returned 0x1
	[0305.376] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.376] WriteFile (in: hFile=0x1b4, lpBuffer=0x110b4000*, nNumberOfBytesToWrite=0x787a, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110b4000*, lpNumberOfBytesWritten=0x1102ddfc*=0x787a, lpOverlapped=0x1102de08) returned 1
	[0305.376] GetFileType (hFile=0x1b4) returned 0x1
	[0305.376] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x787a, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.377] GetFileType (hFile=0x1b4) returned 0x1
	[0305.377] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.377] WriteFile (in: hFile=0x1b4, lpBuffer=0x11418a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11418a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0305.377] GetFileType (hFile=0x1b4) returned 0x1
	[0305.377] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x787a, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.377] CloseHandle (hObject=0x1b4) returned 1
	[0305.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg.tl30z")) returned 0x220
	[0305.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.380] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0305.385] SetEvent (hEvent=0x174) returned 1
	[0305.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg")) returned 0x220
	[0305.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG", dwFileAttributes=0x220) returned 1
	[0305.385] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0305.475] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0305.475] ReadFile (in: hFile=0x1d4, lpBuffer=0x11458000, nNumberOfBytesToRead=0xcb0a, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11458000*, lpNumberOfBytesRead=0x1131de18*=0xcb0a, lpOverlapped=0x0) returned 1
	[0305.480] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0305.480] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bdc902 | out: pbBuffer=0x11bdc902) returned 1
	[0305.481] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bdc90b | out: pbBuffer=0x11bdc90b) returned 1
	[0305.481] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bdc925 | out: pbBuffer=0x11bdc925) returned 1
	[0305.481] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bdc977 | out: pbBuffer=0x11bdc977) returned 1
	[0305.484] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0305.487] GetFileType (hFile=0x1d4) returned 0x1
	[0305.487] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.487] WriteFile (in: hFile=0x1d4, lpBuffer=0x11162000*, nNumberOfBytesToWrite=0xcb0a, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11162000*, lpNumberOfBytesWritten=0x11339dfc*=0xcb0a, lpOverlapped=0x11339e08) returned 1
	[0305.488] GetFileType (hFile=0x1d4) returned 0x1
	[0305.488] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xcb0a, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.488] GetFileType (hFile=0x1d4) returned 0x1
	[0305.489] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.489] WriteFile (in: hFile=0x1d4, lpBuffer=0x1114f880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1114f880*, lpNumberOfBytesWritten=0x11339dfc*=0x230, lpOverlapped=0x11339e08) returned 1
	[0305.489] GetFileType (hFile=0x1d4) returned 0x1
	[0305.489] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xcb0a, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.489] CloseHandle (hObject=0x1d4) returned 1
	[0305.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg.tl30z")) returned 0x220
	[0305.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.492] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0305.497] SetEvent (hEvent=0x174) returned 1
	[0305.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg")) returned 0x220
	[0305.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG", dwFileAttributes=0x220) returned 1
	[0305.498] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0305.596] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0305.597] ReadFile (in: hFile=0x1d8, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x7df3, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x1131de18*=0x7df3, lpOverlapped=0x0) returned 1
	[0305.603] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0305.604] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0305.604] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e0802 | out: pbBuffer=0x113e0802) returned 1
	[0305.604] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0305.605] GetFileType (hFile=0x1d8) returned 0x1
	[0305.605] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.605] WriteFile (in: hFile=0x1d8, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x7df3, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7df3, lpOverlapped=0x1102be08) returned 1
	[0305.606] GetFileType (hFile=0x1d8) returned 0x1
	[0305.606] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7df3, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.606] GetFileType (hFile=0x1d8) returned 0x1
	[0305.606] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.606] WriteFile (in: hFile=0x1d8, lpBuffer=0x1125ca80*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1125ca80*, lpNumberOfBytesWritten=0x1102bdfc*=0x23c, lpOverlapped=0x1102be08) returned 1
	[0305.742] GetFileType (hFile=0x1d8) returned 0x1
	[0305.742] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7df3, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.743] CloseHandle (hObject=0x1d8) returned 1
	[0305.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg.tl30z")) returned 0x220
	[0305.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.746] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0305.753] SetEvent (hEvent=0x164) returned 1
	[0305.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png")) returned 0x220
	[0305.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG", dwFileAttributes=0x220) returned 1
	[0305.754] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png.tl30z"), dwFlags=0x1) returned 1
	[0305.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0305.928] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0305.928] ReadFile (in: hFile=0x1d4, lpBuffer=0x11154000, nNumberOfBytesToRead=0x7b1b, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11154000*, lpNumberOfBytesRead=0x1131de18*=0x7b1b, lpOverlapped=0x0) returned 1
	[0305.936] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0305.936] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116a802 | out: pbBuffer=0x1116a802) returned 1
	[0305.936] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116a854 | out: pbBuffer=0x1116a854) returned 1
	[0305.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0305.938] SetEvent (hEvent=0x248) returned 1
	[0305.939] GetFileType (hFile=0x1d4) returned 0x1
	[0305.939] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.940] WriteFile (in: hFile=0x1d4, lpBuffer=0x11bd6000*, nNumberOfBytesToWrite=0x7b1b, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11bd6000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7b1b, lpOverlapped=0x1102de08) returned 1
	[0305.940] GetFileType (hFile=0x1d4) returned 0x1
	[0305.940] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7b1b, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.940] GetFileType (hFile=0x1d4) returned 0x1
	[0305.940] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.941] WriteFile (in: hFile=0x1d4, lpBuffer=0x1117ea80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1117ea80*, lpNumberOfBytesWritten=0x1102ddfc*=0x236, lpOverlapped=0x1102de08) returned 1
	[0305.941] GetFileType (hFile=0x1d4) returned 0x1
	[0305.941] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7b1b, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.941] CloseHandle (hObject=0x1d4) returned 1
	[0305.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png.tl30z")) returned 0x220
	[0305.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.956] SwitchToThread () returned 1
	[0305.958] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0306.108] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0306.324] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0306.326] SetEvent (hEvent=0x24c) returned 1
	[0306.326] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0306.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf")) returned 0x220
	[0306.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF", dwFileAttributes=0x220) returned 1
	[0306.366] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0306.452] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0306.452] ReadFile (in: hFile=0x1b4, lpBuffer=0x113de000, nNumberOfBytesToRead=0x173e, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x113de000*, lpNumberOfBytesRead=0x11319e18*=0x173e, lpOverlapped=0x0) returned 1
	[0306.457] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332060 | out: pbBuffer=0x11332060) returned 1
	[0306.457] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11419202 | out: pbBuffer=0x11419202) returned 1
	[0306.458] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113320f0 | out: pbBuffer=0x113320f0) returned 1
	[0306.458] GetFileType (hFile=0x1b4) returned 0x1
	[0306.458] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.458] WriteFile (in: hFile=0x1b4, lpBuffer=0x11398000*, nNumberOfBytesToWrite=0x173e, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11398000*, lpNumberOfBytesWritten=0x1133fdfc*=0x173e, lpOverlapped=0x1133fe08) returned 1
	[0306.459] GetFileType (hFile=0x1b4) returned 0x1
	[0306.459] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x173e, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.459] GetFileType (hFile=0x1b4) returned 0x1
	[0306.459] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.459] WriteFile (in: hFile=0x1b4, lpBuffer=0x11060700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11060700*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0306.460] GetFileType (hFile=0x1b4) returned 0x1
	[0306.460] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x173e, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.460] CloseHandle (hObject=0x1b4) returned 1
	[0306.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf.tl30z")) returned 0x220
	[0306.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.463] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0306.467] SetEvent (hEvent=0x248) returned 1
	[0306.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf")) returned 0x220
	[0306.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF", dwFileAttributes=0x220) returned 1
	[0306.468] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.547] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0306.547] ReadFile (in: hFile=0x2a0, lpBuffer=0x110a6000, nNumberOfBytesToRead=0x27a4, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x110a6000*, lpNumberOfBytesRead=0x11319e18*=0x27a4, lpOverlapped=0x0) returned 1
	[0306.555] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0306.556] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a3c02 | out: pbBuffer=0x113a3c02) returned 1
	[0306.556] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a3c30 | out: pbBuffer=0x113a3c30) returned 1
	[0306.556] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f440 | out: pbBuffer=0x1140f440) returned 1
	[0306.556] GetFileType (hFile=0x2a0) returned 0x1
	[0306.557] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.557] WriteFile (in: hFile=0x2a0, lpBuffer=0x1121e000*, nNumberOfBytesToWrite=0x27a4, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1121e000*, lpNumberOfBytesWritten=0x1102ddfc*=0x27a4, lpOverlapped=0x1102de08) returned 1
	[0306.557] GetFileType (hFile=0x2a0) returned 0x1
	[0306.557] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x27a4, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.557] GetFileType (hFile=0x2a0) returned 0x1
	[0306.558] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.558] WriteFile (in: hFile=0x2a0, lpBuffer=0x110be700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110be700*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0306.558] GetFileType (hFile=0x2a0) returned 0x1
	[0306.558] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x27a4, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.558] CloseHandle (hObject=0x2a0) returned 1
	[0306.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf.tl30z")) returned 0x220
	[0306.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.561] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0306.565] SetEvent (hEvent=0x248) returned 1
	[0306.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf")) returned 0x220
	[0306.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF", dwFileAttributes=0x220) returned 1
	[0306.565] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0306.661] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0306.661] ReadFile (in: hFile=0x1fc, lpBuffer=0x111c0000, nNumberOfBytesToRead=0x6efa, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x11319e18*=0x6efa, lpOverlapped=0x0) returned 1
	[0306.670] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113328e0 | out: pbBuffer=0x113328e0) returned 1
	[0306.670] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113328d8 | out: pbBuffer=0x113328d8) returned 1
	[0306.670] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11450902 | out: pbBuffer=0x11450902) returned 1
	[0306.670] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1145097c | out: pbBuffer=0x1145097c) returned 1
	[0306.670] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114509da | out: pbBuffer=0x114509da) returned 1
	[0306.670] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332910 | out: pbBuffer=0x11332910) returned 1
	[0306.671] GetFileType (hFile=0x1fc) returned 0x1
	[0306.671] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.671] WriteFile (in: hFile=0x1fc, lpBuffer=0x111f2000*, nNumberOfBytesToWrite=0x6efa, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111f2000*, lpNumberOfBytesWritten=0x1133fdfc*=0x6efa, lpOverlapped=0x1133fe08) returned 1
	[0306.672] GetFileType (hFile=0x1fc) returned 0x1
	[0306.672] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6efa, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.672] GetFileType (hFile=0x1fc) returned 0x1
	[0306.672] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.672] WriteFile (in: hFile=0x1fc, lpBuffer=0x11452e00*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11452e00*, lpNumberOfBytesWritten=0x1133fdfc*=0x239, lpOverlapped=0x1133fe08) returned 1
	[0306.673] GetFileType (hFile=0x1fc) returned 0x1
	[0306.673] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6efa, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.673] CloseHandle (hObject=0x1fc) returned 1
	[0306.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf.tl30z")) returned 0x220
	[0306.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.676] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0306.680] SetEvent (hEvent=0x248) returned 1
	[0306.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf")) returned 0x220
	[0306.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF", dwFileAttributes=0x220) returned 1
	[0306.682] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0306.776] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0306.776] ReadFile (in: hFile=0x1d8, lpBuffer=0x11206000, nNumberOfBytesToRead=0x64c, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11206000*, lpNumberOfBytesRead=0x11319e18*=0x64c, lpOverlapped=0x0) returned 1
	[0306.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0306.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0306.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bd5102 | out: pbBuffer=0x11bd5102) returned 1
	[0306.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bd512c | out: pbBuffer=0x11bd512c) returned 1
	[0306.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0306.782] GetFileType (hFile=0x1d8) returned 0x1
	[0306.782] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.783] WriteFile (in: hFile=0x1d8, lpBuffer=0x1136b000*, nNumberOfBytesToWrite=0x64c, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1136b000*, lpNumberOfBytesWritten=0x1102ddfc*=0x64c, lpOverlapped=0x1102de08) returned 1
	[0306.783] GetFileType (hFile=0x1d8) returned 0x1
	[0306.783] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x64c, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.783] GetFileType (hFile=0x1d8) returned 0x1
	[0306.783] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.783] WriteFile (in: hFile=0x1d8, lpBuffer=0x11be4e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11be4e00*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0306.784] GetFileType (hFile=0x1d8) returned 0x1
	[0306.784] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x64c, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.784] CloseHandle (hObject=0x1d8) returned 1
	[0306.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf.tl30z")) returned 0x220
	[0306.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.787] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0306.790] SetEvent (hEvent=0x24c) returned 1
	[0306.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf")) returned 0x220
	[0306.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF", dwFileAttributes=0x220) returned 1
	[0306.791] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.922] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0306.922] ReadFile (in: hFile=0x2a0, lpBuffer=0x113b0000, nNumberOfBytesToRead=0x514, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x113b0000*, lpNumberOfBytesRead=0x11319e18*=0x514, lpOverlapped=0x0) returned 1
	[0306.930] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0306.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63d8 | out: pbBuffer=0x113e63d8) returned 1
	[0306.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11255e02 | out: pbBuffer=0x11255e02) returned 1
	[0306.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11255e07 | out: pbBuffer=0x11255e07) returned 1
	[0306.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0306.931] GetFileType (hFile=0x2a0) returned 0x1
	[0306.931] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.932] WriteFile (in: hFile=0x2a0, lpBuffer=0x113b9000*, nNumberOfBytesToWrite=0x514, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x113b9000*, lpNumberOfBytesWritten=0x1124bdfc*=0x514, lpOverlapped=0x1124be08) returned 1
	[0306.932] GetFileType (hFile=0x2a0) returned 0x1
	[0306.932] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x514, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.932] GetFileType (hFile=0x2a0) returned 0x1
	[0306.932] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.932] WriteFile (in: hFile=0x2a0, lpBuffer=0x113c2700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x113c2700*, lpNumberOfBytesWritten=0x1124bdfc*=0x224, lpOverlapped=0x1124be08) returned 1
	[0306.933] GetFileType (hFile=0x2a0) returned 0x1
	[0306.933] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x514, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.933] CloseHandle (hObject=0x2a0) returned 1
	[0306.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf.tl30z")) returned 0x220
	[0306.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.936] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0306.939] SetEvent (hEvent=0x24c) returned 1
	[0306.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf")) returned 0x220
	[0306.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF", dwFileAttributes=0x220) returned 1
	[0306.940] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0307.086] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0307.086] ReadFile (in: hFile=0x1d4, lpBuffer=0x111ea000, nNumberOfBytesToRead=0x54a8, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x111ea000*, lpNumberOfBytesRead=0x11319e18*=0x54a8, lpOverlapped=0x0) returned 1
	[0307.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0307.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123dd02 | out: pbBuffer=0x1123dd02) returned 1
	[0307.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0307.093] GetFileType (hFile=0x1d4) returned 0x1
	[0307.093] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.093] WriteFile (in: hFile=0x1d4, lpBuffer=0x11120000*, nNumberOfBytesToWrite=0x54a8, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11120000*, lpNumberOfBytesWritten=0x1133bdfc*=0x54a8, lpOverlapped=0x1133be08) returned 1
	[0307.093] GetFileType (hFile=0x1d4) returned 0x1
	[0307.094] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x54a8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.094] GetFileType (hFile=0x1d4) returned 0x1
	[0307.094] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.094] WriteFile (in: hFile=0x1d4, lpBuffer=0x110eb180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110eb180*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0307.094] GetFileType (hFile=0x1d4) returned 0x1
	[0307.094] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x54a8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.094] CloseHandle (hObject=0x1d4) returned 1
	[0307.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf.tl30z")) returned 0x220
	[0307.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.098] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.102] SetEvent (hEvent=0x24c) returned 1
	[0307.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf")) returned 0x220
	[0307.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF", dwFileAttributes=0x220) returned 1
	[0307.103] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0307.188] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0307.188] ReadFile (in: hFile=0x1b4, lpBuffer=0x11418000, nNumberOfBytesToRead=0x16d8, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11418000*, lpNumberOfBytesRead=0x11319e18*=0x16d8, lpOverlapped=0x0) returned 1
	[0307.193] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0307.193] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0307.194] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11368802 | out: pbBuffer=0x11368802) returned 1
	[0307.194] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11368831 | out: pbBuffer=0x11368831) returned 1
	[0307.194] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113688e5 | out: pbBuffer=0x113688e5) returned 1
	[0307.194] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0307.194] GetFileType (hFile=0x1b4) returned 0x1
	[0307.195] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.195] WriteFile (in: hFile=0x1b4, lpBuffer=0x11370000*, nNumberOfBytesToWrite=0x16d8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11370000*, lpNumberOfBytesWritten=0x11031dfc*=0x16d8, lpOverlapped=0x11031e08) returned 1
	[0307.195] GetFileType (hFile=0x1b4) returned 0x1
	[0307.195] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x16d8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.195] GetFileType (hFile=0x1b4) returned 0x1
	[0307.195] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.196] WriteFile (in: hFile=0x1b4, lpBuffer=0x11382a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11382a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0307.196] GetFileType (hFile=0x1b4) returned 0x1
	[0307.196] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x16d8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.196] CloseHandle (hObject=0x1b4) returned 1
	[0307.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf.tl30z")) returned 0x220
	[0307.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.200] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.201] SetEvent (hEvent=0x284) returned 1
	[0307.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf")) returned 0x220
	[0307.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF", dwFileAttributes=0x220) returned 1
	[0307.202] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.283] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0307.283] ReadFile (in: hFile=0x2a0, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x1858, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11319e18*=0x1858, lpOverlapped=0x0) returned 1
	[0307.298] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0307.298] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11369c02 | out: pbBuffer=0x11369c02) returned 1
	[0307.298] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11369c39 | out: pbBuffer=0x11369c39) returned 1
	[0307.299] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11369c78 | out: pbBuffer=0x11369c78) returned 1
	[0307.299] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0307.299] GetFileType (hFile=0x2a0) returned 0x1
	[0307.299] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.300] WriteFile (in: hFile=0x2a0, lpBuffer=0x113aa000*, nNumberOfBytesToWrite=0x1858, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113aa000*, lpNumberOfBytesWritten=0x11031dfc*=0x1858, lpOverlapped=0x11031e08) returned 1
	[0307.300] GetFileType (hFile=0x2a0) returned 0x1
	[0307.300] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1858, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.300] GetFileType (hFile=0x2a0) returned 0x1
	[0307.300] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.300] WriteFile (in: hFile=0x2a0, lpBuffer=0x110dc700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110dc700*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0307.301] GetFileType (hFile=0x2a0) returned 0x1
	[0307.301] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1858, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.301] CloseHandle (hObject=0x2a0) returned 1
	[0307.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf.tl30z")) returned 0x220
	[0307.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.303] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.306] SetEvent (hEvent=0x284) returned 1
	[0307.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf")) returned 0x220
	[0307.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF", dwFileAttributes=0x220) returned 1
	[0307.307] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0307.380] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0307.380] ReadFile (in: hFile=0x250, lpBuffer=0x1129c000, nNumberOfBytesToRead=0x16ae, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1129c000*, lpNumberOfBytesRead=0x11319e18*=0x16ae, lpOverlapped=0x0) returned 1
	[0307.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0307.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112d5202 | out: pbBuffer=0x112d5202) returned 1
	[0307.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112d52d6 | out: pbBuffer=0x112d52d6) returned 1
	[0307.403] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0307.403] GetFileType (hFile=0x250) returned 0x1
	[0307.404] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.404] WriteFile (in: hFile=0x250, lpBuffer=0x112c4000*, nNumberOfBytesToWrite=0x16ae, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112c4000*, lpNumberOfBytesWritten=0x1102ddfc*=0x16ae, lpOverlapped=0x1102de08) returned 1
	[0307.406] GetFileType (hFile=0x250) returned 0x1
	[0307.406] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x16ae, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.406] GetFileType (hFile=0x250) returned 0x1
	[0307.406] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.407] WriteFile (in: hFile=0x250, lpBuffer=0x112e7880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112e7880*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0307.407] GetFileType (hFile=0x250) returned 0x1
	[0307.407] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x16ae, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.407] CloseHandle (hObject=0x250) returned 1
	[0307.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf.tl30z")) returned 0x220
	[0307.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.422] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.433] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.450] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.472] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.489] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.502] SetEvent (hEvent=0x24c) returned 1
	[0307.502] SetEvent (hEvent=0x124) returned 1
	[0307.502] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0307.505] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.505] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0307.506] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.507] SetEvent (hEvent=0x284) returned 1
	[0307.507] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x0
	[0307.510] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.792] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.793] SetEvent (hEvent=0x24c) returned 1
	[0307.793] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.797] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.802] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf")) returned 0x220
	[0307.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF", dwFileAttributes=0x220) returned 1
	[0307.816] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.887] SetEvent (hEvent=0x150) returned 1
	[0307.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.890] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0307.890] ReadFile (in: hFile=0x2a0, lpBuffer=0x11076900, nNumberOfBytesToRead=0x474, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11076900*, lpNumberOfBytesRead=0x1131ce18*=0x474, lpOverlapped=0x0) returned 1
	[0307.898] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0307.898] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e9202 | out: pbBuffer=0x110e9202) returned 1
	[0307.899] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e9271 | out: pbBuffer=0x110e9271) returned 1
	[0307.899] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e92b2 | out: pbBuffer=0x110e92b2) returned 1
	[0307.899] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e92ce | out: pbBuffer=0x110e92ce) returned 1
	[0307.900] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0307.900] GetFileType (hFile=0x2a0) returned 0x1
	[0307.900] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.900] WriteFile (in: hFile=0x2a0, lpBuffer=0x113b3000*, nNumberOfBytesToWrite=0x474, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113b3000*, lpNumberOfBytesWritten=0x1133fdfc*=0x474, lpOverlapped=0x1133fe08) returned 1
	[0307.900] GetFileType (hFile=0x2a0) returned 0x1
	[0307.900] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x474, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.901] GetFileType (hFile=0x2a0) returned 0x1
	[0307.901] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.901] WriteFile (in: hFile=0x2a0, lpBuffer=0x112fd880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112fd880*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0307.901] GetFileType (hFile=0x2a0) returned 0x1
	[0307.901] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x474, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.901] CloseHandle (hObject=0x2a0) returned 1
	[0307.903] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf.tl30z")) returned 0x220
	[0307.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.905] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0307.910] SetEvent (hEvent=0x174) returned 1
	[0307.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf")) returned 0x220
	[0307.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF", dwFileAttributes=0x220) returned 1
	[0307.911] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0308.046] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0308.046] ReadFile (in: hFile=0x1fc, lpBuffer=0x11252000, nNumberOfBytesToRead=0x7c50, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11252000*, lpNumberOfBytesRead=0x1131ce18*=0x7c50, lpOverlapped=0x0) returned 1
	[0308.072] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0308.072] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125a802 | out: pbBuffer=0x1125a802) returned 1
	[0308.073] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0308.074] GetFileType (hFile=0x1fc) returned 0x1
	[0308.074] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0308.074] WriteFile (in: hFile=0x1fc, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x7c50, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x11339dfc*=0x7c50, lpOverlapped=0x11339e08) returned 1
	[0308.075] GetFileType (hFile=0x1fc) returned 0x1
	[0308.076] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x7c50, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0308.076] GetFileType (hFile=0x1fc) returned 0x1
	[0308.076] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0308.076] WriteFile (in: hFile=0x1fc, lpBuffer=0x110b7500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x110b7500*, lpNumberOfBytesWritten=0x11339dfc*=0x22d, lpOverlapped=0x11339e08) returned 1
	[0308.076] GetFileType (hFile=0x1fc) returned 0x1
	[0308.076] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x7c50, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0308.076] CloseHandle (hObject=0x1fc) returned 1
	[0308.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf.tl30z")) returned 0x220
	[0308.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.083] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0308.086] SetEvent (hEvent=0x174) returned 1
	[0308.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf")) returned 0x220
	[0308.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF", dwFileAttributes=0x220) returned 1
	[0308.086] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0308.159] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0308.159] ReadFile (in: hFile=0x1b4, lpBuffer=0x11116000, nNumberOfBytesToRead=0x17c4, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11116000*, lpNumberOfBytesRead=0x1131ce18*=0x17c4, lpOverlapped=0x0) returned 1
	[0308.164] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126030 | out: pbBuffer=0x11126030) returned 1
	[0308.165] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11103202 | out: pbBuffer=0x11103202) returned 1
	[0308.165] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11103202 | out: pbBuffer=0x11103202) returned 1
	[0308.165] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126060 | out: pbBuffer=0x11126060) returned 1
	[0308.165] GetFileType (hFile=0x1b4) returned 0x1
	[0308.166] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.166] WriteFile (in: hFile=0x1b4, lpBuffer=0x11140000*, nNumberOfBytesToWrite=0x17c4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11140000*, lpNumberOfBytesWritten=0x1102bdfc*=0x17c4, lpOverlapped=0x1102be08) returned 1
	[0308.166] GetFileType (hFile=0x1b4) returned 0x1
	[0308.166] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x17c4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.166] GetFileType (hFile=0x1b4) returned 0x1
	[0308.166] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.167] WriteFile (in: hFile=0x1b4, lpBuffer=0x1112e380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1112e380*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0308.167] GetFileType (hFile=0x1b4) returned 0x1
	[0308.167] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x17c4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.167] CloseHandle (hObject=0x1b4) returned 1
	[0308.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf.tl30z")) returned 0x220
	[0308.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.170] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0308.173] SetEvent (hEvent=0x174) returned 1
	[0308.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf")) returned 0x220
	[0308.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF", dwFileAttributes=0x220) returned 1
	[0308.174] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0308.332] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0308.332] ReadFile (in: hFile=0x1d8, lpBuffer=0x11344000, nNumberOfBytesToRead=0x948, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11344000*, lpNumberOfBytesRead=0x1131ce18*=0x948, lpOverlapped=0x0) returned 1
	[0308.337] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126530 | out: pbBuffer=0x11126530) returned 1
	[0308.338] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1140a702 | out: pbBuffer=0x1140a702) returned 1
	[0308.338] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140a780 | out: pbBuffer=0x1140a780) returned 1
	[0308.338] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126560 | out: pbBuffer=0x11126560) returned 1
	[0308.338] GetFileType (hFile=0x1d8) returned 0x1
	[0308.339] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.339] WriteFile (in: hFile=0x1d8, lpBuffer=0x1142d000*, nNumberOfBytesToWrite=0x948, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1142d000*, lpNumberOfBytesWritten=0x1102bdfc*=0x948, lpOverlapped=0x1102be08) returned 1
	[0308.339] GetFileType (hFile=0x1d8) returned 0x1
	[0308.339] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x948, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.339] GetFileType (hFile=0x1d8) returned 0x1
	[0308.340] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.340] WriteFile (in: hFile=0x1d8, lpBuffer=0x11281500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11281500*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0308.340] GetFileType (hFile=0x1d8) returned 0x1
	[0308.340] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x948, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.340] CloseHandle (hObject=0x1d8) returned 1
	[0308.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf.tl30z")) returned 0x220
	[0308.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.344] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0308.347] SetEvent (hEvent=0x174) returned 1
	[0308.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf")) returned 0x220
	[0308.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF", dwFileAttributes=0x220) returned 1
	[0308.347] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0308.421] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0308.422] ReadFile (in: hFile=0x1fc, lpBuffer=0x112e1b00, nNumberOfBytesToRead=0xd24, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x112e1b00*, lpNumberOfBytesRead=0x1131ce18*=0xd24, lpOverlapped=0x0) returned 1
	[0308.426] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126950 | out: pbBuffer=0x11126950) returned 1
	[0308.426] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126948 | out: pbBuffer=0x11126948) returned 1
	[0308.426] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113fa602 | out: pbBuffer=0x113fa602) returned 1
	[0308.427] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126980 | out: pbBuffer=0x11126980) returned 1
	[0308.427] GetFileType (hFile=0x1fc) returned 0x1
	[0308.427] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.427] WriteFile (in: hFile=0x1fc, lpBuffer=0x1139a000*, nNumberOfBytesToWrite=0xd24, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1139a000*, lpNumberOfBytesWritten=0x1102bdfc*=0xd24, lpOverlapped=0x1102be08) returned 1
	[0308.427] GetFileType (hFile=0x1fc) returned 0x1
	[0308.427] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd24, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.428] GetFileType (hFile=0x1fc) returned 0x1
	[0308.428] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.428] WriteFile (in: hFile=0x1fc, lpBuffer=0x1139c000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1139c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0308.428] GetFileType (hFile=0x1fc) returned 0x1
	[0308.428] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd24, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.428] CloseHandle (hObject=0x1fc) returned 1
	[0308.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf.tl30z")) returned 0x220
	[0308.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.432] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0308.435] SetEvent (hEvent=0x174) returned 1
	[0308.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf")) returned 0x220
	[0308.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF", dwFileAttributes=0x220) returned 1
	[0308.436] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0308.527] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0308.527] ReadFile (in: hFile=0x1d4, lpBuffer=0x113c2000, nNumberOfBytesToRead=0xb24, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x113c2000*, lpNumberOfBytesRead=0x1131ce18*=0xb24, lpOverlapped=0x0) returned 1
	[0308.867] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0308.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327a0 | out: pbBuffer=0x113327a0) returned 1
	[0308.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c45102 | out: pbBuffer=0x11c45102) returned 1
	[0308.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c45124 | out: pbBuffer=0x11c45124) returned 1
	[0308.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327d0 | out: pbBuffer=0x113327d0) returned 1
	[0308.996] GetFileType (hFile=0x1d4) returned 0x1
	[0308.996] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.996] WriteFile (in: hFile=0x1d4, lpBuffer=0x1112a000*, nNumberOfBytesToWrite=0xb24, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1112a000*, lpNumberOfBytesWritten=0x1133fdfc*=0xb24, lpOverlapped=0x1133fe08) returned 1
	[0308.997] GetFileType (hFile=0x1d4) returned 0x1
	[0308.997] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xb24, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.997] GetFileType (hFile=0x1d4) returned 0x1
	[0308.997] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.997] WriteFile (in: hFile=0x1d4, lpBuffer=0x11384a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11384a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0308.998] GetFileType (hFile=0x1d4) returned 0x1
	[0308.998] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xb24, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.998] CloseHandle (hObject=0x1d4) returned 1
	[0308.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf.tl30z")) returned 0x220
	[0308.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8da8)) returned 1
	[0308.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf")) returned 0x220
	[0308.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF", dwFileAttributes=0x220) returned 1
	[0309.000] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0309.005] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0309.005] ReadFile (in: hFile=0x1d4, lpBuffer=0x1112e000, nNumberOfBytesToRead=0x1ee4, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1112e000*, lpNumberOfBytesRead=0x1131ce18*=0x1ee4, lpOverlapped=0x0) returned 1
	[0309.029] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0309.149] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332200 | out: pbBuffer=0x11332200) returned 1
	[0309.149] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11466802 | out: pbBuffer=0x11466802) returned 1
	[0309.149] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114668d8 | out: pbBuffer=0x114668d8) returned 1
	[0309.150] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332230 | out: pbBuffer=0x11332230) returned 1
	[0309.150] GetFileType (hFile=0x1d4) returned 0x1
	[0309.150] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.150] WriteFile (in: hFile=0x1d4, lpBuffer=0x110a4000*, nNumberOfBytesToWrite=0x1ee4, lpNumberOfBytesWritten=0x1145ddfc, lpOverlapped=0x1145de08 | out: lpBuffer=0x110a4000*, lpNumberOfBytesWritten=0x1145ddfc*=0x1ee4, lpOverlapped=0x1145de08) returned 1
	[0309.150] GetFileType (hFile=0x1d4) returned 0x1
	[0309.151] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1ee4, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.151] GetFileType (hFile=0x1d4) returned 0x1
	[0309.151] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.151] WriteFile (in: hFile=0x1d4, lpBuffer=0x11384a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1145ddfc, lpOverlapped=0x1145de08 | out: lpBuffer=0x11384a80*, lpNumberOfBytesWritten=0x1145ddfc*=0x230, lpOverlapped=0x1145de08) returned 1
	[0309.152] GetFileType (hFile=0x1d4) returned 0x1
	[0309.152] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1ee4, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.152] CloseHandle (hObject=0x1d4) returned 1
	[0309.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf.tl30z")) returned 0x220
	[0309.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.153] SetEvent (hEvent=0x1e0) returned 1
	[0309.153] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0309.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf")) returned 0x220
	[0309.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF", dwFileAttributes=0x220) returned 1
	[0309.212] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0309.341] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11096e08 | out: lpMode=0x11096e08) returned 0
	[0309.341] ReadFile (in: hFile=0x204, lpBuffer=0x11c10000, nNumberOfBytesToRead=0x140c, lpNumberOfBytesRead=0x11096e18, lpOverlapped=0x0 | out: lpBuffer=0x11c10000*, lpNumberOfBytesRead=0x11096e18*=0x140c, lpOverlapped=0x0) returned 1
	[0309.346] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126100 | out: pbBuffer=0x11126100) returned 1
	[0309.346] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111260f8 | out: pbBuffer=0x111260f8) returned 1
	[0309.346] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11412802 | out: pbBuffer=0x11412802) returned 1
	[0309.346] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11412891 | out: pbBuffer=0x11412891) returned 1
	[0309.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126130 | out: pbBuffer=0x11126130) returned 1
	[0309.347] GetFileType (hFile=0x204) returned 0x1
	[0309.347] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.347] WriteFile (in: hFile=0x204, lpBuffer=0x1138a000*, nNumberOfBytesToWrite=0x140c, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1138a000*, lpNumberOfBytesWritten=0x1133ddfc*=0x140c, lpOverlapped=0x1133de08) returned 1
	[0309.348] GetFileType (hFile=0x204) returned 0x1
	[0309.348] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x140c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.348] GetFileType (hFile=0x204) returned 0x1
	[0309.348] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.348] WriteFile (in: hFile=0x204, lpBuffer=0x113b8a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x113b8a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x224, lpOverlapped=0x1133de08) returned 1
	[0309.348] GetFileType (hFile=0x204) returned 0x1
	[0309.348] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x140c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.349] CloseHandle (hObject=0x204) returned 1
	[0309.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf.tl30z")) returned 0x220
	[0309.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.351] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0309.373] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0313.663] SetEvent (hEvent=0x1e0) returned 1
	[0313.663] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0313.664] SetEvent (hEvent=0x1e0) returned 1
	[0313.664] SetEvent (hEvent=0x26c) returned 1
	[0313.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp")) returned 0x220
	[0313.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP", dwFileAttributes=0x220) returned 1
	[0313.665] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0313.715] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0313.715] ReadFile (in: hFile=0x200, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11288e18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0313.823] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126280 | out: pbBuffer=0x11126280) returned 1
	[0313.823] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d7202 | out: pbBuffer=0x111d7202) returned 1
	[0313.823] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111262b0 | out: pbBuffer=0x111262b0) returned 1
	[0313.824] GetFileType (hFile=0x200) returned 0x1
	[0313.824] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.824] WriteFile (in: hFile=0x200, lpBuffer=0x11c56000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c56000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7ce0, lpOverlapped=0x1102be08) returned 1
	[0313.825] GetFileType (hFile=0x200) returned 0x1
	[0313.825] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.825] GetFileType (hFile=0x200) returned 0x1
	[0313.825] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.825] WriteFile (in: hFile=0x200, lpBuffer=0x112fd880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112fd880*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0313.825] GetFileType (hFile=0x200) returned 0x1
	[0313.826] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.826] CloseHandle (hObject=0x200) returned 1
	[0313.836] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0314.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp.tl30z")) returned 0x220
	[0314.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.069] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0314.267] SetEvent (hEvent=0x27c) returned 1
	[0314.267] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0314.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp.tl30z")) returned 0x220
	[0314.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.427] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0314.853] SetEvent (hEvent=0x1e8) returned 1
	[0314.853] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0314.859] SetEvent (hEvent=0x218) returned 1
	[0314.859] SetEvent (hEvent=0x27c) returned 1
	[0314.860] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0314.862] SetEvent (hEvent=0x218) returned 1
	[0314.862] SwitchToThread () returned 1
	[0314.893] SwitchToThread () returned 1
	[0314.896] SetEvent (hEvent=0x218) returned 1
	[0314.896] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0314.899] SetEvent (hEvent=0x218) returned 1
	[0314.899] SetEvent (hEvent=0x27c) returned 1
	[0314.899] SetEvent (hEvent=0x1e0) returned 1
	[0314.899] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0315.165] SetEvent (hEvent=0x218) returned 1
	[0315.166] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0315.201] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0315.862] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0315.864] SetEvent (hEvent=0x1e8) returned 1
	[0315.864] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0315.868] SetEvent (hEvent=0x1e8) returned 1
	[0315.868] SwitchToThread () returned 1
	[0315.869] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0315.893] SetEvent (hEvent=0x1e8) returned 1
	[0315.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg")) returned 0x220
	[0315.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG", dwFileAttributes=0x220) returned 1
	[0315.894] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg.tl30z"), dwFlags=0x1) returned 1
	[0316.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0316.188] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0316.189] ReadFile (in: hFile=0x184, lpBuffer=0x111c0000, nNumberOfBytesToRead=0xa0d2, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x11287e18*=0xa0d2, lpOverlapped=0x0) returned 1
	[0316.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0316.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0316.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d6802 | out: pbBuffer=0x110d6802) returned 1
	[0316.209] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d685e | out: pbBuffer=0x110d685e) returned 1
	[0316.209] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d687e | out: pbBuffer=0x110d687e) returned 1
	[0316.209] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0316.212] GetFileType (hFile=0x184) returned 0x1
	[0316.212] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.212] WriteFile (in: hFile=0x184, lpBuffer=0x112ee000*, nNumberOfBytesToWrite=0xa0d2, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112ee000*, lpNumberOfBytesWritten=0x1102ddfc*=0xa0d2, lpOverlapped=0x1102de08) returned 1
	[0316.213] GetFileType (hFile=0x184) returned 0x1
	[0316.213] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xa0d2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.213] GetFileType (hFile=0x184) returned 0x1
	[0316.213] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.213] WriteFile (in: hFile=0x184, lpBuffer=0x110e8a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110e8a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0316.213] GetFileType (hFile=0x184) returned 0x1
	[0316.213] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xa0d2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.214] CloseHandle (hObject=0x184) returned 1
	[0316.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg.tl30z")) returned 0x220
	[0316.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0316.253] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0316.276] SetEvent (hEvent=0x1e8) returned 1
	[0316.276] SetEvent (hEvent=0x1c4) returned 1
	[0316.276] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0316.279] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0316.279] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0316.281] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0316.281] SetEvent (hEvent=0x1e8) returned 1
	[0316.281] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0316.465] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0316.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif")) returned 0x220
	[0316.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF", dwFileAttributes=0x220) returned 1
	[0316.466] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif.tl30z"), dwFlags=0x1) returned 1
	[0316.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0316.537] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0316.537] ReadFile (in: hFile=0x21c, lpBuffer=0x11358000, nNumberOfBytesToRead=0x49d2, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11358000*, lpNumberOfBytesRead=0x11286e18*=0x49d2, lpOverlapped=0x0) returned 1
	[0316.584] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3d0 | out: pbBuffer=0x1140f3d0) returned 1
	[0316.584] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11275c02 | out: pbBuffer=0x11275c02) returned 1
	[0316.584] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11275c3d | out: pbBuffer=0x11275c3d) returned 1
	[0316.584] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11275c3f | out: pbBuffer=0x11275c3f) returned 1
	[0316.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0316.586] GetFileType (hFile=0x21c) returned 0x1
	[0316.586] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.586] WriteFile (in: hFile=0x21c, lpBuffer=0x110d6000*, nNumberOfBytesToWrite=0x49d2, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110d6000*, lpNumberOfBytesWritten=0x1133fdfc*=0x49d2, lpOverlapped=0x1133fe08) returned 1
	[0316.589] GetFileType (hFile=0x21c) returned 0x1
	[0316.589] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x49d2, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.589] GetFileType (hFile=0x21c) returned 0x1
	[0316.589] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.590] WriteFile (in: hFile=0x21c, lpBuffer=0x110f5c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110f5c00*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0316.590] GetFileType (hFile=0x21c) returned 0x1
	[0316.590] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x49d2, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.590] CloseHandle (hObject=0x21c) returned 1
	[0316.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif.tl30z")) returned 0x220
	[0316.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0316.614] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0316.976] SetEvent (hEvent=0x218) returned 1
	[0316.976] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0317.203] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0317.207] SetEvent (hEvent=0x27c) returned 1
	[0317.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid")) returned 0x220
	[0317.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID", dwFileAttributes=0x220) returned 1
	[0317.207] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid.tl30z"), dwFlags=0x1) returned 1
	[0317.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0317.460] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0317.460] ReadFile (in: hFile=0x21c, lpBuffer=0x1109a000, nNumberOfBytesToRead=0x13c2, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1109a000*, lpNumberOfBytesRead=0x11428e18*=0x13c2, lpOverlapped=0x0) returned 1
	[0317.465] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6700 | out: pbBuffer=0x113e6700) returned 1
	[0317.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b9002 | out: pbBuffer=0x113b9002) returned 1
	[0317.467] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6730 | out: pbBuffer=0x113e6730) returned 1
	[0317.467] GetFileType (hFile=0x21c) returned 0x1
	[0317.467] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.467] WriteFile (in: hFile=0x21c, lpBuffer=0x110b2000*, nNumberOfBytesToWrite=0x13c2, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110b2000*, lpNumberOfBytesWritten=0x1133ddfc*=0x13c2, lpOverlapped=0x1133de08) returned 1
	[0317.468] GetFileType (hFile=0x21c) returned 0x1
	[0317.468] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x13c2, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.468] GetFileType (hFile=0x21c) returned 0x1
	[0317.468] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.468] WriteFile (in: hFile=0x21c, lpBuffer=0x11463c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11463c00*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0317.468] GetFileType (hFile=0x21c) returned 0x1
	[0317.468] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x13c2, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.468] CloseHandle (hObject=0x21c) returned 1
	[0317.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid.tl30z")) returned 0x220
	[0317.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0317.471] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0317.474] SetEvent (hEvent=0x1c4) returned 1
	[0317.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf")) returned 0x220
	[0317.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF", dwFileAttributes=0x220) returned 1
	[0317.475] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0317.571] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0317.571] ReadFile (in: hFile=0x200, lpBuffer=0x11236000, nNumberOfBytesToRead=0x1dac, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11236000*, lpNumberOfBytesRead=0x11428e18*=0x1dac, lpOverlapped=0x0) returned 1
	[0317.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b50 | out: pbBuffer=0x113e6b50) returned 1
	[0317.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6b48 | out: pbBuffer=0x113e6b48) returned 1
	[0317.673] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11171002 | out: pbBuffer=0x11171002) returned 1
	[0317.673] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111710d6 | out: pbBuffer=0x111710d6) returned 1
	[0317.674] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b80 | out: pbBuffer=0x113e6b80) returned 1
	[0317.675] GetFileType (hFile=0x200) returned 0x1
	[0317.675] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.675] WriteFile (in: hFile=0x200, lpBuffer=0x11c30000*, nNumberOfBytesToWrite=0x1dac, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c30000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1dac, lpOverlapped=0x1102be08) returned 1
	[0317.675] GetFileType (hFile=0x200) returned 0x1
	[0317.675] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x1dac, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.675] GetFileType (hFile=0x200) returned 0x1
	[0317.675] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.676] WriteFile (in: hFile=0x200, lpBuffer=0x11c20700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c20700*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0317.676] GetFileType (hFile=0x200) returned 0x1
	[0317.676] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x1dac, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.676] CloseHandle (hObject=0x200) returned 1
	[0317.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf.tl30z")) returned 0x220
	[0317.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.701] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0317.703] SetEvent (hEvent=0x25c) returned 1
	[0317.703] SetEvent (hEvent=0x1bc) returned 1
	[0317.704] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f0f0 | out: pbBuffer=0x1140f0f0) returned 1
	[0317.704] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e0802 | out: pbBuffer=0x110e0802) returned 1
	[0317.704] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e08c2 | out: pbBuffer=0x110e08c2) returned 1
	[0317.705] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f120 | out: pbBuffer=0x1140f120) returned 1
	[0317.705] GetFileType (hFile=0x29c) returned 0x1
	[0317.705] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.706] WriteFile (in: hFile=0x29c, lpBuffer=0x11452000*, nNumberOfBytesToWrite=0x1268, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11452000*, lpNumberOfBytesWritten=0x1102ddfc*=0x1268, lpOverlapped=0x1102de08) returned 1
	[0317.706] GetFileType (hFile=0x29c) returned 0x1
	[0317.706] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x1268, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.706] GetFileType (hFile=0x29c) returned 0x1
	[0317.706] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.707] WriteFile (in: hFile=0x29c, lpBuffer=0x11c3b880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11c3b880*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0317.707] GetFileType (hFile=0x29c) returned 0x1
	[0317.707] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x1268, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.707] CloseHandle (hObject=0x29c) returned 1
	[0317.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf.tl30z")) returned 0x220
	[0317.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.745] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3c0 | out: pbBuffer=0x1140f3c0) returned 1
	[0317.746] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3b8 | out: pbBuffer=0x1140f3b8) returned 1
	[0317.746] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11320702 | out: pbBuffer=0x11320702) returned 1
	[0317.746] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0317.746] GetFileType (hFile=0x1cc) returned 0x1
	[0317.747] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.747] WriteFile (in: hFile=0x1cc, lpBuffer=0x11bc8000*, nNumberOfBytesToWrite=0x1db8, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11bc8000*, lpNumberOfBytesWritten=0x1102ddfc*=0x1db8, lpOverlapped=0x1102de08) returned 1
	[0317.747] GetFileType (hFile=0x1cc) returned 0x1
	[0317.747] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x1db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.747] GetFileType (hFile=0x1cc) returned 0x1
	[0317.747] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.748] WriteFile (in: hFile=0x1cc, lpBuffer=0x1132a700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1132a700*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0317.748] GetFileType (hFile=0x1cc) returned 0x1
	[0317.748] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x1db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.748] CloseHandle (hObject=0x1cc) returned 1
	[0317.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf.tl30z")) returned 0x220
	[0317.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.769] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0317.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf")) returned 0x220
	[0317.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF", dwFileAttributes=0x220) returned 1
	[0317.817] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0317.937] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0317.937] ReadFile (in: hFile=0x1c8, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x3b2e, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11425e18*=0x3b2e, lpOverlapped=0x0) returned 1
	[0317.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0317.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11472802 | out: pbBuffer=0x11472802) returned 1
	[0317.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11472804 | out: pbBuffer=0x11472804) returned 1
	[0317.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0317.963] GetFileType (hFile=0x1c8) returned 0x1
	[0317.963] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.963] WriteFile (in: hFile=0x1c8, lpBuffer=0x110f0000*, nNumberOfBytesToWrite=0x3b2e, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110f0000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3b2e, lpOverlapped=0x1102be08) returned 1
	[0317.964] GetFileType (hFile=0x1c8) returned 0x1
	[0317.964] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x3b2e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.964] GetFileType (hFile=0x1c8) returned 0x1
	[0317.964] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.964] WriteFile (in: hFile=0x1c8, lpBuffer=0x112aae00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112aae00*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0317.964] GetFileType (hFile=0x1c8) returned 0x1
	[0317.965] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x3b2e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.965] CloseHandle (hObject=0x1c8) returned 1
	[0317.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf.tl30z")) returned 0x220
	[0317.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.977] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0317.979] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0317.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf")) returned 0x220
	[0317.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF", dwFileAttributes=0x220) returned 1
	[0317.989] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0318.324] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0318.325] ReadFile (in: hFile=0x224, lpBuffer=0x111d0000, nNumberOfBytesToRead=0x280c, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x111d0000*, lpNumberOfBytesRead=0x11022e18*=0x280c, lpOverlapped=0x0) returned 1
	[0318.341] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0318.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0318.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11473302 | out: pbBuffer=0x11473302) returned 1
	[0318.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1147334b | out: pbBuffer=0x1147334b) returned 1
	[0318.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11473393 | out: pbBuffer=0x11473393) returned 1
	[0318.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0318.352] GetFileType (hFile=0x224) returned 0x1
	[0318.352] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.352] WriteFile (in: hFile=0x224, lpBuffer=0x110b0000*, nNumberOfBytesToWrite=0x280c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110b0000*, lpNumberOfBytesWritten=0x1102bdfc*=0x280c, lpOverlapped=0x1102be08) returned 1
	[0318.353] GetFileType (hFile=0x224) returned 0x1
	[0318.353] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x280c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.353] GetFileType (hFile=0x224) returned 0x1
	[0318.353] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.353] WriteFile (in: hFile=0x224, lpBuffer=0x112abc00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112abc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0318.354] GetFileType (hFile=0x224) returned 0x1
	[0318.354] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x280c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.354] CloseHandle (hObject=0x224) returned 1
	[0318.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf.tl30z")) returned 0x220
	[0318.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.430] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0318.452] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0318.492] SetEvent (hEvent=0x2a8) returned 1
	[0318.494] SetEvent (hEvent=0x25c) returned 1
	[0318.494] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0318.533] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0318.538] SetEvent (hEvent=0x25c) returned 1
	[0318.538] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0x1) returned 0x102
	[0318.540] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0318.540] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0318.729] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0318.745] SetEvent (hEvent=0x2a8) returned 1
	[0318.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf")) returned 0x220
	[0318.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF", dwFileAttributes=0x220) returned 1
	[0318.746] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0318.838] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0318.839] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0318.840] ReadFile (in: hFile=0x1d8, lpBuffer=0x11100000, nNumberOfBytesToRead=0x7a04, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11100000*, lpNumberOfBytesRead=0x11423e18*=0x7a04, lpOverlapped=0x0) returned 1
	[0318.846] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263e0 | out: pbBuffer=0x111263e0) returned 1
	[0318.846] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111263d8 | out: pbBuffer=0x111263d8) returned 1
	[0318.846] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141bf02 | out: pbBuffer=0x1141bf02) returned 1
	[0318.846] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1141bfc9 | out: pbBuffer=0x1141bfc9) returned 1
	[0318.847] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126410 | out: pbBuffer=0x11126410) returned 1
	[0318.848] GetFileType (hFile=0x1d8) returned 0x1
	[0318.848] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.848] WriteFile (in: hFile=0x1d8, lpBuffer=0x11236000*, nNumberOfBytesToWrite=0x7a04, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11236000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7a04, lpOverlapped=0x1102be08) returned 1
	[0318.848] GetFileType (hFile=0x1d8) returned 0x1
	[0318.849] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7a04, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.849] GetFileType (hFile=0x1d8) returned 0x1
	[0318.849] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.849] WriteFile (in: hFile=0x1d8, lpBuffer=0x1110ea80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1110ea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0318.849] GetFileType (hFile=0x1d8) returned 0x1
	[0318.849] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7a04, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.849] CloseHandle (hObject=0x1d8) returned 1
	[0318.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf.tl30z")) returned 0x220
	[0318.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.854] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0318.857] SetEvent (hEvent=0x25c) returned 1
	[0318.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf")) returned 0x220
	[0318.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF", dwFileAttributes=0x220) returned 1
	[0318.857] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0318.969] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0318.969] ReadFile (in: hFile=0x298, lpBuffer=0x11c30000, nNumberOfBytesToRead=0x1948, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11c30000*, lpNumberOfBytesRead=0x11423e18*=0x1948, lpOverlapped=0x0) returned 1
	[0318.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63b0 | out: pbBuffer=0x113e63b0) returned 1
	[0318.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63a8 | out: pbBuffer=0x113e63a8) returned 1
	[0318.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11355302 | out: pbBuffer=0x11355302) returned 1
	[0318.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0318.976] GetFileType (hFile=0x298) returned 0x1
	[0318.976] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.976] WriteFile (in: hFile=0x298, lpBuffer=0x113d6000*, nNumberOfBytesToWrite=0x1948, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113d6000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1948, lpOverlapped=0x1133fe08) returned 1
	[0318.976] GetFileType (hFile=0x298) returned 0x1
	[0318.976] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x1948, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.976] GetFileType (hFile=0x298) returned 0x1
	[0318.977] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.977] WriteFile (in: hFile=0x298, lpBuffer=0x112b9880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112b9880*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0318.977] GetFileType (hFile=0x298) returned 0x1
	[0318.977] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x1948, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.977] CloseHandle (hObject=0x298) returned 1
	[0318.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf.tl30z")) returned 0x220
	[0318.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.981] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0318.984] SetEvent (hEvent=0x27c) returned 1
	[0318.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf")) returned 0x220
	[0318.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF", dwFileAttributes=0x220) returned 1
	[0318.985] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0319.085] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0319.086] ReadFile (in: hFile=0x1d8, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x828, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11423e18*=0x828, lpOverlapped=0x0) returned 1
	[0319.095] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0319.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0319.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a0802 | out: pbBuffer=0x110a0802) returned 1
	[0319.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110a08c1 | out: pbBuffer=0x110a08c1) returned 1
	[0319.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0319.096] GetFileType (hFile=0x1d8) returned 0x1
	[0319.096] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.097] WriteFile (in: hFile=0x1d8, lpBuffer=0x110c2000*, nNumberOfBytesToWrite=0x828, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110c2000*, lpNumberOfBytesWritten=0x1133bdfc*=0x828, lpOverlapped=0x1133be08) returned 1
	[0319.097] GetFileType (hFile=0x1d8) returned 0x1
	[0319.097] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x828, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.097] GetFileType (hFile=0x1d8) returned 0x1
	[0319.097] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.097] WriteFile (in: hFile=0x1d8, lpBuffer=0x110b2a80*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110b2a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x221, lpOverlapped=0x1133be08) returned 1
	[0319.097] GetFileType (hFile=0x1d8) returned 0x1
	[0319.098] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x828, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.098] CloseHandle (hObject=0x1d8) returned 1
	[0319.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf.tl30z")) returned 0x220
	[0319.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.101] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0319.105] SetEvent (hEvent=0x164) returned 1
	[0319.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf")) returned 0x220
	[0319.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF", dwFileAttributes=0x220) returned 1
	[0319.105] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0319.222] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0319.222] ReadFile (in: hFile=0x1cc, lpBuffer=0x11252000, nNumberOfBytesToRead=0x59ec, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11252000*, lpNumberOfBytesRead=0x11423e18*=0x59ec, lpOverlapped=0x0) returned 1
	[0319.228] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0319.229] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0319.229] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1139c802 | out: pbBuffer=0x1139c802) returned 1
	[0319.229] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139c8c6 | out: pbBuffer=0x1139c8c6) returned 1
	[0319.229] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0319.230] GetFileType (hFile=0x1cc) returned 0x1
	[0319.230] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.230] WriteFile (in: hFile=0x1cc, lpBuffer=0x112e2000*, nNumberOfBytesToWrite=0x59ec, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112e2000*, lpNumberOfBytesWritten=0x11031dfc*=0x59ec, lpOverlapped=0x11031e08) returned 1
	[0319.232] GetFileType (hFile=0x1cc) returned 0x1
	[0319.232] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x59ec, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.232] GetFileType (hFile=0x1cc) returned 0x1
	[0319.232] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.232] WriteFile (in: hFile=0x1cc, lpBuffer=0x113daa80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113daa80*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0319.232] GetFileType (hFile=0x1cc) returned 0x1
	[0319.232] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x59ec, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.233] CloseHandle (hObject=0x1cc) returned 1
	[0319.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf.tl30z")) returned 0x220
	[0319.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.236] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0319.239] SetEvent (hEvent=0x1e8) returned 1
	[0319.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf")) returned 0x220
	[0319.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF", dwFileAttributes=0x220) returned 1
	[0319.240] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0319.675] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0319.675] ReadFile (in: hFile=0x204, lpBuffer=0x112fa000, nNumberOfBytesToRead=0x2bb8, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112fa000*, lpNumberOfBytesRead=0x11423e18*=0x2bb8, lpOverlapped=0x0) returned 1
	[0319.679] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327f0 | out: pbBuffer=0x113327f0) returned 1
	[0319.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11443302 | out: pbBuffer=0x11443302) returned 1
	[0319.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11443321 | out: pbBuffer=0x11443321) returned 1
	[0319.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332820 | out: pbBuffer=0x11332820) returned 1
	[0319.680] GetFileType (hFile=0x204) returned 0x1
	[0319.680] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.682] WriteFile (in: hFile=0x204, lpBuffer=0x111d8000*, nNumberOfBytesToWrite=0x2bb8, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111d8000*, lpNumberOfBytesWritten=0x1133bdfc*=0x2bb8, lpOverlapped=0x1133be08) returned 1
	[0319.682] GetFileType (hFile=0x204) returned 0x1
	[0319.682] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x2bb8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.682] GetFileType (hFile=0x204) returned 0x1
	[0319.682] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.683] WriteFile (in: hFile=0x204, lpBuffer=0x1130a700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1130a700*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0319.683] GetFileType (hFile=0x204) returned 0x1
	[0319.683] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x2bb8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.683] CloseHandle (hObject=0x204) returned 1
	[0319.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf.tl30z")) returned 0x220
	[0319.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.686] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0319.689] SetEvent (hEvent=0x284) returned 1
	[0319.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf")) returned 0x220
	[0319.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF", dwFileAttributes=0x220) returned 1
	[0319.690] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0319.771] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0319.771] ReadFile (in: hFile=0x1cc, lpBuffer=0x111ee000, nNumberOfBytesToRead=0x6260, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x111ee000*, lpNumberOfBytesRead=0x11423e18*=0x6260, lpOverlapped=0x0) returned 1
	[0319.776] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f820 | out: pbBuffer=0x1140f820) returned 1
	[0319.776] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f818 | out: pbBuffer=0x1140f818) returned 1
	[0319.776] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b5d02 | out: pbBuffer=0x112b5d02) returned 1
	[0319.776] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b5d75 | out: pbBuffer=0x112b5d75) returned 1
	[0319.777] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f850 | out: pbBuffer=0x1140f850) returned 1
	[0319.777] GetFileType (hFile=0x1cc) returned 0x1
	[0319.777] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.778] WriteFile (in: hFile=0x1cc, lpBuffer=0x11222000*, nNumberOfBytesToWrite=0x6260, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11222000*, lpNumberOfBytesWritten=0x1133ddfc*=0x6260, lpOverlapped=0x1133de08) returned 1
	[0319.778] GetFileType (hFile=0x1cc) returned 0x1
	[0319.778] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6260, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.779] GetFileType (hFile=0x1cc) returned 0x1
	[0319.779] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.779] WriteFile (in: hFile=0x1cc, lpBuffer=0x11187180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11187180*, lpNumberOfBytesWritten=0x1133ddfc*=0x227, lpOverlapped=0x1133de08) returned 1
	[0319.779] GetFileType (hFile=0x1cc) returned 0x1
	[0319.779] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6260, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.779] CloseHandle (hObject=0x1cc) returned 1
	[0319.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf.tl30z")) returned 0x220
	[0319.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.785] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0319.788] SetEvent (hEvent=0x284) returned 1
	[0319.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf")) returned 0x220
	[0319.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF", dwFileAttributes=0x220) returned 1
	[0319.789] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0319.940] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0319.940] ReadFile (in: hFile=0x1c8, lpBuffer=0x11354000, nNumberOfBytesToRead=0x584, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11354000*, lpNumberOfBytesRead=0x11423e18*=0x584, lpOverlapped=0x0) returned 1
	[0319.945] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0319.945] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138a802 | out: pbBuffer=0x1138a802) returned 1
	[0319.945] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138a825 | out: pbBuffer=0x1138a825) returned 1
	[0319.945] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0319.945] GetFileType (hFile=0x1c8) returned 0x1
	[0319.946] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.946] WriteFile (in: hFile=0x1c8, lpBuffer=0x1134c000*, nNumberOfBytesToWrite=0x584, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1134c000*, lpNumberOfBytesWritten=0x1133bdfc*=0x584, lpOverlapped=0x1133be08) returned 1
	[0319.946] GetFileType (hFile=0x1c8) returned 0x1
	[0319.946] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x584, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.946] GetFileType (hFile=0x1c8) returned 0x1
	[0319.946] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.947] WriteFile (in: hFile=0x1c8, lpBuffer=0x11472a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11472a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x224, lpOverlapped=0x1133be08) returned 1
	[0319.947] GetFileType (hFile=0x1c8) returned 0x1
	[0319.947] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x584, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.947] CloseHandle (hObject=0x1c8) returned 1
	[0319.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf.tl30z")) returned 0x220
	[0319.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.950] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0319.952] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0319.953] SetEvent (hEvent=0x164) returned 1
	[0319.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf")) returned 0x220
	[0319.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF", dwFileAttributes=0x220) returned 1
	[0319.954] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0320.059] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0320.059] ReadFile (in: hFile=0x1c8, lpBuffer=0x112f4a80, nNumberOfBytesToRead=0x6302, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x112f4a80*, lpNumberOfBytesRead=0x11316e18*=0x6302, lpOverlapped=0x0) returned 1
	[0320.065] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f540 | out: pbBuffer=0x1140f540) returned 1
	[0320.065] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d4702 | out: pbBuffer=0x110d4702) returned 1
	[0320.065] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d473f | out: pbBuffer=0x110d473f) returned 1
	[0320.066] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0320.066] GetFileType (hFile=0x1c8) returned 0x1
	[0320.066] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.067] WriteFile (in: hFile=0x1c8, lpBuffer=0x111d0000*, nNumberOfBytesToWrite=0x6302, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111d0000*, lpNumberOfBytesWritten=0x1133bdfc*=0x6302, lpOverlapped=0x1133be08) returned 1
	[0320.067] GetFileType (hFile=0x1c8) returned 0x1
	[0320.067] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6302, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.067] GetFileType (hFile=0x1c8) returned 0x1
	[0320.067] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.068] WriteFile (in: hFile=0x1c8, lpBuffer=0x1132d500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1132d500*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0320.068] GetFileType (hFile=0x1c8) returned 0x1
	[0320.068] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6302, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.068] CloseHandle (hObject=0x1c8) returned 1
	[0320.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf.tl30z")) returned 0x220
	[0320.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.072] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0320.073] SetEvent (hEvent=0x164) returned 1
	[0320.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00734_.wmf")) returned 0x220
	[0320.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00734_.WMF", dwFileAttributes=0x220) returned 1
	[0320.074] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00734_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00734_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00734_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00734_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00734_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.150] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0320.150] ReadFile (in: hFile=0x224, lpBuffer=0x110f4000, nNumberOfBytesToRead=0x660, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110f4000*, lpNumberOfBytesRead=0x11316e18*=0x660, lpOverlapped=0x0) returned 1
	[0320.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0320.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0320.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11100802 | out: pbBuffer=0x11100802) returned 1
	[0320.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111008d9 | out: pbBuffer=0x111008d9) returned 1
	[0320.156] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0320.156] GetFileType (hFile=0x224) returned 0x1
	[0320.156] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.156] WriteFile (in: hFile=0x224, lpBuffer=0x11123000*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11123000*, lpNumberOfBytesWritten=0x1102bdfc*=0x660, lpOverlapped=0x1102be08) returned 1
	[0320.156] GetFileType (hFile=0x224) returned 0x1
	[0320.156] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x660, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.157] GetFileType (hFile=0x224) returned 0x1
	[0320.157] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.157] WriteFile (in: hFile=0x224, lpBuffer=0x11112a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11112a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0320.157] GetFileType (hFile=0x224) returned 0x1
	[0320.157] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x660, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.157] CloseHandle (hObject=0x224) returned 1
	[0320.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00734_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00734_.wmf.tl30z")) returned 0x220
	[0320.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00734_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.160] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0320.163] SetEvent (hEvent=0x164) returned 1
	[0320.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00820_.wmf")) returned 0x220
	[0320.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00820_.WMF", dwFileAttributes=0x220) returned 1
	[0320.164] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00820_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00820_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00820_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00820_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00820_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.238] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0320.238] ReadFile (in: hFile=0x224, lpBuffer=0x11104000, nNumberOfBytesToRead=0x41c2, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11104000*, lpNumberOfBytesRead=0x11316e18*=0x41c2, lpOverlapped=0x0) returned 1
	[0320.243] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0320.243] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1118c802 | out: pbBuffer=0x1118c802) returned 1
	[0320.243] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118c84b | out: pbBuffer=0x1118c84b) returned 1
	[0320.243] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118c867 | out: pbBuffer=0x1118c867) returned 1
	[0320.244] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0320.244] GetFileType (hFile=0x224) returned 0x1
	[0320.244] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.244] WriteFile (in: hFile=0x224, lpBuffer=0x11212000*, nNumberOfBytesToWrite=0x41c2, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11212000*, lpNumberOfBytesWritten=0x1102ddfc*=0x41c2, lpOverlapped=0x1102de08) returned 1
	[0320.245] GetFileType (hFile=0x224) returned 0x1
	[0320.245] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x41c2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.245] GetFileType (hFile=0x224) returned 0x1
	[0320.245] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.245] WriteFile (in: hFile=0x224, lpBuffer=0x11221180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11221180*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0320.245] GetFileType (hFile=0x224) returned 0x1
	[0320.246] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x41c2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.246] CloseHandle (hObject=0x224) returned 1
	[0320.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00820_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00820_.wmf.tl30z")) returned 0x220
	[0320.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00820_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.249] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0320.251] SetEvent (hEvent=0x25c) returned 1
	[0320.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00911_.wmf")) returned 0x220
	[0320.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00911_.WMF", dwFileAttributes=0x220) returned 1
	[0320.252] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00911_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00911_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00911_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00911_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00911_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0320.330] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0320.330] ReadFile (in: hFile=0x1cc, lpBuffer=0x11124000, nNumberOfBytesToRead=0x29f8, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11124000*, lpNumberOfBytesRead=0x11316e18*=0x29f8, lpOverlapped=0x0) returned 1
	[0320.335] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0320.335] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332388 | out: pbBuffer=0x11332388) returned 1
	[0320.335] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113dd202 | out: pbBuffer=0x113dd202) returned 1
	[0320.336] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0320.336] GetFileType (hFile=0x1cc) returned 0x1
	[0320.336] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.336] WriteFile (in: hFile=0x1cc, lpBuffer=0x112d4000*, nNumberOfBytesToWrite=0x29f8, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112d4000*, lpNumberOfBytesWritten=0x1133ddfc*=0x29f8, lpOverlapped=0x1133de08) returned 1
	[0320.337] GetFileType (hFile=0x1cc) returned 0x1
	[0320.337] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x29f8, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.337] GetFileType (hFile=0x1cc) returned 0x1
	[0320.337] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.337] WriteFile (in: hFile=0x1cc, lpBuffer=0x11147880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11147880*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0320.337] GetFileType (hFile=0x1cc) returned 0x1
	[0320.337] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x29f8, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.337] CloseHandle (hObject=0x1cc) returned 1
	[0320.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00911_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00911_.wmf.tl30z")) returned 0x220
	[0320.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00911_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.347] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0320.349] SetEvent (hEvent=0x25c) returned 1
	[0320.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00917_.wmf")) returned 0x220
	[0320.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00917_.WMF", dwFileAttributes=0x220) returned 1
	[0320.350] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00917_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00917_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00917_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00917_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00917_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0320.430] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0320.430] ReadFile (in: hFile=0x1d8, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x25ac, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x11316e18*=0x25ac, lpOverlapped=0x0) returned 1
	[0320.435] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6d0 | out: pbBuffer=0x1140f6d0) returned 1
	[0320.436] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e5302 | out: pbBuffer=0x111e5302) returned 1
	[0320.436] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e5324 | out: pbBuffer=0x111e5324) returned 1
	[0320.436] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e53ca | out: pbBuffer=0x111e53ca) returned 1
	[0320.437] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f700 | out: pbBuffer=0x1140f700) returned 1
	[0320.437] GetFileType (hFile=0x1d8) returned 0x1
	[0320.437] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.437] WriteFile (in: hFile=0x1d8, lpBuffer=0x11312000*, nNumberOfBytesToWrite=0x25ac, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11312000*, lpNumberOfBytesWritten=0x1102ddfc*=0x25ac, lpOverlapped=0x1102de08) returned 1
	[0320.438] GetFileType (hFile=0x1d8) returned 0x1
	[0320.438] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x25ac, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.438] GetFileType (hFile=0x1d8) returned 0x1
	[0320.438] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.438] WriteFile (in: hFile=0x1d8, lpBuffer=0x112faa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112faa80*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0320.439] GetFileType (hFile=0x1d8) returned 0x1
	[0320.439] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x25ac, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.439] CloseHandle (hObject=0x1d8) returned 1
	[0320.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00917_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00917_.wmf.tl30z")) returned 0x220
	[0320.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00917_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.444] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0320.448] SetEvent (hEvent=0x2a8) returned 1
	[0320.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00942_.wmf")) returned 0x220
	[0320.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00942_.WMF", dwFileAttributes=0x220) returned 1
	[0320.449] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00942_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00942_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00942_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00942_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00942_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0320.565] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0320.566] ReadFile (in: hFile=0x1c8, lpBuffer=0x1143e000, nNumberOfBytesToRead=0x1264, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1143e000*, lpNumberOfBytesRead=0x11316e18*=0x1264, lpOverlapped=0x0) returned 1
	[0320.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0320.573] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0320.573] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b2802 | out: pbBuffer=0x110b2802) returned 1
	[0320.573] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b2859 | out: pbBuffer=0x110b2859) returned 1
	[0320.573] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0320.574] GetFileType (hFile=0x1c8) returned 0x1
	[0320.574] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.575] WriteFile (in: hFile=0x1c8, lpBuffer=0x11344000*, nNumberOfBytesToWrite=0x1264, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11344000*, lpNumberOfBytesWritten=0x1102ddfc*=0x1264, lpOverlapped=0x1102de08) returned 1
	[0320.575] GetFileType (hFile=0x1c8) returned 0x1
	[0320.575] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1264, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.575] GetFileType (hFile=0x1c8) returned 0x1
	[0320.575] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.577] WriteFile (in: hFile=0x1c8, lpBuffer=0x11465180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11465180*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0320.577] GetFileType (hFile=0x1c8) returned 0x1
	[0320.577] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1264, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.577] CloseHandle (hObject=0x1c8) returned 1
	[0320.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00942_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00942_.wmf.tl30z")) returned 0x220
	[0320.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00942_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.584] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0320.590] SetEvent (hEvent=0x284) returned 1
	[0320.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01560_.wmf")) returned 0x220
	[0320.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01560_.WMF", dwFileAttributes=0x220) returned 1
	[0320.591] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01560_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01560_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01560_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01560_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01560_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.845] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0320.845] ReadFile (in: hFile=0x224, lpBuffer=0x113b3000, nNumberOfBytesToRead=0x43b0, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x113b3000*, lpNumberOfBytesRead=0x11316e18*=0x43b0, lpOverlapped=0x0) returned 1
	[0320.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0320.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112cbd02 | out: pbBuffer=0x112cbd02) returned 1
	[0320.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112cbd03 | out: pbBuffer=0x112cbd03) returned 1
	[0320.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112cbd47 | out: pbBuffer=0x112cbd47) returned 1
	[0320.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112cbdb6 | out: pbBuffer=0x112cbdb6) returned 1
	[0320.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332540 | out: pbBuffer=0x11332540) returned 1
	[0320.851] GetFileType (hFile=0x224) returned 0x1
	[0320.852] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.852] WriteFile (in: hFile=0x224, lpBuffer=0x113d8000*, nNumberOfBytesToWrite=0x43b0, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113d8000*, lpNumberOfBytesWritten=0x1133fdfc*=0x43b0, lpOverlapped=0x1133fe08) returned 1
	[0320.852] GetFileType (hFile=0x224) returned 0x1
	[0320.852] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x43b0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.852] GetFileType (hFile=0x224) returned 0x1
	[0320.852] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.853] WriteFile (in: hFile=0x224, lpBuffer=0x113fa700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113fa700*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0320.853] GetFileType (hFile=0x224) returned 0x1
	[0320.853] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x43b0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.853] CloseHandle (hObject=0x224) returned 1
	[0320.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01560_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01560_.wmf.tl30z")) returned 0x220
	[0320.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01560_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.857] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0320.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01569_.wmf")) returned 0x220
	[0320.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01569_.WMF", dwFileAttributes=0x220) returned 1
	[0320.859] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01569_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01569_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01569_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01569_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01569_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.936] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0320.936] ReadFile (in: hFile=0x224, lpBuffer=0x11126000, nNumberOfBytesToRead=0x47a0, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11126000*, lpNumberOfBytesRead=0x11316e18*=0x47a0, lpOverlapped=0x0) returned 1
	[0320.942] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f830 | out: pbBuffer=0x1140f830) returned 1
	[0320.943] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f828 | out: pbBuffer=0x1140f828) returned 1
	[0320.943] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111cde02 | out: pbBuffer=0x111cde02) returned 1
	[0320.943] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f860 | out: pbBuffer=0x1140f860) returned 1
	[0320.944] GetFileType (hFile=0x224) returned 0x1
	[0320.944] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.944] WriteFile (in: hFile=0x224, lpBuffer=0x11172000*, nNumberOfBytesToWrite=0x47a0, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11172000*, lpNumberOfBytesWritten=0x1133bdfc*=0x47a0, lpOverlapped=0x1133be08) returned 1
	[0320.945] GetFileType (hFile=0x224) returned 0x1
	[0320.945] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x47a0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.945] GetFileType (hFile=0x224) returned 0x1
	[0320.945] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.945] WriteFile (in: hFile=0x224, lpBuffer=0x110f9880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110f9880*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0320.946] GetFileType (hFile=0x224) returned 0x1
	[0320.946] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x47a0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.946] CloseHandle (hObject=0x224) returned 1
	[0320.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01569_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01569_.wmf.tl30z")) returned 0x220
	[0320.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01569_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.956] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0320.962] SetEvent (hEvent=0x1e8) returned 1
	[0320.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01905_.wmf")) returned 0x220
	[0320.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01905_.WMF", dwFileAttributes=0x220) returned 1
	[0320.963] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01905_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01905_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01905_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01905_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01905_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0321.132] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0321.133] ReadFile (in: hFile=0x204, lpBuffer=0x11328000, nNumberOfBytesToRead=0x578, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11328000*, lpNumberOfBytesRead=0x11316e18*=0x578, lpOverlapped=0x0) returned 1
	[0321.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0321.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11369202 | out: pbBuffer=0x11369202) returned 1
	[0321.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11369262 | out: pbBuffer=0x11369262) returned 1
	[0321.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0321.139] GetFileType (hFile=0x204) returned 0x1
	[0321.139] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.139] WriteFile (in: hFile=0x204, lpBuffer=0x113d7000*, nNumberOfBytesToWrite=0x578, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d7000*, lpNumberOfBytesWritten=0x1102bdfc*=0x578, lpOverlapped=0x1102be08) returned 1
	[0321.139] GetFileType (hFile=0x204) returned 0x1
	[0321.139] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x578, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.140] GetFileType (hFile=0x204) returned 0x1
	[0321.140] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.140] WriteFile (in: hFile=0x204, lpBuffer=0x1141f880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1141f880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0321.141] GetFileType (hFile=0x204) returned 0x1
	[0321.141] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x578, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.141] CloseHandle (hObject=0x204) returned 1
	[0321.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01905_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01905_.wmf.tl30z")) returned 0x220
	[0321.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01905_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.144] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0321.148] SetEvent (hEvent=0x27c) returned 1
	[0321.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02025_.wmf")) returned 0x220
	[0321.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02025_.WMF", dwFileAttributes=0x220) returned 1
	[0321.149] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02025_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02025_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02025_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02025_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02025_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0321.239] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0321.239] ReadFile (in: hFile=0x224, lpBuffer=0x11294f00, nNumberOfBytesToRead=0x2016, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11294f00*, lpNumberOfBytesRead=0x11316e18*=0x2016, lpOverlapped=0x0) returned 1
	[0321.244] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f540 | out: pbBuffer=0x1140f540) returned 1
	[0321.244] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f538 | out: pbBuffer=0x1140f538) returned 1
	[0321.245] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11454802 | out: pbBuffer=0x11454802) returned 1
	[0321.245] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0321.245] GetFileType (hFile=0x224) returned 0x1
	[0321.245] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.246] WriteFile (in: hFile=0x224, lpBuffer=0x112b0000*, nNumberOfBytesToWrite=0x2016, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112b0000*, lpNumberOfBytesWritten=0x1133ddfc*=0x2016, lpOverlapped=0x1133de08) returned 1
	[0321.246] GetFileType (hFile=0x224) returned 0x1
	[0321.246] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2016, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.246] GetFileType (hFile=0x224) returned 0x1
	[0321.247] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.247] WriteFile (in: hFile=0x224, lpBuffer=0x113c7880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x113c7880*, lpNumberOfBytesWritten=0x1133ddfc*=0x224, lpOverlapped=0x1133de08) returned 1
	[0321.247] GetFileType (hFile=0x224) returned 0x1
	[0321.247] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2016, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.247] CloseHandle (hObject=0x224) returned 1
	[0321.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02025_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02025_.wmf.tl30z")) returned 0x220
	[0321.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02025_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.250] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0321.254] SetEvent (hEvent=0x27c) returned 1
	[0321.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02054_.wmf")) returned 0x220
	[0321.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02054_.WMF", dwFileAttributes=0x220) returned 1
	[0321.255] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02054_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02054_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02054_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02054_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02054_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0321.346] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0321.346] ReadFile (in: hFile=0x298, lpBuffer=0x1122a000, nNumberOfBytesToRead=0x30ca, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1122a000*, lpNumberOfBytesRead=0x11316e18*=0x30ca, lpOverlapped=0x0) returned 1
	[0321.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0321.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e648 | out: pbBuffer=0x1104e648) returned 1
	[0321.352] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11236702 | out: pbBuffer=0x11236702) returned 1
	[0321.352] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11236743 | out: pbBuffer=0x11236743) returned 1
	[0321.352] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11236747 | out: pbBuffer=0x11236747) returned 1
	[0321.352] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e680 | out: pbBuffer=0x1104e680) returned 1
	[0321.353] GetFileType (hFile=0x298) returned 0x1
	[0321.353] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.353] WriteFile (in: hFile=0x298, lpBuffer=0x11252000*, nNumberOfBytesToWrite=0x30ca, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11252000*, lpNumberOfBytesWritten=0x1102bdfc*=0x30ca, lpOverlapped=0x1102be08) returned 1
	[0321.353] GetFileType (hFile=0x298) returned 0x1
	[0321.354] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x30ca, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.354] GetFileType (hFile=0x298) returned 0x1
	[0321.354] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.354] WriteFile (in: hFile=0x298, lpBuffer=0x111eb500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111eb500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0321.354] GetFileType (hFile=0x298) returned 0x1
	[0321.354] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x30ca, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.354] CloseHandle (hObject=0x298) returned 1
	[0321.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02054_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02054_.wmf.tl30z")) returned 0x220
	[0321.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02054_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.358] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0321.362] SetEvent (hEvent=0x27c) returned 1
	[0321.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02228_.wmf")) returned 0x220
	[0321.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02228_.WMF", dwFileAttributes=0x220) returned 1
	[0321.362] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02228_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02228_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02228_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02228_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02228_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.479] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0321.479] ReadFile (in: hFile=0x1c8, lpBuffer=0x111c7880, nNumberOfBytesToRead=0x334, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x111c7880*, lpNumberOfBytesRead=0x11316e18*=0x334, lpOverlapped=0x0) returned 1
	[0321.485] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0321.485] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6268 | out: pbBuffer=0x113e6268) returned 1
	[0321.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b9302 | out: pbBuffer=0x112b9302) returned 1
	[0321.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0321.486] GetFileType (hFile=0x1c8) returned 0x1
	[0321.486] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.487] WriteFile (in: hFile=0x1c8, lpBuffer=0x11334000*, nNumberOfBytesToWrite=0x334, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11334000*, lpNumberOfBytesWritten=0x1133bdfc*=0x334, lpOverlapped=0x1133be08) returned 1
	[0321.487] GetFileType (hFile=0x1c8) returned 0x1
	[0321.487] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x334, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.487] GetFileType (hFile=0x1c8) returned 0x1
	[0321.487] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.488] WriteFile (in: hFile=0x1c8, lpBuffer=0x1127a700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1127a700*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0321.488] GetFileType (hFile=0x1c8) returned 0x1
	[0321.488] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x334, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.488] CloseHandle (hObject=0x1c8) returned 1
	[0321.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02228_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02228_.wmf.tl30z")) returned 0x220
	[0321.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02228_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.504] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0321.509] SetEvent (hEvent=0x27c) returned 1
	[0321.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02263_.wmf")) returned 0x220
	[0321.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02263_.WMF", dwFileAttributes=0x220) returned 1
	[0321.510] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02263_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02263_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02263_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02263_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02263_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.592] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0321.592] ReadFile (in: hFile=0x1c8, lpBuffer=0x1146cc00, nNumberOfBytesToRead=0xa94, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1146cc00*, lpNumberOfBytesRead=0x11316e18*=0xa94, lpOverlapped=0x0) returned 1
	[0321.598] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0321.598] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c5202 | out: pbBuffer=0x110c5202) returned 1
	[0321.598] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c5271 | out: pbBuffer=0x110c5271) returned 1
	[0321.598] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0321.598] GetFileType (hFile=0x1c8) returned 0x1
	[0321.599] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.599] WriteFile (in: hFile=0x1c8, lpBuffer=0x113fd000*, nNumberOfBytesToWrite=0xa94, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x113fd000*, lpNumberOfBytesWritten=0x1102ddfc*=0xa94, lpOverlapped=0x1102de08) returned 1
	[0321.599] GetFileType (hFile=0x1c8) returned 0x1
	[0321.599] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xa94, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.599] GetFileType (hFile=0x1c8) returned 0x1
	[0321.600] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.600] WriteFile (in: hFile=0x1c8, lpBuffer=0x11351880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11351880*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0321.600] GetFileType (hFile=0x1c8) returned 0x1
	[0321.601] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xa94, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.601] CloseHandle (hObject=0x1c8) returned 1
	[0321.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02263_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02263_.wmf.tl30z")) returned 0x220
	[0321.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02263_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.604] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0321.609] SetEvent (hEvent=0x27c) returned 1
	[0321.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02276_.wmf")) returned 0x220
	[0321.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02276_.WMF", dwFileAttributes=0x220) returned 1
	[0321.609] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02276_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02276_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02276_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02276_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02276_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0321.688] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0321.688] ReadFile (in: hFile=0x204, lpBuffer=0x11302000, nNumberOfBytesToRead=0x30e4, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11302000*, lpNumberOfBytesRead=0x11316e18*=0x30e4, lpOverlapped=0x0) returned 1
	[0321.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0321.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ac802 | out: pbBuffer=0x113ac802) returned 1
	[0321.695] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113ac8db | out: pbBuffer=0x113ac8db) returned 1
	[0321.695] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0321.695] GetFileType (hFile=0x204) returned 0x1
	[0321.696] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.696] WriteFile (in: hFile=0x204, lpBuffer=0x1144a000*, nNumberOfBytesToWrite=0x30e4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1144a000*, lpNumberOfBytesWritten=0x11031dfc*=0x30e4, lpOverlapped=0x11031e08) returned 1
	[0321.696] GetFileType (hFile=0x204) returned 0x1
	[0321.697] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x30e4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.697] GetFileType (hFile=0x204) returned 0x1
	[0321.697] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.697] WriteFile (in: hFile=0x204, lpBuffer=0x113c0a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113c0a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0321.697] GetFileType (hFile=0x204) returned 0x1
	[0321.698] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x30e4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.698] CloseHandle (hObject=0x204) returned 1
	[0321.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02276_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02276_.wmf.tl30z")) returned 0x220
	[0321.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02276_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.702] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0321.705] SetEvent (hEvent=0x27c) returned 1
	[0321.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02464_.wmf")) returned 0x220
	[0321.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02464_.WMF", dwFileAttributes=0x220) returned 1
	[0321.705] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02464_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02464_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02464_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02464_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02464_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.787] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0321.787] ReadFile (in: hFile=0x1c8, lpBuffer=0x1138ba80, nNumberOfBytesToRead=0x1a54, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1138ba80*, lpNumberOfBytesRead=0x11316e18*=0x1a54, lpOverlapped=0x0) returned 1
	[0321.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b00 | out: pbBuffer=0x113e6b00) returned 1
	[0321.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6af8 | out: pbBuffer=0x113e6af8) returned 1
	[0321.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f3b02 | out: pbBuffer=0x112f3b02) returned 1
	[0321.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b30 | out: pbBuffer=0x113e6b30) returned 1
	[0321.794] GetFileType (hFile=0x1c8) returned 0x1
	[0321.794] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.794] WriteFile (in: hFile=0x1c8, lpBuffer=0x11232000*, nNumberOfBytesToWrite=0x1a54, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11232000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1a54, lpOverlapped=0x1133be08) returned 1
	[0321.795] GetFileType (hFile=0x1c8) returned 0x1
	[0321.795] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1a54, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.795] GetFileType (hFile=0x1c8) returned 0x1
	[0321.795] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.795] WriteFile (in: hFile=0x1c8, lpBuffer=0x1135dc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1135dc00*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0321.795] GetFileType (hFile=0x1c8) returned 0x1
	[0321.796] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1a54, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.796] CloseHandle (hObject=0x1c8) returned 1
	[0321.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02464_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02464_.wmf.tl30z")) returned 0x220
	[0321.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02464_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.799] WaitForSingleObject (hHandle=0x160, dwMilliseconds=0xffffffff) returned 0x0
	[0321.803] SetEvent (hEvent=0x27c) returned 1
	[0321.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02791_.wmf")) returned 0x220
	[0321.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02791_.WMF", dwFileAttributes=0x220) returned 1
	[0321.804] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02791_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02791_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02791_.wmf.tl30z"), dwFlags=0x1) 

Thread:
	id = 24
	os_tid = 0xebc

	[0129.659] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x31e3ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x31e3ff30*=0x154) returned 1
	[0129.659] VirtualQuery (in: lpAddress=0x31e3ff40, lpBuffer=0x31e3ff40, dwLength=0x1c | out: lpBuffer=0x31e3ff40*(BaseAddress=0x31e3f000, AllocationBase=0x31d40000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0129.659] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x164
	[0129.660] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0130.110] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0130.473] SetEvent (hEvent=0x118) returned 1
	[0130.474] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0x20
	[0130.474] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd", dwFileAttributes=0x20) returned 1
	[0130.475] MoveFileExW (lpExistingFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), lpNewFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.tl30z" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.tl30z"), dwFlags=0x1) returned 1
	[0134.968] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.tl30z" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0134.969] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0134.969] ReadFile (in: hFile=0x16c, lpBuffer=0x1134c2d0, nNumberOfBytesToRead=0x4a, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1134c2d0*, lpNumberOfBytesRead=0x11022e18*=0x4a, lpOverlapped=0x0) returned 1
	[0134.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324a0 | out: pbBuffer=0x113324a0) returned 1
	[0134.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332498 | out: pbBuffer=0x11332498) returned 1
	[0134.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c7202 | out: pbBuffer=0x111c7202) returned 1
	[0134.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c7239 | out: pbBuffer=0x111c7239) returned 1
	[0134.976] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324d0 | out: pbBuffer=0x113324d0) returned 1
	[0134.976] GetFileType (hFile=0x16c) returned 0x1
	[0134.976] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0134.976] WriteFile (in: hFile=0x16c, lpBuffer=0x111cd200*, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111cd200*, lpNumberOfBytesWritten=0x1102bdfc*=0x4a, lpOverlapped=0x1102be08) returned 1
	[0134.976] GetFileType (hFile=0x16c) returned 0x1
	[0134.977] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x4a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0134.977] GetFileType (hFile=0x16c) returned 0x1
	[0134.977] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0134.977] WriteFile (in: hFile=0x16c, lpBuffer=0x111d7c00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111d7c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x221, lpOverlapped=0x1102be08) returned 1
	[0135.038] GetFileType (hFile=0x16c) returned 0x1
	[0135.038] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x4a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0135.038] CloseHandle (hObject=0x16c) returned 1
	[0135.040] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.tl30z" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.tl30z")) returned 0x20
	[0135.040] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.tl30z", dwFileAttributes=0x21) returned 1
	[0135.041] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0135.932] SetEvent (hEvent=0x160) returned 1
	[0135.932] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80
	[0135.933] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0135.934] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0137.920] SetEvent (hEvent=0x150) returned 1
	[0137.920] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0138.136] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0138.138] ReadFile (in: hFile=0x184, lpBuffer=0x1121a000, nNumberOfBytesToRead=0x73f5, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1121a000*, lpNumberOfBytesRead=0x11022e18*=0x73f5, lpOverlapped=0x0) returned 1
	[0138.407] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142fe70 | out: pbBuffer=0x1142fe70) returned 1
	[0138.408] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142fe68 | out: pbBuffer=0x1142fe68) returned 1
	[0138.408] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11306a02 | out: pbBuffer=0x11306a02) returned 1
	[0138.409] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142fea0 | out: pbBuffer=0x1142fea0) returned 1
	[0138.412] GetFileType (hFile=0x184) returned 0x1
	[0138.412] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0138.413] WriteFile (in: hFile=0x184, lpBuffer=0x1126a000*, nNumberOfBytesToWrite=0x73f5, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1126a000*, lpNumberOfBytesWritten=0x1102ddfc*=0x73f5, lpOverlapped=0x1102de08) returned 1
	[0138.413] GetFileType (hFile=0x184) returned 0x1
	[0138.414] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x73f5, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0138.414] GetFileType (hFile=0x184) returned 0x1
	[0138.414] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0138.414] WriteFile (in: hFile=0x184, lpBuffer=0x11234a80*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11234a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x239, lpOverlapped=0x1102de08) returned 1
	[0138.414] GetFileType (hFile=0x184) returned 0x1
	[0138.415] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x73f5, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0138.415] CloseHandle (hObject=0x184) returned 1
	[0138.650] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.tl30z")) returned 0x20
	[0138.650] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0138.663] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0139.049] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0139.172] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0139.533] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0139.729] SetEvent (hEvent=0x118) returned 1
	[0139.729] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80
	[0139.730] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0139.731] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0140.719] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0140.720] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0140.720] ReadFile (in: hFile=0x16c, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x18a5, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x1131be18*=0x18a5, lpOverlapped=0x0) returned 1
	[0140.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0140.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113640f8 | out: pbBuffer=0x113640f8) returned 1
	[0140.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11456802 | out: pbBuffer=0x11456802) returned 1
	[0140.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11456897 | out: pbBuffer=0x11456897) returned 1
	[0140.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0140.788] GetFileType (hFile=0x16c) returned 0x1
	[0140.788] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0140.788] WriteFile (in: hFile=0x16c, lpBuffer=0x11390000*, nNumberOfBytesToWrite=0x18a5, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11390000*, lpNumberOfBytesWritten=0x1133ddfc*=0x18a5, lpOverlapped=0x1133de08) returned 1
	[0140.789] GetFileType (hFile=0x16c) returned 0x1
	[0140.789] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0140.789] GetFileType (hFile=0x16c) returned 0x1
	[0140.789] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0140.789] WriteFile (in: hFile=0x16c, lpBuffer=0x11368a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11368a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0140.790] GetFileType (hFile=0x16c) returned 0x1
	[0140.790] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x18a5, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0140.790] CloseHandle (hObject=0x16c) returned 1
	[0140.791] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.tl30z")) returned 0x20
	[0140.792] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0140.792] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80
	[0140.793] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0140.793] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0142.629] SetEvent (hEvent=0x150) returned 1
	[0142.630] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0142.721] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x11424e08 | out: lpMode=0x11424e08) returned 0
	[0142.723] ReadFile (in: hFile=0x16c, lpBuffer=0x1130a000, nNumberOfBytesToRead=0x7e84, lpNumberOfBytesRead=0x11424e18, lpOverlapped=0x0 | out: lpBuffer=0x1130a000*, lpNumberOfBytesRead=0x11424e18*=0x7e84, lpOverlapped=0x0) returned 1
	[0142.770] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e300 | out: pbBuffer=0x1104e300) returned 1
	[0142.770] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11407202 | out: pbBuffer=0x11407202) returned 1
	[0142.770] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114072a0 | out: pbBuffer=0x114072a0) returned 1
	[0142.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114072b3 | out: pbBuffer=0x114072b3) returned 1
	[0142.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e330 | out: pbBuffer=0x1104e330) returned 1
	[0142.775] GetFileType (hFile=0x16c) returned 0x1
	[0142.775] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0142.775] WriteFile (in: hFile=0x16c, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x7e84, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x11031dfc*=0x7e84, lpOverlapped=0x11031e08) returned 1
	[0142.775] GetFileType (hFile=0x16c) returned 0x1
	[0142.776] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x7e84, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0142.776] GetFileType (hFile=0x16c) returned 0x1
	[0142.776] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0142.776] WriteFile (in: hFile=0x16c, lpBuffer=0x113a3880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113a3880*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0142.777] GetFileType (hFile=0x16c) returned 0x1
	[0142.777] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x7e84, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0142.777] CloseHandle (hObject=0x16c) returned 1
	[0142.784] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.tl30z")) returned 0x20
	[0142.784] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0142.785] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0144.787] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80
	[0144.788] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0144.788] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0145.494] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0145.634] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0145.635] ReadFile (in: hFile=0x1c8, lpBuffer=0x112de000, nNumberOfBytesToRead=0x86d1, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x112de000*, lpNumberOfBytesRead=0x1131de18*=0x86d1, lpOverlapped=0x0) returned 1
	[0145.665] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e120 | out: pbBuffer=0x1142e120) returned 1
	[0145.666] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e118 | out: pbBuffer=0x1142e118) returned 1
	[0145.666] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136e902 | out: pbBuffer=0x1136e902) returned 1
	[0145.667] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e150 | out: pbBuffer=0x1142e150) returned 1
	[0145.673] GetFileType (hFile=0x1c8) returned 0x1
	[0145.673] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0145.674] WriteFile (in: hFile=0x1c8, lpBuffer=0x1112c000*, nNumberOfBytesToWrite=0x86d1, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1112c000*, lpNumberOfBytesWritten=0x1133fdfc*=0x86d1, lpOverlapped=0x1133fe08) returned 1
	[0145.674] GetFileType (hFile=0x1c8) returned 0x1
	[0145.674] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x86d1, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0145.675] GetFileType (hFile=0x1c8) returned 0x1
	[0145.675] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0145.675] WriteFile (in: hFile=0x1c8, lpBuffer=0x1132ae00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1132ae00*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0145.676] GetFileType (hFile=0x1c8) returned 0x1
	[0145.676] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x86d1, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0145.676] CloseHandle (hObject=0x1c8) returned 1
	[0145.683] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.tl30z")) returned 0x20
	[0145.683] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0145.684] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0147.061] SetEvent (hEvent=0x160) returned 1
	[0147.061] SetEvent (hEvent=0x134) returned 1
	[0147.061] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0168.354] SetEvent (hEvent=0x160) returned 1
	[0168.354] SetEvent (hEvent=0x12c) returned 1
	[0168.354] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0175.283] SetEvent (hEvent=0x174) returned 1
	[0175.283] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 0x80
	[0175.284] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", dwFileAttributes=0x80) returned 1
	[0175.285] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.tl30z"), dwFlags=0x1) returned 1
	[0184.486] SetEvent (hEvent=0x150) returned 1
	[0184.487] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0
	[0184.839] GetConsoleMode (in: hConsoleHandle=0x1e0, lpMode=0x11251e08 | out: lpMode=0x11251e08) returned 0
	[0184.839] ReadFile (in: hFile=0x1e0, lpBuffer=0x112f4380, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x11251e18, lpOverlapped=0x0 | out: lpBuffer=0x112f4380*, lpNumberOfBytesRead=0x11251e18*=0x37e, lpOverlapped=0x0) returned 1
	[0184.907] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113329e0 | out: pbBuffer=0x113329e0) returned 1
	[0184.907] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c3302 | out: pbBuffer=0x113c3302) returned 1
	[0184.907] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c3323 | out: pbBuffer=0x113c3323) returned 1
	[0184.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332a10 | out: pbBuffer=0x11332a10) returned 1
	[0184.909] GetFileType (hFile=0x1e0) returned 0x1
	[0184.909] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0184.910] WriteFile (in: hFile=0x1e0, lpBuffer=0x11304000*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x11304000*, lpNumberOfBytesWritten=0x11251dfc*=0x37e, lpOverlapped=0x11251e08) returned 1
	[0184.910] GetFileType (hFile=0x1e0) returned 0x1
	[0184.911] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0184.911] GetFileType (hFile=0x1e0) returned 0x1
	[0184.911] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0184.911] WriteFile (in: hFile=0x1e0, lpBuffer=0x112f5180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x112f5180*, lpNumberOfBytesWritten=0x11251dfc*=0x230, lpOverlapped=0x11251e08) returned 1
	[0184.911] GetFileType (hFile=0x1e0) returned 0x1
	[0184.912] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0184.912] CloseHandle (hObject=0x1e0) returned 1
	[0185.002] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.tl30z")) returned 0x20
	[0185.002] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0185.224] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0185.476] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0185.644] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0185.833] SetEvent (hEvent=0x1e0) returned 1
	[0185.833] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 0x80
	[0185.833] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico", dwFileAttributes=0x80) returned 1
	[0185.834] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.tl30z"), dwFlags=0x1) returned 1
	[0188.264] SetEvent (hEvent=0x150) returned 1
	[0188.264] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0188.446] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0188.446] ReadFile (in: hFile=0x16c, lpBuffer=0x111c0000, nNumberOfBytesToRead=0x2796, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x11319e18*=0x2796, lpOverlapped=0x0) returned 1
	[0188.511] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104ead0 | out: pbBuffer=0x1104ead0) returned 1
	[0188.511] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104eac8 | out: pbBuffer=0x1104eac8) returned 1
	[0188.511] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c8702 | out: pbBuffer=0x112c8702) returned 1
	[0188.512] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104eb00 | out: pbBuffer=0x1104eb00) returned 1
	[0188.513] GetFileType (hFile=0x16c) returned 0x1
	[0188.514] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0188.514] WriteFile (in: hFile=0x16c, lpBuffer=0x11246000*, nNumberOfBytesToWrite=0x2796, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11246000*, lpNumberOfBytesWritten=0x1133bdfc*=0x2796, lpOverlapped=0x1133be08) returned 1
	[0188.514] GetFileType (hFile=0x16c) returned 0x1
	[0188.514] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x2796, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0188.515] GetFileType (hFile=0x16c) returned 0x1
	[0188.515] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0188.515] WriteFile (in: hFile=0x16c, lpBuffer=0x112c4e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112c4e00*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0188.515] GetFileType (hFile=0x16c) returned 0x1
	[0188.515] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x2796, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0188.515] CloseHandle (hObject=0x16c) returned 1
	[0188.671] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.tl30z")) returned 0x20
	[0188.672] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0188.672] GetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27
	[0188.672] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1
	[0188.673] MoveFileExW (lpExistingFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), lpNewFileName="C:\\BOOTSECT.BAK.tl30z" (normalized: "c:\\bootsect.bak.tl30z"), dwFlags=0x1) returned 1
	[0188.674] CreateFileW (lpFileName="C:\\BOOTSECT.BAK.tl30z" (normalized: "c:\\bootsect.bak.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0188.674] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x110f2e08 | out: lpMode=0x110f2e08) returned 0
	[0188.674] ReadFile (in: hFile=0x1b4, lpBuffer=0x111d4000, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x110f2e18, lpOverlapped=0x0 | out: lpBuffer=0x111d4000*, lpNumberOfBytesRead=0x110f2e18*=0x2000, lpOverlapped=0x0) returned 1
	[0188.679] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104ecb0 | out: pbBuffer=0x1104ecb0) returned 1
	[0188.679] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104eca8 | out: pbBuffer=0x1104eca8) returned 1
	[0188.679] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c9202 | out: pbBuffer=0x112c9202) returned 1
	[0188.679] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c9225 | out: pbBuffer=0x112c9225) returned 1
	[0188.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104ece0 | out: pbBuffer=0x1104ece0) returned 1
	[0188.680] GetFileType (hFile=0x1b4) returned 0x1
	[0188.680] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0188.681] WriteFile (in: hFile=0x1b4, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x1133bdfc*=0x2000, lpOverlapped=0x1133be08) returned 1
	[0188.682] GetFileType (hFile=0x1b4) returned 0x1
	[0188.683] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2000, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0188.683] GetFileType (hFile=0x1b4) returned 0x1
	[0188.683] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0188.683] WriteFile (in: hFile=0x1b4, lpBuffer=0x112c5c00*, nNumberOfBytesToWrite=0x21b, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112c5c00*, lpNumberOfBytesWritten=0x1133bdfc*=0x21b, lpOverlapped=0x1133be08) returned 1
	[0188.684] GetFileType (hFile=0x1b4) returned 0x1
	[0188.684] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2000, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0188.684] CloseHandle (hObject=0x1b4) returned 1
	[0188.686] GetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK.tl30z" (normalized: "c:\\bootsect.bak.tl30z")) returned 0x26
	[0188.686] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK.tl30z", dwFileAttributes=0x27) returned 1
	[0188.687] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 0x80
	[0188.687] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", dwFileAttributes=0x80) returned 1
	[0188.687] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.tl30z"), dwFlags=0x1) returned 1
	[0188.688] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0188.689] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0188.689] ReadFile (in: hFile=0x1b4, lpBuffer=0x111f2000, nNumberOfBytesToRead=0xd489, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x111f2000*, lpNumberOfBytesRead=0x11319e18*=0xd489, lpOverlapped=0x0) returned 1
	[0188.796] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0189.009] SetEvent (hEvent=0x118) returned 1
	[0189.009] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0189.028] SetEvent (hEvent=0x118) returned 1
	[0189.028] SetEvent (hEvent=0x1e8) returned 1
	[0189.028] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 0x80
	[0189.028] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp", dwFileAttributes=0x80) returned 1
	[0189.029] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\header.bmp.tl30z" (normalized: "c:\\588bce7c90097ed212\\header.bmp.tl30z"), dwFlags=0x1) returned 1
	[0189.030] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp.tl30z" (normalized: "c:\\588bce7c90097ed212\\header.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0189.030] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11429e08 | out: lpMode=0x11429e08) returned 0
	[0189.030] ReadFile (in: hFile=0x1c8, lpBuffer=0x11402000, nNumberOfBytesToRead=0xe2c, lpNumberOfBytesRead=0x11429e18, lpOverlapped=0x0 | out: lpBuffer=0x11402000*, lpNumberOfBytesRead=0x11429e18*=0xe2c, lpOverlapped=0x0) returned 1
	[0189.108] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0189.108] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0189.108] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11366802 | out: pbBuffer=0x11366802) returned 1
	[0189.109] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0189.109] GetFileType (hFile=0x1c8) returned 0x1
	[0189.109] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0189.109] WriteFile (in: hFile=0x1c8, lpBuffer=0x111a2000*, nNumberOfBytesToWrite=0xe2c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111a2000*, lpNumberOfBytesWritten=0x11031dfc*=0xe2c, lpOverlapped=0x11031e08) returned 1
	[0189.110] GetFileType (hFile=0x1c8) returned 0x1
	[0189.110] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xe2c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0189.110] GetFileType (hFile=0x1c8) returned 0x1
	[0189.110] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0189.110] WriteFile (in: hFile=0x1c8, lpBuffer=0x1132ca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1132ca80*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0189.111] GetFileType (hFile=0x1c8) returned 0x1
	[0189.111] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xe2c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0189.111] CloseHandle (hObject=0x1c8) returned 1
	[0189.112] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp.tl30z" (normalized: "c:\\588bce7c90097ed212\\header.bmp.tl30z")) returned 0x20
	[0189.113] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp.tl30z", dwFileAttributes=0x21) returned 1
	[0189.113] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi")) returned 0x80
	[0189.113] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", dwFileAttributes=0x80) returned 1
	[0189.114] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.tl30z"), dwFlags=0x1) returned 1
	[0189.115] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0189.115] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0189.115] ReadFile (in: hFile=0x1c8, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x207d1, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11287e18*=0x207d1, lpOverlapped=0x0) returned 1
	[0189.128] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e2d0 | out: pbBuffer=0x1104e2d0) returned 1
	[0189.128] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11367202 | out: pbBuffer=0x11367202) returned 1
	[0189.128] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11367208 | out: pbBuffer=0x11367208) returned 1
	[0189.129] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11367217 | out: pbBuffer=0x11367217) returned 1
	[0189.129] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11367248 | out: pbBuffer=0x11367248) returned 1
	[0189.129] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e300 | out: pbBuffer=0x1104e300) returned 1
	[0189.139] GetFileType (hFile=0x1c8) returned 0x1
	[0189.139] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0189.140] WriteFile (in: hFile=0x1c8, lpBuffer=0x11530000*, nNumberOfBytesToWrite=0x207d1, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11530000*, lpNumberOfBytesWritten=0x11031dfc*=0x207d1, lpOverlapped=0x11031e08) returned 1
	[0189.141] GetFileType (hFile=0x1c8) returned 0x1
	[0189.141] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x207d1, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0189.141] GetFileType (hFile=0x1c8) returned 0x1
	[0189.141] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0189.142] WriteFile (in: hFile=0x1c8, lpBuffer=0x1132d880*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1132d880*, lpNumberOfBytesWritten=0x11031dfc*=0x245, lpOverlapped=0x11031e08) returned 1
	[0189.254] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0189.500] GetFileType (hFile=0x1c8) returned 0x1
	[0189.500] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x207d1, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0189.502] CloseHandle (hObject=0x1c8) returned 1
	[0190.010] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.tl30z")) returned 0x20
	[0190.011] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.tl30z", dwFileAttributes=0x21) returned 1
	[0190.011] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 0x80
	[0190.012] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", dwFileAttributes=0x80) returned 1
	[0190.013] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.tl30z"), dwFlags=0x1) returned 1
	[0190.014] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0190.014] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11027e08 | out: lpMode=0x11027e08) returned 0
	[0190.014] ReadFile (in: hFile=0x1c8, lpBuffer=0x11256000, nNumberOfBytesToRead=0x12266, lpNumberOfBytesRead=0x11027e18, lpOverlapped=0x0 | out: lpBuffer=0x11256000*, lpNumberOfBytesRead=0x11027e18*=0x12266, lpOverlapped=0x0) returned 1
	[0190.165] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0190.721] SetEvent (hEvent=0x1e0) returned 1
	[0190.721] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0191.736] SetEvent (hEvent=0x1bc) returned 1
	[0191.736] SetEvent (hEvent=0x1e8) returned 1
	[0191.736] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0191.848] SetEvent (hEvent=0x1bc) returned 1
	[0191.848] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0191.919] SetEvent (hEvent=0x1bc) returned 1
	[0191.919] SetEvent (hEvent=0x1f0) returned 1
	[0191.919] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 0x80
	[0191.920] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", dwFileAttributes=0x80) returned 1
	[0191.920] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.tl30z" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.tl30z"), dwFlags=0x1) returned 1
	[0191.921] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.tl30z" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0191.922] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11317e08 | out: lpMode=0x11317e08) returned 0
	[0191.922] ReadFile (in: hFile=0x1f4, lpBuffer=0x110cc000, nNumberOfBytesToRead=0xa078, lpNumberOfBytesRead=0x11317e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11317e18*=0xa078, lpOverlapped=0x0) returned 1
	[0192.070] VirtualAlloc (lpAddress=0x113d6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x113d6000
	[0192.070] VirtualAlloc (lpAddress=0x113d8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x113d8000
	[0192.071] VirtualAlloc (lpAddress=0x113da000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x113da000
	[0192.072] VirtualAlloc (lpAddress=0x113dc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x113dc000
	[0192.073] VirtualAlloc (lpAddress=0x113de000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x113de000
	[0192.074] VirtualAlloc (lpAddress=0x113e0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x113e0000
	[0192.076] VirtualAlloc (lpAddress=0x113e2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x113e2000
	[0192.076] VirtualAlloc (lpAddress=0x113e4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x113e4000
	[0192.077] VirtualAlloc (lpAddress=0x110f2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110f2000
	[0192.078] VirtualAlloc (lpAddress=0x110f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110f4000
	[0192.079] VirtualAlloc (lpAddress=0x110f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110f6000
	[0192.080] VirtualAlloc (lpAddress=0x110f8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110f8000
	[0192.080] VirtualAlloc (lpAddress=0x110fa000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110fa000
	[0192.081] VirtualAlloc (lpAddress=0x110fc000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110fc000
	[0192.082] VirtualAlloc (lpAddress=0x110fe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110fe000
	[0192.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e120 | out: pbBuffer=0x1142e120) returned 1
	[0192.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e118 | out: pbBuffer=0x1142e118) returned 1
	[0192.084] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113da802 | out: pbBuffer=0x113da802) returned 1
	[0192.084] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113da87c | out: pbBuffer=0x113da87c) returned 1
	[0192.084] VirtualAlloc (lpAddress=0x11100000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11100000
	[0192.084] VirtualFree (lpAddress=0x11430000, dwSize=0x132000, dwFreeType=0x4000) returned 1
	[0192.363] VirtualAlloc (lpAddress=0x11102000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11102000
	[0192.364] VirtualAlloc (lpAddress=0x11104000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11104000
	[0192.364] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e150 | out: pbBuffer=0x1142e150) returned 1
	[0192.365] VirtualAlloc (lpAddress=0x11106000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11106000
	[0192.366] VirtualAlloc (lpAddress=0x1110a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1110a000
	[0192.368] VirtualAlloc (lpAddress=0x1110e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x1110e000
	[0192.370] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0192.460] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0192.460] SetEvent (hEvent=0x150) returned 1
	[0192.460] SetEvent (hEvent=0x1f0) returned 1
	[0192.461] SetEvent (hEvent=0x1e0) returned 1
	[0192.461] GetFileType (hFile=0x1f4) returned 0x1
	[0192.461] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0192.461] WriteFile (in: hFile=0x1f4, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0xa078, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1133ddfc*=0xa078, lpOverlapped=0x1133de08) returned 1
	[0192.462] GetFileType (hFile=0x1f4) returned 0x1
	[0192.462] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xa078, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0192.463] GetFileType (hFile=0x1f4) returned 0x1
	[0192.463] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0192.463] WriteFile (in: hFile=0x1f4, lpBuffer=0x110f8a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110f8a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0192.463] GetFileType (hFile=0x1f4) returned 0x1
	[0192.463] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0xa078, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0192.464] CloseHandle (hObject=0x1f4) returned 1
	[0192.466] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.tl30z" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.tl30z")) returned 0x20
	[0192.467] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.tl30z", dwFileAttributes=0x21) returned 1
	[0192.467] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0192.620] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0192.620] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0192.699] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0192.700] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0192.772] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0192.772] SetEvent (hEvent=0x150) returned 1
	[0192.772] SetEvent (hEvent=0x1f0) returned 1
	[0192.772] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0192.935] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0192.935] VirtualAlloc (lpAddress=0x11090000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11090000
	[0192.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332400 | out: pbBuffer=0x11332400) returned 1
	[0192.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113323f8 | out: pbBuffer=0x113323f8) returned 1
	[0192.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11382802 | out: pbBuffer=0x11382802) returned 1
	[0192.938] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332430 | out: pbBuffer=0x11332430) returned 1
	[0192.939] VirtualAlloc (lpAddress=0x11094000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0x11094000
	[0192.943] VirtualAlloc (lpAddress=0x110a2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x110a2000
	[0192.945] VirtualAlloc (lpAddress=0x110a6000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0x110a6000
	[0193.080] VirtualAlloc (lpAddress=0x110c4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110c4000
	[0193.081] VirtualAlloc (lpAddress=0x110c6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x110c6000
	[0193.082] VirtualAlloc (lpAddress=0x11570000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x11570000
	[0193.087] VirtualAlloc (lpAddress=0x11580000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x11580000
	[0193.092] GetFileType (hFile=0x1d4) returned 0x1
	[0193.092] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110edde0 | out: lpNewFilePointer=0x0) returned 1
	[0193.093] WriteFile (in: hFile=0x1d4, lpBuffer=0x11580000*, nNumberOfBytesToWrite=0x13e14, lpNumberOfBytesWritten=0x110eddfc, lpOverlapped=0x110ede08 | out: lpBuffer=0x11580000*, lpNumberOfBytesWritten=0x110eddfc*=0x13e14, lpOverlapped=0x110ede08) returned 1
	[0193.094] GetFileType (hFile=0x1d4) returned 0x1
	[0193.094] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x13e14, lpNewFilePointer=0x0, dwMoveMethod=0x110edde0 | out: lpNewFilePointer=0x0) returned 1
	[0193.094] GetFileType (hFile=0x1d4) returned 0x1
	[0193.094] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110edde0 | out: lpNewFilePointer=0x0) returned 1
	[0193.095] WriteFile (in: hFile=0x1d4, lpBuffer=0x112aea80*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x110eddfc, lpOverlapped=0x110ede08 | out: lpBuffer=0x112aea80*, lpNumberOfBytesWritten=0x110eddfc*=0x239, lpOverlapped=0x110ede08) returned 1
	[0193.104] GetFileType (hFile=0x1d4) returned 0x1
	[0193.104] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x13e14, lpNewFilePointer=0x0, dwMoveMethod=0x110edde0 | out: lpNewFilePointer=0x0) returned 1
	[0193.104] CloseHandle (hObject=0x1d4) returned 1
	[0193.673] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0194.251] SetEvent (hEvent=0x1e0) returned 1
	[0194.251] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0194.680] SwitchToThread () returned 1
	[0194.742] SetEvent (hEvent=0x118) returned 1
	[0194.742] VirtualAlloc (lpAddress=0x1155e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1155e000
	[0194.744] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332400 | out: pbBuffer=0x11332400) returned 1
	[0194.744] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113323f8 | out: pbBuffer=0x113323f8) returned 1
	[0194.745] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11310802 | out: pbBuffer=0x11310802) returned 1
	[0194.745] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332430 | out: pbBuffer=0x11332430) returned 1
	[0194.746] GetFileType (hFile=0x16c) returned 0x1
	[0194.746] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0194.746] WriteFile (in: hFile=0x16c, lpBuffer=0x11300000*, nNumberOfBytesToWrite=0x3704, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x11300000*, lpNumberOfBytesWritten=0x110ebdfc*=0x3704, lpOverlapped=0x110ebe08) returned 1
	[0194.746] GetFileType (hFile=0x16c) returned 0x1
	[0194.747] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x3704, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0194.747] GetFileType (hFile=0x16c) returned 0x1
	[0194.747] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0194.747] WriteFile (in: hFile=0x16c, lpBuffer=0x11386a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x11386a80*, lpNumberOfBytesWritten=0x110ebdfc*=0x22a, lpOverlapped=0x110ebe08) returned 1
	[0194.747] GetFileType (hFile=0x16c) returned 0x1
	[0194.748] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x3704, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0194.748] CloseHandle (hObject=0x16c) returned 1
	[0194.750] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\strings.xml.tl30z")) returned 0x20
	[0194.750] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0194.751] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu")) returned 0x80
	[0194.751] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu", dwFileAttributes=0x80) returned 1
	[0194.752] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.tl30z" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.tl30z"), dwFlags=0x1) returned 1
	[0194.753] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.tl30z" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0194.753] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x11318e08 | out: lpMode=0x11318e08) returned 0
	[0194.753] VirtualAlloc (lpAddress=0x115a0000, dwSize=0x58000, flAllocationType=0x1000, flProtect=0x4) returned 0x115a0000
	[0194.767] ReadFile (in: hFile=0x16c, lpBuffer=0x115a0000, nNumberOfBytesToRead=0x57049, lpNumberOfBytesRead=0x11318e18, lpOverlapped=0x0 | out: lpBuffer=0x115a0000*, lpNumberOfBytesRead=0x11318e18*=0x57049, lpOverlapped=0x0) returned 1
	[0194.823] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0194.884] SetEvent (hEvent=0x1f0) returned 1
	[0194.956] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0195.226] SetEvent (hEvent=0x1f0) returned 1
	[0195.226] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0195.315] SwitchToThread () returned 1
	[0195.366] SetEvent (hEvent=0x1bc) returned 1
	[0195.366] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0195.417] SetEvent (hEvent=0x1e0) returned 1
	[0195.417] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0195.445] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0195.445] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0195.525] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0195.526] SetEvent (hEvent=0x118) returned 1
	[0195.526] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0195.606] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0195.615] VirtualAlloc (lpAddress=0x11734000, dwSize=0x102000, flAllocationType=0x1000, flProtect=0x4) returned 0x11734000
	[0195.931] SetEvent (hEvent=0x1f0) returned 1
	[0195.931] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0198.007] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20
	[0198.007] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf", dwFileAttributes=0x20) returned 0
	[0198.007] VirtualAlloc (lpAddress=0x1142c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1142c000
	[0198.008] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0198.215] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0x20
	[0198.216] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf", dwFileAttributes=0x20) returned 0
	[0198.216] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0198.301] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0198.345] SetEvent (hEvent=0x134) returned 1
	[0198.345] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0198.388] SetEvent (hEvent=0x12c) returned 1
	[0198.388] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0212.588] VirtualAlloc (lpAddress=0x11bd4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bd4000
	[0212.589] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 0x20
	[0212.589] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", dwFileAttributes=0x20) returned 1
	[0212.590] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.tl30z"), dwFlags=0x1) returned 1
	[0217.096] SetEvent (hEvent=0x150) returned 1
	[0217.097] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0217.103] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11558e08 | out: lpMode=0x11558e08) returned 0
	[0217.104] ReadFile (in: hFile=0x1d4, lpBuffer=0x1130d000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11558e18, lpOverlapped=0x0 | out: lpBuffer=0x1130d000*, lpNumberOfBytesRead=0x11558e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0217.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364270 | out: pbBuffer=0x11364270) returned 1
	[0217.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11364268 | out: pbBuffer=0x11364268) returned 1
	[0217.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c3602 | out: pbBuffer=0x111c3602) returned 1
	[0217.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113642a0 | out: pbBuffer=0x113642a0) returned 1
	[0217.155] GetFileType (hFile=0x1d4) returned 0x1
	[0217.155] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0217.155] WriteFile (in: hFile=0x1d4, lpBuffer=0x11402000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11402000*, lpNumberOfBytesWritten=0x11031dfc*=0x6ccc, lpOverlapped=0x11031e08) returned 1
	[0217.156] GetFileType (hFile=0x1d4) returned 0x1
	[0217.156] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0217.156] GetFileType (hFile=0x1d4) returned 0x1
	[0217.156] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0217.156] WriteFile (in: hFile=0x1d4, lpBuffer=0x110e3880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110e3880*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0217.157] GetFileType (hFile=0x1d4) returned 0x1
	[0217.157] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0217.157] CloseHandle (hObject=0x1d4) returned 1
	[0217.303] SetEvent (hEvent=0x150) returned 1
	[0217.304] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.tl30z")) returned 0x20
	[0217.304] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0217.344] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0218.165] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0300.245] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0300.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf")) returned 0x220
	[0300.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF", dwFileAttributes=0x220) returned 1
	[0300.250] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244
	[0300.296] GetConsoleMode (in: hConsoleHandle=0x244, lpMode=0x111d0e08 | out: lpMode=0x111d0e08) returned 0
	[0300.296] ReadFile (in: hFile=0x244, lpBuffer=0x11214000, nNumberOfBytesToRead=0x1464, lpNumberOfBytesRead=0x111d0e18, lpOverlapped=0x0 | out: lpBuffer=0x11214000*, lpNumberOfBytesRead=0x111d0e18*=0x1464, lpOverlapped=0x0) returned 1
	[0300.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0300.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110eba02 | out: pbBuffer=0x110eba02) returned 1
	[0300.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110eba1f | out: pbBuffer=0x110eba1f) returned 1
	[0300.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110ebaea | out: pbBuffer=0x110ebaea) returned 1
	[0300.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0300.511] GetFileType (hFile=0x244) returned 0x1
	[0300.511] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.511] WriteFile (in: hFile=0x244, lpBuffer=0x112e4000*, nNumberOfBytesToWrite=0x1464, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x112e4000*, lpNumberOfBytesWritten=0x11339dfc*=0x1464, lpOverlapped=0x11339e08) returned 1
	[0300.511] GetFileType (hFile=0x244) returned 0x1
	[0300.511] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x1464, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.511] GetFileType (hFile=0x244) returned 0x1
	[0300.511] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.512] WriteFile (in: hFile=0x244, lpBuffer=0x11c73880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11c73880*, lpNumberOfBytesWritten=0x11339dfc*=0x227, lpOverlapped=0x11339e08) returned 1
	[0300.512] GetFileType (hFile=0x244) returned 0x1
	[0300.512] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x1464, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.512] CloseHandle (hObject=0x244) returned 1
	[0300.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf.tl30z")) returned 0x220
	[0300.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8)) returned 1
	[0300.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf")) returned 0x220
	[0300.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF", dwFileAttributes=0x220) returned 1
	[0300.514] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244
	[0300.516] GetConsoleMode (in: hConsoleHandle=0x244, lpMode=0x111d0e08 | out: lpMode=0x111d0e08) returned 0
	[0300.516] ReadFile (in: hFile=0x244, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x154c, lpNumberOfBytesRead=0x111d0e18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x111d0e18*=0x154c, lpOverlapped=0x0) returned 1
	[0300.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e170 | out: pbBuffer=0x1104e170) returned 1
	[0300.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122e802 | out: pbBuffer=0x1122e802) returned 1
	[0300.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1122e8cb | out: pbBuffer=0x1122e8cb) returned 1
	[0300.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1122e8eb | out: pbBuffer=0x1122e8eb) returned 1
	[0300.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e1a0 | out: pbBuffer=0x1104e1a0) returned 1
	[0300.895] GetFileType (hFile=0x244) returned 0x1
	[0300.895] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.895] WriteFile (in: hFile=0x244, lpBuffer=0x112c6000*, nNumberOfBytesToWrite=0x154c, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112c6000*, lpNumberOfBytesWritten=0x1133bdfc*=0x154c, lpOverlapped=0x1133be08) returned 1
	[0300.895] GetFileType (hFile=0x244) returned 0x1
	[0300.895] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x154c, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.896] GetFileType (hFile=0x244) returned 0x1
	[0300.896] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.896] WriteFile (in: hFile=0x244, lpBuffer=0x113e2a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113e2a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0300.896] GetFileType (hFile=0x244) returned 0x1
	[0300.896] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x154c, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.896] CloseHandle (hObject=0x244) returned 1
	[0300.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf.tl30z")) returned 0x220
	[0300.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf")) returned 0x220
	[0300.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF", dwFileAttributes=0x220) returned 1
	[0300.898] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.026] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0301.162] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.165] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x111cfe08 | out: lpMode=0x111cfe08) returned 0
	[0301.165] ReadFile (in: hFile=0x1d4, lpBuffer=0x111b2000, nNumberOfBytesToRead=0xab2, lpNumberOfBytesRead=0x111cfe18, lpOverlapped=0x0 | out: lpBuffer=0x111b2000*, lpNumberOfBytesRead=0x111cfe18*=0xab2, lpOverlapped=0x0) returned 1
	[0301.172] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0301.172] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111580f8 | out: pbBuffer=0x111580f8) returned 1
	[0301.172] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c5202 | out: pbBuffer=0x112c5202) returned 1
	[0301.173] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0301.173] GetFileType (hFile=0x1d4) returned 0x1
	[0301.173] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.173] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ea000*, nNumberOfBytesToWrite=0xab2, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112ea000*, lpNumberOfBytesWritten=0x1102bdfc*=0xab2, lpOverlapped=0x1102be08) returned 1
	[0301.180] GetFileType (hFile=0x1d4) returned 0x1
	[0301.180] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xab2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.181] GetFileType (hFile=0x1d4) returned 0x1
	[0301.181] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.181] WriteFile (in: hFile=0x1d4, lpBuffer=0x11143c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11143c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0301.184] GetFileType (hFile=0x1d4) returned 0x1
	[0301.184] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xab2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.185] CloseHandle (hObject=0x1d4) returned 1
	[0301.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf.tl30z")) returned 0x220
	[0301.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.200] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.212] SetEvent (hEvent=0x124) returned 1
	[0301.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf")) returned 0x220
	[0301.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF", dwFileAttributes=0x220) returned 1
	[0301.212] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0301.263] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0301.263] ReadFile (in: hFile=0x1d8, lpBuffer=0x1141c000, nNumberOfBytesToRead=0x7b2, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1141c000*, lpNumberOfBytesRead=0x11319e18*=0x7b2, lpOverlapped=0x0) returned 1
	[0301.268] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0301.268] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c58802 | out: pbBuffer=0x11c58802) returned 1
	[0301.268] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c5880a | out: pbBuffer=0x11c5880a) returned 1
	[0301.268] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c5883d | out: pbBuffer=0x11c5883d) returned 1
	[0301.269] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0301.269] GetFileType (hFile=0x1d8) returned 0x1
	[0301.269] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.269] WriteFile (in: hFile=0x1d8, lpBuffer=0x11229000*, nNumberOfBytesToWrite=0x7b2, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11229000*, lpNumberOfBytesWritten=0x113b3dfc*=0x7b2, lpOverlapped=0x113b3e08) returned 1
	[0301.270] GetFileType (hFile=0x1d8) returned 0x1
	[0301.270] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7b2, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.270] GetFileType (hFile=0x1d8) returned 0x1
	[0301.270] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.270] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c3c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x113c3c00*, lpNumberOfBytesWritten=0x113b3dfc*=0x22d, lpOverlapped=0x113b3e08) returned 1
	[0301.271] GetFileType (hFile=0x1d8) returned 0x1
	[0301.271] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7b2, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.271] CloseHandle (hObject=0x1d8) returned 1
	[0301.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf.tl30z")) returned 0x220
	[0301.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.274] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.278] SetEvent (hEvent=0x1b0) returned 1
	[0301.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf")) returned 0x220
	[0301.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF", dwFileAttributes=0x220) returned 1
	[0301.278] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0301.390] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0301.390] ReadFile (in: hFile=0x2a0, lpBuffer=0x110e2000, nNumberOfBytesToRead=0xf56, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x110e2000*, lpNumberOfBytesRead=0x11319e18*=0xf56, lpOverlapped=0x0) returned 1
	[0301.396] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111583f0 | out: pbBuffer=0x111583f0) returned 1
	[0301.396] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111583e8 | out: pbBuffer=0x111583e8) returned 1
	[0301.396] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ea702 | out: pbBuffer=0x110ea702) returned 1
	[0301.397] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158420 | out: pbBuffer=0x11158420) returned 1
	[0301.397] GetFileType (hFile=0x2a0) returned 0x1
	[0301.397] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.397] WriteFile (in: hFile=0x2a0, lpBuffer=0x11cc6000*, nNumberOfBytesToWrite=0xf56, lpNumberOfBytesWritten=0x1135bdfc, lpOverlapped=0x1135be08 | out: lpBuffer=0x11cc6000*, lpNumberOfBytesWritten=0x1135bdfc*=0xf56, lpOverlapped=0x1135be08) returned 1
	[0301.397] GetFileType (hFile=0x2a0) returned 0x1
	[0301.398] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xf56, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.398] GetFileType (hFile=0x2a0) returned 0x1
	[0301.398] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.398] WriteFile (in: hFile=0x2a0, lpBuffer=0x112e7880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1135bdfc, lpOverlapped=0x1135be08 | out: lpBuffer=0x112e7880*, lpNumberOfBytesWritten=0x1135bdfc*=0x230, lpOverlapped=0x1135be08) returned 1
	[0301.398] GetFileType (hFile=0x2a0) returned 0x1
	[0301.398] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xf56, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.399] CloseHandle (hObject=0x2a0) returned 1
	[0301.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf.tl30z")) returned 0x220
	[0301.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.402] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.404] SetEvent (hEvent=0x24c) returned 1
	[0301.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf")) returned 0x220
	[0301.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF", dwFileAttributes=0x220) returned 1
	[0301.405] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0301.529] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0301.529] ReadFile (in: hFile=0x1fc, lpBuffer=0x113ec000, nNumberOfBytesToRead=0xb5b4, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x113ec000*, lpNumberOfBytesRead=0x11319e18*=0xb5b4, lpOverlapped=0x0) returned 1
	[0301.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0301.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11266802 | out: pbBuffer=0x11266802) returned 1
	[0301.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0301.539] GetFileType (hFile=0x1fc) returned 0x1
	[0301.539] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.539] WriteFile (in: hFile=0x1fc, lpBuffer=0x11094000*, nNumberOfBytesToWrite=0xb5b4, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11094000*, lpNumberOfBytesWritten=0x11339dfc*=0xb5b4, lpOverlapped=0x11339e08) returned 1
	[0301.540] GetFileType (hFile=0x1fc) returned 0x1
	[0301.540] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xb5b4, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.540] GetFileType (hFile=0x1fc) returned 0x1
	[0301.540] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.541] WriteFile (in: hFile=0x1fc, lpBuffer=0x11454a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11454a80*, lpNumberOfBytesWritten=0x11339dfc*=0x236, lpOverlapped=0x11339e08) returned 1
	[0301.541] GetFileType (hFile=0x1fc) returned 0x1
	[0301.542] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xb5b4, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.542] CloseHandle (hObject=0x1fc) returned 1
	[0301.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf.tl30z")) returned 0x220
	[0301.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.546] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.549] SetEvent (hEvent=0x284) returned 1
	[0301.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf")) returned 0x220
	[0301.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF", dwFileAttributes=0x220) returned 1
	[0301.549] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0301.629] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0301.629] ReadFile (in: hFile=0x1b4, lpBuffer=0x110e6000, nNumberOfBytesToRead=0x3c9e, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x110e6000*, lpNumberOfBytesRead=0x11319e18*=0x3c9e, lpOverlapped=0x0) returned 1
	[0301.635] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111586f0 | out: pbBuffer=0x111586f0) returned 1
	[0301.635] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111586e8 | out: pbBuffer=0x111586e8) returned 1
	[0301.635] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c59202 | out: pbBuffer=0x11c59202) returned 1
	[0301.636] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158720 | out: pbBuffer=0x11158720) returned 1
	[0301.636] GetFileType (hFile=0x1b4) returned 0x1
	[0301.636] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.636] WriteFile (in: hFile=0x1b4, lpBuffer=0x110aa000*, nNumberOfBytesToWrite=0x3c9e, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x110aa000*, lpNumberOfBytesWritten=0x11339dfc*=0x3c9e, lpOverlapped=0x11339e08) returned 1
	[0301.637] GetFileType (hFile=0x1b4) returned 0x1
	[0301.637] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3c9e, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.637] GetFileType (hFile=0x1b4) returned 0x1
	[0301.637] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.637] WriteFile (in: hFile=0x1b4, lpBuffer=0x11462700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11462700*, lpNumberOfBytesWritten=0x11339dfc*=0x233, lpOverlapped=0x11339e08) returned 1
	[0301.637] GetFileType (hFile=0x1b4) returned 0x1
	[0301.637] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3c9e, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.637] CloseHandle (hObject=0x1b4) returned 1
	[0301.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf.tl30z")) returned 0x220
	[0301.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.642] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.643] SetEvent (hEvent=0x284) returned 1
	[0301.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf")) returned 0x220
	[0301.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF", dwFileAttributes=0x220) returned 1
	[0301.644] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0301.727] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0301.727] ReadFile (in: hFile=0x1b4, lpBuffer=0x11c90000, nNumberOfBytesToRead=0x795c, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11c90000*, lpNumberOfBytesRead=0x11319e18*=0x795c, lpOverlapped=0x0) returned 1
	[0301.736] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6540 | out: pbBuffer=0x113e6540) returned 1
	[0301.737] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6538 | out: pbBuffer=0x113e6538) returned 1
	[0301.737] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c9a702 | out: pbBuffer=0x11c9a702) returned 1
	[0301.737] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c9a7e0 | out: pbBuffer=0x11c9a7e0) returned 1
	[0301.737] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0301.738] GetFileType (hFile=0x1b4) returned 0x1
	[0301.738] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.738] WriteFile (in: hFile=0x1b4, lpBuffer=0x110f0000*, nNumberOfBytesToWrite=0x795c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110f0000*, lpNumberOfBytesWritten=0x11031dfc*=0x795c, lpOverlapped=0x11031e08) returned 1
	[0301.739] GetFileType (hFile=0x1b4) returned 0x1
	[0301.739] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x795c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.739] GetFileType (hFile=0x1b4) returned 0x1
	[0301.739] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.739] WriteFile (in: hFile=0x1b4, lpBuffer=0x11c13500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c13500*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0301.740] GetFileType (hFile=0x1b4) returned 0x1
	[0301.740] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x795c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.740] CloseHandle (hObject=0x1b4) returned 1
	[0301.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf.tl30z")) returned 0x220
	[0301.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.748] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.755] SetEvent (hEvent=0x124) returned 1
	[0301.755] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf")) returned 0x220
	[0301.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF", dwFileAttributes=0x220) returned 1
	[0301.762] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0301.852] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0301.853] ReadFile (in: hFile=0x1d8, lpBuffer=0x11096500, nNumberOfBytesToRead=0x21a0, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11096500*, lpNumberOfBytesRead=0x11319e18*=0x21a0, lpOverlapped=0x0) returned 1
	[0301.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0301.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11477302 | out: pbBuffer=0x11477302) returned 1
	[0301.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114773d8 | out: pbBuffer=0x114773d8) returned 1
	[0301.859] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0301.859] GetFileType (hFile=0x1d8) returned 0x1
	[0301.859] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.860] WriteFile (in: hFile=0x1d8, lpBuffer=0x110de000*, nNumberOfBytesToWrite=0x21a0, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x110de000*, lpNumberOfBytesWritten=0x11339dfc*=0x21a0, lpOverlapped=0x11339e08) returned 1
	[0301.860] GetFileType (hFile=0x1d8) returned 0x1
	[0301.860] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x21a0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.860] GetFileType (hFile=0x1d8) returned 0x1
	[0301.861] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.861] WriteFile (in: hFile=0x1d8, lpBuffer=0x1137f880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1137f880*, lpNumberOfBytesWritten=0x11339dfc*=0x224, lpOverlapped=0x11339e08) returned 1
	[0301.870] GetFileType (hFile=0x1d8) returned 0x1
	[0301.870] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x21a0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.870] CloseHandle (hObject=0x1d8) returned 1
	[0301.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf.tl30z")) returned 0x220
	[0301.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.890] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.900] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.945] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.951] SetEvent (hEvent=0x124) returned 1
	[0301.951] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0301.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg")) returned 0x220
	[0301.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG", dwFileAttributes=0x220) returned 1
	[0301.963] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg.tl30z"), dwFlags=0x1) returned 1
	[0302.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0302.118] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0302.118] ReadFile (in: hFile=0x2a0, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x89a4, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x11425e18*=0x89a4, lpOverlapped=0x0) returned 1
	[0302.123] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0302.123] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113f0802 | out: pbBuffer=0x113f0802) returned 1
	[0302.123] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113f0841 | out: pbBuffer=0x113f0841) returned 1
	[0302.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0302.125] GetFileType (hFile=0x2a0) returned 0x1
	[0302.125] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.125] WriteFile (in: hFile=0x2a0, lpBuffer=0x112ee000*, nNumberOfBytesToWrite=0x89a4, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112ee000*, lpNumberOfBytesWritten=0x1102ddfc*=0x89a4, lpOverlapped=0x1102de08) returned 1
	[0302.126] GetFileType (hFile=0x2a0) returned 0x1
	[0302.126] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x89a4, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.126] GetFileType (hFile=0x2a0) returned 0x1
	[0302.126] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.126] WriteFile (in: hFile=0x2a0, lpBuffer=0x11322a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11322a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0302.126] GetFileType (hFile=0x2a0) returned 0x1
	[0302.126] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x89a4, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.127] CloseHandle (hObject=0x2a0) returned 1
	[0302.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg.tl30z")) returned 0x220
	[0302.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0302.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg")) returned 0x220
	[0302.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG", dwFileAttributes=0x220) returned 1
	[0302.131] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg.tl30z"), dwFlags=0x1) returned 1
	[0302.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.212] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0302.212] ReadFile (in: hFile=0x1d8, lpBuffer=0x11456000, nNumberOfBytesToRead=0x2d21, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11456000*, lpNumberOfBytesRead=0x1131ae18*=0x2d21, lpOverlapped=0x0) returned 1
	[0302.219] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0302.219] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11be1d02 | out: pbBuffer=0x11be1d02) returned 1
	[0302.219] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11be1d7a | out: pbBuffer=0x11be1d7a) returned 1
	[0302.219] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0302.220] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x0
	[0302.222] SetEvent (hEvent=0x150) returned 1
	[0302.222] SetEvent (hEvent=0x248) returned 1
	[0302.222] SetEvent (hEvent=0x284) returned 1
	[0302.222] GetFileType (hFile=0x1d8) returned 0x1
	[0302.222] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11bd9de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.222] WriteFile (in: hFile=0x1d8, lpBuffer=0x1117e000*, nNumberOfBytesToWrite=0x2d21, lpNumberOfBytesWritten=0x11bd9dfc, lpOverlapped=0x11bd9e08 | out: lpBuffer=0x1117e000*, lpNumberOfBytesWritten=0x11bd9dfc*=0x2d21, lpOverlapped=0x11bd9e08) returned 1
	[0302.223] GetFileType (hFile=0x1d8) returned 0x1
	[0302.223] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2d21, lpNewFilePointer=0x0, dwMoveMethod=0x11bd9de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.223] GetFileType (hFile=0x1d8) returned 0x1
	[0302.223] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11bd9de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.223] WriteFile (in: hFile=0x1d8, lpBuffer=0x11468700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11bd9dfc, lpOverlapped=0x11bd9e08 | out: lpBuffer=0x11468700*, lpNumberOfBytesWritten=0x11bd9dfc*=0x22a, lpOverlapped=0x11bd9e08) returned 1
	[0302.223] GetFileType (hFile=0x1d8) returned 0x1
	[0302.223] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2d21, lpNewFilePointer=0x0, dwMoveMethod=0x11bd9de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.223] CloseHandle (hObject=0x1d8) returned 1
	[0302.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg.tl30z")) returned 0x220
	[0302.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0302.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0302.235] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1133be08 | out: lpMode=0x1133be08) returned 0
	[0302.236] ReadFile (in: hFile=0x250, lpBuffer=0x113ec000, nNumberOfBytesToRead=0x9e8a, lpNumberOfBytesRead=0x1133be18, lpOverlapped=0x0 | out: lpBuffer=0x113ec000*, lpNumberOfBytesRead=0x1133be18*=0x9e8a, lpOverlapped=0x0) returned 1
	[0302.244] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0302.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0302.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0302.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11be0802 | out: pbBuffer=0x11be0802) returned 1
	[0302.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11be084e | out: pbBuffer=0x11be084e) returned 1
	[0302.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0302.253] GetFileType (hFile=0x250) returned 0x1
	[0302.253] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.253] WriteFile (in: hFile=0x250, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x9e8a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1133bdfc*=0x9e8a, lpOverlapped=0x1133be08) returned 1
	[0302.254] GetFileType (hFile=0x250) returned 0x1
	[0302.254] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x9e8a, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.254] GetFileType (hFile=0x250) returned 0x1
	[0302.254] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.254] WriteFile (in: hFile=0x250, lpBuffer=0x11468e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11468e00*, lpNumberOfBytesWritten=0x1133bdfc*=0x233, lpOverlapped=0x1133be08) returned 1
	[0302.255] GetFileType (hFile=0x250) returned 0x1
	[0302.255] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x9e8a, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.255] CloseHandle (hObject=0x250) returned 1
	[0302.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf.tl30z")) returned 0x220
	[0302.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.265] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0302.272] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0302.304] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0302.325] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0302.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf")) returned 0x220
	[0302.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF", dwFileAttributes=0x220) returned 1
	[0302.348] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.484] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0302.484] ReadFile (in: hFile=0x1d8, lpBuffer=0x112b3800, nNumberOfBytesToRead=0x37de, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112b3800*, lpNumberOfBytesRead=0x1128be18*=0x37de, lpOverlapped=0x0) returned 1
	[0302.490] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0302.490] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4c8 | out: pbBuffer=0x1104e4c8) returned 1
	[0302.490] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c3c02 | out: pbBuffer=0x112c3c02) returned 1
	[0302.490] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c3c52 | out: pbBuffer=0x112c3c52) returned 1
	[0302.490] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c3c54 | out: pbBuffer=0x112c3c54) returned 1
	[0302.491] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0302.491] GetFileType (hFile=0x1d8) returned 0x1
	[0302.491] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.491] WriteFile (in: hFile=0x1d8, lpBuffer=0x11182000*, nNumberOfBytesToWrite=0x37de, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11182000*, lpNumberOfBytesWritten=0x11031dfc*=0x37de, lpOverlapped=0x11031e08) returned 1
	[0302.492] GetFileType (hFile=0x1d8) returned 0x1
	[0302.492] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x37de, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.492] GetFileType (hFile=0x1d8) returned 0x1
	[0302.492] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.492] WriteFile (in: hFile=0x1d8, lpBuffer=0x110aa700*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110aa700*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0302.493] GetFileType (hFile=0x1d8) returned 0x1
	[0302.493] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x37de, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.493] CloseHandle (hObject=0x1d8) returned 1
	[0302.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf.tl30z")) returned 0x220
	[0302.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.495] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0302.499] SetEvent (hEvent=0x248) returned 1
	[0302.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf")) returned 0x220
	[0302.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF", dwFileAttributes=0x220) returned 1
	[0302.500] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.595] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0302.595] ReadFile (in: hFile=0x1d8, lpBuffer=0x11130a80, nNumberOfBytesToRead=0x6991, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11130a80*, lpNumberOfBytesRead=0x1128be18*=0x6991, lpOverlapped=0x0) returned 1
	[0302.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158270 | out: pbBuffer=0x11158270) returned 1
	[0302.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261302 | out: pbBuffer=0x11261302) returned 1
	[0302.602] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582a0 | out: pbBuffer=0x111582a0) returned 1
	[0302.602] GetFileType (hFile=0x1d8) returned 0x1
	[0302.602] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.603] WriteFile (in: hFile=0x1d8, lpBuffer=0x110c2000*, nNumberOfBytesToWrite=0x6991, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110c2000*, lpNumberOfBytesWritten=0x1133fdfc*=0x6991, lpOverlapped=0x1133fe08) returned 1
	[0302.603] GetFileType (hFile=0x1d8) returned 0x1
	[0302.603] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6991, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.603] GetFileType (hFile=0x1d8) returned 0x1
	[0302.604] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.604] WriteFile (in: hFile=0x1d8, lpBuffer=0x111a3c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111a3c00*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0302.604] GetFileType (hFile=0x1d8) returned 0x1
	[0302.604] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6991, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.604] CloseHandle (hObject=0x1d8) returned 1
	[0302.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf.tl30z")) returned 0x220
	[0302.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.608] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0302.620] SetEvent (hEvent=0x160) returned 1
	[0302.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf")) returned 0x220
	[0302.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF", dwFileAttributes=0x220) returned 1
	[0302.621] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.703] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0302.703] ReadFile (in: hFile=0x1d8, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x493e, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x1128be18*=0x493e, lpOverlapped=0x0) returned 1
	[0302.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0302.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e0802 | out: pbBuffer=0x110e0802) returned 1
	[0302.709] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e082f | out: pbBuffer=0x110e082f) returned 1
	[0302.709] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e0884 | out: pbBuffer=0x110e0884) returned 1
	[0302.709] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e0896 | out: pbBuffer=0x110e0896) returned 1
	[0302.709] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e08d2 | out: pbBuffer=0x110e08d2) returned 1
	[0302.709] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0302.710] GetFileType (hFile=0x1d8) returned 0x1
	[0302.710] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.710] WriteFile (in: hFile=0x1d8, lpBuffer=0x11460000*, nNumberOfBytesToWrite=0x493e, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11460000*, lpNumberOfBytesWritten=0x1102ddfc*=0x493e, lpOverlapped=0x1102de08) returned 1
	[0302.711] GetFileType (hFile=0x1d8) returned 0x1
	[0302.711] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x493e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.711] GetFileType (hFile=0x1d8) returned 0x1
	[0302.711] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.711] WriteFile (in: hFile=0x1d8, lpBuffer=0x112b0a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112b0a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0302.711] GetFileType (hFile=0x1d8) returned 0x1
	[0302.711] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x493e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.712] CloseHandle (hObject=0x1d8) returned 1
	[0302.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf.tl30z")) returned 0x220
	[0302.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.715] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0302.718] SetEvent (hEvent=0x160) returned 1
	[0302.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf")) returned 0x220
	[0302.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF", dwFileAttributes=0x220) returned 1
	[0302.719] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0302.793] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0302.793] ReadFile (in: hFile=0x250, lpBuffer=0x111c2000, nNumberOfBytesToRead=0x4a5a, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x111c2000*, lpNumberOfBytesRead=0x1128be18*=0x4a5a, lpOverlapped=0x0) returned 1
	[0302.797] SetEvent (hEvent=0x160) returned 1
	[0302.798] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111589c0 | out: pbBuffer=0x111589c0) returned 1
	[0302.799] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119a802 | out: pbBuffer=0x1119a802) returned 1
	[0302.799] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119a82c | out: pbBuffer=0x1119a82c) returned 1
	[0302.799] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111589f0 | out: pbBuffer=0x111589f0) returned 1
	[0302.800] GetFileType (hFile=0x250) returned 0x1
	[0302.800] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.800] WriteFile (in: hFile=0x250, lpBuffer=0x111f4000*, nNumberOfBytesToWrite=0x4a5a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111f4000*, lpNumberOfBytesWritten=0x1133fdfc*=0x4a5a, lpOverlapped=0x1133fe08) returned 1
	[0302.801] GetFileType (hFile=0x250) returned 0x1
	[0302.801] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4a5a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.801] GetFileType (hFile=0x250) returned 0x1
	[0302.801] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.801] WriteFile (in: hFile=0x250, lpBuffer=0x111dc380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111dc380*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0302.801] GetFileType (hFile=0x250) returned 0x1
	[0302.802] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4a5a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.802] CloseHandle (hObject=0x250) returned 1
	[0302.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf.tl30z")) returned 0x220
	[0302.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.807] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0302.809] SetEvent (hEvent=0x160) returned 1
	[0302.809] SetEvent (hEvent=0x248) returned 1
	[0302.809] SwitchToThread () returned 1
	[0302.846] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0303.125] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0303.127] SetEvent (hEvent=0x160) returned 1
	[0303.127] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0303.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg")) returned 0x220
	[0303.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG", dwFileAttributes=0x220) returned 1
	[0303.323] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0303.460] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0303.460] ReadFile (in: hFile=0x250, lpBuffer=0x11246000, nNumberOfBytesToRead=0x81ab, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11246000*, lpNumberOfBytesRead=0x11425e18*=0x81ab, lpOverlapped=0x0) returned 1
	[0303.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0303.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11250702 | out: pbBuffer=0x11250702) returned 1
	[0303.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0303.467] GetFileType (hFile=0x250) returned 0x1
	[0303.467] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.468] WriteFile (in: hFile=0x250, lpBuffer=0x112ee000*, nNumberOfBytesToWrite=0x81ab, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112ee000*, lpNumberOfBytesWritten=0x1133fdfc*=0x81ab, lpOverlapped=0x1133fe08) returned 1
	[0303.468] GetFileType (hFile=0x250) returned 0x1
	[0303.468] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x81ab, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.469] GetFileType (hFile=0x250) returned 0x1
	[0303.469] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.469] WriteFile (in: hFile=0x250, lpBuffer=0x11365500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11365500*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0303.470] GetFileType (hFile=0x250) returned 0x1
	[0303.470] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x81ab, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.470] CloseHandle (hObject=0x250) returned 1
	[0303.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg.tl30z")) returned 0x220
	[0303.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.474] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0303.476] SetEvent (hEvent=0x248) returned 1
	[0303.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf")) returned 0x220
	[0303.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF", dwFileAttributes=0x220) returned 1
	[0303.477] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf.tl30z"), dwFlags=0x1) returned 1
	[0303.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0303.573] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0303.573] ReadFile (in: hFile=0x1fc, lpBuffer=0x11163000, nNumberOfBytesToRead=0x4180, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11163000*, lpNumberOfBytesRead=0x11425e18*=0x4180, lpOverlapped=0x0) returned 1
	[0303.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0303.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e638 | out: pbBuffer=0x1104e638) returned 1
	[0303.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11251202 | out: pbBuffer=0x11251202) returned 1
	[0303.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125127a | out: pbBuffer=0x1125127a) returned 1
	[0303.580] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0303.580] GetFileType (hFile=0x1fc) returned 0x1
	[0303.580] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.581] WriteFile (in: hFile=0x1fc, lpBuffer=0x11112000*, nNumberOfBytesToWrite=0x4180, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11112000*, lpNumberOfBytesWritten=0x1133fdfc*=0x4180, lpOverlapped=0x1133fe08) returned 1
	[0303.581] GetFileType (hFile=0x1fc) returned 0x1
	[0303.581] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4180, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.581] GetFileType (hFile=0x1fc) returned 0x1
	[0303.581] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.581] WriteFile (in: hFile=0x1fc, lpBuffer=0x11104380*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11104380*, lpNumberOfBytesWritten=0x1133fdfc*=0x221, lpOverlapped=0x1133fe08) returned 1
	[0303.582] GetFileType (hFile=0x1fc) returned 0x1
	[0303.582] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4180, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.582] CloseHandle (hObject=0x1fc) returned 1
	[0303.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf.tl30z")) returned 0x220
	[0303.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0303.585] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0303.587] SetEvent (hEvent=0x1b0) returned 1
	[0303.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf")) returned 0x220
	[0303.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF", dwFileAttributes=0x220) returned 1
	[0303.588] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf.tl30z"), dwFlags=0x1) returned 1
	[0303.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0303.689] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0303.689] ReadFile (in: hFile=0x250, lpBuffer=0x1138e000, nNumberOfBytesToRead=0x2e7e, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1138e000*, lpNumberOfBytesRead=0x11425e18*=0x2e7e, lpOverlapped=0x0) returned 1
	[0303.702] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0303.703] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0303.703] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11058802 | out: pbBuffer=0x11058802) returned 1
	[0303.703] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0303.704] GetFileType (hFile=0x250) returned 0x1
	[0303.704] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.704] WriteFile (in: hFile=0x250, lpBuffer=0x11320000*, nNumberOfBytesToWrite=0x2e7e, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11320000*, lpNumberOfBytesWritten=0x1133bdfc*=0x2e7e, lpOverlapped=0x1133be08) returned 1
	[0303.705] GetFileType (hFile=0x250) returned 0x1
	[0303.705] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2e7e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.705] GetFileType (hFile=0x250) returned 0x1
	[0303.705] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.705] WriteFile (in: hFile=0x250, lpBuffer=0x1139aa80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1139aa80*, lpNumberOfBytesWritten=0x1133bdfc*=0x236, lpOverlapped=0x1133be08) returned 1
	[0303.706] GetFileType (hFile=0x250) returned 0x1
	[0303.706] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2e7e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.706] CloseHandle (hObject=0x250) returned 1
	[0303.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf.tl30z")) returned 0x220
	[0303.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0303.725] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0303.732] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0303.751] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0303.768] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0303.786] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0303.796] SetEvent (hEvent=0x1e0) returned 1
	[0303.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg")) returned 0x220
	[0303.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG", dwFileAttributes=0x220) returned 1
	[0303.796] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.892] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0303.892] ReadFile (in: hFile=0x1d8, lpBuffer=0x111bc000, nNumberOfBytesToRead=0x1f8a, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x111bc000*, lpNumberOfBytesRead=0x11286e18*=0x1f8a, lpOverlapped=0x0) returned 1
	[0303.900] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0303.900] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111580f8 | out: pbBuffer=0x111580f8) returned 1
	[0303.900] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11266802 | out: pbBuffer=0x11266802) returned 1
	[0303.900] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11266819 | out: pbBuffer=0x11266819) returned 1
	[0303.900] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11266848 | out: pbBuffer=0x11266848) returned 1
	[0303.900] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112668b4 | out: pbBuffer=0x112668b4) returned 1
	[0303.901] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0303.901] GetFileType (hFile=0x1d8) returned 0x1
	[0303.901] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.901] WriteFile (in: hFile=0x1d8, lpBuffer=0x11160000*, nNumberOfBytesToWrite=0x1f8a, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11160000*, lpNumberOfBytesWritten=0x1102ddfc*=0x1f8a, lpOverlapped=0x1102de08) returned 1
	[0303.901] GetFileType (hFile=0x1d8) returned 0x1
	[0303.902] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1f8a, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.902] GetFileType (hFile=0x1d8) returned 0x1
	[0303.902] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.902] WriteFile (in: hFile=0x1d8, lpBuffer=0x11184a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11184a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0303.903] GetFileType (hFile=0x1d8) returned 0x1
	[0303.903] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1f8a, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.903] CloseHandle (hObject=0x1d8) returned 1
	[0303.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg.tl30z")) returned 0x220
	[0303.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.908] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0303.911] SetEvent (hEvent=0x1b0) returned 1
	[0303.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg")) returned 0x220
	[0303.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG", dwFileAttributes=0x220) returned 1
	[0303.912] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0304.015] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0304.015] ReadFile (in: hFile=0x1d8, lpBuffer=0x1109c000, nNumberOfBytesToRead=0xa497, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x1109c000*, lpNumberOfBytesRead=0x11286e18*=0xa497, lpOverlapped=0x0) returned 1
	[0304.031] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0304.031] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1142d202 | out: pbBuffer=0x1142d202) returned 1
	[0304.031] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142d2b2 | out: pbBuffer=0x1142d2b2) returned 1
	[0304.031] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142d2d3 | out: pbBuffer=0x1142d2d3) returned 1
	[0304.032] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0304.034] GetFileType (hFile=0x1d8) returned 0x1
	[0304.034] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.035] WriteFile (in: hFile=0x1d8, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0xa497, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x1133fdfc*=0xa497, lpOverlapped=0x1133fe08) returned 1
	[0304.035] GetFileType (hFile=0x1d8) returned 0x1
	[0304.035] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa497, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.036] GetFileType (hFile=0x1d8) returned 0x1
	[0304.036] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.036] WriteFile (in: hFile=0x1d8, lpBuffer=0x1136b880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1136b880*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0304.036] GetFileType (hFile=0x1d8) returned 0x1
	[0304.036] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa497, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.036] CloseHandle (hObject=0x1d8) returned 1
	[0304.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg.tl30z")) returned 0x220
	[0304.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.042] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0304.045] SetEvent (hEvent=0x1b0) returned 1
	[0304.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg")) returned 0x220
	[0304.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG", dwFileAttributes=0x220) returned 1
	[0304.046] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0304.185] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0304.185] ReadFile (in: hFile=0x1b4, lpBuffer=0x111f0000, nNumberOfBytesToRead=0x3d7f, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x111f0000*, lpNumberOfBytesRead=0x11286e18*=0x3d7f, lpOverlapped=0x0) returned 1
	[0304.198] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0304.198] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6558 | out: pbBuffer=0x113e6558) returned 1
	[0304.198] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f8602 | out: pbBuffer=0x111f8602) returned 1
	[0304.198] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f86b6 | out: pbBuffer=0x111f86b6) returned 1
	[0304.198] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0304.199] SetEvent (hEvent=0x284) returned 1
	[0304.199] GetFileType (hFile=0x1b4) returned 0x1
	[0304.199] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.199] WriteFile (in: hFile=0x1b4, lpBuffer=0x11216000*, nNumberOfBytesToWrite=0x3d7f, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11216000*, lpNumberOfBytesWritten=0x1133fdfc*=0x3d7f, lpOverlapped=0x1133fe08) returned 1
	[0304.200] GetFileType (hFile=0x1b4) returned 0x1
	[0304.200] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3d7f, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.200] GetFileType (hFile=0x1b4) returned 0x1
	[0304.201] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.201] WriteFile (in: hFile=0x1b4, lpBuffer=0x1144b500*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1144b500*, lpNumberOfBytesWritten=0x1133fdfc*=0x23c, lpOverlapped=0x1133fe08) returned 1
	[0304.201] GetFileType (hFile=0x1b4) returned 0x1
	[0304.201] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3d7f, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.201] CloseHandle (hObject=0x1b4) returned 1
	[0304.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg.tl30z")) returned 0x220
	[0304.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.223] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0304.225] SetEvent (hEvent=0x284) returned 1
	[0304.225] SetEvent (hEvent=0x24c) returned 1
	[0304.225] SwitchToThread () returned 1
	[0304.261] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0304.279] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0304.303] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0304.338] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0304.575] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0304.656] SetEvent (hEvent=0x284) returned 1
	[0304.656] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0304.659] SetEvent (hEvent=0x284) returned 1
	[0304.659] SwitchToThread () returned 1
	[0304.660] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0304.668] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0304.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg")) returned 0x220
	[0304.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG", dwFileAttributes=0x220) returned 1
	[0304.687] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0304.780] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0304.780] ReadFile (in: hFile=0x1d4, lpBuffer=0x11190000, nNumberOfBytesToRead=0x961d, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11190000*, lpNumberOfBytesRead=0x11428e18*=0x961d, lpOverlapped=0x0) returned 1
	[0304.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4a0 | out: pbBuffer=0x1104e4a0) returned 1
	[0304.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e498 | out: pbBuffer=0x1104e498) returned 1
	[0304.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a5d02 | out: pbBuffer=0x113a5d02) returned 1
	[0304.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a5dcd | out: pbBuffer=0x113a5dcd) returned 1
	[0304.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0304.787] GetFileType (hFile=0x1d4) returned 0x1
	[0304.787] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.788] WriteFile (in: hFile=0x1d4, lpBuffer=0x1110c000*, nNumberOfBytesToWrite=0x961d, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x1110c000*, lpNumberOfBytesWritten=0x1139fdfc*=0x961d, lpOverlapped=0x1139fe08) returned 1
	[0304.789] GetFileType (hFile=0x1d4) returned 0x1
	[0304.789] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x961d, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.789] GetFileType (hFile=0x1d4) returned 0x1
	[0304.790] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.790] WriteFile (in: hFile=0x1d4, lpBuffer=0x111aa700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x111aa700*, lpNumberOfBytesWritten=0x1139fdfc*=0x233, lpOverlapped=0x1139fe08) returned 1
	[0304.790] GetFileType (hFile=0x1d4) returned 0x1
	[0304.790] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x961d, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.790] CloseHandle (hObject=0x1d4) returned 1
	[0304.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg.tl30z")) returned 0x220
	[0304.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg")) returned 0x220
	[0304.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG", dwFileAttributes=0x220) returned 1
	[0304.794] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0304.874] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0304.874] ReadFile (in: hFile=0x1d4, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x8637, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11423e18*=0x8637, lpOverlapped=0x0) returned 1
	[0304.882] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0304.882] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a0802 | out: pbBuffer=0x112a0802) returned 1
	[0304.883] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a0892 | out: pbBuffer=0x112a0892) returned 1
	[0304.883] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0304.884] GetFileType (hFile=0x1d4) returned 0x1
	[0304.884] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.884] WriteFile (in: hFile=0x1d4, lpBuffer=0x110d8000*, nNumberOfBytesToWrite=0x8637, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110d8000*, lpNumberOfBytesWritten=0x1102bdfc*=0x8637, lpOverlapped=0x1102be08) returned 1
	[0304.885] GetFileType (hFile=0x1d4) returned 0x1
	[0304.885] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8637, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.885] GetFileType (hFile=0x1d4) returned 0x1
	[0304.886] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.886] WriteFile (in: hFile=0x1d4, lpBuffer=0x11462a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11462a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0304.886] GetFileType (hFile=0x1d4) returned 0x1
	[0304.886] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8637, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.886] CloseHandle (hObject=0x1d4) returned 1
	[0304.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg.tl30z")) returned 0x220
	[0304.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.889] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0304.892] SetEvent (hEvent=0x160) returned 1
	[0304.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg")) returned 0x220
	[0304.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG", dwFileAttributes=0x220) returned 1
	[0304.893] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0305.024] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0305.024] ReadFile (in: hFile=0x250, lpBuffer=0x11116000, nNumberOfBytesToRead=0x84e7, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11116000*, lpNumberOfBytesRead=0x11423e18*=0x84e7, lpOverlapped=0x0) returned 1
	[0305.034] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0305.037] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11122702 | out: pbBuffer=0x11122702) returned 1
	[0305.037] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0305.038] GetFileType (hFile=0x250) returned 0x1
	[0305.038] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.039] WriteFile (in: hFile=0x250, lpBuffer=0x1119e000*, nNumberOfBytesToWrite=0x84e7, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1119e000*, lpNumberOfBytesWritten=0x1133fdfc*=0x84e7, lpOverlapped=0x1133fe08) returned 1
	[0305.039] GetFileType (hFile=0x250) returned 0x1
	[0305.040] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x84e7, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.040] GetFileType (hFile=0x250) returned 0x1
	[0305.040] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.040] WriteFile (in: hFile=0x250, lpBuffer=0x110af880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110af880*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0305.070] GetFileType (hFile=0x250) returned 0x1
	[0305.070] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x84e7, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.070] CloseHandle (hObject=0x250) returned 1
	[0305.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg.tl30z")) returned 0x220
	[0305.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.074] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0305.080] SetEvent (hEvent=0x284) returned 1
	[0305.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg")) returned 0x220
	[0305.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG", dwFileAttributes=0x220) returned 1
	[0305.081] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.183] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0305.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0305.198] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0305.198] ReadFile (in: hFile=0x1d4, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x8b08, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11423e18*=0x8b08, lpOverlapped=0x0) returned 1
	[0305.207] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0305.207] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0305.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a4802 | out: pbBuffer=0x113a4802) returned 1
	[0305.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a481c | out: pbBuffer=0x113a481c) returned 1
	[0305.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0305.209] GetFileType (hFile=0x1d4) returned 0x1
	[0305.209] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.209] WriteFile (in: hFile=0x1d4, lpBuffer=0x111d8000*, nNumberOfBytesToWrite=0x8b08, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x111d8000*, lpNumberOfBytesWritten=0x1139fdfc*=0x8b08, lpOverlapped=0x1139fe08) returned 1
	[0305.209] GetFileType (hFile=0x1d4) returned 0x1
	[0305.210] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8b08, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.210] GetFileType (hFile=0x1d4) returned 0x1
	[0305.210] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.210] WriteFile (in: hFile=0x1d4, lpBuffer=0x110e8a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x110e8a80*, lpNumberOfBytesWritten=0x1139fdfc*=0x22a, lpOverlapped=0x1139fe08) returned 1
	[0305.210] GetFileType (hFile=0x1d4) returned 0x1
	[0305.210] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8b08, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.210] CloseHandle (hObject=0x1d4) returned 1
	[0305.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg.tl30z")) returned 0x220
	[0305.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.214] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0305.219] SetEvent (hEvent=0x1e0) returned 1
	[0305.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg")) returned 0x220
	[0305.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG", dwFileAttributes=0x220) returned 1
	[0305.220] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.336] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0305.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0305.342] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0305.342] ReadFile (in: hFile=0x1d4, lpBuffer=0x110a6000, nNumberOfBytesToRead=0x6fcc, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x110a6000*, lpNumberOfBytesRead=0x1131ae18*=0x6fcc, lpOverlapped=0x0) returned 1
	[0305.350] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0305.350] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0305.350] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11260802 | out: pbBuffer=0x11260802) returned 1
	[0305.350] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0305.354] GetFileType (hFile=0x1d4) returned 0x1
	[0305.354] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.355] WriteFile (in: hFile=0x1d4, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0x6fcc, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x11339dfc*=0x6fcc, lpOverlapped=0x11339e08) returned 1
	[0305.356] GetFileType (hFile=0x1d4) returned 0x1
	[0305.356] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6fcc, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.356] GetFileType (hFile=0x1d4) returned 0x1
	[0305.357] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.357] WriteFile (in: hFile=0x1d4, lpBuffer=0x11140e00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11140e00*, lpNumberOfBytesWritten=0x11339dfc*=0x236, lpOverlapped=0x11339e08) returned 1
	[0305.357] GetFileType (hFile=0x1d4) returned 0x1
	[0305.357] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6fcc, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.357] CloseHandle (hObject=0x1d4) returned 1
	[0305.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg.tl30z")) returned 0x220
	[0305.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.362] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0305.365] SetEvent (hEvent=0x174) returned 1
	[0305.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg")) returned 0x220
	[0305.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG", dwFileAttributes=0x220) returned 1
	[0305.366] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0305.456] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0305.456] ReadFile (in: hFile=0x1d4, lpBuffer=0x113b6000, nNumberOfBytesToRead=0x693e, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x113b6000*, lpNumberOfBytesRead=0x1131ae18*=0x693e, lpOverlapped=0x0) returned 1
	[0305.461] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0305.462] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0305.462] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f1d02 | out: pbBuffer=0x112f1d02) returned 1
	[0305.462] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f1de3 | out: pbBuffer=0x112f1de3) returned 1
	[0305.462] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0305.463] GetFileType (hFile=0x1d4) returned 0x1
	[0305.463] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.463] WriteFile (in: hFile=0x1d4, lpBuffer=0x1144e000*, nNumberOfBytesToWrite=0x693e, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1144e000*, lpNumberOfBytesWritten=0x1102ddfc*=0x693e, lpOverlapped=0x1102de08) returned 1
	[0305.464] GetFileType (hFile=0x1d4) returned 0x1
	[0305.464] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x693e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.464] GetFileType (hFile=0x1d4) returned 0x1
	[0305.464] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.464] WriteFile (in: hFile=0x1d4, lpBuffer=0x11302700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11302700*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0305.464] GetFileType (hFile=0x1d4) returned 0x1
	[0305.465] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x693e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.465] CloseHandle (hObject=0x1d4) returned 1
	[0305.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg.tl30z")) returned 0x220
	[0305.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.468] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0305.471] SetEvent (hEvent=0x174) returned 1
	[0305.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg")) returned 0x220
	[0305.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG", dwFileAttributes=0x220) returned 1
	[0305.472] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0305.558] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0305.558] SetEvent (hEvent=0x1e0) returned 1
	[0305.558] ReadFile (in: hFile=0x1d8, lpBuffer=0x11226000, nNumberOfBytesToRead=0x98ec, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11226000*, lpNumberOfBytesRead=0x1131ae18*=0x98ec, lpOverlapped=0x0) returned 1
	[0305.569] SetEvent (hEvent=0x150) returned 1
	[0305.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0305.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0305.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bc802 | out: pbBuffer=0x111bc802) returned 1
	[0305.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111bc8ce | out: pbBuffer=0x111bc8ce) returned 1
	[0305.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0305.572] GetFileType (hFile=0x1d8) returned 0x1
	[0305.572] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.572] WriteFile (in: hFile=0x1d8, lpBuffer=0x112ee000*, nNumberOfBytesToWrite=0x98ec, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112ee000*, lpNumberOfBytesWritten=0x1133fdfc*=0x98ec, lpOverlapped=0x1133fe08) returned 1
	[0305.575] GetFileType (hFile=0x1d8) returned 0x1
	[0305.575] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x98ec, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.576] GetFileType (hFile=0x1d8) returned 0x1
	[0305.576] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.576] WriteFile (in: hFile=0x1d8, lpBuffer=0x1127aa80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1127aa80*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0305.576] GetFileType (hFile=0x1d8) returned 0x1
	[0305.576] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x98ec, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.576] CloseHandle (hObject=0x1d8) returned 1
	[0305.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg.tl30z")) returned 0x220
	[0305.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.587] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0305.595] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0305.756] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0305.779] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0305.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid")) returned 0x220
	[0305.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID", dwFileAttributes=0x220) returned 1
	[0305.789] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0306.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0306.018] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0306.018] ReadFile (in: hFile=0x1d4, lpBuffer=0x1136e000, nNumberOfBytesToRead=0x2645, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x1131ae18*=0x2645, lpOverlapped=0x0) returned 1
	[0306.025] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0306.025] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11412802 | out: pbBuffer=0x11412802) returned 1
	[0306.026] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0306.026] GetFileType (hFile=0x1d4) returned 0x1
	[0306.026] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.027] WriteFile (in: hFile=0x1d4, lpBuffer=0x11418000*, nNumberOfBytesToWrite=0x2645, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11418000*, lpNumberOfBytesWritten=0x1133fdfc*=0x2645, lpOverlapped=0x1133fe08) returned 1
	[0306.027] GetFileType (hFile=0x1d4) returned 0x1
	[0306.027] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2645, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.027] GetFileType (hFile=0x1d4) returned 0x1
	[0306.027] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.028] WriteFile (in: hFile=0x1d4, lpBuffer=0x11330a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11330a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0306.028] GetFileType (hFile=0x1d4) returned 0x1
	[0306.028] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2645, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.028] CloseHandle (hObject=0x1d4) returned 1
	[0306.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid.tl30z")) returned 0x220
	[0306.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0306.031] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0306.034] SetEvent (hEvent=0x248) returned 1
	[0306.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid")) returned 0x220
	[0306.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID", dwFileAttributes=0x220) returned 1
	[0306.036] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0306.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0306.108] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0306.108] ReadFile (in: hFile=0x250, lpBuffer=0x11296000, nNumberOfBytesToRead=0x1ae0, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11296000*, lpNumberOfBytesRead=0x1131ae18*=0x1ae0, lpOverlapped=0x0) returned 1
	[0306.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0306.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e1302 | out: pbBuffer=0x110e1302) returned 1
	[0306.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e1384 | out: pbBuffer=0x110e1384) returned 1
	[0306.115] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0306.115] GetFileType (hFile=0x250) returned 0x1
	[0306.115] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.115] WriteFile (in: hFile=0x250, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0x1ae0, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x11339dfc*=0x1ae0, lpOverlapped=0x11339e08) returned 1
	[0306.116] GetFileType (hFile=0x250) returned 0x1
	[0306.116] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1ae0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.116] GetFileType (hFile=0x250) returned 0x1
	[0306.117] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.117] WriteFile (in: hFile=0x250, lpBuffer=0x113d7880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x113d7880*, lpNumberOfBytesWritten=0x11339dfc*=0x22a, lpOverlapped=0x11339e08) returned 1
	[0306.117] GetFileType (hFile=0x250) returned 0x1
	[0306.117] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1ae0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.117] CloseHandle (hObject=0x250) returned 1
	[0306.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid.tl30z")) returned 0x220
	[0306.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0306.121] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0306.125] SetEvent (hEvent=0x24c) returned 1
	[0306.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf")) returned 0x220
	[0306.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF", dwFileAttributes=0x220) returned 1
	[0306.126] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0306.215] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0306.215] ReadFile (in: hFile=0x1b4, lpBuffer=0x111d8000, nNumberOfBytesToRead=0x1384, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x111d8000*, lpNumberOfBytesRead=0x1131ae18*=0x1384, lpOverlapped=0x0) returned 1
	[0306.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0306.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6558 | out: pbBuffer=0x113e6558) returned 1
	[0306.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e0602 | out: pbBuffer=0x111e0602) returned 1
	[0306.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e06ad | out: pbBuffer=0x111e06ad) returned 1
	[0306.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e06b2 | out: pbBuffer=0x111e06b2) returned 1
	[0306.221] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0306.221] GetFileType (hFile=0x1b4) returned 0x1
	[0306.221] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.221] WriteFile (in: hFile=0x1b4, lpBuffer=0x111f0000*, nNumberOfBytesToWrite=0x1384, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111f0000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1384, lpOverlapped=0x1133fe08) returned 1
	[0306.222] GetFileType (hFile=0x1b4) returned 0x1
	[0306.222] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1384, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.222] GetFileType (hFile=0x1b4) returned 0x1
	[0306.222] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.222] WriteFile (in: hFile=0x1b4, lpBuffer=0x11443500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11443500*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0306.223] GetFileType (hFile=0x1b4) returned 0x1
	[0306.223] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1384, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.223] CloseHandle (hObject=0x1b4) returned 1
	[0306.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf.tl30z")) returned 0x220
	[0306.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.226] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0306.230] SetEvent (hEvent=0x24c) returned 1
	[0306.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf")) returned 0x220
	[0306.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF", dwFileAttributes=0x220) returned 1
	[0306.231] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.372] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0306.372] ReadFile (in: hFile=0x2a0, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x21ec, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x1131ae18*=0x21ec, lpOverlapped=0x0) returned 1
	[0306.379] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0306.380] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bc802 | out: pbBuffer=0x111bc802) returned 1
	[0306.380] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111bc8e7 | out: pbBuffer=0x111bc8e7) returned 1
	[0306.380] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0306.380] GetFileType (hFile=0x2a0) returned 0x1
	[0306.381] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.381] WriteFile (in: hFile=0x2a0, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x21ec, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x1133fdfc*=0x21ec, lpOverlapped=0x1133fe08) returned 1
	[0306.381] GetFileType (hFile=0x2a0) returned 0x1
	[0306.381] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x21ec, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.381] GetFileType (hFile=0x2a0) returned 0x1
	[0306.382] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.382] WriteFile (in: hFile=0x2a0, lpBuffer=0x110f6a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110f6a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0306.382] GetFileType (hFile=0x2a0) returned 0x1
	[0306.382] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x21ec, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.382] CloseHandle (hObject=0x2a0) returned 1
	[0306.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf.tl30z")) returned 0x220
	[0306.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.386] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0306.390] SetEvent (hEvent=0x248) returned 1
	[0306.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf")) returned 0x220
	[0306.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF", dwFileAttributes=0x220) returned 1
	[0306.390] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0306.470] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0306.471] ReadFile (in: hFile=0x1b4, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x4696, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x1131ae18*=0x4696, lpOverlapped=0x0) returned 1
	[0306.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0306.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a2802 | out: pbBuffer=0x113a2802) returned 1
	[0306.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a2822 | out: pbBuffer=0x113a2822) returned 1
	[0306.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a2863 | out: pbBuffer=0x113a2863) returned 1
	[0306.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a28a7 | out: pbBuffer=0x113a28a7) returned 1
	[0306.477] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0306.477] GetFileType (hFile=0x1b4) returned 0x1
	[0306.477] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.478] WriteFile (in: hFile=0x1b4, lpBuffer=0x11106000*, nNumberOfBytesToWrite=0x4696, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11106000*, lpNumberOfBytesWritten=0x1102ddfc*=0x4696, lpOverlapped=0x1102de08) returned 1
	[0306.478] GetFileType (hFile=0x1b4) returned 0x1
	[0306.478] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x4696, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.478] GetFileType (hFile=0x1b4) returned 0x1
	[0306.478] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.479] WriteFile (in: hFile=0x1b4, lpBuffer=0x110eaa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110eaa80*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0306.479] GetFileType (hFile=0x1b4) returned 0x1
	[0306.479] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x4696, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.479] CloseHandle (hObject=0x1b4) returned 1
	[0306.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf.tl30z")) returned 0x220
	[0306.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.483] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0306.486] SetEvent (hEvent=0x248) returned 1
	[0306.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf")) returned 0x220
	[0306.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF", dwFileAttributes=0x220) returned 1
	[0306.486] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.568] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0306.568] ReadFile (in: hFile=0x2a0, lpBuffer=0x11222000, nNumberOfBytesToRead=0x4f6c, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11222000*, lpNumberOfBytesRead=0x1131ae18*=0x4f6c, lpOverlapped=0x0) returned 1
	[0306.573] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113325d0 | out: pbBuffer=0x113325d0) returned 1
	[0306.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113325c8 | out: pbBuffer=0x113325c8) returned 1
	[0306.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11307302 | out: pbBuffer=0x11307302) returned 1
	[0306.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332600 | out: pbBuffer=0x11332600) returned 1
	[0306.575] GetFileType (hFile=0x2a0) returned 0x1
	[0306.575] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.575] WriteFile (in: hFile=0x2a0, lpBuffer=0x1122c000*, nNumberOfBytesToWrite=0x4f6c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1122c000*, lpNumberOfBytesWritten=0x1133fdfc*=0x4f6c, lpOverlapped=0x1133fe08) returned 1
	[0306.576] GetFileType (hFile=0x2a0) returned 0x1
	[0306.576] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x4f6c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.576] GetFileType (hFile=0x2a0) returned 0x1
	[0306.576] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.576] WriteFile (in: hFile=0x2a0, lpBuffer=0x110a1180*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110a1180*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0306.577] GetFileType (hFile=0x2a0) returned 0x1
	[0306.577] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x4f6c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.577] CloseHandle (hObject=0x2a0) returned 1
	[0306.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf.tl30z")) returned 0x220
	[0306.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.580] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0306.583] SetEvent (hEvent=0x248) returned 1
	[0306.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf")) returned 0x220
	[0306.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF", dwFileAttributes=0x220) returned 1
	[0306.584] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0306.690] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0306.690] ReadFile (in: hFile=0x1fc, lpBuffer=0x111fa000, nNumberOfBytesToRead=0x5880, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x111fa000*, lpNumberOfBytesRead=0x1131ae18*=0x5880, lpOverlapped=0x0) returned 1
	[0306.695] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f840 | out: pbBuffer=0x1140f840) returned 1
	[0306.695] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f838 | out: pbBuffer=0x1140f838) returned 1
	[0306.695] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123dc02 | out: pbBuffer=0x1123dc02) returned 1
	[0306.696] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1123dc7e | out: pbBuffer=0x1123dc7e) returned 1
	[0306.696] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f870 | out: pbBuffer=0x1140f870) returned 1
	[0306.697] GetFileType (hFile=0x1fc) returned 0x1
	[0306.697] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.697] WriteFile (in: hFile=0x1fc, lpBuffer=0x11164000*, nNumberOfBytesToWrite=0x5880, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11164000*, lpNumberOfBytesWritten=0x1102ddfc*=0x5880, lpOverlapped=0x1102de08) returned 1
	[0306.698] GetFileType (hFile=0x1fc) returned 0x1
	[0306.698] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x5880, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.698] GetFileType (hFile=0x1fc) returned 0x1
	[0306.698] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.698] WriteFile (in: hFile=0x1fc, lpBuffer=0x11465180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11465180*, lpNumberOfBytesWritten=0x1102ddfc*=0x224, lpOverlapped=0x1102de08) returned 1
	[0306.698] GetFileType (hFile=0x1fc) returned 0x1
	[0306.698] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x5880, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.698] CloseHandle (hObject=0x1fc) returned 1
	[0306.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf.tl30z")) returned 0x220
	[0306.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.703] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0306.706] SetEvent (hEvent=0x248) returned 1
	[0306.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf")) returned 0x220
	[0306.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF", dwFileAttributes=0x220) returned 1
	[0306.707] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.793] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0306.793] ReadFile (in: hFile=0x2a0, lpBuffer=0x11418000, nNumberOfBytesToRead=0x7658, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11418000*, lpNumberOfBytesRead=0x1131ae18*=0x7658, lpOverlapped=0x0) returned 1
	[0306.837] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0306.837] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f268 | out: pbBuffer=0x1140f268) returned 1
	[0306.837] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123d302 | out: pbBuffer=0x1123d302) returned 1
	[0306.837] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1123d331 | out: pbBuffer=0x1123d331) returned 1
	[0306.837] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1123d345 | out: pbBuffer=0x1123d345) returned 1
	[0306.840] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0306.840] GetFileType (hFile=0x2a0) returned 0x1
	[0306.840] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.841] WriteFile (in: hFile=0x2a0, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x7658, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x1133bdfc*=0x7658, lpOverlapped=0x1133be08) returned 1
	[0306.841] GetFileType (hFile=0x2a0) returned 0x1
	[0306.841] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x7658, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.841] GetFileType (hFile=0x2a0) returned 0x1
	[0306.842] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.842] WriteFile (in: hFile=0x2a0, lpBuffer=0x110ea380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110ea380*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0306.842] GetFileType (hFile=0x2a0) returned 0x1
	[0306.842] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x7658, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.842] CloseHandle (hObject=0x2a0) returned 1
	[0306.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf.tl30z")) returned 0x220
	[0306.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.847] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf")) returned 0x220
	[0306.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF", dwFileAttributes=0x220) returned 1
	[0306.848] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.943] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0306.943] ReadFile (in: hFile=0x2a0, lpBuffer=0x1138d100, nNumberOfBytesToRead=0x608, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1138d100*, lpNumberOfBytesRead=0x11425e18*=0x608, lpOverlapped=0x0) returned 1
	[0306.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0306.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11399302 | out: pbBuffer=0x11399302) returned 1
	[0306.949] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113993c8 | out: pbBuffer=0x113993c8) returned 1
	[0306.949] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0306.949] GetFileType (hFile=0x2a0) returned 0x1
	[0306.949] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.949] WriteFile (in: hFile=0x2a0, lpBuffer=0x112fc000*, nNumberOfBytesToWrite=0x608, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112fc000*, lpNumberOfBytesWritten=0x1102bdfc*=0x608, lpOverlapped=0x1102be08) returned 1
	[0306.950] GetFileType (hFile=0x2a0) returned 0x1
	[0306.950] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x608, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.950] GetFileType (hFile=0x2a0) returned 0x1
	[0306.950] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.950] WriteFile (in: hFile=0x2a0, lpBuffer=0x1135d880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135d880*, lpNumberOfBytesWritten=0x1102bdfc*=0x221, lpOverlapped=0x1102be08) returned 1
	[0306.951] GetFileType (hFile=0x2a0) returned 0x1
	[0306.951] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x608, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.951] CloseHandle (hObject=0x2a0) returned 1
	[0307.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf.tl30z")) returned 0x220
	[0307.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.018] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0307.022] SetEvent (hEvent=0x24c) returned 1
	[0307.022] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf")) returned 0x220
	[0307.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF", dwFileAttributes=0x220) returned 1
	[0307.023] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0307.105] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0307.105] ReadFile (in: hFile=0x1d4, lpBuffer=0x11128000, nNumberOfBytesToRead=0x1a7e, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11128000*, lpNumberOfBytesRead=0x11425e18*=0x1a7e, lpOverlapped=0x0) returned 1
	[0307.110] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f560 | out: pbBuffer=0x1140f560) returned 1
	[0307.110] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f558 | out: pbBuffer=0x1140f558) returned 1
	[0307.110] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11108902 | out: pbBuffer=0x11108902) returned 1
	[0307.110] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1110894f | out: pbBuffer=0x1110894f) returned 1
	[0307.110] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f590 | out: pbBuffer=0x1140f590) returned 1
	[0307.111] GetFileType (hFile=0x1d4) returned 0x1
	[0307.111] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.111] WriteFile (in: hFile=0x1d4, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x1a7e, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1a7e, lpOverlapped=0x1133be08) returned 1
	[0307.111] GetFileType (hFile=0x1d4) returned 0x1
	[0307.112] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1a7e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.112] GetFileType (hFile=0x1d4) returned 0x1
	[0307.112] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.112] WriteFile (in: hFile=0x1d4, lpBuffer=0x1114e000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1114e000*, lpNumberOfBytesWritten=0x1133bdfc*=0x233, lpOverlapped=0x1133be08) returned 1
	[0307.112] GetFileType (hFile=0x1d4) returned 0x1
	[0307.112] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1a7e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.112] CloseHandle (hObject=0x1d4) returned 1
	[0307.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf.tl30z")) returned 0x220
	[0307.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.116] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0307.120] SetEvent (hEvent=0x24c) returned 1
	[0307.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf")) returned 0x220
	[0307.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF", dwFileAttributes=0x220) returned 1
	[0307.120] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.207] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0307.207] ReadFile (in: hFile=0x2a0, lpBuffer=0x11372000, nNumberOfBytesToRead=0x1f38, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11372000*, lpNumberOfBytesRead=0x11425e18*=0x1f38, lpOverlapped=0x0) returned 1
	[0307.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0307.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f258 | out: pbBuffer=0x1140f258) returned 1
	[0307.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11109202 | out: pbBuffer=0x11109202) returned 1
	[0307.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1110927b | out: pbBuffer=0x1110927b) returned 1
	[0307.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11109297 | out: pbBuffer=0x11109297) returned 1
	[0307.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111092a1 | out: pbBuffer=0x111092a1) returned 1
	[0307.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0307.215] GetFileType (hFile=0x2a0) returned 0x1
	[0307.215] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.215] WriteFile (in: hFile=0x2a0, lpBuffer=0x1105a000*, nNumberOfBytesToWrite=0x1f38, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1105a000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1f38, lpOverlapped=0x1133be08) returned 1
	[0307.216] GetFileType (hFile=0x2a0) returned 0x1
	[0307.216] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1f38, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.216] GetFileType (hFile=0x2a0) returned 0x1
	[0307.216] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.216] WriteFile (in: hFile=0x2a0, lpBuffer=0x1114f880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1114f880*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0307.217] GetFileType (hFile=0x2a0) returned 0x1
	[0307.217] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1f38, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.217] CloseHandle (hObject=0x2a0) returned 1
	[0307.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf.tl30z")) returned 0x220
	[0307.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.220] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0307.223] SetEvent (hEvent=0x284) returned 1
	[0307.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf")) returned 0x220
	[0307.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF", dwFileAttributes=0x220) returned 1
	[0307.224] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.310] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0307.310] ReadFile (in: hFile=0x2a0, lpBuffer=0x113ac000, nNumberOfBytesToRead=0x1c74, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x113ac000*, lpNumberOfBytesRead=0x11425e18*=0x1c74, lpOverlapped=0x0) returned 1
	[0307.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f550 | out: pbBuffer=0x1140f550) returned 1
	[0307.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111aa902 | out: pbBuffer=0x111aa902) returned 1
	[0307.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111aa9cd | out: pbBuffer=0x111aa9cd) returned 1
	[0307.317] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f580 | out: pbBuffer=0x1140f580) returned 1
	[0307.317] GetFileType (hFile=0x2a0) returned 0x1
	[0307.317] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.317] WriteFile (in: hFile=0x2a0, lpBuffer=0x113c2000*, nNumberOfBytesToWrite=0x1c74, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113c2000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1c74, lpOverlapped=0x1133be08) returned 1
	[0307.318] GetFileType (hFile=0x2a0) returned 0x1
	[0307.318] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1c74, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.318] GetFileType (hFile=0x2a0) returned 0x1
	[0307.318] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.318] WriteFile (in: hFile=0x2a0, lpBuffer=0x1119d880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1119d880*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0307.318] GetFileType (hFile=0x2a0) returned 0x1
	[0307.318] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1c74, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.318] CloseHandle (hObject=0x2a0) returned 1
	[0307.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf.tl30z")) returned 0x220
	[0307.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.323] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0307.329] SetEvent (hEvent=0x284) returned 1
	[0307.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf")) returned 0x220
	[0307.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF", dwFileAttributes=0x220) returned 1
	[0307.330] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0307.434] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0307.434] ReadFile (in: hFile=0x1fc, lpBuffer=0x11226000, nNumberOfBytesToRead=0x4732, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11226000*, lpNumberOfBytesRead=0x11425e18*=0x4732, lpOverlapped=0x0) returned 1
	[0307.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0307.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1124e802 | out: pbBuffer=0x1124e802) returned 1
	[0307.440] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0307.440] GetFileType (hFile=0x1fc) returned 0x1
	[0307.440] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11245de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.441] WriteFile (in: hFile=0x1fc, lpBuffer=0x11134000*, nNumberOfBytesToWrite=0x4732, lpNumberOfBytesWritten=0x11245dfc, lpOverlapped=0x11245e08 | out: lpBuffer=0x11134000*, lpNumberOfBytesWritten=0x11245dfc*=0x4732, lpOverlapped=0x11245e08) returned 1
	[0307.441] GetFileType (hFile=0x1fc) returned 0x1
	[0307.441] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4732, lpNewFilePointer=0x0, dwMoveMethod=0x11245de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.441] GetFileType (hFile=0x1fc) returned 0x1
	[0307.441] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11245de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.442] WriteFile (in: hFile=0x1fc, lpBuffer=0x1110ea80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11245dfc, lpOverlapped=0x11245e08 | out: lpBuffer=0x1110ea80*, lpNumberOfBytesWritten=0x11245dfc*=0x22d, lpOverlapped=0x11245e08) returned 1
	[0307.442] GetFileType (hFile=0x1fc) returned 0x1
	[0307.442] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4732, lpNewFilePointer=0x0, dwMoveMethod=0x11245de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.442] CloseHandle (hObject=0x1fc) returned 1
	[0307.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf.tl30z")) returned 0x220
	[0307.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.445] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0307.448] SetEvent (hEvent=0x160) returned 1
	[0307.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf")) returned 0x220
	[0307.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF", dwFileAttributes=0x220) returned 1
	[0307.448] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0307.545] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0307.545] ReadFile (in: hFile=0x1d4, lpBuffer=0x11396000, nNumberOfBytesToRead=0xced4, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x11425e18*=0xced4, lpOverlapped=0x0) returned 1
	[0307.553] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0307.553] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11390802 | out: pbBuffer=0x11390802) returned 1
	[0307.553] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11390842 | out: pbBuffer=0x11390842) returned 1
	[0307.554] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0307.555] GetFileType (hFile=0x1d4) returned 0x1
	[0307.555] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.556] WriteFile (in: hFile=0x1d4, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0xced4, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x1133fdfc*=0xced4, lpOverlapped=0x1133fe08) returned 1
	[0307.557] GetFileType (hFile=0x1d4) returned 0x1
	[0307.557] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xced4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.557] GetFileType (hFile=0x1d4) returned 0x1
	[0307.557] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.557] WriteFile (in: hFile=0x1d4, lpBuffer=0x113caa80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113caa80*, lpNumberOfBytesWritten=0x1133fdfc*=0x236, lpOverlapped=0x1133fe08) returned 1
	[0307.559] GetFileType (hFile=0x1d4) returned 0x1
	[0307.559] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xced4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.559] CloseHandle (hObject=0x1d4) returned 1
	[0307.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf.tl30z")) returned 0x220
	[0307.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.563] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0307.567] SetEvent (hEvent=0x24c) returned 1
	[0307.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf")) returned 0x220
	[0307.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF", dwFileAttributes=0x220) returned 1
	[0307.568] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0307.651] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0307.651] ReadFile (in: hFile=0x1b4, lpBuffer=0x1122c000, nNumberOfBytesToRead=0x349c, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1122c000*, lpNumberOfBytesRead=0x11425e18*=0x349c, lpOverlapped=0x0) returned 1
	[0307.656] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0307.656] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6558 | out: pbBuffer=0x113e6558) returned 1
	[0307.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11238702 | out: pbBuffer=0x11238702) returned 1
	[0307.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11238751 | out: pbBuffer=0x11238751) returned 1
	[0307.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0307.657] GetFileType (hFile=0x1b4) returned 0x1
	[0307.658] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.658] WriteFile (in: hFile=0x1b4, lpBuffer=0x11254000*, nNumberOfBytesToWrite=0x349c, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11254000*, lpNumberOfBytesWritten=0x1102ddfc*=0x349c, lpOverlapped=0x1102de08) returned 1
	[0307.658] GetFileType (hFile=0x1b4) returned 0x1
	[0307.658] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x349c, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.658] GetFileType (hFile=0x1b4) returned 0x1
	[0307.659] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.659] WriteFile (in: hFile=0x1b4, lpBuffer=0x1130f880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1130f880*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0307.659] GetFileType (hFile=0x1b4) returned 0x1
	[0307.659] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x349c, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.659] CloseHandle (hObject=0x1b4) returned 1
	[0307.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf.tl30z")) returned 0x220
	[0307.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.661] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0307.665] SetEvent (hEvent=0x24c) returned 1
	[0307.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf")) returned 0x220
	[0307.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF", dwFileAttributes=0x220) returned 1
	[0307.665] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0307.745] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0307.745] ReadFile (in: hFile=0x1d8, lpBuffer=0x11076480, nNumberOfBytesToRead=0x460, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11076480*, lpNumberOfBytesRead=0x11425e18*=0x460, lpOverlapped=0x0) returned 1
	[0307.751] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0307.751] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332658 | out: pbBuffer=0x11332658) returned 1
	[0307.751] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11164702 | out: pbBuffer=0x11164702) returned 1
	[0307.751] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0307.752] GetFileType (hFile=0x1d8) returned 0x1
	[0307.752] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.752] WriteFile (in: hFile=0x1d8, lpBuffer=0x11174000*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11174000*, lpNumberOfBytesWritten=0x1133bdfc*=0x460, lpOverlapped=0x1133be08) returned 1
	[0307.752] GetFileType (hFile=0x1d8) returned 0x1
	[0307.752] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x460, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.752] GetFileType (hFile=0x1d8) returned 0x1
	[0307.753] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.753] WriteFile (in: hFile=0x1d8, lpBuffer=0x11151500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11151500*, lpNumberOfBytesWritten=0x1133bdfc*=0x221, lpOverlapped=0x1133be08) returned 1
	[0307.753] GetFileType (hFile=0x1d8) returned 0x1
	[0307.753] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x460, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.753] CloseHandle (hObject=0x1d8) returned 1
	[0307.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf.tl30z")) returned 0x220
	[0307.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.757] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0307.759] SetEvent (hEvent=0x24c) returned 1
	[0307.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf")) returned 0x220
	[0307.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF", dwFileAttributes=0x220) returned 1
	[0307.759] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0307.838] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0307.838] ReadFile (in: hFile=0x1fc, lpBuffer=0x11058000, nNumberOfBytesToRead=0x27e0, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11425e18*=0x27e0, lpOverlapped=0x0) returned 1
	[0307.844] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0307.844] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11418802 | out: pbBuffer=0x11418802) returned 1
	[0307.844] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114188d8 | out: pbBuffer=0x114188d8) returned 1
	[0307.845] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0307.845] GetFileType (hFile=0x1fc) returned 0x1
	[0307.845] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.846] WriteFile (in: hFile=0x1fc, lpBuffer=0x112d6000*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x112d6000*, lpNumberOfBytesWritten=0x11339dfc*=0x27e0, lpOverlapped=0x11339e08) returned 1
	[0307.846] GetFileType (hFile=0x1fc) returned 0x1
	[0307.846] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x27e0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.846] GetFileType (hFile=0x1fc) returned 0x1
	[0307.846] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.847] WriteFile (in: hFile=0x1fc, lpBuffer=0x11358a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11358a80*, lpNumberOfBytesWritten=0x11339dfc*=0x22d, lpOverlapped=0x11339e08) returned 1
	[0307.847] GetFileType (hFile=0x1fc) returned 0x1
	[0307.847] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x27e0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.847] CloseHandle (hObject=0x1fc) returned 1
	[0307.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf.tl30z")) returned 0x220
	[0307.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.851] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0307.853] SetEvent (hEvent=0x284) returned 1
	[0307.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf")) returned 0x220
	[0307.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF", dwFileAttributes=0x220) returned 1
	[0307.854] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0307.931] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0307.931] ReadFile (in: hFile=0x1fc, lpBuffer=0x1108e000, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesRead=0x11425e18*=0x2a0, lpOverlapped=0x0) returned 1
	[0307.935] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0307.936] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e9c02 | out: pbBuffer=0x110e9c02) returned 1
	[0307.936] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e9cc6 | out: pbBuffer=0x110e9cc6) returned 1
	[0307.936] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0307.936] GetFileType (hFile=0x1fc) returned 0x1
	[0307.936] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.937] WriteFile (in: hFile=0x1fc, lpBuffer=0x110a0000*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110a0000*, lpNumberOfBytesWritten=0x1133fdfc*=0x2a0, lpOverlapped=0x1133fe08) returned 1
	[0307.937] GetFileType (hFile=0x1fc) returned 0x1
	[0307.937] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.937] GetFileType (hFile=0x1fc) returned 0x1
	[0307.937] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.937] WriteFile (in: hFile=0x1fc, lpBuffer=0x1109a700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1109a700*, lpNumberOfBytesWritten=0x1133fdfc*=0x221, lpOverlapped=0x1133fe08) returned 1
	[0307.938] GetFileType (hFile=0x1fc) returned 0x1
	[0307.938] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2a0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.938] CloseHandle (hObject=0x1fc) returned 1
	[0307.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf.tl30z")) returned 0x220
	[0307.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.948] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0307.951] SetEvent (hEvent=0x174) returned 1
	[0307.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf")) returned 0x220
	[0307.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF", dwFileAttributes=0x220) returned 1
	[0307.952] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0308.105] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0308.105] ReadFile (in: hFile=0x1fc, lpBuffer=0x111f8000, nNumberOfBytesToRead=0xd00, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x111f8000*, lpNumberOfBytesRead=0x11425e18*=0xd00, lpOverlapped=0x0) returned 1
	[0308.110] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0308.110] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11325302 | out: pbBuffer=0x11325302) returned 1
	[0308.110] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132539f | out: pbBuffer=0x1132539f) returned 1
	[0308.111] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113253c5 | out: pbBuffer=0x113253c5) returned 1
	[0308.111] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0308.111] GetFileType (hFile=0x1fc) returned 0x1
	[0308.111] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.111] WriteFile (in: hFile=0x1fc, lpBuffer=0x1121c000*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1121c000*, lpNumberOfBytesWritten=0x1102bdfc*=0xd00, lpOverlapped=0x1102be08) returned 1
	[0308.112] GetFileType (hFile=0x1fc) returned 0x1
	[0308.112] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd00, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.112] GetFileType (hFile=0x1fc) returned 0x1
	[0308.112] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.112] WriteFile (in: hFile=0x1fc, lpBuffer=0x113d7880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d7880*, lpNumberOfBytesWritten=0x1102bdfc*=0x221, lpOverlapped=0x1102be08) returned 1
	[0308.113] GetFileType (hFile=0x1fc) returned 0x1
	[0308.113] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd00, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.113] CloseHandle (hObject=0x1fc) returned 1
	[0308.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf.tl30z")) returned 0x220
	[0308.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.118] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0308.120] SetEvent (hEvent=0x174) returned 1
	[0308.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf")) returned 0x220
	[0308.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF", dwFileAttributes=0x220) returned 1
	[0308.121] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0308.192] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0308.193] ReadFile (in: hFile=0x250, lpBuffer=0x11174000, nNumberOfBytesToRead=0xc74, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11174000*, lpNumberOfBytesRead=0x11425e18*=0xc74, lpOverlapped=0x0) returned 1
	[0308.199] SetEvent (hEvent=0x174) returned 1
	[0308.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126190 | out: pbBuffer=0x11126190) returned 1
	[0308.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11103d02 | out: pbBuffer=0x11103d02) returned 1
	[0308.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111261c0 | out: pbBuffer=0x111261c0) returned 1
	[0308.200] GetFileType (hFile=0x250) returned 0x1
	[0308.200] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.201] WriteFile (in: hFile=0x250, lpBuffer=0x11196000*, nNumberOfBytesToWrite=0xc74, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11196000*, lpNumberOfBytesWritten=0x1102bdfc*=0xc74, lpOverlapped=0x1102be08) returned 1
	[0308.201] GetFileType (hFile=0x250) returned 0x1
	[0308.201] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xc74, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.201] GetFileType (hFile=0x250) returned 0x1
	[0308.201] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.201] WriteFile (in: hFile=0x250, lpBuffer=0x1112f180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1112f180*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0308.202] GetFileType (hFile=0x250) returned 0x1
	[0308.202] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xc74, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.202] CloseHandle (hObject=0x250) returned 1
	[0308.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf.tl30z")) returned 0x220
	[0308.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.214] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0308.216] SetEvent (hEvent=0x174) returned 1
	[0308.216] SetEvent (hEvent=0x24c) returned 1
	[0308.216] SwitchToThread () returned 1
	[0308.249] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0308.529] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0308.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf")) returned 0x220
	[0308.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF", dwFileAttributes=0x220) returned 1
	[0308.534] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0308.590] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0308.591] ReadFile (in: hFile=0x184, lpBuffer=0x112b6000, nNumberOfBytesToRead=0xff8, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112b6000*, lpNumberOfBytesRead=0x11423e18*=0xff8, lpOverlapped=0x0) returned 1
	[0308.865] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0308.900] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f550 | out: pbBuffer=0x1140f550) returned 1
	[0308.900] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0309.082] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140fb1a | out: pbBuffer=0x1140fb1a) returned 1
	[0309.082] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11304602 | out: pbBuffer=0x11304602) returned 1
	[0309.082] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fb30 | out: pbBuffer=0x1140fb30) returned 1
	[0309.083] GetFileType (hFile=0x184) returned 0x1
	[0309.083] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.084] WriteFile (in: hFile=0x184, lpBuffer=0x11c5c000*, nNumberOfBytesToWrite=0xff8, lpNumberOfBytesWritten=0x1145ddfc, lpOverlapped=0x1145de08 | out: lpBuffer=0x11c5c000*, lpNumberOfBytesWritten=0x1145ddfc*=0xff8, lpOverlapped=0x1145de08) returned 1
	[0309.084] GetFileType (hFile=0x184) returned 0x1
	[0309.084] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xff8, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.084] GetFileType (hFile=0x184) returned 0x1
	[0309.084] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.085] WriteFile (in: hFile=0x184, lpBuffer=0x11308e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1145ddfc, lpOverlapped=0x1145de08 | out: lpBuffer=0x11308e00*, lpNumberOfBytesWritten=0x1145ddfc*=0x233, lpOverlapped=0x1145de08) returned 1
	[0309.085] GetFileType (hFile=0x184) returned 0x1
	[0309.085] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xff8, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.085] CloseHandle (hObject=0x184) returned 1
	[0309.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf.tl30z")) returned 0x220
	[0309.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.086] SetEvent (hEvent=0x12c) returned 1
	[0309.086] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0309.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf")) returned 0x220
	[0309.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF", dwFileAttributes=0x220) returned 1
	[0309.099] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0309.102] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11093e08 | out: lpMode=0x11093e08) returned 0
	[0309.102] ReadFile (in: hFile=0x204, lpBuffer=0x11bdc000, nNumberOfBytesToRead=0x3d5c, lpNumberOfBytesRead=0x11093e18, lpOverlapped=0x0 | out: lpBuffer=0x11bdc000*, lpNumberOfBytesRead=0x11093e18*=0x3d5c, lpOverlapped=0x0) returned 1
	[0309.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0309.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125a802 | out: pbBuffer=0x1125a802) returned 1
	[0309.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0309.126] GetFileType (hFile=0x204) returned 0x1
	[0309.126] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.126] WriteFile (in: hFile=0x204, lpBuffer=0x1109c000*, nNumberOfBytesToWrite=0x3d5c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1109c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3d5c, lpOverlapped=0x1102be08) returned 1
	[0309.127] GetFileType (hFile=0x204) returned 0x1
	[0309.127] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x3d5c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.127] GetFileType (hFile=0x204) returned 0x1
	[0309.127] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.127] WriteFile (in: hFile=0x204, lpBuffer=0x1124e000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1124e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0309.127] GetFileType (hFile=0x204) returned 0x1
	[0309.128] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x3d5c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.128] CloseHandle (hObject=0x204) returned 1
	[0309.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf.tl30z")) returned 0x220
	[0309.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf")) returned 0x220
	[0309.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF", dwFileAttributes=0x220) returned 1
	[0309.129] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0309.133] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11094e08 | out: lpMode=0x11094e08) returned 0
	[0309.133] ReadFile (in: hFile=0x204, lpBuffer=0x112a2000, nNumberOfBytesToRead=0x4040, lpNumberOfBytesRead=0x11094e18, lpOverlapped=0x0 | out: lpBuffer=0x112a2000*, lpNumberOfBytesRead=0x11094e18*=0x4040, lpOverlapped=0x0) returned 1
	[0309.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0309.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c63c02 | out: pbBuffer=0x11c63c02) returned 1
	[0309.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65c0 | out: pbBuffer=0x113e65c0) returned 1
	[0309.209] GetFileType (hFile=0x204) returned 0x1
	[0309.209] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.209] WriteFile (in: hFile=0x204, lpBuffer=0x11358000*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11358000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4040, lpOverlapped=0x1102be08) returned 1
	[0309.210] GetFileType (hFile=0x204) returned 0x1
	[0309.210] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x4040, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.210] GetFileType (hFile=0x204) returned 0x1
	[0309.210] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.210] WriteFile (in: hFile=0x204, lpBuffer=0x11bf0e00*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bf0e00*, lpNumberOfBytesWritten=0x1102bdfc*=0x21e, lpOverlapped=0x1102be08) returned 1
	[0309.210] GetFileType (hFile=0x204) returned 0x1
	[0309.211] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x4040, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.211] CloseHandle (hObject=0x204) returned 1
	[0309.222] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0309.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf.tl30z")) returned 0x220
	[0309.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.279] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0309.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf")) returned 0x220
	[0309.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF", dwFileAttributes=0x220) returned 1
	[0309.283] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0309.439] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x110abe08 | out: lpMode=0x110abe08) returned 0
	[0309.440] ReadFile (in: hFile=0x224, lpBuffer=0x112a2000, nNumberOfBytesToRead=0x1cf8, lpNumberOfBytesRead=0x110abe18, lpOverlapped=0x0 | out: lpBuffer=0x112a2000*, lpNumberOfBytesRead=0x110abe18*=0x1cf8, lpOverlapped=0x0) returned 1
	[0309.446] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0309.446] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f268 | out: pbBuffer=0x1140f268) returned 1
	[0309.446] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11179302 | out: pbBuffer=0x11179302) returned 1
	[0309.447] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0309.448] GetFileType (hFile=0x224) returned 0x1
	[0309.448] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.448] WriteFile (in: hFile=0x224, lpBuffer=0x112ee000*, nNumberOfBytesToWrite=0x1cf8, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112ee000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1cf8, lpOverlapped=0x1133fe08) returned 1
	[0309.449] GetFileType (hFile=0x224) returned 0x1
	[0309.449] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1cf8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.449] GetFileType (hFile=0x224) returned 0x1
	[0309.449] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.449] WriteFile (in: hFile=0x224, lpBuffer=0x113d5880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113d5880*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0309.449] GetFileType (hFile=0x224) returned 0x1
	[0309.450] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1cf8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.450] CloseHandle (hObject=0x224) returned 1
	[0309.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf.tl30z")) returned 0x220
	[0309.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.457] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0309.576] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0309.578] SetEvent (hEvent=0x118) returned 1
	[0309.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf")) returned 0x220
	[0309.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF", dwFileAttributes=0x220) returned 1
	[0309.579] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0309.667] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11097e08 | out: lpMode=0x11097e08) returned 0
	[0309.667] ReadFile (in: hFile=0x224, lpBuffer=0x113a4000, nNumberOfBytesToRead=0x1ca0, lpNumberOfBytesRead=0x11097e18, lpOverlapped=0x0 | out: lpBuffer=0x113a4000*, lpNumberOfBytesRead=0x11097e18*=0x1ca0, lpOverlapped=0x0) returned 1
	[0309.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0309.673] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0309.673] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125a802 | out: pbBuffer=0x1125a802) returned 1
	[0309.673] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125a8e0 | out: pbBuffer=0x1125a8e0) returned 1
	[0309.673] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0309.673] GetFileType (hFile=0x224) returned 0x1
	[0309.674] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.674] WriteFile (in: hFile=0x224, lpBuffer=0x112ac000*, nNumberOfBytesToWrite=0x1ca0, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x112ac000*, lpNumberOfBytesWritten=0x11251dfc*=0x1ca0, lpOverlapped=0x11251e08) returned 1
	[0309.674] GetFileType (hFile=0x224) returned 0x1
	[0309.674] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1ca0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.674] GetFileType (hFile=0x224) returned 0x1
	[0309.674] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.675] WriteFile (in: hFile=0x224, lpBuffer=0x112fea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x112fea80*, lpNumberOfBytesWritten=0x11251dfc*=0x227, lpOverlapped=0x11251e08) returned 1
	[0309.675] GetFileType (hFile=0x224) returned 0x1
	[0309.676] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1ca0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.676] CloseHandle (hObject=0x224) returned 1
	[0309.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf.tl30z")) returned 0x220
	[0309.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf")) returned 0x220
	[0309.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF", dwFileAttributes=0x220) returned 1
	[0309.680] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0310.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0310.898] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0310.898] ReadFile (in: hFile=0x224, lpBuffer=0x11125200, nNumberOfBytesToRead=0x59c, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11125200*, lpNumberOfBytesRead=0x11022e18*=0x59c, lpOverlapped=0x0) returned 1
	[0310.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6680 | out: pbBuffer=0x113e6680) returned 1
	[0310.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6678 | out: pbBuffer=0x113e6678) returned 1
	[0310.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1143b302 | out: pbBuffer=0x1143b302) returned 1
	[0310.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66b0 | out: pbBuffer=0x113e66b0) returned 1
	[0310.904] GetFileType (hFile=0x224) returned 0x1
	[0310.904] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0310.904] WriteFile (in: hFile=0x224, lpBuffer=0x11464000*, nNumberOfBytesToWrite=0x59c, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x11464000*, lpNumberOfBytesWritten=0x11251dfc*=0x59c, lpOverlapped=0x11251e08) returned 1
	[0310.904] GetFileType (hFile=0x224) returned 0x1
	[0310.904] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x59c, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0310.905] GetFileType (hFile=0x224) returned 0x1
	[0310.905] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0310.905] WriteFile (in: hFile=0x224, lpBuffer=0x11460380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x11460380*, lpNumberOfBytesWritten=0x11251dfc*=0x22a, lpOverlapped=0x11251e08) returned 1
	[0310.905] GetFileType (hFile=0x224) returned 0x1
	[0310.905] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x59c, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0310.905] CloseHandle (hObject=0x224) returned 1
	[0310.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf.tl30z")) returned 0x220
	[0310.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0310.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf")) returned 0x220
	[0310.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF", dwFileAttributes=0x220) returned 1
	[0310.909] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0311.036] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11092e08 | out: lpMode=0x11092e08) returned 0
	[0311.036] ReadFile (in: hFile=0x224, lpBuffer=0x1106a000, nNumberOfBytesToRead=0x1fc4, lpNumberOfBytesRead=0x11092e18, lpOverlapped=0x0 | out: lpBuffer=0x1106a000*, lpNumberOfBytesRead=0x11092e18*=0x1fc4, lpOverlapped=0x0) returned 1
	[0311.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0311.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0311.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1143a802 | out: pbBuffer=0x1143a802) returned 1
	[0311.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1143a84c | out: pbBuffer=0x1143a84c) returned 1
	[0311.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1143a881 | out: pbBuffer=0x1143a881) returned 1
	[0311.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1143a889 | out: pbBuffer=0x1143a889) returned 1
	[0311.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0311.043] GetFileType (hFile=0x224) returned 0x1
	[0311.043] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.043] WriteFile (in: hFile=0x224, lpBuffer=0x11368000*, nNumberOfBytesToWrite=0x1fc4, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11368000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1fc4, lpOverlapped=0x1133de08) returned 1
	[0311.043] GetFileType (hFile=0x224) returned 0x1
	[0311.043] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1fc4, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.043] GetFileType (hFile=0x224) returned 0x1
	[0311.043] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.044] WriteFile (in: hFile=0x224, lpBuffer=0x11461500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11461500*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0311.044] GetFileType (hFile=0x224) returned 0x1
	[0311.044] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1fc4, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.044] CloseHandle (hObject=0x224) returned 1
	[0311.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf.tl30z")) returned 0x220
	[0311.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf")) returned 0x220
	[0311.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF", dwFileAttributes=0x220) returned 1
	[0311.050] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0311.538] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11092e08 | out: lpMode=0x11092e08) returned 0
	[0311.539] ReadFile (in: hFile=0x224, lpBuffer=0x11bc6000, nNumberOfBytesToRead=0x6f26, lpNumberOfBytesRead=0x11092e18, lpOverlapped=0x0 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesRead=0x11092e18*=0x6f26, lpOverlapped=0x0) returned 1
	[0311.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0311.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6548 | out: pbBuffer=0x113e6548) returned 1
	[0311.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ccf02 | out: pbBuffer=0x113ccf02) returned 1
	[0311.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0311.619] GetFileType (hFile=0x224) returned 0x1
	[0311.619] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.620] WriteFile (in: hFile=0x224, lpBuffer=0x112e0000*, nNumberOfBytesToWrite=0x6f26, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112e0000*, lpNumberOfBytesWritten=0x1133ddfc*=0x6f26, lpOverlapped=0x1133de08) returned 1
	[0311.620] GetFileType (hFile=0x224) returned 0x1
	[0311.620] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6f26, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.621] GetFileType (hFile=0x224) returned 0x1
	[0311.621] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.621] WriteFile (in: hFile=0x224, lpBuffer=0x112e8000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112e8000*, lpNumberOfBytesWritten=0x1133ddfc*=0x233, lpOverlapped=0x1133de08) returned 1
	[0311.621] GetFileType (hFile=0x224) returned 0x1
	[0311.622] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6f26, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.622] CloseHandle (hObject=0x224) returned 1
	[0311.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf.tl30z")) returned 0x220
	[0311.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.629] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0311.646] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0311.658] SetEvent (hEvent=0x1e8) returned 1
	[0311.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf")) returned 0x220
	[0311.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF", dwFileAttributes=0x220) returned 1
	[0311.659] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0311.734] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11090e08 | out: lpMode=0x11090e08) returned 0
	[0311.734] ReadFile (in: hFile=0x184, lpBuffer=0x11382000, nNumberOfBytesToRead=0x5850, lpNumberOfBytesRead=0x11090e18, lpOverlapped=0x0 | out: lpBuffer=0x11382000*, lpNumberOfBytesRead=0x11090e18*=0x5850, lpOverlapped=0x0) returned 1
	[0311.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0311.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0311.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11142802 | out: pbBuffer=0x11142802) returned 1
	[0311.740] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11142820 | out: pbBuffer=0x11142820) returned 1
	[0311.740] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1114286d | out: pbBuffer=0x1114286d) returned 1
	[0311.740] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0311.741] GetFileType (hFile=0x184) returned 0x1
	[0311.741] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.741] WriteFile (in: hFile=0x184, lpBuffer=0x1130e000*, nNumberOfBytesToWrite=0x5850, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1130e000*, lpNumberOfBytesWritten=0x1133bdfc*=0x5850, lpOverlapped=0x1133be08) returned 1
	[0311.742] GetFileType (hFile=0x184) returned 0x1
	[0311.742] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x5850, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.742] GetFileType (hFile=0x184) returned 0x1
	[0311.742] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.742] WriteFile (in: hFile=0x184, lpBuffer=0x113e8a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113e8a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0311.743] GetFileType (hFile=0x184) returned 0x1
	[0311.743] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x5850, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.743] CloseHandle (hObject=0x184) returned 1
	[0311.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf.tl30z")) returned 0x220
	[0311.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.749] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0311.759] SetEvent (hEvent=0x1e8) returned 1
	[0311.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf")) returned 0x220
	[0311.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF", dwFileAttributes=0x220) returned 1
	[0311.760] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0311.836] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0311.836] ReadFile (in: hFile=0x1b4, lpBuffer=0x11460000, nNumberOfBytesToRead=0x614, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11460000*, lpNumberOfBytesRead=0x11288e18*=0x614, lpOverlapped=0x0) returned 1
	[0311.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327c0 | out: pbBuffer=0x113327c0) returned 1
	[0311.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c37b02 | out: pbBuffer=0x11c37b02) returned 1
	[0311.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c37b62 | out: pbBuffer=0x11c37b62) returned 1
	[0311.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c37bb9 | out: pbBuffer=0x11c37bb9) returned 1
	[0311.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327f0 | out: pbBuffer=0x113327f0) returned 1
	[0311.842] GetFileType (hFile=0x1b4) returned 0x1
	[0311.842] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.842] WriteFile (in: hFile=0x1b4, lpBuffer=0x112d6000*, nNumberOfBytesToWrite=0x614, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112d6000*, lpNumberOfBytesWritten=0x1133bdfc*=0x614, lpOverlapped=0x1133be08) returned 1
	[0311.843] GetFileType (hFile=0x1b4) returned 0x1
	[0311.843] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x614, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.843] GetFileType (hFile=0x1b4) returned 0x1
	[0311.843] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.843] WriteFile (in: hFile=0x1b4, lpBuffer=0x11393880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11393880*, lpNumberOfBytesWritten=0x1133bdfc*=0x224, lpOverlapped=0x1133be08) returned 1
	[0311.843] GetFileType (hFile=0x1b4) returned 0x1
	[0311.843] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x614, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.844] CloseHandle (hObject=0x1b4) returned 1
	[0311.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf.tl30z")) returned 0x220
	[0311.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.847] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0311.849] SetEvent (hEvent=0x22c) returned 1
	[0311.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf")) returned 0x220
	[0311.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF", dwFileAttributes=0x220) returned 1
	[0311.849] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0311.931] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0311.931] ReadFile (in: hFile=0x1b4, lpBuffer=0x112faa00, nNumberOfBytesToRead=0x2108, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x112faa00*, lpNumberOfBytesRead=0x11288e18*=0x2108, lpOverlapped=0x0) returned 1
	[0311.936] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0311.936] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6548 | out: pbBuffer=0x113e6548) returned 1
	[0311.936] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144c902 | out: pbBuffer=0x1144c902) returned 1
	[0311.936] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144c9c9 | out: pbBuffer=0x1144c9c9) returned 1
	[0311.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0311.937] GetFileType (hFile=0x1b4) returned 0x1
	[0311.937] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.937] WriteFile (in: hFile=0x1b4, lpBuffer=0x1116c000*, nNumberOfBytesToWrite=0x2108, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1116c000*, lpNumberOfBytesWritten=0x11031dfc*=0x2108, lpOverlapped=0x11031e08) returned 1
	[0311.937] GetFileType (hFile=0x1b4) returned 0x1
	[0311.938] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2108, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.938] GetFileType (hFile=0x1b4) returned 0x1
	[0311.938] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.938] WriteFile (in: hFile=0x1b4, lpBuffer=0x11452e00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11452e00*, lpNumberOfBytesWritten=0x11031dfc*=0x221, lpOverlapped=0x11031e08) returned 1
	[0311.938] GetFileType (hFile=0x1b4) returned 0x1
	[0311.938] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2108, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.938] CloseHandle (hObject=0x1b4) returned 1
	[0311.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf.tl30z")) returned 0x220
	[0311.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.941] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0311.945] SetEvent (hEvent=0x22c) returned 1
	[0311.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf")) returned 0x220
	[0311.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF", dwFileAttributes=0x220) returned 1
	[0311.946] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.050] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0312.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0312.057] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0312.057] ReadFile (in: hFile=0x184, lpBuffer=0x1134c000, nNumberOfBytesToRead=0x3998, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1134c000*, lpNumberOfBytesRead=0x11288e18*=0x3998, lpOverlapped=0x0) returned 1
	[0312.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0312.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0312.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c4802 | out: pbBuffer=0x110c4802) returned 1
	[0312.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0312.064] GetFileType (hFile=0x184) returned 0x1
	[0312.064] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.064] WriteFile (in: hFile=0x184, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x3998, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x1102ddfc*=0x3998, lpOverlapped=0x1102de08) returned 1
	[0312.064] GetFileType (hFile=0x184) returned 0x1
	[0312.065] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x3998, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.065] GetFileType (hFile=0x184) returned 0x1
	[0312.065] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.065] WriteFile (in: hFile=0x184, lpBuffer=0x110baa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110baa80*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0312.065] GetFileType (hFile=0x184) returned 0x1
	[0312.065] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x3998, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.065] CloseHandle (hObject=0x184) returned 1
	[0312.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf.tl30z")) returned 0x220
	[0312.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.069] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0312.072] SetEvent (hEvent=0x234) returned 1
	[0312.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf")) returned 0x220
	[0312.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF", dwFileAttributes=0x220) returned 1
	[0312.073] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0312.140] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0312.140] ReadFile (in: hFile=0x1b4, lpBuffer=0x11070600, nNumberOfBytesToRead=0x1020, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11070600*, lpNumberOfBytesRead=0x11288e18*=0x1020, lpOverlapped=0x0) returned 1
	[0312.146] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0312.146] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6558 | out: pbBuffer=0x113e6558) returned 1
	[0312.146] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ca802 | out: pbBuffer=0x113ca802) returned 1
	[0312.147] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0312.147] GetFileType (hFile=0x1b4) returned 0x1
	[0312.147] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.147] WriteFile (in: hFile=0x1b4, lpBuffer=0x112c4000*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112c4000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1020, lpOverlapped=0x1133be08) returned 1
	[0312.147] GetFileType (hFile=0x1b4) returned 0x1
	[0312.147] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1020, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.148] GetFileType (hFile=0x1b4) returned 0x1
	[0312.148] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.148] WriteFile (in: hFile=0x1b4, lpBuffer=0x113c1500*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113c1500*, lpNumberOfBytesWritten=0x1133bdfc*=0x21e, lpOverlapped=0x1133be08) returned 1
	[0312.148] GetFileType (hFile=0x1b4) returned 0x1
	[0312.148] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1020, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.148] CloseHandle (hObject=0x1b4) returned 1
	[0312.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf.tl30z")) returned 0x220
	[0312.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.152] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0312.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf")) returned 0x220
	[0312.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF", dwFileAttributes=0x220) returned 1
	[0312.153] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0312.225] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0312.225] ReadFile (in: hFile=0x1b4, lpBuffer=0x11448000, nNumberOfBytesToRead=0x7fce, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11448000*, lpNumberOfBytesRead=0x11288e18*=0x7fce, lpOverlapped=0x0) returned 1
	[0312.230] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332800 | out: pbBuffer=0x11332800) returned 1
	[0312.230] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327f8 | out: pbBuffer=0x113327f8) returned 1
	[0312.230] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11435202 | out: pbBuffer=0x11435202) returned 1
	[0312.230] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11435285 | out: pbBuffer=0x11435285) returned 1
	[0312.231] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332830 | out: pbBuffer=0x11332830) returned 1
	[0312.232] GetFileType (hFile=0x1b4) returned 0x1
	[0312.232] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.232] WriteFile (in: hFile=0x1b4, lpBuffer=0x111d0000*, nNumberOfBytesToWrite=0x7fce, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111d0000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7fce, lpOverlapped=0x1102de08) returned 1
	[0312.233] GetFileType (hFile=0x1b4) returned 0x1
	[0312.233] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7fce, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.233] GetFileType (hFile=0x1b4) returned 0x1
	[0312.233] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.233] WriteFile (in: hFile=0x1b4, lpBuffer=0x112f8700*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112f8700*, lpNumberOfBytesWritten=0x1102ddfc*=0x23c, lpOverlapped=0x1102de08) returned 1
	[0312.234] GetFileType (hFile=0x1b4) returned 0x1
	[0312.234] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7fce, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.234] CloseHandle (hObject=0x1b4) returned 1
	[0312.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf.tl30z")) returned 0x220
	[0312.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.238] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0312.240] SetEvent (hEvent=0x118) returned 1
	[0312.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp")) returned 0x220
	[0312.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP", dwFileAttributes=0x220) returned 1
	[0312.241] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0312.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0312.331] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0312.331] ReadFile (in: hFile=0x200, lpBuffer=0x11156000, nNumberOfBytesToRead=0x7e90, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11156000*, lpNumberOfBytesRead=0x11288e18*=0x7e90, lpOverlapped=0x0) returned 1
	[0312.337] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b20 | out: pbBuffer=0x113e6b20) returned 1
	[0312.337] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123d002 | out: pbBuffer=0x1123d002) returned 1
	[0312.337] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b50 | out: pbBuffer=0x113e6b50) returned 1
	[0312.339] SetEvent (hEvent=0x218) returned 1
	[0312.339] GetFileType (hFile=0x200) returned 0x1
	[0312.339] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.339] WriteFile (in: hFile=0x200, lpBuffer=0x11194000*, nNumberOfBytesToWrite=0x7e90, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11194000*, lpNumberOfBytesWritten=0x1133bdfc*=0x7e90, lpOverlapped=0x1133be08) returned 1
	[0312.339] GetFileType (hFile=0x200) returned 0x1
	[0312.340] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7e90, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.340] GetFileType (hFile=0x200) returned 0x1
	[0312.340] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.340] WriteFile (in: hFile=0x200, lpBuffer=0x11154e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11154e00*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0312.341] GetFileType (hFile=0x200) returned 0x1
	[0312.341] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7e90, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.341] CloseHandle (hObject=0x200) returned 1
	[0312.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp.tl30z")) returned 0x220
	[0312.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0312.348] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0312.350] SetEvent (hEvent=0x218) returned 1
	[0312.350] SetEvent (hEvent=0x22c) returned 1
	[0312.350] SwitchToThread () returned 1
	[0312.353] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0312.411] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0312.431] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0312.448] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0312.463] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0313.524] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0313.546] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0313.570] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0313.591] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0313.607] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0313.627] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0313.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg")) returned 0x220
	[0313.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG", dwFileAttributes=0x220) returned 1
	[0313.633] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg.tl30z"), dwFlags=0x1) returned 1
	[0313.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0313.669] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11097e08 | out: lpMode=0x11097e08) returned 0
	[0313.669] ReadFile (in: hFile=0x298, lpBuffer=0x111c0000, nNumberOfBytesToRead=0x451e, lpNumberOfBytesRead=0x11097e18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x11097e18*=0x451e, lpOverlapped=0x0) returned 1
	[0313.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f110 | out: pbBuffer=0x1140f110) returned 1
	[0313.795] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b6802 | out: pbBuffer=0x110b6802) returned 1
	[0313.795] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f140 | out: pbBuffer=0x1140f140) returned 1
	[0313.796] GetFileType (hFile=0x298) returned 0x1
	[0313.796] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.796] WriteFile (in: hFile=0x298, lpBuffer=0x110f0000*, nNumberOfBytesToWrite=0x451e, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110f0000*, lpNumberOfBytesWritten=0x1133ddfc*=0x451e, lpOverlapped=0x1133de08) returned 1
	[0313.796] GetFileType (hFile=0x298) returned 0x1
	[0313.796] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x451e, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.797] GetFileType (hFile=0x298) returned 0x1
	[0313.797] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.797] WriteFile (in: hFile=0x298, lpBuffer=0x111fca80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111fca80*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0313.797] GetFileType (hFile=0x298) returned 0x1
	[0313.797] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x451e, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.797] CloseHandle (hObject=0x298) returned 1
	[0313.830] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0313.835] SetEvent (hEvent=0x1bc) returned 1
	[0313.835] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0314.426] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0317.602] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0317.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf")) returned 0x220
	[0317.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF", dwFileAttributes=0x220) returned 1
	[0317.614] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0317.652] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0317.652] ReadFile (in: hFile=0x224, lpBuffer=0x1112a000, nNumberOfBytesToRead=0x1b04, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1112a000*, lpNumberOfBytesRead=0x1131be18*=0x1b04, lpOverlapped=0x0) returned 1
	[0317.694] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0317.698] SetEvent (hEvent=0x1e8) returned 1
	[0317.698] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0317.844] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0317.860] SetEvent (hEvent=0x1b0) returned 1
	[0317.860] SetEvent (hEvent=0x22c) returned 1
	[0317.860] SetEvent (hEvent=0x234) returned 1
	[0317.860] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0317.864] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0317.865] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0317.868] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0317.868] SetEvent (hEvent=0x118) returned 1
	[0317.868] SetEvent (hEvent=0x234) returned 1
	[0317.868] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0317.883] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0317.883] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x0
	[0317.886] SetEvent (hEvent=0x150) returned 1
	[0317.886] SetEvent (hEvent=0x1bc) returned 1
	[0317.886] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0317.888] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0317.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf.tl30z")) returned 0x220
	[0317.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf")) returned 0x220
	[0317.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF", dwFileAttributes=0x220) returned 1
	[0317.892] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0317.994] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0317.994] ReadFile (in: hFile=0x1cc, lpBuffer=0x1111c000, nNumberOfBytesToRead=0x8f0e, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1111c000*, lpNumberOfBytesRead=0x1128be18*=0x8f0e, lpOverlapped=0x0) returned 1
	[0318.033] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0318.048] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0318.048] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11214802 | out: pbBuffer=0x11214802) returned 1
	[0318.048] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11214888 | out: pbBuffer=0x11214888) returned 1
	[0318.053] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0318.054] GetFileType (hFile=0x1cc) returned 0x1
	[0318.054] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11213de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.054] WriteFile (in: hFile=0x1cc, lpBuffer=0x112d4000*, nNumberOfBytesToWrite=0x8f0e, lpNumberOfBytesWritten=0x11213dfc, lpOverlapped=0x11213e08 | out: lpBuffer=0x112d4000*, lpNumberOfBytesWritten=0x11213dfc*=0x8f0e, lpOverlapped=0x11213e08) returned 1
	[0318.055] GetFileType (hFile=0x1cc) returned 0x1
	[0318.055] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x8f0e, lpNewFilePointer=0x0, dwMoveMethod=0x11213de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.055] GetFileType (hFile=0x1cc) returned 0x1
	[0318.055] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11213de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.056] WriteFile (in: hFile=0x1cc, lpBuffer=0x113a0a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11213dfc, lpOverlapped=0x11213e08 | out: lpBuffer=0x113a0a80*, lpNumberOfBytesWritten=0x11213dfc*=0x233, lpOverlapped=0x11213e08) returned 1
	[0318.056] GetFileType (hFile=0x1cc) returned 0x1
	[0318.056] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x8f0e, lpNewFilePointer=0x0, dwMoveMethod=0x11213de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.056] CloseHandle (hObject=0x1cc) returned 1
	[0318.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf.tl30z")) returned 0x220
	[0318.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.060] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0318.063] SetEvent (hEvent=0x27c) returned 1
	[0318.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf")) returned 0x220
	[0318.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF", dwFileAttributes=0x220) returned 1
	[0318.064] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0318.333] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0318.333] ReadFile (in: hFile=0x1cc, lpBuffer=0x111d8000, nNumberOfBytesToRead=0x27c0, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x111d8000*, lpNumberOfBytesRead=0x1128be18*=0x27c0, lpOverlapped=0x0) returned 1
	[0318.344] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126540 | out: pbBuffer=0x11126540) returned 1
	[0318.344] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126538 | out: pbBuffer=0x11126538) returned 1
	[0318.344] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141b102 | out: pbBuffer=0x1141b102) returned 1
	[0318.344] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1141b189 | out: pbBuffer=0x1141b189) returned 1
	[0318.345] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126570 | out: pbBuffer=0x11126570) returned 1
	[0318.345] GetFileType (hFile=0x1cc) returned 0x1
	[0318.345] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.346] WriteFile (in: hFile=0x1cc, lpBuffer=0x11208000*, nNumberOfBytesToWrite=0x27c0, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x11208000*, lpNumberOfBytesWritten=0x11371dfc*=0x27c0, lpOverlapped=0x11371e08) returned 1
	[0318.346] GetFileType (hFile=0x1cc) returned 0x1
	[0318.346] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x27c0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.346] GetFileType (hFile=0x1cc) returned 0x1
	[0318.346] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.347] WriteFile (in: hFile=0x1cc, lpBuffer=0x111f4380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x111f4380*, lpNumberOfBytesWritten=0x11371dfc*=0x22a, lpOverlapped=0x11371e08) returned 1
	[0318.347] GetFileType (hFile=0x1cc) returned 0x1
	[0318.347] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x27c0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.347] CloseHandle (hObject=0x1cc) returned 1
	[0318.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf.tl30z")) returned 0x220
	[0318.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf")) returned 0x220
	[0318.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF", dwFileAttributes=0x220) returned 1
	[0318.358] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0318.648] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0318.648] ReadFile (in: hFile=0x204, lpBuffer=0x111c5000, nNumberOfBytesToRead=0x4f72, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x111c5000*, lpNumberOfBytesRead=0x11287e18*=0x4f72, lpOverlapped=0x0) returned 1
	[0318.658] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0318.658] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11369202 | out: pbBuffer=0x11369202) returned 1
	[0318.658] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0318.660] GetFileType (hFile=0x204) returned 0x1
	[0318.661] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.661] WriteFile (in: hFile=0x204, lpBuffer=0x1139c000*, nNumberOfBytesToWrite=0x4f72, lpNumberOfBytesWritten=0x11375dfc, lpOverlapped=0x11375e08 | out: lpBuffer=0x1139c000*, lpNumberOfBytesWritten=0x11375dfc*=0x4f72, lpOverlapped=0x11375e08) returned 1
	[0318.661] GetFileType (hFile=0x204) returned 0x1
	[0318.661] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x4f72, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.662] GetFileType (hFile=0x204) returned 0x1
	[0318.662] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.662] WriteFile (in: hFile=0x204, lpBuffer=0x1134f880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11375dfc, lpOverlapped=0x11375e08 | out: lpBuffer=0x1134f880*, lpNumberOfBytesWritten=0x11375dfc*=0x233, lpOverlapped=0x11375e08) returned 1
	[0318.662] GetFileType (hFile=0x204) returned 0x1
	[0318.662] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x4f72, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.662] CloseHandle (hObject=0x204) returned 1
	[0318.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf.tl30z")) returned 0x220
	[0318.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf")) returned 0x220
	[0318.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF", dwFileAttributes=0x220) returned 1
	[0318.668] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0318.784] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0318.784] ReadFile (in: hFile=0x2a0, lpBuffer=0x11200000, nNumberOfBytesToRead=0xd8e0, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11200000*, lpNumberOfBytesRead=0x11023e18*=0xd8e0, lpOverlapped=0x0) returned 1
	[0318.795] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3e0 | out: pbBuffer=0x1140f3e0) returned 1
	[0318.795] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11369d02 | out: pbBuffer=0x11369d02) returned 1
	[0318.795] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0318.798] GetFileType (hFile=0x2a0) returned 0x1
	[0318.798] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.799] WriteFile (in: hFile=0x2a0, lpBuffer=0x112f6000*, nNumberOfBytesToWrite=0xd8e0, lpNumberOfBytesWritten=0x11375dfc, lpOverlapped=0x11375e08 | out: lpBuffer=0x112f6000*, lpNumberOfBytesWritten=0x11375dfc*=0xd8e0, lpOverlapped=0x11375e08) returned 1
	[0318.799] GetFileType (hFile=0x2a0) returned 0x1
	[0318.799] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xd8e0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.799] GetFileType (hFile=0x2a0) returned 0x1
	[0318.800] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.800] WriteFile (in: hFile=0x2a0, lpBuffer=0x110ec700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11375dfc, lpOverlapped=0x11375e08 | out: lpBuffer=0x110ec700*, lpNumberOfBytesWritten=0x11375dfc*=0x230, lpOverlapped=0x11375e08) returned 1
	[0318.800] GetFileType (hFile=0x2a0) returned 0x1
	[0318.800] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xd8e0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.800] CloseHandle (hObject=0x2a0) returned 1
	[0318.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf.tl30z")) returned 0x220
	[0318.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.813] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0318.820] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0318.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf")) returned 0x220
	[0318.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF", dwFileAttributes=0x220) returned 1
	[0318.833] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0318.949] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x110fde08 | out: lpMode=0x110fde08) returned 0
	[0318.949] ReadFile (in: hFile=0x1cc, lpBuffer=0x11456000, nNumberOfBytesToRead=0x934c, lpNumberOfBytesRead=0x110fde18, lpOverlapped=0x0 | out: lpBuffer=0x11456000*, lpNumberOfBytesRead=0x110fde18*=0x934c, lpOverlapped=0x0) returned 1
	[0318.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0318.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f278 | out: pbBuffer=0x1140f278) returned 1
	[0318.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11311d02 | out: pbBuffer=0x11311d02) returned 1
	[0318.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11311d7c | out: pbBuffer=0x11311d7c) returned 1
	[0318.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0318.957] GetFileType (hFile=0x1cc) returned 0x1
	[0318.958] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.958] WriteFile (in: hFile=0x1cc, lpBuffer=0x11100000*, nNumberOfBytesToWrite=0x934c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11100000*, lpNumberOfBytesWritten=0x11031dfc*=0x934c, lpOverlapped=0x11031e08) returned 1
	[0318.958] GetFileType (hFile=0x1cc) returned 0x1
	[0318.958] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x934c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.959] GetFileType (hFile=0x1cc) returned 0x1
	[0318.959] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.959] WriteFile (in: hFile=0x1cc, lpBuffer=0x11256700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11256700*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0318.959] GetFileType (hFile=0x1cc) returned 0x1
	[0318.959] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x934c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.959] CloseHandle (hObject=0x1cc) returned 1
	[0318.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf.tl30z")) returned 0x220
	[0318.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.963] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0318.966] SetEvent (hEvent=0x27c) returned 1
	[0318.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf")) returned 0x220
	[0318.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF", dwFileAttributes=0x220) returned 1
	[0318.967] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0319.074] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x110fde08 | out: lpMode=0x110fde08) returned 0
	[0319.075] ReadFile (in: hFile=0x1cc, lpBuffer=0x110e0000, nNumberOfBytesToRead=0xb7c, lpNumberOfBytesRead=0x110fde18, lpOverlapped=0x0 | out: lpBuffer=0x110e0000*, lpNumberOfBytesRead=0x110fde18*=0xb7c, lpOverlapped=0x0) returned 1
	[0319.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6690 | out: pbBuffer=0x113e6690) returned 1
	[0319.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e6902 | out: pbBuffer=0x112e6902) returned 1
	[0319.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e692a | out: pbBuffer=0x112e692a) returned 1
	[0319.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66c0 | out: pbBuffer=0x113e66c0) returned 1
	[0319.092] GetFileType (hFile=0x1cc) returned 0x1
	[0319.092] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.092] WriteFile (in: hFile=0x1cc, lpBuffer=0x113c0000*, nNumberOfBytesToWrite=0xb7c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113c0000*, lpNumberOfBytesWritten=0x1133fdfc*=0xb7c, lpOverlapped=0x1133fe08) returned 1
	[0319.093] GetFileType (hFile=0x1cc) returned 0x1
	[0319.093] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xb7c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.093] GetFileType (hFile=0x1cc) returned 0x1
	[0319.093] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.093] WriteFile (in: hFile=0x1cc, lpBuffer=0x11123500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11123500*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0319.093] GetFileType (hFile=0x1cc) returned 0x1
	[0319.094] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xb7c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.094] CloseHandle (hObject=0x1cc) returned 1
	[0319.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf.tl30z")) returned 0x220
	[0319.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.101] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0319.107] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0319.121] SetEvent (hEvent=0x25c) returned 1
	[0319.122] SetEvent (hEvent=0x134) returned 1
	[0319.122] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0319.125] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0319.125] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0319.127] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0319.127] SetEvent (hEvent=0x1e8) returned 1
	[0319.127] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x0
	[0319.159] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0319.802] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0319.832] SetEvent (hEvent=0x25c) returned 1
	[0319.832] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0319.841] SetEvent (hEvent=0x25c) returned 1
	[0319.841] SwitchToThread () returned 1
	[0319.843] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0319.848] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0319.940] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0319.955] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0319.971] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0319.989] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.037] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.058] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.076] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.097] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.118] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.134] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.150] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.165] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.181] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.195] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.213] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.225] SetEvent (hEvent=0x25c) returned 1
	[0320.225] SetEvent (hEvent=0x134) returned 1
	[0320.225] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x102
	[0320.228] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.228] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x0
	[0320.229] SetEvent (hEvent=0x27c) returned 1
	[0320.229] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0x1) returned 0x0
	[0320.232] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.388] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.470] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.528] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.530] SetEvent (hEvent=0x284) returned 1
	[0320.530] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01236_.wmf")) returned 0x220
	[0320.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01236_.WMF", dwFileAttributes=0x220) returned 1
	[0320.561] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01236_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01236_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01236_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01236_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01236_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.823] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0320.824] ReadFile (in: hFile=0x224, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x6958, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x1131de18*=0x6958, lpOverlapped=0x0) returned 1
	[0320.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0320.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112cb202 | out: pbBuffer=0x112cb202) returned 1
	[0320.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112cb28b | out: pbBuffer=0x112cb28b) returned 1
	[0320.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112cb2a8 | out: pbBuffer=0x112cb2a8) returned 1
	[0320.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0320.833] GetFileType (hFile=0x224) returned 0x1
	[0320.833] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.833] WriteFile (in: hFile=0x224, lpBuffer=0x1130c000*, nNumberOfBytesToWrite=0x6958, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1130c000*, lpNumberOfBytesWritten=0x1133fdfc*=0x6958, lpOverlapped=0x1133fe08) returned 1
	[0320.834] GetFileType (hFile=0x224) returned 0x1
	[0320.834] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6958, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.834] GetFileType (hFile=0x224) returned 0x1
	[0320.834] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.835] WriteFile (in: hFile=0x224, lpBuffer=0x112e7880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112e7880*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0320.835] GetFileType (hFile=0x224) returned 0x1
	[0320.835] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6958, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.835] CloseHandle (hObject=0x224) returned 1
	[0320.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01236_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01236_.wmf.tl30z")) returned 0x220
	[0320.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01236_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.838] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.842] SetEvent (hEvent=0x1e8) returned 1
	[0320.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01568_.wmf")) returned 0x220
	[0320.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01568_.WMF", dwFileAttributes=0x220) returned 1
	[0320.843] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01568_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01568_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01568_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01568_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01568_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0320.916] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0320.917] ReadFile (in: hFile=0x298, lpBuffer=0x111e1500, nNumberOfBytesToRead=0x54b0, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x111e1500*, lpNumberOfBytesRead=0x1131de18*=0x54b0, lpOverlapped=0x0) returned 1
	[0320.923] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6c0 | out: pbBuffer=0x1140f6c0) returned 1
	[0320.923] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111cd402 | out: pbBuffer=0x111cd402) returned 1
	[0320.923] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111cd41c | out: pbBuffer=0x111cd41c) returned 1
	[0320.923] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111cd47e | out: pbBuffer=0x111cd47e) returned 1
	[0320.924] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6f0 | out: pbBuffer=0x1140f6f0) returned 1
	[0320.925] GetFileType (hFile=0x298) returned 0x1
	[0320.925] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.925] WriteFile (in: hFile=0x298, lpBuffer=0x1111e000*, nNumberOfBytesToWrite=0x54b0, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1111e000*, lpNumberOfBytesWritten=0x1133bdfc*=0x54b0, lpOverlapped=0x1133be08) returned 1
	[0320.926] GetFileType (hFile=0x298) returned 0x1
	[0320.926] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x54b0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.926] GetFileType (hFile=0x298) returned 0x1
	[0320.926] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.926] WriteFile (in: hFile=0x298, lpBuffer=0x110f8a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110f8a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0320.926] GetFileType (hFile=0x298) returned 0x1
	[0320.927] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x54b0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.927] CloseHandle (hObject=0x298) returned 1
	[0320.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01568_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01568_.wmf.tl30z")) returned 0x220
	[0320.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01568_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.931] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0320.932] SetEvent (hEvent=0x1e8) returned 1
	[0320.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01805_.wmf")) returned 0x220
	[0320.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01805_.WMF", dwFileAttributes=0x220) returned 1
	[0320.933] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01805_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01805_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01805_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01805_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01805_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0321.114] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0321.114] ReadFile (in: hFile=0x204, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x1088, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x1131de18*=0x1088, lpOverlapped=0x0) returned 1
	[0321.118] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0321.119] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f268 | out: pbBuffer=0x1140f268) returned 1
	[0321.119] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b9302 | out: pbBuffer=0x111b9302) returned 1
	[0321.119] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b935b | out: pbBuffer=0x111b935b) returned 1
	[0321.119] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0321.119] GetFileType (hFile=0x204) returned 0x1
	[0321.120] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.120] WriteFile (in: hFile=0x204, lpBuffer=0x11324000*, nNumberOfBytesToWrite=0x1088, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11324000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1088, lpOverlapped=0x1133de08) returned 1
	[0321.120] GetFileType (hFile=0x204) returned 0x1
	[0321.120] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1088, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.120] GetFileType (hFile=0x204) returned 0x1
	[0321.121] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.121] WriteFile (in: hFile=0x204, lpBuffer=0x11195c00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11195c00*, lpNumberOfBytesWritten=0x1133ddfc*=0x221, lpOverlapped=0x1133de08) returned 1
	[0321.121] GetFileType (hFile=0x204) returned 0x1
	[0321.121] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1088, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.121] CloseHandle (hObject=0x204) returned 1
	[0321.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01805_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01805_.wmf.tl30z")) returned 0x220
	[0321.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01805_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.124] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0321.124] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0321.128] SetEvent (hEvent=0x27c) returned 1
	[0321.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02024_.wmf")) returned 0x220
	[0321.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02024_.WMF", dwFileAttributes=0x220) returned 1
	[0321.129] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02024_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02024_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02024_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02024_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02024_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0321.218] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0321.218] ReadFile (in: hFile=0x298, lpBuffer=0x11290500, nNumberOfBytesToRead=0x23a8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11290500*, lpNumberOfBytesRead=0x11023e18*=0x23a8, lpOverlapped=0x0) returned 1
	[0321.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3d0 | out: pbBuffer=0x1140f3d0) returned 1
	[0321.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3c8 | out: pbBuffer=0x1140f3c8) returned 1
	[0321.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b9d02 | out: pbBuffer=0x111b9d02) returned 1
	[0321.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0321.225] GetFileType (hFile=0x298) returned 0x1
	[0321.225] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.225] WriteFile (in: hFile=0x298, lpBuffer=0x11450000*, nNumberOfBytesToWrite=0x23a8, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11450000*, lpNumberOfBytesWritten=0x1133ddfc*=0x23a8, lpOverlapped=0x1133de08) returned 1
	[0321.225] GetFileType (hFile=0x298) returned 0x1
	[0321.225] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x23a8, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.226] GetFileType (hFile=0x298) returned 0x1
	[0321.226] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.226] WriteFile (in: hFile=0x298, lpBuffer=0x113c6a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x113c6a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0321.226] GetFileType (hFile=0x298) returned 0x1
	[0321.226] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x23a8, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.226] CloseHandle (hObject=0x298) returned 1
	[0321.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02024_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02024_.wmf.tl30z")) returned 0x220
	[0321.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02024_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.233] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0321.236] SetEvent (hEvent=0x27c) returned 1
	[0321.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02051_.wmf")) returned 0x220
	[0321.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02051_.WMF", dwFileAttributes=0x220) returned 1
	[0321.236] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02051_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02051_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02051_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02051_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02051_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0321.330] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0321.330] ReadFile (in: hFile=0x298, lpBuffer=0x111d6000, nNumberOfBytesToRead=0x2c2c, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111d6000*, lpNumberOfBytesRead=0x11023e18*=0x2c2c, lpOverlapped=0x0) returned 1
	[0321.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0321.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4c8 | out: pbBuffer=0x1104e4c8) returned 1
	[0321.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11369d02 | out: pbBuffer=0x11369d02) returned 1
	[0321.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11369d2a | out: pbBuffer=0x11369d2a) returned 1
	[0321.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11369d80 | out: pbBuffer=0x11369d80) returned 1
	[0321.334] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0321.334] GetFileType (hFile=0x298) returned 0x1
	[0321.334] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.335] WriteFile (in: hFile=0x298, lpBuffer=0x11226000*, nNumberOfBytesToWrite=0x2c2c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11226000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2c2c, lpOverlapped=0x1102be08) returned 1
	[0321.335] GetFileType (hFile=0x298) returned 0x1
	[0321.335] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x2c2c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.335] GetFileType (hFile=0x298) returned 0x1
	[0321.335] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.335] WriteFile (in: hFile=0x298, lpBuffer=0x111ea700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111ea700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0321.336] GetFileType (hFile=0x298) returned 0x1
	[0321.336] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x2c2c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.336] CloseHandle (hObject=0x298) returned 1
	[0321.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02051_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02051_.wmf.tl30z")) returned 0x220
	[0321.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02051_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.339] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0321.343] SetEvent (hEvent=0x27c) returned 1
	[0321.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02227_.wmf")) returned 0x220
	[0321.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02227_.WMF", dwFileAttributes=0x220) returned 1
	[0321.344] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02227_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02227_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02227_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02227_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02227_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.460] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0321.460] ReadFile (in: hFile=0x1c8, lpBuffer=0x110ea000, nNumberOfBytesToRead=0x540, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x110ea000*, lpNumberOfBytesRead=0x11023e18*=0x540, lpOverlapped=0x0) returned 1
	[0321.465] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0321.465] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0321.465] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b8802 | out: pbBuffer=0x112b8802) returned 1
	[0321.465] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b88bf | out: pbBuffer=0x112b88bf) returned 1
	[0321.465] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b88cd | out: pbBuffer=0x112b88cd) returned 1
	[0321.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0321.466] GetFileType (hFile=0x1c8) returned 0x1
	[0321.466] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.466] WriteFile (in: hFile=0x1c8, lpBuffer=0x11143000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11143000*, lpNumberOfBytesWritten=0x1133bdfc*=0x540, lpOverlapped=0x1133be08) returned 1
	[0321.467] GetFileType (hFile=0x1c8) returned 0x1
	[0321.467] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x540, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.467] GetFileType (hFile=0x1c8) returned 0x1
	[0321.467] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.467] WriteFile (in: hFile=0x1c8, lpBuffer=0x111c7500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111c7500*, lpNumberOfBytesWritten=0x1133bdfc*=0x221, lpOverlapped=0x1133be08) returned 1
	[0321.468] GetFileType (hFile=0x1c8) returned 0x1
	[0321.468] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x540, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.468] CloseHandle (hObject=0x1c8) returned 1
	[0321.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02227_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02227_.wmf.tl30z")) returned 0x220
	[0321.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02227_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.471] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0321.475] SetEvent (hEvent=0x27c) returned 1
	[0321.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02261_.wmf")) returned 0x220
	[0321.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02261_.WMF", dwFileAttributes=0x220) returned 1
	[0321.476] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02261_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02261_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02261_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02261_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02261_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.570] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0321.570] ReadFile (in: hFile=0x1c8, lpBuffer=0x1107d200, nNumberOfBytesToRead=0x818, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1107d200*, lpNumberOfBytesRead=0x11023e18*=0x818, lpOverlapped=0x0) returned 1
	[0321.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66b0 | out: pbBuffer=0x113e66b0) returned 1
	[0321.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11355c02 | out: pbBuffer=0x11355c02) returned 1
	[0321.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66e0 | out: pbBuffer=0x113e66e0) returned 1
	[0321.578] GetFileType (hFile=0x1c8) returned 0x1
	[0321.578] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.578] WriteFile (in: hFile=0x1c8, lpBuffer=0x113da000*, nNumberOfBytesToWrite=0x818, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113da000*, lpNumberOfBytesWritten=0x1133bdfc*=0x818, lpOverlapped=0x1133be08) returned 1
	[0321.578] GetFileType (hFile=0x1c8) returned 0x1
	[0321.578] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x818, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.579] GetFileType (hFile=0x1c8) returned 0x1
	[0321.579] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.579] WriteFile (in: hFile=0x1c8, lpBuffer=0x1136b180*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1136b180*, lpNumberOfBytesWritten=0x1133bdfc*=0x221, lpOverlapped=0x1133be08) returned 1
	[0321.579] GetFileType (hFile=0x1c8) returned 0x1
	[0321.579] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x818, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.579] CloseHandle (hObject=0x1c8) returned 1
	[0321.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02261_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02261_.wmf.tl30z")) returned 0x220
	[0321.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02261_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.582] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0321.588] SetEvent (hEvent=0x27c) returned 1
	[0321.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02270_.wmf")) returned 0x220
	[0321.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02270_.WMF", dwFileAttributes=0x220) returned 1
	[0321.588] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02270_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02270_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02270_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02270_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02270_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0321.670] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0321.670] ReadFile (in: hFile=0x298, lpBuffer=0x113a4000, nNumberOfBytesToRead=0xa68, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x113a4000*, lpNumberOfBytesRead=0x11023e18*=0xa68, lpOverlapped=0x0) returned 1
	[0321.675] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0321.675] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11324602 | out: pbBuffer=0x11324602) returned 1
	[0321.676] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0321.676] GetFileType (hFile=0x298) returned 0x1
	[0321.676] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.676] WriteFile (in: hFile=0x298, lpBuffer=0x112fe000*, nNumberOfBytesToWrite=0xa68, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112fe000*, lpNumberOfBytesWritten=0x1102ddfc*=0xa68, lpOverlapped=0x1102de08) returned 1
	[0321.677] GetFileType (hFile=0x298) returned 0x1
	[0321.677] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0xa68, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.677] GetFileType (hFile=0x298) returned 0x1
	[0321.677] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.677] WriteFile (in: hFile=0x298, lpBuffer=0x1145f500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1145f500*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0321.677] GetFileType (hFile=0x298) returned 0x1
	[0321.678] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0xa68, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.678] CloseHandle (hObject=0x298) returned 1
	[0321.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02270_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02270_.wmf.tl30z")) returned 0x220
	[0321.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02270_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.682] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0321.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02439_.wmf")) returned 0x220
	[0321.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02439_.WMF", dwFileAttributes=0x220) returned 1
	[0321.685] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02439_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02439_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02439_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02439_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02439_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.768] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0321.768] ReadFile (in: hFile=0x1c8, lpBuffer=0x111f2000, nNumberOfBytesToRead=0x504, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111f2000*, lpNumberOfBytesRead=0x11023e18*=0x504, lpOverlapped=0x0) returned 1
	[0321.774] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332800 | out: pbBuffer=0x11332800) returned 1
	[0321.774] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111df202 | out: pbBuffer=0x111df202) returned 1
	[0321.775] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332830 | out: pbBuffer=0x11332830) returned 1
	[0321.775] GetFileType (hFile=0x1c8) returned 0x1
	[0321.775] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.775] WriteFile (in: hFile=0x1c8, lpBuffer=0x1121e000*, nNumberOfBytesToWrite=0x504, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1121e000*, lpNumberOfBytesWritten=0x11031dfc*=0x504, lpOverlapped=0x11031e08) returned 1
	[0321.776] GetFileType (hFile=0x1c8) returned 0x1
	[0321.776] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x504, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.776] GetFileType (hFile=0x1c8) returned 0x1
	[0321.776] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.776] WriteFile (in: hFile=0x1c8, lpBuffer=0x1121a380*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1121a380*, lpNumberOfBytesWritten=0x11031dfc*=0x221, lpOverlapped=0x11031e08) returned 1
	[0321.777] GetFileType (hFile=0x1c8) returned 0x1
	[0321.777] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x504, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.777] CloseHandle (hObject=0x1c8) returned 1
	[0321.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02439_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02439_.wmf.tl30z")) returned 0x220
	[0321.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02439_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.780] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0
	[0321.784] SetEvent (hEvent=0x27c) returned 1
	[0321.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02790_.wmf")) returned 0x220
	[0321.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02790_.WMF", dwFileAttributes=0x220) returned 1
	[0321.784] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02790_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02790_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02790_.wmf.tl30z"), dwFlags=0x1) 

Thread:
	id = 28
	os_tid = 0xe84

	[0144.996] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x31f7ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x31f7ff30*=0x1ac) returned 1
	[0144.997] VirtualQuery (in: lpAddress=0x31f7ff40, lpBuffer=0x31f7ff40, dwLength=0x1c | out: lpBuffer=0x31f7ff40*(BaseAddress=0x31f7f000, AllocationBase=0x31e80000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0144.998] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1b0
	[0144.998] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0145.203] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0145.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11036540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4
	[0145.375] CloseHandle (hObject=0x1b4) returned 1
	[0145.375] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80
	[0145.375] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0145.376] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0146.024] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0146.090] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0146.132] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0146.132] ReadFile (in: hFile=0x16c, lpBuffer=0x11234000, nNumberOfBytesToRead=0x78ac, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11234000*, lpNumberOfBytesRead=0x11423e18*=0x78ac, lpOverlapped=0x0) returned 1
	[0146.176] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e5a0 | out: pbBuffer=0x1142e5a0) returned 1
	[0146.176] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123e702 | out: pbBuffer=0x1123e702) returned 1
	[0146.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e5d0 | out: pbBuffer=0x1142e5d0) returned 1
	[0146.179] GetFileType (hFile=0x16c) returned 0x1
	[0146.179] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0146.179] WriteFile (in: hFile=0x16c, lpBuffer=0x1126a000*, nNumberOfBytesToWrite=0x78ac, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1126a000*, lpNumberOfBytesWritten=0x1133fdfc*=0x78ac, lpOverlapped=0x1133fe08) returned 1
	[0146.180] GetFileType (hFile=0x16c) returned 0x1
	[0146.180] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x78ac, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0146.180] GetFileType (hFile=0x16c) returned 0x1
	[0146.180] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0146.180] WriteFile (in: hFile=0x16c, lpBuffer=0x11215880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11215880*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0146.181] GetFileType (hFile=0x16c) returned 0x1
	[0146.181] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x78ac, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0146.181] CloseHandle (hObject=0x16c) returned 1
	[0146.192] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.tl30z")) returned 0x20
	[0146.192] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0146.193] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0146.335] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0146.797] SetEvent (hEvent=0x160) returned 1
	[0146.797] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80
	[0146.797] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0146.798] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0146.798] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0146.799] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0146.799] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0146.862] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0146.862] SetEvent (hEvent=0x150) returned 1
	[0146.862] SetEvent (hEvent=0x160) returned 1
	[0146.862] SetEvent (hEvent=0x174) returned 1
	[0146.863] ReadFile (in: hFile=0x1b4, lpBuffer=0x11274000, nNumberOfBytesToRead=0x81a0, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11274000*, lpNumberOfBytesRead=0x11423e18*=0x81a0, lpOverlapped=0x0) returned 1
	[0146.954] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0147.308] SetEvent (hEvent=0x160) returned 1
	[0147.308] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0147.381] SetEvent (hEvent=0x160) returned 1
	[0147.381] SetEvent (hEvent=0x12c) returned 1
	[0147.382] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158)) returned 1
	[0147.454] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1
	[0147.455] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1037\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0147.459] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0147.460] WriteFile (in: hFile=0x1cc, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0147.463] CloseHandle (hObject=0x1cc) returned 1
	[0147.463] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037" (normalized: "c:\\588bce7c90097ed212\\1037"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x5b5b53bd, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x5b5b53bd, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0147.463] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\" (normalized: "c:\\588bce7c90097ed212\\1038"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.464] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1ff0
	[0147.464] FindNextFileW (in: hFindFile=0x7f1ff0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.464] FindNextFileW (in: hFindFile=0x7f1ff0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0147.464] FindNextFileW (in: hFindFile=0x7f1ff0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0147.465] FindNextFileW (in: hFindFile=0x7f1ff0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0147.465] FindNextFileW (in: hFindFile=0x7f1ff0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.465] FindClose (in: hFindFile=0x7f1ff0 | out: hFindFile=0x7f1ff0) returned 1
	[0147.465] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1
	[0147.465] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958)) returned 1
	[0147.604] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1
	[0147.604] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1038\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0147.817] SetEvent (hEvent=0x150) returned 1
	[0147.817] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0147.817] WriteFile (in: hFile=0x1c8, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0147.820] CloseHandle (hObject=0x1c8) returned 1
	[0147.860] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038" (normalized: "c:\\588bce7c90097ed212\\1038"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x5b9d7e94, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x5b9d7e94, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0149.030] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\" (normalized: "c:\\588bce7c90097ed212\\1040"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0149.030] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f21f0
	[0149.094] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0149.094] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0149.094] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0149.094] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0149.094] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0149.094] FindClose (in: hFindFile=0x7f21f0 | out: hFindFile=0x7f21f0) returned 1
	[0149.094] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1
	[0149.095] SetEvent (hEvent=0x160) returned 1
	[0149.095] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758)) returned 1
	[0149.442] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1
	[0149.949] SetEvent (hEvent=0x150) returned 1
	[0149.949] SetEvent (hEvent=0x160) returned 1
	[0149.949] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1040\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0150.477] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0150.477] WriteFile (in: hFile=0x1b4, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0150.480] CloseHandle (hObject=0x1b4) returned 1
	[0150.591] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040" (normalized: "c:\\588bce7c90097ed212\\1040"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x5d33c79c, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x5d33c79c, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0150.736] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\" (normalized: "c:\\588bce7c90097ed212\\1041"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0150.736] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2030
	[0150.736] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0150.736] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0150.737] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0150.737] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0150.737] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0150.737] FindClose (in: hFindFile=0x7f2030 | out: hFindFile=0x7f2030) returned 1
	[0150.737] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1
	[0150.737] SetEvent (hEvent=0x134) returned 1
	[0150.738] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58)) returned 1
	[0150.738] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1
	[0150.738] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1041\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0150.825] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0150.825] WriteFile (in: hFile=0x1c8, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0150.828] CloseHandle (hObject=0x1c8) returned 1
	[0150.899] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041" (normalized: "c:\\588bce7c90097ed212\\1041"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x5d6b3b48, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x5d6b3b48, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0151.191] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\" (normalized: "c:\\588bce7c90097ed212\\1042"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0151.192] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1d30
	[0151.192] FindNextFileW (in: hFindFile=0x7f1d30, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0151.192] FindNextFileW (in: hFindFile=0x7f1d30, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0151.192] FindNextFileW (in: hFindFile=0x7f1d30, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0151.192] FindNextFileW (in: hFindFile=0x7f1d30, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0151.192] FindNextFileW (in: hFindFile=0x7f1d30, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0151.193] FindClose (in: hFindFile=0x7f1d30 | out: hFindFile=0x7f1d30) returned 1
	[0151.193] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1
	[0151.193] SetEvent (hEvent=0x12c) returned 1
	[0151.193] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58)) returned 1
	[0151.193] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1
	[0151.194] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1042\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0151.599] SetEvent (hEvent=0x150) returned 1
	[0151.599] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0151.600] WriteFile (in: hFile=0x1cc, lpBuffer=0x11454000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x11454000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0151.602] CloseHandle (hObject=0x1cc) returned 1
	[0151.642] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042" (normalized: "c:\\588bce7c90097ed212\\1042"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x5ddab65d, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x5ddab65d, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0152.077] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\" (normalized: "c:\\588bce7c90097ed212\\1043"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0152.077] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x11341ad0 | out: lpFindFileData=0x11341ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2330
	[0152.078] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0152.078] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0152.078] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0152.078] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0152.078] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x11341b4c | out: lpFindFileData=0x11341b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0152.078] FindClose (in: hFindFile=0x7f2330 | out: hFindFile=0x7f2330) returned 1
	[0152.079] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1
	[0152.079] SetEvent (hEvent=0x118) returned 1
	[0152.079] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58)) returned 1
	[0152.166] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0152.462] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0152.712] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0152.972] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0153.955] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0155.141] SetEvent (hEvent=0x160) returned 1
	[0155.141] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80
	[0155.141] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0155.142] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0156.394] SetEvent (hEvent=0x150) returned 1
	[0156.394] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0156.510] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11318e08 | out: lpMode=0x11318e08) returned 0
	[0156.510] ReadFile (in: hFile=0x1cc, lpBuffer=0x112b6000, nNumberOfBytesToRead=0x7be6, lpNumberOfBytesRead=0x11318e18, lpOverlapped=0x0 | out: lpBuffer=0x112b6000*, lpNumberOfBytesRead=0x11318e18*=0x7be6, lpOverlapped=0x0) returned 1
	[0156.591] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0156.592] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e188 | out: pbBuffer=0x1104e188) returned 1
	[0156.592] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c8802 | out: pbBuffer=0x112c8802) returned 1
	[0156.592] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c88a7 | out: pbBuffer=0x112c88a7) returned 1
	[0156.592] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e1c0 | out: pbBuffer=0x1104e1c0) returned 1
	[0156.599] GetFileType (hFile=0x1cc) returned 0x1
	[0156.599] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0156.599] WriteFile (in: hFile=0x1cc, lpBuffer=0x111d8000*, nNumberOfBytesToWrite=0x7be6, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111d8000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7be6, lpOverlapped=0x1102be08) returned 1
	[0156.600] GetFileType (hFile=0x1cc) returned 0x1
	[0156.600] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x7be6, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0156.600] GetFileType (hFile=0x1cc) returned 0x1
	[0156.600] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0156.600] WriteFile (in: hFile=0x1cc, lpBuffer=0x112faa80*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112faa80*, lpNumberOfBytesWritten=0x1102bdfc*=0x239, lpOverlapped=0x1102be08) returned 1
	[0156.601] GetFileType (hFile=0x1cc) returned 0x1
	[0156.601] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x7be6, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0156.601] CloseHandle (hObject=0x1cc) returned 1
	[0156.608] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.tl30z")) returned 0x20
	[0156.608] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0156.609] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0161.896] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80
	[0161.896] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0161.897] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0163.817] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0163.817] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11317e08 | out: lpMode=0x11317e08) returned 0
	[0163.818] ReadFile (in: hFile=0x184, lpBuffer=0x11434000, nNumberOfBytesToRead=0xf19, lpNumberOfBytesRead=0x11317e18, lpOverlapped=0x0 | out: lpBuffer=0x11434000*, lpNumberOfBytesRead=0x11317e18*=0xf19, lpOverlapped=0x0) returned 1
	[0163.825] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0163.825] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332238 | out: pbBuffer=0x11332238) returned 1
	[0163.825] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11390802 | out: pbBuffer=0x11390802) returned 1
	[0163.826] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332270 | out: pbBuffer=0x11332270) returned 1
	[0163.826] GetFileType (hFile=0x184) returned 0x1
	[0163.826] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0163.826] WriteFile (in: hFile=0x184, lpBuffer=0x11470000*, nNumberOfBytesToWrite=0xf19, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11470000*, lpNumberOfBytesWritten=0x11031dfc*=0xf19, lpOverlapped=0x11031e08) returned 1
	[0163.827] GetFileType (hFile=0x184) returned 0x1
	[0163.827] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xf19, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0163.827] GetFileType (hFile=0x184) returned 0x1
	[0163.827] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0163.827] WriteFile (in: hFile=0x184, lpBuffer=0x11374a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11374a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0163.828] GetFileType (hFile=0x184) returned 0x1
	[0163.828] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xf19, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0163.828] CloseHandle (hObject=0x184) returned 1
	[0163.829] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.tl30z")) returned 0x20
	[0163.830] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0163.830] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80
	[0163.830] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0163.831] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0165.224] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0165.224] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0165.225] ReadFile (in: hFile=0x184, lpBuffer=0x11362000, nNumberOfBytesToRead=0xf13, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11362000*, lpNumberOfBytesRead=0x11022e18*=0xf13, lpOverlapped=0x0) returned 1
	[0165.230] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332410 | out: pbBuffer=0x11332410) returned 1
	[0165.231] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11391302 | out: pbBuffer=0x11391302) returned 1
	[0165.231] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139131d | out: pbBuffer=0x1139131d) returned 1
	[0165.231] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332440 | out: pbBuffer=0x11332440) returned 1
	[0165.232] GetFileType (hFile=0x184) returned 0x1
	[0165.232] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0165.232] WriteFile (in: hFile=0x184, lpBuffer=0x11460000*, nNumberOfBytesToWrite=0xf13, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11460000*, lpNumberOfBytesWritten=0x11031dfc*=0xf13, lpOverlapped=0x11031e08) returned 1
	[0165.233] GetFileType (hFile=0x184) returned 0x1
	[0165.233] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xf13, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0165.233] GetFileType (hFile=0x184) returned 0x1
	[0165.233] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0165.233] WriteFile (in: hFile=0x184, lpBuffer=0x11375880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11375880*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0165.234] GetFileType (hFile=0x184) returned 0x1
	[0165.234] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xf13, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0165.234] CloseHandle (hObject=0x184) returned 1
	[0165.236] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.tl30z")) returned 0x20
	[0165.236] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0165.237] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80
	[0165.237] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0165.238] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0166.694] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0166.696] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11027e08 | out: lpMode=0x11027e08) returned 0
	[0166.696] ReadFile (in: hFile=0x184, lpBuffer=0x110fa000, nNumberOfBytesToRead=0x16c3, lpNumberOfBytesRead=0x11027e18, lpOverlapped=0x0 | out: lpBuffer=0x110fa000*, lpNumberOfBytesRead=0x11027e18*=0x16c3, lpOverlapped=0x0) returned 1
	[0166.715] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332600 | out: pbBuffer=0x11332600) returned 1
	[0166.715] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113325f8 | out: pbBuffer=0x113325f8) returned 1
	[0166.715] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11391e02 | out: pbBuffer=0x11391e02) returned 1
	[0166.715] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11391ec7 | out: pbBuffer=0x11391ec7) returned 1
	[0166.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332650 | out: pbBuffer=0x11332650) returned 1
	[0166.717] GetFileType (hFile=0x184) returned 0x1
	[0166.717] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0166.717] WriteFile (in: hFile=0x184, lpBuffer=0x113e8000*, nNumberOfBytesToWrite=0x16c3, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113e8000*, lpNumberOfBytesWritten=0x11031dfc*=0x16c3, lpOverlapped=0x11031e08) returned 1
	[0166.718] GetFileType (hFile=0x184) returned 0x1
	[0166.718] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x16c3, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0166.718] GetFileType (hFile=0x184) returned 0x1
	[0166.718] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0166.718] WriteFile (in: hFile=0x184, lpBuffer=0x111a8700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111a8700*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0166.719] GetFileType (hFile=0x184) returned 0x1
	[0166.719] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x16c3, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0166.719] CloseHandle (hObject=0x184) returned 1
	[0166.723] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.tl30z")) returned 0x20
	[0166.723] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0166.724] SetEvent (hEvent=0x12c) returned 1
	[0166.724] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0167.447] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0168.060] SetEvent (hEvent=0x160) returned 1
	[0168.061] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 0x80
	[0168.061] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0168.061] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0169.187] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0169.187] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0169.187] ReadFile (in: hFile=0x184, lpBuffer=0x1138a000, nNumberOfBytesToRead=0xbfd, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x1131ae18*=0xbfd, lpOverlapped=0x0) returned 1
	[0169.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0169.267] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0169.267] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113de802 | out: pbBuffer=0x113de802) returned 1
	[0169.267] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113de84b | out: pbBuffer=0x113de84b) returned 1
	[0169.267] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113de88b | out: pbBuffer=0x113de88b) returned 1
	[0169.268] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0169.268] GetFileType (hFile=0x184) returned 0x1
	[0169.268] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0169.268] WriteFile (in: hFile=0x184, lpBuffer=0x110dc000*, nNumberOfBytesToWrite=0xbfd, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110dc000*, lpNumberOfBytesWritten=0x1133ddfc*=0xbfd, lpOverlapped=0x1133de08) returned 1
	[0169.269] GetFileType (hFile=0x184) returned 0x1
	[0169.269] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xbfd, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0169.269] GetFileType (hFile=0x184) returned 0x1
	[0169.269] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0169.269] WriteFile (in: hFile=0x184, lpBuffer=0x11064a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11064a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x236, lpOverlapped=0x1133de08) returned 1
	[0169.270] GetFileType (hFile=0x184) returned 0x1
	[0169.270] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xbfd, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0169.270] CloseHandle (hObject=0x184) returned 1
	[0169.388] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.tl30z")) returned 0x20
	[0169.388] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0169.531] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0169.569] SetEvent (hEvent=0x1c4) returned 1
	[0169.570] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 0x80
	[0169.570] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", dwFileAttributes=0x80) returned 1
	[0169.570] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.tl30z"), dwFlags=0x1) returned 1
	[0170.619] SetEvent (hEvent=0x150) returned 1
	[0170.620] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0170.759] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0170.759] ReadFile (in: hFile=0x1c8, lpBuffer=0x11270000, nNumberOfBytesToRead=0xec7a, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11270000*, lpNumberOfBytesRead=0x1131be18*=0xec7a, lpOverlapped=0x0) returned 1
	[0170.769] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e2e0 | out: pbBuffer=0x1104e2e0) returned 1
	[0170.770] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113df302 | out: pbBuffer=0x113df302) returned 1
	[0170.770] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113df3e4 | out: pbBuffer=0x113df3e4) returned 1
	[0170.770] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e310 | out: pbBuffer=0x1104e310) returned 1
	[0170.772] GetFileType (hFile=0x1c8) returned 0x1
	[0170.772] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0170.773] WriteFile (in: hFile=0x1c8, lpBuffer=0x111e8000*, nNumberOfBytesToWrite=0xec7a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111e8000*, lpNumberOfBytesWritten=0x11031dfc*=0xec7a, lpOverlapped=0x11031e08) returned 1
	[0170.774] GetFileType (hFile=0x1c8) returned 0x1
	[0170.774] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xec7a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0170.774] GetFileType (hFile=0x1c8) returned 0x1
	[0170.774] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0170.775] WriteFile (in: hFile=0x1c8, lpBuffer=0x11065880*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11065880*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0170.911] GetFileType (hFile=0x1c8) returned 0x1
	[0170.912] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xec7a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0170.912] CloseHandle (hObject=0x1c8) returned 1
	[0171.067] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.tl30z")) returned 0x20
	[0171.067] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0171.068] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 0x80
	[0171.068] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html", dwFileAttributes=0x80) returned 1
	[0171.069] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), lpNewFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.tl30z" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.tl30z"), dwFlags=0x1) returned 1
	[0172.616] SetEvent (hEvent=0x150) returned 1
	[0172.616] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.tl30z" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0172.717] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0172.718] ReadFile (in: hFile=0x184, lpBuffer=0x1130e000, nNumberOfBytesToRead=0x3ef6, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1130e000*, lpNumberOfBytesRead=0x1131be18*=0x3ef6, lpOverlapped=0x0) returned 1
	[0172.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e470 | out: pbBuffer=0x1104e470) returned 1
	[0172.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e468 | out: pbBuffer=0x1104e468) returned 1
	[0172.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113dfd02 | out: pbBuffer=0x113dfd02) returned 1
	[0172.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113dfd53 | out: pbBuffer=0x113dfd53) returned 1
	[0172.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4a0 | out: pbBuffer=0x1104e4a0) returned 1
	[0172.783] GetFileType (hFile=0x184) returned 0x1
	[0172.783] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0172.783] WriteFile (in: hFile=0x184, lpBuffer=0x112ae000*, nNumberOfBytesToWrite=0x3ef6, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112ae000*, lpNumberOfBytesWritten=0x11031dfc*=0x3ef6, lpOverlapped=0x11031e08) returned 1
	[0172.784] GetFileType (hFile=0x184) returned 0x1
	[0172.784] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x3ef6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0172.784] GetFileType (hFile=0x184) returned 0x1
	[0172.784] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0172.784] WriteFile (in: hFile=0x184, lpBuffer=0x1145e700*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1145e700*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0172.785] GetFileType (hFile=0x184) returned 0x1
	[0172.785] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x3ef6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0172.785] CloseHandle (hObject=0x184) returned 1
	[0172.787] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.tl30z" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.tl30z")) returned 0x20
	[0172.787] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.tl30z", dwFileAttributes=0x21) returned 1
	[0172.788] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0174.905] SetEvent (hEvent=0x118) returned 1
	[0174.905] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0175.025] SetEvent (hEvent=0x1c4) returned 1
	[0175.025] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 0x80
	[0175.025] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", dwFileAttributes=0x80) returned 1
	[0175.026] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.tl30z"), dwFlags=0x1) returned 1
	[0182.584] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0182.701] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1133be08 | out: lpMode=0x1133be08) returned 0
	[0182.701] ReadFile (in: hFile=0x1cc, lpBuffer=0x110ec000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x1133be18, lpOverlapped=0x0 | out: lpBuffer=0x110ec000*, lpNumberOfBytesRead=0x1133be18*=0x37e, lpOverlapped=0x0) returned 1
	[0182.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332560 | out: pbBuffer=0x11332560) returned 1
	[0182.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11067d02 | out: pbBuffer=0x11067d02) returned 1
	[0182.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11067d17 | out: pbBuffer=0x11067d17) returned 1
	[0182.783] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113325a0 | out: pbBuffer=0x113325a0) returned 1
	[0182.783] GetFileType (hFile=0x1cc) returned 0x1
	[0182.783] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0182.784] WriteFile (in: hFile=0x1cc, lpBuffer=0x113bc000*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113bc000*, lpNumberOfBytesWritten=0x1133bdfc*=0x37e, lpOverlapped=0x1133be08) returned 1
	[0182.784] GetFileType (hFile=0x1cc) returned 0x1
	[0182.784] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0182.784] GetFileType (hFile=0x1cc) returned 0x1
	[0182.784] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0182.784] WriteFile (in: hFile=0x1cc, lpBuffer=0x110ece00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110ece00*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0182.785] GetFileType (hFile=0x1cc) returned 0x1
	[0182.785] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0182.785] CloseHandle (hObject=0x1cc) returned 1
	[0182.977] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.tl30z")) returned 0x20
	[0182.977] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0183.138] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0183.930] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0184.204] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0198.304] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0x20
	[0198.304] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf", dwFileAttributes=0x20) returned 0
	[0198.304] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0198.386] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0198.544] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0198.810] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0199.060] SetEvent (hEvent=0x1c4) returned 1
	[0199.060] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20
	[0199.060] SetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0199.060] MoveFileExW (lpExistingFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0199.152] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0199.196] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0199.303] SetEvent (hEvent=0x1c4) returned 1
	[0199.303] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20
	[0199.303] SetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0199.304] MoveFileExW (lpExistingFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0199.348] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0199.826] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0200.112] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0200.160] SetEvent (hEvent=0x1e0) returned 1
	[0200.160] GetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20
	[0200.160] SetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0200.160] MoveFileExW (lpExistingFileName="C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\el-GR\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0200.307] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0200.577] SetEvent (hEvent=0x1e0) returned 1
	[0200.577] GetFileAttributesW (lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20
	[0200.578] SetFileAttributesW (lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0200.578] MoveFileExW (lpExistingFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0200.578] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0200.829] SetEvent (hEvent=0x12c) returned 1
	[0200.829] GetFileAttributesW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20
	[0200.829] SetFileAttributesW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0200.830] MoveFileExW (lpExistingFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\en-US\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0200.998] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0201.165] GetFileAttributesW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20
	[0201.165] SetFileAttributesW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0201.165] MoveFileExW (lpExistingFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0201.166] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0201.530] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0201.777] SetEvent (hEvent=0x12c) returned 1
	[0201.778] GetFileAttributesW (lpFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui")) returned 0x20
	[0201.778] SetFileAttributesW (lpFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0201.778] MoveFileExW (lpExistingFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0201.779] GetFileAttributesW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20
	[0201.779] SetFileAttributesW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0201.780] MoveFileExW (lpExistingFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0201.828] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.039] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0204.861] SetEvent (hEvent=0x1c4) returned 1
	[0204.861] GetFileAttributesW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20
	[0204.861] SetFileAttributesW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0204.862] MoveFileExW (lpExistingFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0205.101] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.351] SetEvent (hEvent=0x12c) returned 1
	[0205.351] GetFileAttributesW (lpFileName="C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui")) returned 0x20
	[0205.351] SetFileAttributesW (lpFileName="C:\\Boot\\nl-NL\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0205.351] MoveFileExW (lpExistingFileName="C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\nl-NL\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0205.529] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.641] SetEvent (hEvent=0x12c) returned 1
	[0205.641] GetFileAttributesW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20
	[0205.641] SetFileAttributesW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0205.642] MoveFileExW (lpExistingFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0205.717] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0206.547] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0206.824] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.042] SetEvent (hEvent=0x12c) returned 1
	[0207.042] GetFileAttributesW (lpFileName="C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui")) returned 0x20
	[0207.042] SetFileAttributesW (lpFileName="C:\\Boot\\ru-RU\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0207.042] MoveFileExW (lpExistingFileName="C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\ru-RU\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0207.335] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.615] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0207.976] SetEvent (hEvent=0x1e0) returned 1
	[0207.976] GetFileAttributesW (lpFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui")) returned 0x20
	[0207.976] SetFileAttributesW (lpFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0207.977] MoveFileExW (lpExistingFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0208.158] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.490] GetFileAttributesW (lpFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui")) returned 0x20
	[0208.491] SetFileAttributesW (lpFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0208.491] MoveFileExW (lpExistingFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0208.493] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.732] SetEvent (hEvent=0x1c4) returned 1
	[0208.732] GetFileAttributesW (lpFileName="C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui")) returned 0x20
	[0208.733] SetFileAttributesW (lpFileName="C:\\Boot\\sv-SE\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0208.733] MoveFileExW (lpExistingFileName="C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\sv-SE\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0208.927] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.011] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.181] SetEvent (hEvent=0x1c4) returned 1
	[0209.181] GetFileAttributesW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20
	[0209.182] SetFileAttributesW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0209.182] MoveFileExW (lpExistingFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0209.335] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.282] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.884] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0211.169] SetEvent (hEvent=0x1e0) returned 1
	[0211.169] GetFileAttributesW (lpFileName="C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui")) returned 0x20
	[0211.169] SetFileAttributesW (lpFileName="C:\\Boot\\zh-TW\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0211.169] MoveFileExW (lpExistingFileName="C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\zh-TW\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0211.270] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0211.996] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0212.191] SetEvent (hEvent=0x1c4) returned 1
	[0212.191] VirtualAlloc (lpAddress=0x1155c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1155c000
	[0212.191] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 0x20
	[0212.192] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0212.192] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0212.212] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8
	[0212.224] GetConsoleMode (in: hConsoleHandle=0x1f8, lpMode=0x1136ee08 | out: lpMode=0x1136ee08) returned 0
	[0212.224] VirtualAlloc (lpAddress=0x112fe000, dwSize=0x14000, flAllocationType=0x1000, flProtect=0x4) returned 0x112fe000
	[0212.228] ReadFile (in: hFile=0x1f8, lpBuffer=0x112fe000, nNumberOfBytesToRead=0x131c2, lpNumberOfBytesRead=0x1136ee18, lpOverlapped=0x0 | out: lpBuffer=0x112fe000*, lpNumberOfBytesRead=0x1136ee18*=0x131c2, lpOverlapped=0x0) returned 1
	[0212.269] VirtualAlloc (lpAddress=0x11312000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11312000
	[0212.271] VirtualAlloc (lpAddress=0x11314000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11314000
	[0212.272] VirtualAlloc (lpAddress=0x115ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x115ee000
	[0212.273] VirtualAlloc (lpAddress=0x115f0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x115f0000
	[0212.274] VirtualAlloc (lpAddress=0x115f2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x115f2000
	[0212.275] VirtualAlloc (lpAddress=0x115f4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x115f4000
	[0212.276] VirtualAlloc (lpAddress=0x115f6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x115f6000
	[0212.277] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e4e0 | out: pbBuffer=0x1142e4e0) returned 1
	[0212.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ecb02 | out: pbBuffer=0x110ecb02) returned 1
	[0212.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110ecbcd | out: pbBuffer=0x110ecbcd) returned 1
	[0212.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e510 | out: pbBuffer=0x1142e510) returned 1
	[0212.358] VirtualAlloc (lpAddress=0x11090000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0x11090000
	[0212.365] VirtualAlloc (lpAddress=0x110a2000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0x110a2000
	[0212.370] VirtualAlloc (lpAddress=0x110b0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110b0000
	[0212.371] VirtualAlloc (lpAddress=0x110b2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110b2000
	[0212.372] VirtualAlloc (lpAddress=0x110b4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x110b4000
	[0212.373] VirtualAlloc (lpAddress=0x110b8000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x110b8000
	[0212.375] VirtualAlloc (lpAddress=0x1124a000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x1124a000
	[0212.378] VirtualAlloc (lpAddress=0x1125a000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x1125a000
	[0212.384] GetFileType (hFile=0x1f8) returned 0x1
	[0212.384] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0212.384] WriteFile (in: hFile=0x1f8, lpBuffer=0x1125a000*, nNumberOfBytesToWrite=0x131c2, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x1125a000*, lpNumberOfBytesWritten=0x112f5dfc*=0x131c2, lpOverlapped=0x112f5e08) returned 1
	[0212.535] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0212.706] GetFileType (hFile=0x1f8) returned 0x1
	[0212.707] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x131c2, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0212.707] GetFileType (hFile=0x1f8) returned 0x1
	[0212.707] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0212.707] WriteFile (in: hFile=0x1f8, lpBuffer=0x111b0e00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x111b0e00*, lpNumberOfBytesWritten=0x112f5dfc*=0x236, lpOverlapped=0x112f5e08) returned 1
	[0212.715] GetFileType (hFile=0x1f8) returned 0x1
	[0212.716] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x131c2, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0212.716] CloseHandle (hObject=0x1f8) returned 1
	[0213.021] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0213.068] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 0x20
	[0213.068] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0213.069] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.tl30z"), dwFlags=0x1) returned 1
	[0221.212] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254
	[0221.620] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0221.620] ReadFile (in: hFile=0x254, lpBuffer=0x111a7000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x111a7000*, lpNumberOfBytesRead=0x1128ae18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0221.677] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364270 | out: pbBuffer=0x11364270) returned 1
	[0221.677] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11364268 | out: pbBuffer=0x11364268) returned 1
	[0221.677] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1158d302 | out: pbBuffer=0x1158d302) returned 1
	[0221.677] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1158d39a | out: pbBuffer=0x1158d39a) returned 1
	[0221.678] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1158d3b9 | out: pbBuffer=0x1158d3b9) returned 1
	[0221.678] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113642a0 | out: pbBuffer=0x113642a0) returned 1
	[0221.680] GetFileType (hFile=0x254) returned 0x1
	[0221.680] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0221.680] WriteFile (in: hFile=0x254, lpBuffer=0x115ec000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x115ec000*, lpNumberOfBytesWritten=0x1102ddfc*=0x6ccc, lpOverlapped=0x1102de08) returned 1
	[0221.682] GetFileType (hFile=0x254) returned 0x1
	[0221.682] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0221.682] GetFileType (hFile=0x254) returned 0x1
	[0221.682] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0221.682] WriteFile (in: hFile=0x254, lpBuffer=0x11577880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11577880*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0221.683] GetFileType (hFile=0x254) returned 0x1
	[0221.683] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0221.683] CloseHandle (hObject=0x254) returned 1
	[0221.941] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.tl30z")) returned 0x20
	[0221.941] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0222.107] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.225] SetEvent (hEvent=0x1e8) returned 1
	[0242.225] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0x20
	[0242.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", dwFileAttributes=0x20) returned 1
	[0242.234] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.tl30z"), dwFlags=0x1) returned 1
	[0244.826] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0244.833] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x113afe08 | out: lpMode=0x113afe08) returned 0
	[0244.833] ReadFile (in: hFile=0x1d8, lpBuffer=0x113e8000, nNumberOfBytesToRead=0xdae0, lpNumberOfBytesRead=0x113afe18, lpOverlapped=0x0 | out: lpBuffer=0x113e8000*, lpNumberOfBytesRead=0x113afe18*=0xdae0, lpOverlapped=0x0) returned 1
	[0244.871] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0244.871] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113f6802 | out: pbBuffer=0x113f6802) returned 1
	[0244.871] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113f68ba | out: pbBuffer=0x113f68ba) returned 1
	[0244.872] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113f68c0 | out: pbBuffer=0x113f68c0) returned 1
	[0244.872] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0244.873] GetFileType (hFile=0x1d8) returned 0x1
	[0244.873] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.874] WriteFile (in: hFile=0x1d8, lpBuffer=0x11270000*, nNumberOfBytesToWrite=0xdae0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11270000*, lpNumberOfBytesWritten=0x11031dfc*=0xdae0, lpOverlapped=0x11031e08) returned 1
	[0244.874] GetFileType (hFile=0x1d8) returned 0x1
	[0244.874] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xdae0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.874] GetFileType (hFile=0x1d8) returned 0x1
	[0244.874] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.874] WriteFile (in: hFile=0x1d8, lpBuffer=0x11408a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11408a80*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0244.912] GetFileType (hFile=0x1d8) returned 0x1
	[0244.912] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xdae0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.912] CloseHandle (hObject=0x1d8) returned 1
	[0244.957] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.336] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.559] SetEvent (hEvent=0x218) returned 1
	[0245.559] SetEvent (hEvent=0x210) returned 1
	[0245.559] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.818] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.909] SetEvent (hEvent=0x134) returned 1
	[0245.909] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.929] SetEvent (hEvent=0x218) returned 1
	[0245.929] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0245.934] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.934] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0245.943] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.943] SetEvent (hEvent=0x248) returned 1
	[0245.943] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0246.009] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 0x20
	[0246.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties", dwFileAttributes=0x20) returned 1
	[0246.010] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.tl30z"), dwFlags=0x1) returned 1
	[0246.011] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0246.011] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x112f3e08 | out: lpMode=0x112f3e08) returned 0
	[0246.012] ReadFile (in: hFile=0x1fc, lpBuffer=0x110b4000, nNumberOfBytesToRead=0x368a, lpNumberOfBytesRead=0x112f3e18, lpOverlapped=0x0 | out: lpBuffer=0x110b4000*, lpNumberOfBytesRead=0x112f3e18*=0x368a, lpOverlapped=0x0) returned 1
	[0246.040] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0246.045] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.045] SetEvent (hEvent=0x150) returned 1
	[0246.045] SetEvent (hEvent=0x26c) returned 1
	[0246.045] SetEvent (hEvent=0x134) returned 1
	[0246.045] VirtualAlloc (lpAddress=0x11fc2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x11fc2000
	[0246.048] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0246.048] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0246.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ea802 | out: pbBuffer=0x113ea802) returned 1
	[0246.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113ea893 | out: pbBuffer=0x113ea893) returned 1
	[0246.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0246.049] GetFileType (hFile=0x1fc) returned 0x1
	[0246.050] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0246.050] WriteFile (in: hFile=0x1fc, lpBuffer=0x11418000*, nNumberOfBytesToWrite=0x368a, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11418000*, lpNumberOfBytesWritten=0x112f3dfc*=0x368a, lpOverlapped=0x112f3e08) returned 1
	[0246.050] GetFileType (hFile=0x1fc) returned 0x1
	[0246.050] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x368a, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0246.050] GetFileType (hFile=0x1fc) returned 0x1
	[0246.051] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0246.051] WriteFile (in: hFile=0x1fc, lpBuffer=0x11390a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11390a80*, lpNumberOfBytesWritten=0x112f3dfc*=0x22d, lpOverlapped=0x112f3e08) returned 1
	[0246.051] GetFileType (hFile=0x1fc) returned 0x1
	[0246.051] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x368a, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0246.051] CloseHandle (hObject=0x1fc) returned 1
	[0246.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.tl30z")) returned 0x20
	[0246.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0246.054] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0246.134] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.135] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0246.156] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.156] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0246.471] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.471] SetEvent (hEvent=0x150) returned 1
	[0246.471] SetEvent (hEvent=0x26c) returned 1
	[0246.471] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0246.536] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20
	[0246.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x20) returned 1
	[0246.538] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.tl30z"), dwFlags=0x1) returned 1
	[0247.886] SetEvent (hEvent=0x150) returned 1
	[0247.887] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0247.982] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x112f3e08 | out: lpMode=0x112f3e08) returned 0
	[0247.982] ReadFile (in: hFile=0x224, lpBuffer=0x113ce3c0, nNumberOfBytesToRead=0x99, lpNumberOfBytesRead=0x112f3e18, lpOverlapped=0x0 | out: lpBuffer=0x113ce3c0*, lpNumberOfBytesRead=0x112f3e18*=0x99, lpOverlapped=0x0) returned 1
	[0247.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0247.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137c802 | out: pbBuffer=0x1137c802) returned 1
	[0247.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137c834 | out: pbBuffer=0x1137c834) returned 1
	[0247.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137c88d | out: pbBuffer=0x1137c88d) returned 1
	[0247.987] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0247.987] GetFileType (hFile=0x224) returned 0x1
	[0247.987] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0247.987] WriteFile (in: hFile=0x224, lpBuffer=0x11384600*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11384600*, lpNumberOfBytesWritten=0x112f3dfc*=0x99, lpOverlapped=0x112f3e08) returned 1
	[0247.987] GetFileType (hFile=0x224) returned 0x1
	[0247.988] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x99, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0247.988] GetFileType (hFile=0x224) returned 0x1
	[0247.988] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0247.988] WriteFile (in: hFile=0x224, lpBuffer=0x1134ee00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1134ee00*, lpNumberOfBytesWritten=0x112f3dfc*=0x224, lpOverlapped=0x112f3e08) returned 1
	[0247.989] GetFileType (hFile=0x224) returned 0x1
	[0247.989] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x99, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0247.989] CloseHandle (hObject=0x224) returned 1
	[0248.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.tl30z")) returned 0x20
	[0248.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.tl30z", dwFileAttributes=0x21) returned 1
	[0248.164] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0253.898] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0253.965] SetEvent (hEvent=0x124) returned 1
	[0253.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0253.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0253.966] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0254.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0254.950] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0254.950] ReadFile (in: hFile=0x288, lpBuffer=0x11292000, nNumberOfBytesToRead=0x12a30, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11292000*, lpNumberOfBytesRead=0x1128be18*=0x12a30, lpOverlapped=0x0) returned 1
	[0254.959] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0254.959] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4d8 | out: pbBuffer=0x1104e4d8) returned 1
	[0254.959] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e1d02 | out: pbBuffer=0x113e1d02) returned 1
	[0254.960] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e1da1 | out: pbBuffer=0x113e1da1) returned 1
	[0254.960] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e1dbc | out: pbBuffer=0x113e1dbc) returned 1
	[0254.960] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e510 | out: pbBuffer=0x1104e510) returned 1
	[0254.962] GetFileType (hFile=0x288) returned 0x1
	[0254.962] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.962] WriteFile (in: hFile=0x288, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x12a30, lpNumberOfBytesWritten=0x110afdfc, lpOverlapped=0x110afe08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x110afdfc*=0x12a30, lpOverlapped=0x110afe08) returned 1
	[0254.963] GetFileType (hFile=0x288) returned 0x1
	[0254.963] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x12a30, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.963] GetFileType (hFile=0x288) returned 0x1
	[0254.963] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.963] WriteFile (in: hFile=0x288, lpBuffer=0x11312700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x110afdfc, lpOverlapped=0x110afe08 | out: lpBuffer=0x11312700*, lpNumberOfBytesWritten=0x110afdfc*=0x233, lpOverlapped=0x110afe08) returned 1
	[0254.967] GetFileType (hFile=0x288) returned 0x1
	[0254.967] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x12a30, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.967] CloseHandle (hObject=0x288) returned 1
	[0254.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0254.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0254.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0254.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0254.980] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0255.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0255.474] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0255.475] ReadFile (in: hFile=0x224, lpBuffer=0x11226000, nNumberOfBytesToRead=0xa8a8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11226000*, lpNumberOfBytesRead=0x11287e18*=0xa8a8, lpOverlapped=0x0) returned 1
	[0255.484] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104ea90 | out: pbBuffer=0x1104ea90) returned 1
	[0255.484] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123a502 | out: pbBuffer=0x1123a502) returned 1
	[0255.484] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104eac0 | out: pbBuffer=0x1104eac0) returned 1
	[0255.485] GetFileType (hFile=0x224) returned 0x1
	[0255.486] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.486] WriteFile (in: hFile=0x224, lpBuffer=0x1126c000*, nNumberOfBytesToWrite=0xa8a8, lpNumberOfBytesWritten=0x11f6bdfc, lpOverlapped=0x11f6be08 | out: lpBuffer=0x1126c000*, lpNumberOfBytesWritten=0x11f6bdfc*=0xa8a8, lpOverlapped=0x11f6be08) returned 1
	[0255.486] GetFileType (hFile=0x224) returned 0x1
	[0255.487] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa8a8, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.487] GetFileType (hFile=0x224) returned 0x1
	[0255.487] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.487] WriteFile (in: hFile=0x224, lpBuffer=0x110f2000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11f6bdfc, lpOverlapped=0x11f6be08 | out: lpBuffer=0x110f2000*, lpNumberOfBytesWritten=0x11f6bdfc*=0x22d, lpOverlapped=0x11f6be08) returned 1
	[0255.492] GetFileType (hFile=0x224) returned 0x1
	[0255.492] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa8a8, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.492] CloseHandle (hObject=0x224) returned 1
	[0255.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0255.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0255.669] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0255.727] SetEvent (hEvent=0x218) returned 1
	[0255.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0255.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0255.728] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0256.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0256.203] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0256.203] ReadFile (in: hFile=0x288, lpBuffer=0x113f6000, nNumberOfBytesToRead=0xd162, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x113f6000*, lpNumberOfBytesRead=0x11287e18*=0xd162, lpOverlapped=0x0) returned 1
	[0256.212] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0256.212] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332508 | out: pbBuffer=0x11332508) returned 1
	[0256.212] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107bd02 | out: pbBuffer=0x1107bd02) returned 1
	[0256.213] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332540 | out: pbBuffer=0x11332540) returned 1
	[0256.214] GetFileType (hFile=0x288) returned 0x1
	[0256.214] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.214] WriteFile (in: hFile=0x288, lpBuffer=0x1111c000*, nNumberOfBytesToWrite=0xd162, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1111c000*, lpNumberOfBytesWritten=0x1102bdfc*=0xd162, lpOverlapped=0x1102be08) returned 1
	[0256.215] GetFileType (hFile=0x288) returned 0x1
	[0256.215] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xd162, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.215] GetFileType (hFile=0x288) returned 0x1
	[0256.215] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.216] WriteFile (in: hFile=0x288, lpBuffer=0x113b0a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113b0a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0256.222] GetFileType (hFile=0x288) returned 0x1
	[0256.223] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xd162, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.223] CloseHandle (hObject=0x288) returned 1
	[0256.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0256.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0256.236] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0256.244] SetEvent (hEvent=0x26c) returned 1
	[0256.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0256.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0256.245] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0256.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0256.859] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0256.859] ReadFile (in: hFile=0x1d8, lpBuffer=0x112a6000, nNumberOfBytesToRead=0x2400, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x112a6000*, lpNumberOfBytesRead=0x11287e18*=0x2400, lpOverlapped=0x0) returned 1
	[0256.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0256.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4b8 | out: pbBuffer=0x1104e4b8) returned 1
	[0256.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11f93c02 | out: pbBuffer=0x11f93c02) returned 1
	[0256.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11f93c4f | out: pbBuffer=0x11f93c4f) returned 1
	[0256.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0256.871] GetFileType (hFile=0x1d8) returned 0x1
	[0256.871] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.871] WriteFile (in: hFile=0x1d8, lpBuffer=0x11fa6000*, nNumberOfBytesToWrite=0x2400, lpNumberOfBytesWritten=0x11f69dfc, lpOverlapped=0x11f69e08 | out: lpBuffer=0x11fa6000*, lpNumberOfBytesWritten=0x11f69dfc*=0x2400, lpOverlapped=0x11f69e08) returned 1
	[0256.872] GetFileType (hFile=0x1d8) returned 0x1
	[0256.872] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2400, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.872] GetFileType (hFile=0x1d8) returned 0x1
	[0256.872] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.872] WriteFile (in: hFile=0x1d8, lpBuffer=0x112c2700*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x11f69dfc, lpOverlapped=0x11f69e08 | out: lpBuffer=0x112c2700*, lpNumberOfBytesWritten=0x11f69dfc*=0x21e, lpOverlapped=0x11f69e08) returned 1
	[0256.872] GetFileType (hFile=0x1d8) returned 0x1
	[0256.873] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2400, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.873] CloseHandle (hObject=0x1d8) returned 1
	[0256.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0256.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0256.888] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0256.896] SetEvent (hEvent=0x234) returned 1
	[0256.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0256.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0256.897] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0257.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0257.469] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0257.469] ReadFile (in: hFile=0x1fc, lpBuffer=0x110c0f00, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110c0f00*, lpNumberOfBytesRead=0x11287e18*=0x4ed, lpOverlapped=0x0) returned 1
	[0257.477] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332dc0 | out: pbBuffer=0x11332dc0) returned 1
	[0257.477] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11181c02 | out: pbBuffer=0x11181c02) returned 1
	[0257.478] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11181ce4 | out: pbBuffer=0x11181ce4) returned 1
	[0257.478] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332df0 | out: pbBuffer=0x11332df0) returned 1
	[0257.478] GetFileType (hFile=0x1fc) returned 0x1
	[0257.478] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.479] WriteFile (in: hFile=0x1fc, lpBuffer=0x111b9000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x11fb3dfc, lpOverlapped=0x11fb3e08 | out: lpBuffer=0x111b9000*, lpNumberOfBytesWritten=0x11fb3dfc*=0x4ed, lpOverlapped=0x11fb3e08) returned 1
	[0257.479] GetFileType (hFile=0x1fc) returned 0x1
	[0257.479] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.479] GetFileType (hFile=0x1fc) returned 0x1
	[0257.479] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.479] WriteFile (in: hFile=0x1fc, lpBuffer=0x111c4000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11fb3dfc, lpOverlapped=0x11fb3e08 | out: lpBuffer=0x111c4000*, lpNumberOfBytesWritten=0x11fb3dfc*=0x22d, lpOverlapped=0x11fb3e08) returned 1
	[0257.480] GetFileType (hFile=0x1fc) returned 0x1
	[0257.480] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.480] CloseHandle (hObject=0x1fc) returned 1
	[0257.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0257.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0257.494] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0257.502] SetEvent (hEvent=0x234) returned 1
	[0257.502] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0257.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0257.503] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0257.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0257.938] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0257.938] ReadFile (in: hFile=0x1fc, lpBuffer=0x11396000, nNumberOfBytesToRead=0xce3b, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x11287e18*=0xce3b, lpOverlapped=0x0) returned 1
	[0257.953] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0257.953] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11181202 | out: pbBuffer=0x11181202) returned 1
	[0257.953] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118122c | out: pbBuffer=0x1118122c) returned 1
	[0257.953] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118126a | out: pbBuffer=0x1118126a) returned 1
	[0257.953] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111812be | out: pbBuffer=0x111812be) returned 1
	[0257.954] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0257.956] GetFileType (hFile=0x1fc) returned 0x1
	[0257.956] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.956] WriteFile (in: hFile=0x1fc, lpBuffer=0x111e0000*, nNumberOfBytesToWrite=0xce3b, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111e0000*, lpNumberOfBytesWritten=0x11031dfc*=0xce3b, lpOverlapped=0x11031e08) returned 1
	[0257.957] GetFileType (hFile=0x1fc) returned 0x1
	[0257.957] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xce3b, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.958] GetFileType (hFile=0x1fc) returned 0x1
	[0257.958] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.958] WriteFile (in: hFile=0x1fc, lpBuffer=0x111b6380*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111b6380*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0257.962] GetFileType (hFile=0x1fc) returned 0x1
	[0257.962] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xce3b, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.962] CloseHandle (hObject=0x1fc) returned 1
	[0257.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0257.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0257.983] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0257.991] SetEvent (hEvent=0x210) returned 1
	[0257.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 0x220
	[0257.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", dwFileAttributes=0x220) returned 1
	[0257.992] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.tl30z"), dwFlags=0x1) returned 1
	[0258.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0258.779] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0258.779] ReadFile (in: hFile=0x1d8, lpBuffer=0x113b6180, nNumberOfBytesToRead=0x175, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x113b6180*, lpNumberOfBytesRead=0x11287e18*=0x175, lpOverlapped=0x0) returned 1
	[0258.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0258.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6268 | out: pbBuffer=0x113e6268) returned 1
	[0258.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c7202 | out: pbBuffer=0x110c7202) returned 1
	[0258.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c7271 | out: pbBuffer=0x110c7271) returned 1
	[0258.783] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0258.783] GetFileType (hFile=0x1d8) returned 0x1
	[0258.783] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113d3de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.783] WriteFile (in: hFile=0x1d8, lpBuffer=0x11101200*, nNumberOfBytesToWrite=0x175, lpNumberOfBytesWritten=0x113d3dfc, lpOverlapped=0x113d3e08 | out: lpBuffer=0x11101200*, lpNumberOfBytesWritten=0x113d3dfc*=0x175, lpOverlapped=0x113d3e08) returned 1
	[0258.783] GetFileType (hFile=0x1d8) returned 0x1
	[0258.784] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x175, lpNewFilePointer=0x0, dwMoveMethod=0x113d3de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.784] GetFileType (hFile=0x1d8) returned 0x1
	[0258.784] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113d3de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.784] WriteFile (in: hFile=0x1d8, lpBuffer=0x1110b880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113d3dfc, lpOverlapped=0x113d3e08 | out: lpBuffer=0x1110b880*, lpNumberOfBytesWritten=0x113d3dfc*=0x22a, lpOverlapped=0x113d3e08) returned 1
	[0258.820] GetFileType (hFile=0x1d8) returned 0x1
	[0258.820] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x175, lpNewFilePointer=0x0, dwMoveMethod=0x113d3de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.820] CloseHandle (hObject=0x1d8) returned 1
	[0258.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.tl30z")) returned 0x220
	[0258.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0258.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 0x220
	[0258.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x220) returned 1
	[0258.822] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.tl30z"), dwFlags=0x1) returned 1
	[0258.958] SetEvent (hEvent=0x150) returned 1
	[0258.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0258.967] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0258.967] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x0
	[0258.986] SetEvent (hEvent=0x150) returned 1
	[0258.986] SetEvent (hEvent=0x218) returned 1
	[0258.986] SetEvent (hEvent=0x26c) returned 1
	[0258.986] ReadFile (in: hFile=0x1d8, lpBuffer=0x1129c000, nNumberOfBytesToRead=0x2340, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1129c000*, lpNumberOfBytesRead=0x11428e18*=0x2340, lpOverlapped=0x0) returned 1
	[0259.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296100 | out: pbBuffer=0x11296100) returned 1
	[0259.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c6802 | out: pbBuffer=0x112c6802) returned 1
	[0259.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c68a8 | out: pbBuffer=0x112c68a8) returned 1
	[0259.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296130 | out: pbBuffer=0x11296130) returned 1
	[0259.063] GetFileType (hFile=0x1d8) returned 0x1
	[0259.063] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.063] WriteFile (in: hFile=0x1d8, lpBuffer=0x11c14000*, nNumberOfBytesToWrite=0x2340, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11c14000*, lpNumberOfBytesWritten=0x112bddfc*=0x2340, lpOverlapped=0x112bde08) returned 1
	[0259.064] GetFileType (hFile=0x1d8) returned 0x1
	[0259.064] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2340, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.064] GetFileType (hFile=0x1d8) returned 0x1
	[0259.064] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.065] WriteFile (in: hFile=0x1d8, lpBuffer=0x11beea80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11beea80*, lpNumberOfBytesWritten=0x112bddfc*=0x224, lpOverlapped=0x112bde08) returned 1
	[0259.065] GetFileType (hFile=0x1d8) returned 0x1
	[0259.065] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2340, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.065] CloseHandle (hObject=0x1d8) returned 1
	[0259.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.tl30z")) returned 0x220
	[0259.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0259.117] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0261.026] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0261.035] SetEvent (hEvent=0x118) returned 1
	[0261.035] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0261.043] SetEvent (hEvent=0x118) returned 1
	[0261.043] SetEvent (hEvent=0x248) returned 1
	[0261.043] SwitchToThread () returned 1
	[0261.046] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0261.131] SetEvent (hEvent=0x248) returned 1
	[0261.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 0x220
	[0261.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", dwFileAttributes=0x220) returned 1
	[0261.132] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.tl30z"), dwFlags=0x1) returned 1
	[0261.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0261.366] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0261.367] ReadFile (in: hFile=0x1d8, lpBuffer=0x1139a000, nNumberOfBytesToRead=0x1d9f, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1139a000*, lpNumberOfBytesRead=0x11287e18*=0x1d9f, lpOverlapped=0x0) returned 1
	[0261.376] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0261.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ee802 | out: pbBuffer=0x113ee802) returned 1
	[0261.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113ee8b1 | out: pbBuffer=0x113ee8b1) returned 1
	[0261.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113ee8d0 | out: pbBuffer=0x113ee8d0) returned 1
	[0261.378] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0261.378] GetFileType (hFile=0x1d8) returned 0x1
	[0261.378] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.378] WriteFile (in: hFile=0x1d8, lpBuffer=0x11328000*, nNumberOfBytesToWrite=0x1d9f, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11328000*, lpNumberOfBytesWritten=0x112bddfc*=0x1d9f, lpOverlapped=0x112bde08) returned 1
	[0261.379] GetFileType (hFile=0x1d8) returned 0x1
	[0261.379] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1d9f, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.379] GetFileType (hFile=0x1d8) returned 0x1
	[0261.379] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.379] WriteFile (in: hFile=0x1d8, lpBuffer=0x112d6a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x112d6a80*, lpNumberOfBytesWritten=0x112bddfc*=0x236, lpOverlapped=0x112bde08) returned 1
	[0261.380] GetFileType (hFile=0x1d8) returned 0x1
	[0261.380] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1d9f, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.380] CloseHandle (hObject=0x1d8) returned 1
	[0261.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.tl30z")) returned 0x220
	[0261.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0261.465] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0261.492] SetEvent (hEvent=0x248) returned 1
	[0261.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 0x220
	[0261.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", dwFileAttributes=0x220) returned 1
	[0261.493] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.tl30z"), dwFlags=0x1) returned 1
	[0261.729] SetEvent (hEvent=0x150) returned 1
	[0261.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0261.737] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0261.737] ReadFile (in: hFile=0x288, lpBuffer=0x111aa000, nNumberOfBytesToRead=0x14ff, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x111aa000*, lpNumberOfBytesRead=0x11428e18*=0x14ff, lpOverlapped=0x0) returned 1
	[0261.741] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0261.741] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e638 | out: pbBuffer=0x1104e638) returned 1
	[0261.741] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b0802 | out: pbBuffer=0x111b0802) returned 1
	[0261.741] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b089d | out: pbBuffer=0x111b089d) returned 1
	[0261.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b089d | out: pbBuffer=0x111b089d) returned 1
	[0261.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0261.742] GetFileType (hFile=0x288) returned 0x1
	[0261.743] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.743] WriteFile (in: hFile=0x288, lpBuffer=0x110d4000*, nNumberOfBytesToWrite=0x14ff, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110d4000*, lpNumberOfBytesWritten=0x1102bdfc*=0x14ff, lpOverlapped=0x1102be08) returned 1
	[0261.743] GetFileType (hFile=0x288) returned 0x1
	[0261.743] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x14ff, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.743] GetFileType (hFile=0x288) returned 0x1
	[0261.744] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.744] WriteFile (in: hFile=0x288, lpBuffer=0x1136b880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1136b880*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0261.744] GetFileType (hFile=0x288) returned 0x1
	[0261.744] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x14ff, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.744] CloseHandle (hObject=0x288) returned 1
	[0261.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.tl30z")) returned 0x220
	[0261.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0261.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 0x220
	[0261.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", dwFileAttributes=0x220) returned 1
	[0261.804] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.tl30z"), dwFlags=0x1) returned 1
	[0262.226] SetEvent (hEvent=0x150) returned 1
	[0262.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0262.234] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0262.234] ReadFile (in: hFile=0x288, lpBuffer=0x110ba000, nNumberOfBytesToRead=0xf7e, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110ba000*, lpNumberOfBytesRead=0x1128ce18*=0xf7e, lpOverlapped=0x0) returned 1
	[0262.244] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0262.244] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0262.244] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c8802 | out: pbBuffer=0x110c8802) returned 1
	[0262.244] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0262.245] GetFileType (hFile=0x288) returned 0x1
	[0262.245] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11225de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.245] WriteFile (in: hFile=0x288, lpBuffer=0x1125c000*, nNumberOfBytesToWrite=0xf7e, lpNumberOfBytesWritten=0x11225dfc, lpOverlapped=0x11225e08 | out: lpBuffer=0x1125c000*, lpNumberOfBytesWritten=0x11225dfc*=0xf7e, lpOverlapped=0x11225e08) returned 1
	[0262.245] GetFileType (hFile=0x288) returned 0x1
	[0262.245] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xf7e, lpNewFilePointer=0x0, dwMoveMethod=0x11225de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.246] GetFileType (hFile=0x288) returned 0x1
	[0262.246] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11225de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.246] WriteFile (in: hFile=0x288, lpBuffer=0x1123aa80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11225dfc, lpOverlapped=0x11225e08 | out: lpBuffer=0x1123aa80*, lpNumberOfBytesWritten=0x11225dfc*=0x236, lpOverlapped=0x11225e08) returned 1
	[0262.246] GetFileType (hFile=0x288) returned 0x1
	[0262.246] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xf7e, lpNewFilePointer=0x0, dwMoveMethod=0x11225de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.246] CloseHandle (hObject=0x288) returned 1
	[0262.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.tl30z")) returned 0x220
	[0262.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0262.281] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0262.317] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0262.428] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0262.443] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0262.541] SetEvent (hEvent=0x210) returned 1
	[0262.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 0x220
	[0262.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", dwFileAttributes=0x220) returned 1
	[0262.542] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0262.853] SetEvent (hEvent=0x150) returned 1
	[0262.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0262.966] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0262.966] ReadFile (in: hFile=0x1d4, lpBuffer=0x110fa000, nNumberOfBytesToRead=0x2a50, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110fa000*, lpNumberOfBytesRead=0x11316e18*=0x2a50, lpOverlapped=0x0) returned 1
	[0262.976] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0262.976] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0262.976] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1110c802 | out: pbBuffer=0x1110c802) returned 1
	[0262.977] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1110c824 | out: pbBuffer=0x1110c824) returned 1
	[0262.977] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1110c8b3 | out: pbBuffer=0x1110c8b3) returned 1
	[0262.977] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0262.977] GetFileType (hFile=0x1d4) returned 0x1
	[0262.978] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0262.978] WriteFile (in: hFile=0x1d4, lpBuffer=0x11292000*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11292000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2a50, lpOverlapped=0x1102be08) returned 1
	[0262.978] GetFileType (hFile=0x1d4) returned 0x1
	[0262.978] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2a50, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0262.978] GetFileType (hFile=0x1d4) returned 0x1
	[0262.978] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0262.979] WriteFile (in: hFile=0x1d4, lpBuffer=0x11102a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11102a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0262.979] GetFileType (hFile=0x1d4) returned 0x1
	[0262.980] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2a50, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0262.980] CloseHandle (hObject=0x1d4) returned 1
	[0263.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.tl30z")) returned 0x220
	[0263.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0263.050] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0263.059] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0263.178] SetEvent (hEvent=0x26c) returned 1
	[0263.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 0x220
	[0263.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", dwFileAttributes=0x220) returned 1
	[0263.179] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0263.536] SetEvent (hEvent=0x150) returned 1
	[0263.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0263.541] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0263.541] ReadFile (in: hFile=0x288, lpBuffer=0x11258000, nNumberOfBytesToRead=0x1f20, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11258000*, lpNumberOfBytesRead=0x11316e18*=0x1f20, lpOverlapped=0x0) returned 1
	[0263.547] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0263.548] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1110dc02 | out: pbBuffer=0x1110dc02) returned 1
	[0263.548] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1110dcd2 | out: pbBuffer=0x1110dcd2) returned 1
	[0263.548] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0263.549] GetFileType (hFile=0x288) returned 0x1
	[0263.549] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.549] WriteFile (in: hFile=0x288, lpBuffer=0x112d6000*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112d6000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1f20, lpOverlapped=0x1102be08) returned 1
	[0263.549] GetFileType (hFile=0x288) returned 0x1
	[0263.549] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1f20, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.549] GetFileType (hFile=0x288) returned 0x1
	[0263.550] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.550] WriteFile (in: hFile=0x288, lpBuffer=0x112dc000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112dc000*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0263.550] GetFileType (hFile=0x288) returned 0x1
	[0263.550] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1f20, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.550] CloseHandle (hObject=0x288) returned 1
	[0263.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.tl30z")) returned 0x220
	[0263.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0263.642] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0263.649] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0263.677] SetEvent (hEvent=0x218) returned 1
	[0263.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 0x220
	[0263.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", dwFileAttributes=0x220) returned 1
	[0263.678] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0264.017] SetEvent (hEvent=0x150) returned 1
	[0264.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0264.023] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0264.023] ReadFile (in: hFile=0x224, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x16cc, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11316e18*=0x16cc, lpOverlapped=0x0) returned 1
	[0264.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0264.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b4602 | out: pbBuffer=0x113b4602) returned 1
	[0264.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b4631 | out: pbBuffer=0x113b4631) returned 1
	[0264.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5d0 | out: pbBuffer=0x1140f5d0) returned 1
	[0264.031] GetFileType (hFile=0x224) returned 0x1
	[0264.031] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.031] WriteFile (in: hFile=0x224, lpBuffer=0x113ca000*, nNumberOfBytesToWrite=0x16cc, lpNumberOfBytesWritten=0x1110bdfc, lpOverlapped=0x1110be08 | out: lpBuffer=0x113ca000*, lpNumberOfBytesWritten=0x1110bdfc*=0x16cc, lpOverlapped=0x1110be08) returned 1
	[0264.032] GetFileType (hFile=0x224) returned 0x1
	[0264.032] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x16cc, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.032] GetFileType (hFile=0x224) returned 0x1
	[0264.032] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.032] WriteFile (in: hFile=0x224, lpBuffer=0x11257c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1110bdfc, lpOverlapped=0x1110be08 | out: lpBuffer=0x11257c00*, lpNumberOfBytesWritten=0x1110bdfc*=0x22d, lpOverlapped=0x1110be08) returned 1
	[0264.032] GetFileType (hFile=0x224) returned 0x1
	[0264.032] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x16cc, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.033] CloseHandle (hObject=0x224) returned 1
	[0264.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.tl30z")) returned 0x220
	[0264.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0264.217] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0264.247] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0264.349] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0264.362] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0264.389] SetEvent (hEvent=0x248) returned 1
	[0264.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 0x220
	[0264.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", dwFileAttributes=0x220) returned 1
	[0264.390] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0264.795] SetEvent (hEvent=0x150) returned 1
	[0264.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0264.799] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0264.800] ReadFile (in: hFile=0x288, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x2418, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x11423e18*=0x2418, lpOverlapped=0x0) returned 1
	[0264.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0264.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134e802 | out: pbBuffer=0x1134e802) returned 1
	[0264.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134e8c9 | out: pbBuffer=0x1134e8c9) returned 1
	[0264.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0264.807] GetFileType (hFile=0x288) returned 0x1
	[0264.807] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0264.807] WriteFile (in: hFile=0x288, lpBuffer=0x112e2000*, nNumberOfBytesToWrite=0x2418, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112e2000*, lpNumberOfBytesWritten=0x11031dfc*=0x2418, lpOverlapped=0x11031e08) returned 1
	[0264.808] GetFileType (hFile=0x288) returned 0x1
	[0264.808] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x2418, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0264.808] GetFileType (hFile=0x288) returned 0x1
	[0264.808] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0264.808] WriteFile (in: hFile=0x288, lpBuffer=0x1136ea80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1136ea80*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0264.808] GetFileType (hFile=0x288) returned 0x1
	[0264.808] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x2418, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0264.809] CloseHandle (hObject=0x288) returned 1
	[0264.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.tl30z")) returned 0x220
	[0264.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0264.905] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0264.929] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0264.971] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0265.005] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0265.100] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0265.348] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0265.462] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0265.818] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0265.867] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0265.907] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.004] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.053] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.111] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.207] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.242] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.324] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.365] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.399] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.585] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.690] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.806] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.829] SetEvent (hEvent=0x118) returned 1
	[0266.830] SetEvent (hEvent=0x1f0) returned 1
	[0266.830] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0266.839] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.839] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0266.844] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.845] SetEvent (hEvent=0x218) returned 1
	[0266.845] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0266.849] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.849] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0267.892] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0267.895] SetEvent (hEvent=0x26c) returned 1
	[0267.896] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0267.901] SetEvent (hEvent=0x26c) returned 1
	[0267.901] SwitchToThread () returned 1
	[0267.903] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0267.913] SetEvent (hEvent=0x210) returned 1
	[0267.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x220
	[0267.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", dwFileAttributes=0x220) returned 1
	[0267.914] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.090] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0268.090] ReadFile (in: hFile=0x1d4, lpBuffer=0x11440000, nNumberOfBytesToRead=0xbaaa, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11440000*, lpNumberOfBytesRead=0x11288e18*=0xbaaa, lpOverlapped=0x0) returned 1
	[0268.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0268.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137dd02 | out: pbBuffer=0x1137dd02) returned 1
	[0268.099] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0268.101] GetFileType (hFile=0x1d4) returned 0x1
	[0268.101] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.101] WriteFile (in: hFile=0x1d4, lpBuffer=0x113b2000*, nNumberOfBytesToWrite=0xbaaa, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x113b2000*, lpNumberOfBytesWritten=0x1138ddfc*=0xbaaa, lpOverlapped=0x1138de08) returned 1
	[0268.102] GetFileType (hFile=0x1d4) returned 0x1
	[0268.102] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xbaaa, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.102] GetFileType (hFile=0x1d4) returned 0x1
	[0268.102] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.103] WriteFile (in: hFile=0x1d4, lpBuffer=0x112fe700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x112fe700*, lpNumberOfBytesWritten=0x1138ddfc*=0x236, lpOverlapped=0x1138de08) returned 1
	[0268.103] GetFileType (hFile=0x1d4) returned 0x1
	[0268.103] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xbaaa, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.103] CloseHandle (hObject=0x1d4) returned 1
	[0268.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.tl30z")) returned 0x220
	[0268.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.120] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0268.130] SetEvent (hEvent=0x210) returned 1
	[0268.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 0x220
	[0268.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", dwFileAttributes=0x220) returned 1
	[0268.131] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.tl30z"), dwFlags=0x1) returned 1
	[0268.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.312] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0268.312] ReadFile (in: hFile=0x1d4, lpBuffer=0x1120a000, nNumberOfBytesToRead=0x4edd, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1120a000*, lpNumberOfBytesRead=0x11288e18*=0x4edd, lpOverlapped=0x0) returned 1
	[0268.317] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f700 | out: pbBuffer=0x1140f700) returned 1
	[0268.317] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1145b402 | out: pbBuffer=0x1145b402) returned 1
	[0268.317] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1145b42e | out: pbBuffer=0x1145b42e) returned 1
	[0268.317] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f730 | out: pbBuffer=0x1140f730) returned 1
	[0268.318] GetFileType (hFile=0x1d4) returned 0x1
	[0268.318] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.318] WriteFile (in: hFile=0x1d4, lpBuffer=0x11100000*, nNumberOfBytesToWrite=0x4edd, lpNumberOfBytesWritten=0x11391dfc, lpOverlapped=0x11391e08 | out: lpBuffer=0x11100000*, lpNumberOfBytesWritten=0x11391dfc*=0x4edd, lpOverlapped=0x11391e08) returned 1
	[0268.319] GetFileType (hFile=0x1d4) returned 0x1
	[0268.319] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4edd, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.319] GetFileType (hFile=0x1d4) returned 0x1
	[0268.319] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.319] WriteFile (in: hFile=0x1d4, lpBuffer=0x1121e700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11391dfc, lpOverlapped=0x11391e08 | out: lpBuffer=0x1121e700*, lpNumberOfBytesWritten=0x11391dfc*=0x236, lpOverlapped=0x11391e08) returned 1
	[0268.319] GetFileType (hFile=0x1d4) returned 0x1
	[0268.319] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4edd, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.319] CloseHandle (hObject=0x1d4) returned 1
	[0268.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.tl30z")) returned 0x220
	[0268.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.324] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0268.332] SetEvent (hEvent=0x210) returned 1
	[0268.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x220
	[0268.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", dwFileAttributes=0x220) returned 1
	[0268.333] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.497] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0268.497] ReadFile (in: hFile=0x1d4, lpBuffer=0x111ae500, nNumberOfBytesToRead=0x2244, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x111ae500*, lpNumberOfBytesRead=0x11288e18*=0x2244, lpOverlapped=0x0) returned 1
	[0268.508] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0268.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f278 | out: pbBuffer=0x1140f278) returned 1
	[0268.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267202 | out: pbBuffer=0x11267202) returned 1
	[0268.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0268.509] GetFileType (hFile=0x1d4) returned 0x1
	[0268.509] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.510] WriteFile (in: hFile=0x1d4, lpBuffer=0x1105c000*, nNumberOfBytesToWrite=0x2244, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1105c000*, lpNumberOfBytesWritten=0x11031dfc*=0x2244, lpOverlapped=0x11031e08) returned 1
	[0268.510] GetFileType (hFile=0x1d4) returned 0x1
	[0268.510] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2244, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.510] GetFileType (hFile=0x1d4) returned 0x1
	[0268.510] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.510] WriteFile (in: hFile=0x1d4, lpBuffer=0x1121fc00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1121fc00*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0268.511] GetFileType (hFile=0x1d4) returned 0x1
	[0268.511] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2244, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.511] CloseHandle (hObject=0x1d4) returned 1
	[0268.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.tl30z")) returned 0x220
	[0268.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.522] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0268.529] SetEvent (hEvent=0x234) returned 1
	[0268.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x220
	[0268.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", dwFileAttributes=0x220) returned 1
	[0268.530] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.684] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0268.684] ReadFile (in: hFile=0x1d4, lpBuffer=0x1117e000, nNumberOfBytesToRead=0x265a, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1117e000*, lpNumberOfBytesRead=0x11288e18*=0x265a, lpOverlapped=0x0) returned 1
	[0268.689] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6b0 | out: pbBuffer=0x1140f6b0) returned 1
	[0268.689] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f3102 | out: pbBuffer=0x112f3102) returned 1
	[0268.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6e0 | out: pbBuffer=0x1140f6e0) returned 1
	[0268.690] GetFileType (hFile=0x1d4) returned 0x1
	[0268.690] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.690] WriteFile (in: hFile=0x1d4, lpBuffer=0x1122c000*, nNumberOfBytesToWrite=0x265a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1122c000*, lpNumberOfBytesWritten=0x11031dfc*=0x265a, lpOverlapped=0x11031e08) returned 1
	[0268.691] GetFileType (hFile=0x1d4) returned 0x1
	[0268.691] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x265a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.691] GetFileType (hFile=0x1d4) returned 0x1
	[0268.691] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.691] WriteFile (in: hFile=0x1d4, lpBuffer=0x1118e700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1118e700*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0268.691] GetFileType (hFile=0x1d4) returned 0x1
	[0268.691] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x265a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.691] CloseHandle (hObject=0x1d4) returned 1
	[0268.694] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.tl30z")) returned 0x220
	[0268.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.726] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0268.733] SetEvent (hEvent=0x234) returned 1
	[0268.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x220
	[0268.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF", dwFileAttributes=0x220) returned 1
	[0268.734] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.992] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0268.992] ReadFile (in: hFile=0x1d4, lpBuffer=0x112ca000, nNumberOfBytesToRead=0x5b8, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x112ca000*, lpNumberOfBytesRead=0x11288e18*=0x5b8, lpOverlapped=0x0) returned 1
	[0268.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112961e0 | out: pbBuffer=0x112961e0) returned 1
	[0268.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112961d8 | out: pbBuffer=0x112961d8) returned 1
	[0268.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11233d02 | out: pbBuffer=0x11233d02) returned 1
	[0268.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296210 | out: pbBuffer=0x11296210) returned 1
	[0268.999] GetFileType (hFile=0x1d4) returned 0x1
	[0268.999] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.999] WriteFile (in: hFile=0x1d4, lpBuffer=0x110a4000*, nNumberOfBytesToWrite=0x5b8, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x110a4000*, lpNumberOfBytesWritten=0x1138ddfc*=0x5b8, lpOverlapped=0x1138de08) returned 1
	[0269.000] GetFileType (hFile=0x1d4) returned 0x1
	[0269.000] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5b8, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.000] GetFileType (hFile=0x1d4) returned 0x1
	[0269.000] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.000] WriteFile (in: hFile=0x1d4, lpBuffer=0x112a7500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x112a7500*, lpNumberOfBytesWritten=0x1138ddfc*=0x22a, lpOverlapped=0x1138de08) returned 1
	[0269.000] GetFileType (hFile=0x1d4) returned 0x1
	[0269.001] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5b8, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.001] CloseHandle (hObject=0x1d4) returned 1
	[0269.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.tl30z")) returned 0x220
	[0269.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.011] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0269.029] SetEvent (hEvent=0x234) returned 1
	[0269.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x220
	[0269.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", dwFileAttributes=0x220) returned 1
	[0269.030] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0269.191] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0269.191] ReadFile (in: hFile=0x1d4, lpBuffer=0x111d2000, nNumberOfBytesToRead=0x2458, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x111d2000*, lpNumberOfBytesRead=0x11288e18*=0x2458, lpOverlapped=0x0) returned 1
	[0269.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fdf0 | out: pbBuffer=0x1140fdf0) returned 1
	[0269.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140fde8 | out: pbBuffer=0x1140fde8) returned 1
	[0269.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e6602 | out: pbBuffer=0x111e6602) returned 1
	[0269.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e664c | out: pbBuffer=0x111e664c) returned 1
	[0269.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fe20 | out: pbBuffer=0x1140fe20) returned 1
	[0269.198] GetFileType (hFile=0x1d4) returned 0x1
	[0269.198] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.198] WriteFile (in: hFile=0x1d4, lpBuffer=0x111fc000*, nNumberOfBytesToWrite=0x2458, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111fc000*, lpNumberOfBytesWritten=0x11031dfc*=0x2458, lpOverlapped=0x11031e08) returned 1
	[0269.198] GetFileType (hFile=0x1d4) returned 0x1
	[0269.198] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2458, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.199] GetFileType (hFile=0x1d4) returned 0x1
	[0269.199] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.199] WriteFile (in: hFile=0x1d4, lpBuffer=0x11464e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11464e00*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0269.200] GetFileType (hFile=0x1d4) returned 0x1
	[0269.200] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2458, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.200] CloseHandle (hObject=0x1d4) returned 1
	[0269.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.tl30z")) returned 0x220
	[0269.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.210] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0269.219] SetEvent (hEvent=0x234) returned 1
	[0269.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x220
	[0269.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF", dwFileAttributes=0x220) returned 1
	[0269.220] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0269.424] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0269.424] ReadFile (in: hFile=0x1d4, lpBuffer=0x1108a000, nNumberOfBytesToRead=0x6c8, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1108a000*, lpNumberOfBytesRead=0x11288e18*=0x6c8, lpOverlapped=0x0) returned 1
	[0269.431] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0269.431] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e6802 | out: pbBuffer=0x111e6802) returned 1
	[0269.431] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e680a | out: pbBuffer=0x111e680a) returned 1
	[0269.431] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0269.432] GetFileType (hFile=0x1d4) returned 0x1
	[0269.432] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.432] WriteFile (in: hFile=0x1d4, lpBuffer=0x11261000*, nNumberOfBytesToWrite=0x6c8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11261000*, lpNumberOfBytesWritten=0x11031dfc*=0x6c8, lpOverlapped=0x11031e08) returned 1
	[0269.432] GetFileType (hFile=0x1d4) returned 0x1
	[0269.433] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6c8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.433] GetFileType (hFile=0x1d4) returned 0x1
	[0269.433] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.433] WriteFile (in: hFile=0x1d4, lpBuffer=0x11145880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11145880*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0269.433] GetFileType (hFile=0x1d4) returned 0x1
	[0269.433] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6c8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.433] CloseHandle (hObject=0x1d4) returned 1
	[0269.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.tl30z")) returned 0x220
	[0269.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.445] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0269.450] SetEvent (hEvent=0x210) returned 1
	[0269.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x220
	[0269.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", dwFileAttributes=0x220) returned 1
	[0269.450] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.593] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0269.593] ReadFile (in: hFile=0x1d8, lpBuffer=0x110fa000, nNumberOfBytesToRead=0x1498, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x110fa000*, lpNumberOfBytesRead=0x11288e18*=0x1498, lpOverlapped=0x0) returned 1
	[0269.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3e0 | out: pbBuffer=0x1140f3e0) returned 1
	[0269.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11345c02 | out: pbBuffer=0x11345c02) returned 1
	[0269.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0269.597] GetFileType (hFile=0x1d8) returned 0x1
	[0269.598] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.598] WriteFile (in: hFile=0x1d8, lpBuffer=0x11432000*, nNumberOfBytesToWrite=0x1498, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x11432000*, lpNumberOfBytesWritten=0x113afdfc*=0x1498, lpOverlapped=0x113afe08) returned 1
	[0269.598] GetFileType (hFile=0x1d8) returned 0x1
	[0269.598] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1498, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.598] GetFileType (hFile=0x1d8) returned 0x1
	[0269.598] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.598] WriteFile (in: hFile=0x1d8, lpBuffer=0x111b4700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x111b4700*, lpNumberOfBytesWritten=0x113afdfc*=0x227, lpOverlapped=0x113afe08) returned 1
	[0269.598] GetFileType (hFile=0x1d8) returned 0x1
	[0269.598] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1498, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.599] CloseHandle (hObject=0x1d8) returned 1
	[0269.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.tl30z")) returned 0x220
	[0269.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.606] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0269.612] SetEvent (hEvent=0x210) returned 1
	[0269.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x220
	[0269.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", dwFileAttributes=0x220) returned 1
	[0269.612] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.791] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0269.791] ReadFile (in: hFile=0x1d8, lpBuffer=0x11110000, nNumberOfBytesToRead=0x332e, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11110000*, lpNumberOfBytesRead=0x11288e18*=0x332e, lpOverlapped=0x0) returned 1
	[0269.796] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6300 | out: pbBuffer=0x113e6300) returned 1
	[0269.796] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e62f8 | out: pbBuffer=0x113e62f8) returned 1
	[0269.796] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cc602 | out: pbBuffer=0x113cc602) returned 1
	[0269.796] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6330 | out: pbBuffer=0x113e6330) returned 1
	[0269.797] GetFileType (hFile=0x1d8) returned 0x1
	[0269.797] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.797] WriteFile (in: hFile=0x1d8, lpBuffer=0x112fa000*, nNumberOfBytesToWrite=0x332e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112fa000*, lpNumberOfBytesWritten=0x11031dfc*=0x332e, lpOverlapped=0x11031e08) returned 1
	[0269.797] GetFileType (hFile=0x1d8) returned 0x1
	[0269.798] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x332e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.798] GetFileType (hFile=0x1d8) returned 0x1
	[0269.798] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.798] WriteFile (in: hFile=0x1d8, lpBuffer=0x112fe000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112fe000*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0269.798] GetFileType (hFile=0x1d8) returned 0x1
	[0269.798] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x332e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.798] CloseHandle (hObject=0x1d8) returned 1
	[0269.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf.tl30z")) returned 0x220
	[0269.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.817] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0269.825] SetEvent (hEvent=0x210) returned 1
	[0269.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x220
	[0269.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", dwFileAttributes=0x220) returned 1
	[0269.825] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.979] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0269.979] ReadFile (in: hFile=0x1d8, lpBuffer=0x110c2000, nNumberOfBytesToRead=0x2cec, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x110c2000*, lpNumberOfBytesRead=0x11288e18*=0x2cec, lpOverlapped=0x0) returned 1
	[0269.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fb20 | out: pbBuffer=0x1140fb20) returned 1
	[0269.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111df102 | out: pbBuffer=0x111df102) returned 1
	[0269.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111df12d | out: pbBuffer=0x111df12d) returned 1
	[0269.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fb50 | out: pbBuffer=0x1140fb50) returned 1
	[0269.997] GetFileType (hFile=0x1d8) returned 0x1
	[0269.997] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b1de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.997] WriteFile (in: hFile=0x1d8, lpBuffer=0x11174000*, nNumberOfBytesToWrite=0x2cec, lpNumberOfBytesWritten=0x113b1dfc, lpOverlapped=0x113b1e08 | out: lpBuffer=0x11174000*, lpNumberOfBytesWritten=0x113b1dfc*=0x2cec, lpOverlapped=0x113b1e08) returned 1
	[0269.998] GetFileType (hFile=0x1d8) returned 0x1
	[0269.998] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2cec, lpNewFilePointer=0x0, dwMoveMethod=0x113b1de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.998] GetFileType (hFile=0x1d8) returned 0x1
	[0269.998] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b1de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.998] WriteFile (in: hFile=0x1d8, lpBuffer=0x1145b180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113b1dfc, lpOverlapped=0x113b1e08 | out: lpBuffer=0x1145b180*, lpNumberOfBytesWritten=0x113b1dfc*=0x230, lpOverlapped=0x113b1e08) returned 1
	[0269.998] GetFileType (hFile=0x1d8) returned 0x1
	[0269.999] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2cec, lpNewFilePointer=0x0, dwMoveMethod=0x113b1de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.999] CloseHandle (hObject=0x1d8) returned 1
	[0270.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf.tl30z")) returned 0x220
	[0270.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.052] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0270.062] SetEvent (hEvent=0x248) returned 1
	[0270.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf")) returned 0x220
	[0270.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF", dwFileAttributes=0x220) returned 1
	[0270.063] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.197] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0270.198] ReadFile (in: hFile=0x1d8, lpBuffer=0x1135a000, nNumberOfBytesToRead=0xd16, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1135a000*, lpNumberOfBytesRead=0x11288e18*=0xd16, lpOverlapped=0x0) returned 1
	[0270.203] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0270.203] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137e802 | out: pbBuffer=0x1137e802) returned 1
	[0270.203] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137e804 | out: pbBuffer=0x1137e804) returned 1
	[0270.203] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0270.203] GetFileType (hFile=0x1d8) returned 0x1
	[0270.203] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.203] WriteFile (in: hFile=0x1d8, lpBuffer=0x11244000*, nNumberOfBytesToWrite=0xd16, lpNumberOfBytesWritten=0x113f1dfc, lpOverlapped=0x113f1e08 | out: lpBuffer=0x11244000*, lpNumberOfBytesWritten=0x113f1dfc*=0xd16, lpOverlapped=0x113f1e08) returned 1
	[0270.204] GetFileType (hFile=0x1d8) returned 0x1
	[0270.204] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xd16, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.204] GetFileType (hFile=0x1d8) returned 0x1
	[0270.204] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.204] WriteFile (in: hFile=0x1d8, lpBuffer=0x11364a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113f1dfc, lpOverlapped=0x113f1e08 | out: lpBuffer=0x11364a80*, lpNumberOfBytesWritten=0x113f1dfc*=0x22a, lpOverlapped=0x113f1e08) returned 1
	[0270.204] GetFileType (hFile=0x1d8) returned 0x1
	[0270.205] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xd16, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.205] CloseHandle (hObject=0x1d8) returned 1
	[0270.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf.tl30z")) returned 0x220
	[0270.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.217] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0270.226] SetEvent (hEvent=0x218) returned 1
	[0270.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x220
	[0270.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF", dwFileAttributes=0x220) returned 1
	[0270.227] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.397] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0270.397] ReadFile (in: hFile=0x1d8, lpBuffer=0x110e2000, nNumberOfBytesToRead=0x94a, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x110e2000*, lpNumberOfBytesRead=0x11288e18*=0x94a, lpOverlapped=0x0) returned 1
	[0270.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0270.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e4802 | out: pbBuffer=0x110e4802) returned 1
	[0270.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e48a8 | out: pbBuffer=0x110e48a8) returned 1
	[0270.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0270.411] GetFileType (hFile=0x1d8) returned 0x1
	[0270.411] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.411] WriteFile (in: hFile=0x1d8, lpBuffer=0x110eb000*, nNumberOfBytesToWrite=0x94a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110eb000*, lpNumberOfBytesWritten=0x11031dfc*=0x94a, lpOverlapped=0x11031e08) returned 1
	[0270.412] GetFileType (hFile=0x1d8) returned 0x1
	[0270.412] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x94a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.412] GetFileType (hFile=0x1d8) returned 0x1
	[0270.412] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.412] WriteFile (in: hFile=0x1d8, lpBuffer=0x11325880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11325880*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0270.413] GetFileType (hFile=0x1d8) returned 0x1
	[0270.413] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x94a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.413] CloseHandle (hObject=0x1d8) returned 1
	[0270.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf.tl30z")) returned 0x220
	[0270.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.420] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0270.431] SetEvent (hEvent=0x218) returned 1
	[0270.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x220
	[0270.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", dwFileAttributes=0x220) returned 1
	[0270.432] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.689] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0270.689] ReadFile (in: hFile=0x1d8, lpBuffer=0x112c8000, nNumberOfBytesToRead=0x1370, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x112c8000*, lpNumberOfBytesRead=0x11288e18*=0x1370, lpOverlapped=0x0) returned 1
	[0270.696] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6840 | out: pbBuffer=0x113e6840) returned 1
	[0270.697] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e5d02 | out: pbBuffer=0x110e5d02) returned 1
	[0270.697] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e5d35 | out: pbBuffer=0x110e5d35) returned 1
	[0270.697] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6870 | out: pbBuffer=0x113e6870) returned 1
	[0270.697] GetFileType (hFile=0x1d8) returned 0x1
	[0270.697] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.698] WriteFile (in: hFile=0x1d8, lpBuffer=0x1144e000*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1144e000*, lpNumberOfBytesWritten=0x11031dfc*=0x1370, lpOverlapped=0x11031e08) returned 1
	[0270.698] GetFileType (hFile=0x1d8) returned 0x1
	[0270.698] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1370, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.698] GetFileType (hFile=0x1d8) returned 0x1
	[0270.698] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.699] WriteFile (in: hFile=0x1d8, lpBuffer=0x112f5500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112f5500*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0270.699] GetFileType (hFile=0x1d8) returned 0x1
	[0270.699] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1370, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.699] CloseHandle (hObject=0x1d8) returned 1
	[0270.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf.tl30z")) returned 0x220
	[0270.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.746] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0270.756] SetEvent (hEvent=0x218) returned 1
	[0270.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x220
	[0270.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF", dwFileAttributes=0x220) returned 1
	[0270.757] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.908] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0270.908] ReadFile (in: hFile=0x1d8, lpBuffer=0x11132000, nNumberOfBytesToRead=0x804, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11132000*, lpNumberOfBytesRead=0x1131ce18*=0x804, lpOverlapped=0x0) returned 1
	[0270.914] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0270.914] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c9202 | out: pbBuffer=0x113c9202) returned 1
	[0270.914] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0270.914] GetFileType (hFile=0x1d8) returned 0x1
	[0270.914] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.914] WriteFile (in: hFile=0x1d8, lpBuffer=0x11141000*, nNumberOfBytesToWrite=0x804, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11141000*, lpNumberOfBytesWritten=0x11031dfc*=0x804, lpOverlapped=0x11031e08) returned 1
	[0270.915] GetFileType (hFile=0x1d8) returned 0x1
	[0270.915] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x804, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.915] GetFileType (hFile=0x1d8) returned 0x1
	[0270.915] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.915] WriteFile (in: hFile=0x1d8, lpBuffer=0x112a9880*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112a9880*, lpNumberOfBytesWritten=0x11031dfc*=0x21e, lpOverlapped=0x11031e08) returned 1
	[0270.915] GetFileType (hFile=0x1d8) returned 0x1
	[0270.915] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x804, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.915] CloseHandle (hObject=0x1d8) returned 1
	[0270.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf.tl30z")) returned 0x220
	[0270.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.925] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0270.937] SetEvent (hEvent=0x218) returned 1
	[0270.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x220
	[0270.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF", dwFileAttributes=0x220) returned 1
	[0270.937] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.087] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0271.088] ReadFile (in: hFile=0x1d8, lpBuffer=0x1133c000, nNumberOfBytesToRead=0xf38, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1133c000*, lpNumberOfBytesRead=0x1131ce18*=0xf38, lpOverlapped=0x0) returned 1
	[0271.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0271.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c9d02 | out: pbBuffer=0x113c9d02) returned 1
	[0271.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c9d7c | out: pbBuffer=0x113c9d7c) returned 1
	[0271.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0271.093] GetFileType (hFile=0x1d8) returned 0x1
	[0271.093] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.093] WriteFile (in: hFile=0x1d8, lpBuffer=0x11188000*, nNumberOfBytesToWrite=0xf38, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11188000*, lpNumberOfBytesWritten=0x11031dfc*=0xf38, lpOverlapped=0x11031e08) returned 1
	[0271.093] GetFileType (hFile=0x1d8) returned 0x1
	[0271.093] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xf38, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.094] GetFileType (hFile=0x1d8) returned 0x1
	[0271.094] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.094] WriteFile (in: hFile=0x1d8, lpBuffer=0x11386a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11386a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0271.094] GetFileType (hFile=0x1d8) returned 0x1
	[0271.094] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xf38, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.094] CloseHandle (hObject=0x1d8) returned 1
	[0271.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf.tl30z")) returned 0x220
	[0271.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.102] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0271.122] SetEvent (hEvent=0x26c) returned 1
	[0271.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x220
	[0271.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF", dwFileAttributes=0x220) returned 1
	[0271.123] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.471] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0271.472] ReadFile (in: hFile=0x1d8, lpBuffer=0x112d5000, nNumberOfBytesToRead=0xda6, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x112d5000*, lpNumberOfBytesRead=0x1131ce18*=0xda6, lpOverlapped=0x0) returned 1
	[0271.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0271.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11063202 | out: pbBuffer=0x11063202) returned 1
	[0271.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1106322f | out: pbBuffer=0x1106322f) returned 1
	[0271.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1106327c | out: pbBuffer=0x1106327c) returned 1
	[0271.483] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0271.483] GetFileType (hFile=0x1d8) returned 0x1
	[0271.483] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.483] WriteFile (in: hFile=0x1d8, lpBuffer=0x113e2000*, nNumberOfBytesToWrite=0xda6, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x113e2000*, lpNumberOfBytesWritten=0x1105ddfc*=0xda6, lpOverlapped=0x1105de08) returned 1
	[0271.483] GetFileType (hFile=0x1d8) returned 0x1
	[0271.483] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xda6, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.484] GetFileType (hFile=0x1d8) returned 0x1
	[0271.484] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.484] WriteFile (in: hFile=0x1d8, lpBuffer=0x113a3880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x113a3880*, lpNumberOfBytesWritten=0x1105ddfc*=0x22d, lpOverlapped=0x1105de08) returned 1
	[0271.484] GetFileType (hFile=0x1d8) returned 0x1
	[0271.484] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xda6, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.484] CloseHandle (hObject=0x1d8) returned 1
	[0271.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf.tl30z")) returned 0x220
	[0271.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.496] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0271.503] SetEvent (hEvent=0x26c) returned 1
	[0271.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x220
	[0271.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", dwFileAttributes=0x220) returned 1
	[0271.503] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.659] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0271.659] ReadFile (in: hFile=0x1d8, lpBuffer=0x11070600, nNumberOfBytesToRead=0x108c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11070600*, lpNumberOfBytesRead=0x1131ce18*=0x108c, lpOverlapped=0x0) returned 1
	[0271.663] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6c90 | out: pbBuffer=0x113e6c90) returned 1
	[0271.663] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6c88 | out: pbBuffer=0x113e6c88) returned 1
	[0271.663] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e5d02 | out: pbBuffer=0x113e5d02) returned 1
	[0271.663] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e5d37 | out: pbBuffer=0x113e5d37) returned 1
	[0271.664] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6cc0 | out: pbBuffer=0x113e6cc0) returned 1
	[0271.664] GetFileType (hFile=0x1d8) returned 0x1
	[0271.664] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.664] WriteFile (in: hFile=0x1d8, lpBuffer=0x11164000*, nNumberOfBytesToWrite=0x108c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11164000*, lpNumberOfBytesWritten=0x11031dfc*=0x108c, lpOverlapped=0x11031e08) returned 1
	[0271.665] GetFileType (hFile=0x1d8) returned 0x1
	[0271.665] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x108c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.665] GetFileType (hFile=0x1d8) returned 0x1
	[0271.665] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.665] WriteFile (in: hFile=0x1d8, lpBuffer=0x11166000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11166000*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0271.665] GetFileType (hFile=0x1d8) returned 0x1
	[0271.665] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x108c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.666] CloseHandle (hObject=0x1d8) returned 1
	[0271.669] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf.tl30z")) returned 0x220
	[0271.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.674] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0271.736] SetEvent (hEvent=0x26c) returned 1
	[0271.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf")) returned 0x220
	[0271.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF", dwFileAttributes=0x220) returned 1
	[0271.737] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.881] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0271.881] ReadFile (in: hFile=0x1d8, lpBuffer=0x1109e000, nNumberOfBytesToRead=0x8d6, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1109e000*, lpNumberOfBytesRead=0x1131ce18*=0x8d6, lpOverlapped=0x0) returned 1
	[0271.886] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332440 | out: pbBuffer=0x11332440) returned 1
	[0271.886] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332438 | out: pbBuffer=0x11332438) returned 1
	[0271.886] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bc902 | out: pbBuffer=0x112bc902) returned 1
	[0271.886] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112bc931 | out: pbBuffer=0x112bc931) returned 1
	[0271.887] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112bc971 | out: pbBuffer=0x112bc971) returned 1
	[0271.887] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112bc9b1 | out: pbBuffer=0x112bc9b1) returned 1
	[0271.887] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332470 | out: pbBuffer=0x11332470) returned 1
	[0271.887] GetFileType (hFile=0x1d8) returned 0x1
	[0271.887] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.887] WriteFile (in: hFile=0x1d8, lpBuffer=0x110b2000*, nNumberOfBytesToWrite=0x8d6, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x110b2000*, lpNumberOfBytesWritten=0x1105ddfc*=0x8d6, lpOverlapped=0x1105de08) returned 1
	[0271.888] GetFileType (hFile=0x1d8) returned 0x1
	[0271.888] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8d6, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.888] GetFileType (hFile=0x1d8) returned 0x1
	[0271.888] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.888] WriteFile (in: hFile=0x1d8, lpBuffer=0x110b4000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x110b4000*, lpNumberOfBytesWritten=0x1105ddfc*=0x22a, lpOverlapped=0x1105de08) returned 1
	[0271.888] GetFileType (hFile=0x1d8) returned 0x1
	[0271.888] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8d6, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.888] CloseHandle (hObject=0x1d8) returned 1
	[0271.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf.tl30z")) returned 0x220
	[0271.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.894] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0271.901] SetEvent (hEvent=0x26c) returned 1
	[0271.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf")) returned 0x220
	[0271.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", dwFileAttributes=0x220) returned 1
	[0271.901] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.042] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0272.042] ReadFile (in: hFile=0x1d8, lpBuffer=0x1122e000, nNumberOfBytesToRead=0x2856, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1122e000*, lpNumberOfBytesRead=0x1131ce18*=0x2856, lpOverlapped=0x0) returned 1
	[0272.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e73e0 | out: pbBuffer=0x113e73e0) returned 1
	[0272.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e73d8 | out: pbBuffer=0x113e73d8) returned 1
	[0272.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11131202 | out: pbBuffer=0x11131202) returned 1
	[0272.050] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11131277 | out: pbBuffer=0x11131277) returned 1
	[0272.050] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e7410 | out: pbBuffer=0x113e7410) returned 1
	[0272.050] SetEvent (hEvent=0x26c) returned 1
	[0272.050] GetFileType (hFile=0x1d8) returned 0x1
	[0272.051] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.051] WriteFile (in: hFile=0x1d8, lpBuffer=0x11254000*, nNumberOfBytesToWrite=0x2856, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11254000*, lpNumberOfBytesWritten=0x11031dfc*=0x2856, lpOverlapped=0x11031e08) returned 1
	[0272.051] GetFileType (hFile=0x1d8) returned 0x1
	[0272.051] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2856, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.052] GetFileType (hFile=0x1d8) returned 0x1
	[0272.052] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.052] WriteFile (in: hFile=0x1d8, lpBuffer=0x1123e700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1123e700*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0272.052] GetFileType (hFile=0x1d8) returned 0x1
	[0272.052] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2856, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.052] CloseHandle (hObject=0x1d8) returned 1
	[0272.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf.tl30z")) returned 0x220
	[0272.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.070] SwitchToThread () returned 1
	[0272.078] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.086] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.115] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.156] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.208] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.242] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.314] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.418] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.449] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.483] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.517] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.566] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.601] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.641] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.675] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.737] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.746] SetEvent (hEvent=0x26c) returned 1
	[0272.747] SetEvent (hEvent=0x1f0) returned 1
	[0272.747] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0272.752] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.752] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0272.760] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.760] SetEvent (hEvent=0x26c) returned 1
	[0272.760] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0272.766] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.766] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.772] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.778] SetEvent (hEvent=0x234) returned 1
	[0273.778] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.783] SetEvent (hEvent=0x234) returned 1
	[0273.783] SwitchToThread () returned 1
	[0273.786] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.793] SetEvent (hEvent=0x210) returned 1
	[0273.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x220
	[0273.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF", dwFileAttributes=0x220) returned 1
	[0273.794] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.955] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0273.955] ReadFile (in: hFile=0x1d8, lpBuffer=0x111e8800, nNumberOfBytesToRead=0x7e8, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x111e8800*, lpNumberOfBytesRead=0x1128ce18*=0x7e8, lpOverlapped=0x0) returned 1
	[0273.959] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0273.959] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0273.959] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f7202 | out: pbBuffer=0x111f7202) returned 1
	[0273.960] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0273.960] GetFileType (hFile=0x1d8) returned 0x1
	[0273.960] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.960] WriteFile (in: hFile=0x1d8, lpBuffer=0x1138a000*, nNumberOfBytesToWrite=0x7e8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1138a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7e8, lpOverlapped=0x1102be08) returned 1
	[0273.961] GetFileType (hFile=0x1d8) returned 0x1
	[0273.961] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7e8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.961] GetFileType (hFile=0x1d8) returned 0x1
	[0273.961] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.961] WriteFile (in: hFile=0x1d8, lpBuffer=0x11374380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11374380*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0273.962] GetFileType (hFile=0x1d8) returned 0x1
	[0273.962] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7e8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.962] CloseHandle (hObject=0x1d8) returned 1
	[0273.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf.tl30z")) returned 0x220
	[0273.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.979] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.988] SetEvent (hEvent=0x210) returned 1
	[0273.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x220
	[0273.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF", dwFileAttributes=0x220) returned 1
	[0273.989] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.135] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0274.135] ReadFile (in: hFile=0x1d8, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x2174, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x1128ce18*=0x2174, lpOverlapped=0x0) returned 1
	[0274.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f190 | out: pbBuffer=0x1140f190) returned 1
	[0274.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f188 | out: pbBuffer=0x1140f188) returned 1
	[0274.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111afd02 | out: pbBuffer=0x111afd02) returned 1
	[0274.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111afd02 | out: pbBuffer=0x111afd02) returned 1
	[0274.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111afd4f | out: pbBuffer=0x111afd4f) returned 1
	[0274.140] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111afd8b | out: pbBuffer=0x111afd8b) returned 1
	[0274.140] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1c0 | out: pbBuffer=0x1140f1c0) returned 1
	[0274.140] GetFileType (hFile=0x1d8) returned 0x1
	[0274.140] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.141] WriteFile (in: hFile=0x1d8, lpBuffer=0x113aa000*, nNumberOfBytesToWrite=0x2174, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x113aa000*, lpNumberOfBytesWritten=0x112c9dfc*=0x2174, lpOverlapped=0x112c9e08) returned 1
	[0274.141] GetFileType (hFile=0x1d8) returned 0x1
	[0274.141] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2174, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.141] GetFileType (hFile=0x1d8) returned 0x1
	[0274.141] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.141] WriteFile (in: hFile=0x1d8, lpBuffer=0x11397180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11397180*, lpNumberOfBytesWritten=0x112c9dfc*=0x22a, lpOverlapped=0x112c9e08) returned 1
	[0274.142] GetFileType (hFile=0x1d8) returned 0x1
	[0274.142] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2174, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.142] CloseHandle (hObject=0x1d8) returned 1
	[0274.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf.tl30z")) returned 0x220
	[0274.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.161] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0274.177] SetEvent (hEvent=0x210) returned 1
	[0274.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x220
	[0274.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF", dwFileAttributes=0x220) returned 1
	[0274.178] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.429] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0274.429] ReadFile (in: hFile=0x1d8, lpBuffer=0x111c4000, nNumberOfBytesToRead=0x4a7c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x111c4000*, lpNumberOfBytesRead=0x1128ce18*=0x4a7c, lpOverlapped=0x0) returned 1
	[0274.436] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69e0 | out: pbBuffer=0x113e69e0) returned 1
	[0274.437] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ccf02 | out: pbBuffer=0x113ccf02) returned 1
	[0274.437] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6a10 | out: pbBuffer=0x113e6a10) returned 1
	[0274.438] GetFileType (hFile=0x1d8) returned 0x1
	[0274.438] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.438] WriteFile (in: hFile=0x1d8, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x4a7c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4a7c, lpOverlapped=0x1102be08) returned 1
	[0274.438] GetFileType (hFile=0x1d8) returned 0x1
	[0274.439] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4a7c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.439] GetFileType (hFile=0x1d8) returned 0x1
	[0274.439] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.439] WriteFile (in: hFile=0x1d8, lpBuffer=0x111d8a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111d8a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0274.439] GetFileType (hFile=0x1d8) returned 0x1
	[0274.439] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4a7c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.439] CloseHandle (hObject=0x1d8) returned 1
	[0274.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf.tl30z")) returned 0x220
	[0274.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.448] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0274.454] SetEvent (hEvent=0x210) returned 1
	[0274.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x220
	[0274.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF", dwFileAttributes=0x220) returned 1
	[0274.455] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.610] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0274.611] ReadFile (in: hFile=0x1d8, lpBuffer=0x1138e900, nNumberOfBytesToRead=0x8fc, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1138e900*, lpNumberOfBytesRead=0x1128ce18*=0x8fc, lpOverlapped=0x0) returned 1
	[0274.616] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f9b0 | out: pbBuffer=0x1140f9b0) returned 1
	[0274.616] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f9a8 | out: pbBuffer=0x1140f9a8) returned 1
	[0274.616] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bf202 | out: pbBuffer=0x112bf202) returned 1
	[0274.616] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f9e0 | out: pbBuffer=0x1140f9e0) returned 1
	[0274.617] GetFileType (hFile=0x1d8) returned 0x1
	[0274.617] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.617] WriteFile (in: hFile=0x1d8, lpBuffer=0x110bf000*, nNumberOfBytesToWrite=0x8fc, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x110bf000*, lpNumberOfBytesWritten=0x112c9dfc*=0x8fc, lpOverlapped=0x112c9e08) returned 1
	[0274.617] GetFileType (hFile=0x1d8) returned 0x1
	[0274.617] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8fc, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.617] GetFileType (hFile=0x1d8) returned 0x1
	[0274.617] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.618] WriteFile (in: hFile=0x1d8, lpBuffer=0x11099880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11099880*, lpNumberOfBytesWritten=0x112c9dfc*=0x22d, lpOverlapped=0x112c9e08) returned 1
	[0274.618] GetFileType (hFile=0x1d8) returned 0x1
	[0274.618] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8fc, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.618] CloseHandle (hObject=0x1d8) returned 1
	[0274.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf.tl30z")) returned 0x220
	[0274.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.624] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0274.639] SetEvent (hEvent=0x210) returned 1
	[0274.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x220
	[0274.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF", dwFileAttributes=0x220) returned 1
	[0274.639] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.967] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0274.967] ReadFile (in: hFile=0x1d8, lpBuffer=0x11233c00, nNumberOfBytesToRead=0xa8c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11233c00*, lpNumberOfBytesRead=0x1128ce18*=0xa8c, lpOverlapped=0x0) returned 1
	[0274.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e7110 | out: pbBuffer=0x113e7110) returned 1
	[0274.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e7108 | out: pbBuffer=0x113e7108) returned 1
	[0274.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11150302 | out: pbBuffer=0x11150302) returned 1
	[0274.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111503a1 | out: pbBuffer=0x111503a1) returned 1
	[0274.972] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e7140 | out: pbBuffer=0x113e7140) returned 1
	[0274.972] GetFileType (hFile=0x1d8) returned 0x1
	[0274.972] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.972] WriteFile (in: hFile=0x1d8, lpBuffer=0x11158000*, nNumberOfBytesToWrite=0xa8c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11158000*, lpNumberOfBytesWritten=0x1102bdfc*=0xa8c, lpOverlapped=0x1102be08) returned 1
	[0274.972] GetFileType (hFile=0x1d8) returned 0x1
	[0274.972] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa8c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.972] GetFileType (hFile=0x1d8) returned 0x1
	[0274.973] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.973] WriteFile (in: hFile=0x1d8, lpBuffer=0x11115180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11115180*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0274.973] GetFileType (hFile=0x1d8) returned 0x1
	[0274.973] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa8c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.973] CloseHandle (hObject=0x1d8) returned 1
	[0274.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf.tl30z")) returned 0x220
	[0274.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.993] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.009] SetEvent (hEvent=0x210) returned 1
	[0275.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf")) returned 0x220
	[0275.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF", dwFileAttributes=0x220) returned 1
	[0275.010] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0275.225] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0275.226] ReadFile (in: hFile=0x1d8, lpBuffer=0x113f4000, nNumberOfBytesToRead=0x1a7c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x113f4000*, lpNumberOfBytesRead=0x1128ce18*=0x1a7c, lpOverlapped=0x0) returned 1
	[0275.231] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0275.232] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0275.232] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261302 | out: pbBuffer=0x11261302) returned 1
	[0275.232] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0275.232] GetFileType (hFile=0x1d8) returned 0x1
	[0275.232] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.232] WriteFile (in: hFile=0x1d8, lpBuffer=0x111b0000*, nNumberOfBytesToWrite=0x1a7c, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x111b0000*, lpNumberOfBytesWritten=0x113f3dfc*=0x1a7c, lpOverlapped=0x113f3e08) returned 1
	[0275.233] GetFileType (hFile=0x1d8) returned 0x1
	[0275.233] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1a7c, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.233] GetFileType (hFile=0x1d8) returned 0x1
	[0275.233] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.233] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bf3c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x11bf3c00*, lpNumberOfBytesWritten=0x113f3dfc*=0x230, lpOverlapped=0x113f3e08) returned 1
	[0275.233] GetFileType (hFile=0x1d8) returned 0x1
	[0275.233] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1a7c, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.233] CloseHandle (hObject=0x1d8) returned 1
	[0275.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf.tl30z")) returned 0x220
	[0275.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.248] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.266] SetEvent (hEvent=0x26c) returned 1
	[0275.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid")) returned 0x220
	[0275.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID", dwFileAttributes=0x220) returned 1
	[0275.280] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0275.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0275.578] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0275.578] ReadFile (in: hFile=0x224, lpBuffer=0x113c2000, nNumberOfBytesToRead=0x2942, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x113c2000*, lpNumberOfBytesRead=0x1128ce18*=0x2942, lpOverlapped=0x0) returned 1
	[0275.583] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66f0 | out: pbBuffer=0x113e66f0) returned 1
	[0275.583] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66e8 | out: pbBuffer=0x113e66e8) returned 1
	[0275.583] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bc7202 | out: pbBuffer=0x11bc7202) returned 1
	[0275.583] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6720 | out: pbBuffer=0x113e6720) returned 1
	[0275.584] GetFileType (hFile=0x224) returned 0x1
	[0275.584] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.584] WriteFile (in: hFile=0x224, lpBuffer=0x111ca000*, nNumberOfBytesToWrite=0x2942, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x111ca000*, lpNumberOfBytesWritten=0x113f3dfc*=0x2942, lpOverlapped=0x113f3e08) returned 1
	[0275.584] GetFileType (hFile=0x224) returned 0x1
	[0275.584] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2942, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.585] GetFileType (hFile=0x224) returned 0x1
	[0275.585] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.585] WriteFile (in: hFile=0x224, lpBuffer=0x110d2700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x110d2700*, lpNumberOfBytesWritten=0x113f3dfc*=0x227, lpOverlapped=0x113f3e08) returned 1
	[0275.585] GetFileType (hFile=0x224) returned 0x1
	[0275.585] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2942, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.585] CloseHandle (hObject=0x224) returned 1
	[0275.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid.tl30z")) returned 0x220
	[0275.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0275.598] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.614] SetEvent (hEvent=0x26c) returned 1
	[0275.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x220
	[0275.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF", dwFileAttributes=0x220) returned 1
	[0275.615] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0275.868] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0275.868] ReadFile (in: hFile=0x224, lpBuffer=0x1129a000, nNumberOfBytesToRead=0x721c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1129a000*, lpNumberOfBytesRead=0x1128ce18*=0x721c, lpOverlapped=0x0) returned 1
	[0275.874] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1b0 | out: pbBuffer=0x1140f1b0) returned 1
	[0275.874] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d1b02 | out: pbBuffer=0x111d1b02) returned 1
	[0275.874] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d1bcb | out: pbBuffer=0x111d1bcb) returned 1
	[0275.874] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1e0 | out: pbBuffer=0x1140f1e0) returned 1
	[0275.875] GetFileType (hFile=0x224) returned 0x1
	[0275.875] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.875] WriteFile (in: hFile=0x224, lpBuffer=0x1122a000*, nNumberOfBytesToWrite=0x721c, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x1122a000*, lpNumberOfBytesWritten=0x113efdfc*=0x721c, lpOverlapped=0x113efe08) returned 1
	[0275.876] GetFileType (hFile=0x224) returned 0x1
	[0275.876] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x721c, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.876] GetFileType (hFile=0x224) returned 0x1
	[0275.876] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.876] WriteFile (in: hFile=0x224, lpBuffer=0x11179180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x11179180*, lpNumberOfBytesWritten=0x113efdfc*=0x22d, lpOverlapped=0x113efe08) returned 1
	[0275.876] GetFileType (hFile=0x224) returned 0x1
	[0275.877] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x721c, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.877] CloseHandle (hObject=0x224) returned 1
	[0275.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf.tl30z")) returned 0x220
	[0275.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.883] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.891] SetEvent (hEvent=0x26c) returned 1
	[0275.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x220
	[0275.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF", dwFileAttributes=0x220) returned 1
	[0275.892] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.143] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0276.143] ReadFile (in: hFile=0x224, lpBuffer=0x11092000, nNumberOfBytesToRead=0xb6de, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11092000*, lpNumberOfBytesRead=0x1128ce18*=0xb6de, lpOverlapped=0x0) returned 1
	[0276.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0276.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6268 | out: pbBuffer=0x113e6268) returned 1
	[0276.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11091302 | out: pbBuffer=0x11091302) returned 1
	[0276.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0276.156] GetFileType (hFile=0x224) returned 0x1
	[0276.156] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.156] WriteFile (in: hFile=0x224, lpBuffer=0x112ee000*, nNumberOfBytesToWrite=0xb6de, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112ee000*, lpNumberOfBytesWritten=0x11031dfc*=0xb6de, lpOverlapped=0x11031e08) returned 1
	[0276.157] GetFileType (hFile=0x224) returned 0x1
	[0276.157] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xb6de, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.158] GetFileType (hFile=0x224) returned 0x1
	[0276.158] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.158] WriteFile (in: hFile=0x224, lpBuffer=0x11137c00*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11137c00*, lpNumberOfBytesWritten=0x11031dfc*=0x23c, lpOverlapped=0x11031e08) returned 1
	[0276.158] GetFileType (hFile=0x224) returned 0x1
	[0276.158] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xb6de, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.158] CloseHandle (hObject=0x224) returned 1
	[0276.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf.tl30z")) returned 0x220
	[0276.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.174] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0276.187] SetEvent (hEvent=0x218) returned 1
	[0276.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x220
	[0276.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF", dwFileAttributes=0x220) returned 1
	[0276.188] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.368] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0276.368] ReadFile (in: hFile=0x224, lpBuffer=0x11300000, nNumberOfBytesToRead=0x2a40, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11300000*, lpNumberOfBytesRead=0x1128ce18*=0x2a40, lpOverlapped=0x0) returned 1
	[0276.374] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0276.375] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11314802 | out: pbBuffer=0x11314802) returned 1
	[0276.375] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11314892 | out: pbBuffer=0x11314892) returned 1
	[0276.375] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11314899 | out: pbBuffer=0x11314899) returned 1
	[0276.375] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0276.376] GetFileType (hFile=0x224) returned 0x1
	[0276.376] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.376] WriteFile (in: hFile=0x224, lpBuffer=0x1109e000*, nNumberOfBytesToWrite=0x2a40, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x1109e000*, lpNumberOfBytesWritten=0x1139fdfc*=0x2a40, lpOverlapped=0x1139fe08) returned 1
	[0276.377] GetFileType (hFile=0x224) returned 0x1
	[0276.377] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2a40, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.377] GetFileType (hFile=0x224) returned 0x1
	[0276.377] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.377] WriteFile (in: hFile=0x224, lpBuffer=0x11102a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x11102a80*, lpNumberOfBytesWritten=0x1139fdfc*=0x224, lpOverlapped=0x1139fe08) returned 1
	[0276.377] GetFileType (hFile=0x224) returned 0x1
	[0276.377] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2a40, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.377] CloseHandle (hObject=0x224) returned 1
	[0276.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf.tl30z")) returned 0x220
	[0276.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.395] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0276.399] SetEvent (hEvent=0x218) returned 1
	[0276.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x220
	[0276.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF", dwFileAttributes=0x220) returned 1
	[0276.400] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.619] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0276.619] ReadFile (in: hFile=0x224, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x83c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x1128ce18*=0x83c, lpOverlapped=0x0) returned 1
	[0276.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332060 | out: pbBuffer=0x11332060) returned 1
	[0276.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332048 | out: pbBuffer=0x11332048) returned 1
	[0276.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c7002 | out: pbBuffer=0x112c7002) returned 1
	[0276.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113320f0 | out: pbBuffer=0x113320f0) returned 1
	[0276.626] GetFileType (hFile=0x224) returned 0x1
	[0276.626] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.626] WriteFile (in: hFile=0x224, lpBuffer=0x111ed000*, nNumberOfBytesToWrite=0x83c, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x111ed000*, lpNumberOfBytesWritten=0x1139fdfc*=0x83c, lpOverlapped=0x1139fe08) returned 1
	[0276.626] GetFileType (hFile=0x224) returned 0x1
	[0276.626] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x83c, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.626] GetFileType (hFile=0x224) returned 0x1
	[0276.626] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.626] WriteFile (in: hFile=0x224, lpBuffer=0x111f4380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x111f4380*, lpNumberOfBytesWritten=0x1139fdfc*=0x227, lpOverlapped=0x1139fe08) returned 1
	[0276.627] GetFileType (hFile=0x224) returned 0x1
	[0276.627] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x83c, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.627] CloseHandle (hObject=0x224) returned 1
	[0276.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf.tl30z")) returned 0x220
	[0276.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.637] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0276.644] SetEvent (hEvent=0x218) returned 1
	[0276.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x220
	[0276.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF", dwFileAttributes=0x220) returned 1
	[0276.645] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.806] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0276.806] ReadFile (in: hFile=0x224, lpBuffer=0x111ff500, nNumberOfBytesToRead=0x148c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x111ff500*, lpNumberOfBytesRead=0x1128ce18*=0x148c, lpOverlapped=0x0) returned 1
	[0276.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f700 | out: pbBuffer=0x1140f700) returned 1
	[0276.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123b202 | out: pbBuffer=0x1123b202) returned 1
	[0276.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f730 | out: pbBuffer=0x1140f730) returned 1
	[0276.813] SetEvent (hEvent=0x218) returned 1
	[0276.813] GetFileType (hFile=0x224) returned 0x1
	[0276.813] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.813] WriteFile (in: hFile=0x224, lpBuffer=0x111ac000*, nNumberOfBytesToWrite=0x148c, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x111ac000*, lpNumberOfBytesWritten=0x113a3dfc*=0x148c, lpOverlapped=0x113a3e08) returned 1
	[0276.813] GetFileType (hFile=0x224) returned 0x1
	[0276.814] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x148c, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.814] GetFileType (hFile=0x224) returned 0x1
	[0276.814] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.814] WriteFile (in: hFile=0x224, lpBuffer=0x11196380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x11196380*, lpNumberOfBytesWritten=0x113a3dfc*=0x227, lpOverlapped=0x113a3e08) returned 1
	[0276.815] GetFileType (hFile=0x224) returned 0x1
	[0276.815] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x148c, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.815] CloseHandle (hObject=0x224) returned 1
	[0276.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf.tl30z")) returned 0x220
	[0276.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.828] SwitchToThread () returned 1
	[0276.831] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0276.839] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0276.872] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0276.902] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0276.931] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.012] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.037] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.244] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.287] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.300] SetEvent (hEvent=0x234) returned 1
	[0277.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf")) returned 0x220
	[0277.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF", dwFileAttributes=0x220) returned 1
	[0277.300] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0277.451] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0277.452] ReadFile (in: hFile=0x1d8, lpBuffer=0x111e4000, nNumberOfBytesToRead=0x488, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111e4000*, lpNumberOfBytesRead=0x11023e18*=0x488, lpOverlapped=0x0) returned 1
	[0277.459] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0277.459] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332688 | out: pbBuffer=0x11332688) returned 1
	[0277.459] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111dc902 | out: pbBuffer=0x111dc902) returned 1
	[0277.459] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326c0 | out: pbBuffer=0x113326c0) returned 1
	[0277.459] GetFileType (hFile=0x1d8) returned 0x1
	[0277.460] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.460] WriteFile (in: hFile=0x1d8, lpBuffer=0x111eb000*, nNumberOfBytesToWrite=0x488, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x111eb000*, lpNumberOfBytesWritten=0x113b7dfc*=0x488, lpOverlapped=0x113b7e08) returned 1
	[0277.460] GetFileType (hFile=0x1d8) returned 0x1
	[0277.460] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x488, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.460] GetFileType (hFile=0x1d8) returned 0x1
	[0277.460] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.460] WriteFile (in: hFile=0x1d8, lpBuffer=0x111cd500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x111cd500*, lpNumberOfBytesWritten=0x113b7dfc*=0x221, lpOverlapped=0x113b7e08) returned 1
	[0277.461] GetFileType (hFile=0x1d8) returned 0x1
	[0277.461] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x488, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.461] CloseHandle (hObject=0x1d8) returned 1
	[0277.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf.tl30z")) returned 0x220
	[0277.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.469] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.478] SetEvent (hEvent=0x234) returned 1
	[0277.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf")) returned 0x220
	[0277.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF", dwFileAttributes=0x220) returned 1
	[0277.479] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0277.664] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0277.664] ReadFile (in: hFile=0x1fc, lpBuffer=0x11396000, nNumberOfBytesToRead=0x79cc, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x11023e18*=0x79cc, lpOverlapped=0x0) returned 1
	[0277.669] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0277.670] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111dc802 | out: pbBuffer=0x111dc802) returned 1
	[0277.670] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0277.671] GetFileType (hFile=0x1fc) returned 0x1
	[0277.671] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.671] WriteFile (in: hFile=0x1fc, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x79cc, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x113a1dfc*=0x79cc, lpOverlapped=0x113a1e08) returned 1
	[0277.672] GetFileType (hFile=0x1fc) returned 0x1
	[0277.672] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x79cc, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.672] GetFileType (hFile=0x1fc) returned 0x1
	[0277.672] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.672] WriteFile (in: hFile=0x1fc, lpBuffer=0x11103880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11103880*, lpNumberOfBytesWritten=0x113a1dfc*=0x233, lpOverlapped=0x113a1e08) returned 1
	[0277.672] GetFileType (hFile=0x1fc) returned 0x1
	[0277.672] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x79cc, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.672] CloseHandle (hObject=0x1fc) returned 1
	[0277.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf.tl30z")) returned 0x220
	[0277.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.676] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.691] SetEvent (hEvent=0x26c) returned 1
	[0277.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf")) returned 0x220
	[0277.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF", dwFileAttributes=0x220) returned 1
	[0277.692] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0277.934] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0277.934] ReadFile (in: hFile=0x1fc, lpBuffer=0x1138c000, nNumberOfBytesToRead=0xe70, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1138c000*, lpNumberOfBytesRead=0x11023e18*=0xe70, lpOverlapped=0x0) returned 1
	[0277.946] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0277.946] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f9302 | out: pbBuffer=0x111f9302) returned 1
	[0277.946] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f93c2 | out: pbBuffer=0x111f93c2) returned 1
	[0277.946] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0277.947] GetFileType (hFile=0x1fc) returned 0x1
	[0277.947] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.947] WriteFile (in: hFile=0x1fc, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x113a1dfc*=0xe70, lpOverlapped=0x113a1e08) returned 1
	[0277.947] GetFileType (hFile=0x1fc) returned 0x1
	[0277.948] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xe70, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.948] GetFileType (hFile=0x1fc) returned 0x1
	[0277.948] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.948] WriteFile (in: hFile=0x1fc, lpBuffer=0x1135a380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x1135a380*, lpNumberOfBytesWritten=0x113a1dfc*=0x22a, lpOverlapped=0x113a1e08) returned 1
	[0277.950] GetFileType (hFile=0x1fc) returned 0x1
	[0277.950] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xe70, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.951] CloseHandle (hObject=0x1fc) returned 1
	[0277.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf.tl30z")) returned 0x220
	[0277.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.966] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.990] SetEvent (hEvent=0x26c) returned 1
	[0277.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf")) returned 0x220
	[0277.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF", dwFileAttributes=0x220) returned 1
	[0277.996] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.246] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0278.246] ReadFile (in: hFile=0x224, lpBuffer=0x1110d800, nNumberOfBytesToRead=0x1510, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1110d800*, lpNumberOfBytesRead=0x11023e18*=0x1510, lpOverlapped=0x0) returned 1
	[0278.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0278.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113df202 | out: pbBuffer=0x113df202) returned 1
	[0278.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0278.253] GetFileType (hFile=0x224) returned 0x1
	[0278.253] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.253] WriteFile (in: hFile=0x224, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1510, lpOverlapped=0x1102be08) returned 1
	[0278.253] GetFileType (hFile=0x224) returned 0x1
	[0278.253] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1510, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.253] GetFileType (hFile=0x224) returned 0x1
	[0278.253] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.254] WriteFile (in: hFile=0x224, lpBuffer=0x111e9880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111e9880*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0278.254] GetFileType (hFile=0x224) returned 0x1
	[0278.254] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1510, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.254] CloseHandle (hObject=0x224) returned 1
	[0278.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf.tl30z")) returned 0x220
	[0278.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.259] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0278.286] SetEvent (hEvent=0x26c) returned 1
	[0278.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf")) returned 0x220
	[0278.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF", dwFileAttributes=0x220) returned 1
	[0278.286] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.561] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0278.561] ReadFile (in: hFile=0x224, lpBuffer=0x1107d200, nNumberOfBytesToRead=0x816, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1107d200*, lpNumberOfBytesRead=0x11023e18*=0x816, lpOverlapped=0x0) returned 1
	[0278.568] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202870 | out: pbBuffer=0x11202870) returned 1
	[0278.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202868 | out: pbBuffer=0x11202868) returned 1
	[0278.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111afb02 | out: pbBuffer=0x111afb02) returned 1
	[0278.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111afba8 | out: pbBuffer=0x111afba8) returned 1
	[0278.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112028a0 | out: pbBuffer=0x112028a0) returned 1
	[0278.569] GetFileType (hFile=0x224) returned 0x1
	[0278.569] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.570] WriteFile (in: hFile=0x224, lpBuffer=0x112b4000*, nNumberOfBytesToWrite=0x816, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x112b4000*, lpNumberOfBytesWritten=0x1139fdfc*=0x816, lpOverlapped=0x1139fe08) returned 1
	[0278.570] GetFileType (hFile=0x224) returned 0x1
	[0278.570] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x816, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.570] GetFileType (hFile=0x224) returned 0x1
	[0278.570] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.570] WriteFile (in: hFile=0x224, lpBuffer=0x11305180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x11305180*, lpNumberOfBytesWritten=0x1139fdfc*=0x224, lpOverlapped=0x1139fe08) returned 1
	[0278.571] GetFileType (hFile=0x224) returned 0x1
	[0278.571] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x816, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.571] CloseHandle (hObject=0x224) returned 1
	[0278.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf.tl30z")) returned 0x220
	[0278.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.580] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0278.589] SetEvent (hEvent=0x26c) returned 1
	[0278.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf")) returned 0x220
	[0278.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF", dwFileAttributes=0x220) returned 1
	[0278.590] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.766] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0278.766] ReadFile (in: hFile=0x224, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x8b8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11023e18*=0x8b8, lpOverlapped=0x0) returned 1
	[0278.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0278.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e4802 | out: pbBuffer=0x110e4802) returned 1
	[0278.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e4851 | out: pbBuffer=0x110e4851) returned 1
	[0278.772] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0278.772] GetFileType (hFile=0x224) returned 0x1
	[0278.772] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.772] WriteFile (in: hFile=0x224, lpBuffer=0x11271000*, nNumberOfBytesToWrite=0x8b8, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11271000*, lpNumberOfBytesWritten=0x113a1dfc*=0x8b8, lpOverlapped=0x113a1e08) returned 1
	[0278.773] GetFileType (hFile=0x224) returned 0x1
	[0278.773] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x8b8, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.773] GetFileType (hFile=0x224) returned 0x1
	[0278.773] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.773] WriteFile (in: hFile=0x224, lpBuffer=0x11453180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11453180*, lpNumberOfBytesWritten=0x113a1dfc*=0x227, lpOverlapped=0x113a1e08) returned 1
	[0278.773] GetFileType (hFile=0x224) returned 0x1
	[0278.773] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x8b8, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.774] CloseHandle (hObject=0x224) returned 1
	[0278.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf.tl30z")) returned 0x220
	[0278.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.784] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0278.788] SetEvent (hEvent=0x26c) returned 1
	[0278.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf")) returned 0x220
	[0278.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF", dwFileAttributes=0x220) returned 1
	[0278.789] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.009] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0279.009] ReadFile (in: hFile=0x224, lpBuffer=0x110b8c00, nNumberOfBytesToRead=0xbc8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x110b8c00*, lpNumberOfBytesRead=0x11023e18*=0xbc8, lpOverlapped=0x0) returned 1
	[0279.013] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0279.013] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f7202 | out: pbBuffer=0x111f7202) returned 1
	[0279.013] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f721e | out: pbBuffer=0x111f721e) returned 1
	[0279.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f726d | out: pbBuffer=0x111f726d) returned 1
	[0279.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f72d1 | out: pbBuffer=0x111f72d1) returned 1
	[0279.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0279.014] GetFileType (hFile=0x224) returned 0x1
	[0279.014] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.014] WriteFile (in: hFile=0x224, lpBuffer=0x1105e000*, nNumberOfBytesToWrite=0xbc8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1105e000*, lpNumberOfBytesWritten=0x1102bdfc*=0xbc8, lpOverlapped=0x1102be08) returned 1
	[0279.015] GetFileType (hFile=0x224) returned 0x1
	[0279.015] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xbc8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.015] GetFileType (hFile=0x224) returned 0x1
	[0279.015] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.015] WriteFile (in: hFile=0x224, lpBuffer=0x11363880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11363880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0279.015] GetFileType (hFile=0x224) returned 0x1
	[0279.016] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xbc8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.016] CloseHandle (hObject=0x224) returned 1
	[0279.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf.tl30z")) returned 0x220
	[0279.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.021] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0279.029] SetEvent (hEvent=0x26c) returned 1
	[0279.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf")) returned 0x220
	[0279.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF", dwFileAttributes=0x220) returned 1
	[0279.029] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.176] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0279.177] ReadFile (in: hFile=0x224, lpBuffer=0x1145c000, nNumberOfBytesToRead=0x34e2, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1145c000*, lpNumberOfBytesRead=0x11023e18*=0x34e2, lpOverlapped=0x0) returned 1
	[0279.184] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0279.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11385e02 | out: pbBuffer=0x11385e02) returned 1
	[0279.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11385e4b | out: pbBuffer=0x11385e4b) returned 1
	[0279.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0279.186] GetFileType (hFile=0x224) returned 0x1
	[0279.186] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.186] WriteFile (in: hFile=0x224, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0x34e2, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x113a3dfc*=0x34e2, lpOverlapped=0x113a3e08) returned 1
	[0279.186] GetFileType (hFile=0x224) returned 0x1
	[0279.187] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x34e2, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.187] GetFileType (hFile=0x224) returned 0x1
	[0279.187] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.187] WriteFile (in: hFile=0x224, lpBuffer=0x11466a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x11466a80*, lpNumberOfBytesWritten=0x113a3dfc*=0x22d, lpOverlapped=0x113a3e08) returned 1
	[0279.187] GetFileType (hFile=0x224) returned 0x1
	[0279.187] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x34e2, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.187] CloseHandle (hObject=0x224) returned 1
	[0279.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf.tl30z")) returned 0x220
	[0279.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.197] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0279.236] SetEvent (hEvent=0x26c) returned 1
	[0279.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf")) returned 0x220
	[0279.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF", dwFileAttributes=0x220) returned 1
	[0279.237] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.387] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0279.387] ReadFile (in: hFile=0x224, lpBuffer=0x111c0000, nNumberOfBytesToRead=0x3158, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x11023e18*=0x3158, lpOverlapped=0x0) returned 1
	[0279.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66f0 | out: pbBuffer=0x113e66f0) returned 1
	[0279.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66e8 | out: pbBuffer=0x113e66e8) returned 1
	[0279.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a1302 | out: pbBuffer=0x111a1302) returned 1
	[0279.401] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6720 | out: pbBuffer=0x113e6720) returned 1
	[0279.401] GetFileType (hFile=0x224) returned 0x1
	[0279.401] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.401] WriteFile (in: hFile=0x224, lpBuffer=0x1129a000*, nNumberOfBytesToWrite=0x3158, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x1129a000*, lpNumberOfBytesWritten=0x113a1dfc*=0x3158, lpOverlapped=0x113a1e08) returned 1
	[0279.404] GetFileType (hFile=0x224) returned 0x1
	[0279.404] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3158, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.404] GetFileType (hFile=0x224) returned 0x1
	[0279.405] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.405] WriteFile (in: hFile=0x224, lpBuffer=0x111caa80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x111caa80*, lpNumberOfBytesWritten=0x113a1dfc*=0x22a, lpOverlapped=0x113a1e08) returned 1
	[0279.405] GetFileType (hFile=0x224) returned 0x1
	[0279.405] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3158, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.405] CloseHandle (hObject=0x224) returned 1
	[0279.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf.tl30z")) returned 0x220
	[0279.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.420] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0279.425] SetEvent (hEvent=0x26c) returned 1
	[0279.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf")) returned 0x220
	[0279.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF", dwFileAttributes=0x220) returned 1
	[0279.426] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.570] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0279.570] ReadFile (in: hFile=0x224, lpBuffer=0x111dea00, nNumberOfBytesToRead=0x2454, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111dea00*, lpNumberOfBytesRead=0x11023e18*=0x2454, lpOverlapped=0x0) returned 1
	[0279.575] SetEvent (hEvent=0x26c) returned 1
	[0279.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b40 | out: pbBuffer=0x113e6b40) returned 1
	[0279.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6b38 | out: pbBuffer=0x113e6b38) returned 1
	[0279.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c3302 | out: pbBuffer=0x112c3302) returned 1
	[0279.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b70 | out: pbBuffer=0x113e6b70) returned 1
	[0279.578] GetFileType (hFile=0x224) returned 0x1
	[0279.578] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a7de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.578] WriteFile (in: hFile=0x224, lpBuffer=0x11be2000*, nNumberOfBytesToWrite=0x2454, lpNumberOfBytesWritten=0x110a7dfc, lpOverlapped=0x110a7e08 | out: lpBuffer=0x11be2000*, lpNumberOfBytesWritten=0x110a7dfc*=0x2454, lpOverlapped=0x110a7e08) returned 1
	[0279.578] GetFileType (hFile=0x224) returned 0x1
	[0279.578] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2454, lpNewFilePointer=0x0, dwMoveMethod=0x110a7de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.579] GetFileType (hFile=0x224) returned 0x1
	[0279.579] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a7de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.579] WriteFile (in: hFile=0x224, lpBuffer=0x1113d500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x110a7dfc, lpOverlapped=0x110a7e08 | out: lpBuffer=0x1113d500*, lpNumberOfBytesWritten=0x110a7dfc*=0x227, lpOverlapped=0x110a7e08) returned 1
	[0279.579] GetFileType (hFile=0x224) returned 0x1
	[0279.579] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2454, lpNewFilePointer=0x0, dwMoveMethod=0x110a7de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.579] CloseHandle (hObject=0x224) returned 1
	[0279.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf.tl30z")) returned 0x220
	[0279.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.590] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0279.593] SetEvent (hEvent=0x26c) returned 1
	[0279.593] SetEvent (hEvent=0x218) returned 1
	[0279.593] SwitchToThread () returned 1
	[0279.596] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0279.599] SetEvent (hEvent=0x218) returned 1
	[0279.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf")) returned 0x220
	[0279.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF", dwFileAttributes=0x220) returned 1
	[0279.600] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.906] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0279.906] ReadFile (in: hFile=0x224, lpBuffer=0x110f2c00, nNumberOfBytesToRead=0xb20, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x110f2c00*, lpNumberOfBytesRead=0x11288e18*=0xb20, lpOverlapped=0x0) returned 1
	[0279.916] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0279.916] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f268 | out: pbBuffer=0x1140f268) returned 1
	[0279.916] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c3d02 | out: pbBuffer=0x112c3d02) returned 1
	[0279.916] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c3da4 | out: pbBuffer=0x112c3da4) returned 1
	[0279.916] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0279.917] GetFileType (hFile=0x224) returned 0x1
	[0279.917] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.917] WriteFile (in: hFile=0x224, lpBuffer=0x113de000*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113de000*, lpNumberOfBytesWritten=0x1102bdfc*=0xb20, lpOverlapped=0x1102be08) returned 1
	[0279.917] GetFileType (hFile=0x224) returned 0x1
	[0279.917] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xb20, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.917] GetFileType (hFile=0x224) returned 0x1
	[0279.917] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.917] WriteFile (in: hFile=0x224, lpBuffer=0x113d2700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d2700*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0279.917] GetFileType (hFile=0x224) returned 0x1
	[0279.918] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xb20, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.918] CloseHandle (hObject=0x224) returned 1
	[0279.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf.tl30z")) returned 0x220
	[0279.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.928] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0279.948] SetEvent (hEvent=0x218) returned 1
	[0279.948] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf")) returned 0x220
	[0279.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF", dwFileAttributes=0x220) returned 1
	[0279.948] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0280.094] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0280.094] ReadFile (in: hFile=0x224, lpBuffer=0x1119e000, nNumberOfBytesToRead=0x1cac, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1119e000*, lpNumberOfBytesRead=0x11288e18*=0x1cac, lpOverlapped=0x0) returned 1
	[0280.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202550 | out: pbBuffer=0x11202550) returned 1
	[0280.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a2702 | out: pbBuffer=0x111a2702) returned 1
	[0280.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202580 | out: pbBuffer=0x11202580) returned 1
	[0280.098] GetFileType (hFile=0x224) returned 0x1
	[0280.098] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.098] WriteFile (in: hFile=0x224, lpBuffer=0x11462000*, nNumberOfBytesToWrite=0x1cac, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x11462000*, lpNumberOfBytesWritten=0x11219dfc*=0x1cac, lpOverlapped=0x11219e08) returned 1
	[0280.099] GetFileType (hFile=0x224) returned 0x1
	[0280.099] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1cac, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.099] GetFileType (hFile=0x224) returned 0x1
	[0280.099] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.099] WriteFile (in: hFile=0x224, lpBuffer=0x11107500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x11107500*, lpNumberOfBytesWritten=0x11219dfc*=0x22d, lpOverlapped=0x11219e08) returned 1
	[0280.099] GetFileType (hFile=0x224) returned 0x1
	[0280.100] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1cac, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.100] CloseHandle (hObject=0x224) returned 1
	[0280.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf.tl30z")) returned 0x220
	[0280.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.114] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0280.125] SetEvent (hEvent=0x210) returned 1
	[0280.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf")) returned 0x220
	[0280.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF", dwFileAttributes=0x220) returned 1
	[0280.125] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0280.291] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0280.291] ReadFile (in: hFile=0x224, lpBuffer=0x11123000, nNumberOfBytesToRead=0x1526, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11123000*, lpNumberOfBytesRead=0x11288e18*=0x1526, lpOverlapped=0x0) returned 1
	[0280.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113325a0 | out: pbBuffer=0x113325a0) returned 1
	[0280.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332598 | out: pbBuffer=0x11332598) returned 1
	[0280.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f5202 | out: pbBuffer=0x112f5202) returned 1
	[0280.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f520d | out: pbBuffer=0x112f520d) returned 1
	[0280.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f52a7 | out: pbBuffer=0x112f52a7) returned 1
	[0280.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113325d0 | out: pbBuffer=0x113325d0) returned 1
	[0280.296] GetFileType (hFile=0x224) returned 0x1
	[0280.296] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.297] WriteFile (in: hFile=0x224, lpBuffer=0x1115c000*, nNumberOfBytesToWrite=0x1526, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x1115c000*, lpNumberOfBytesWritten=0x1121ddfc*=0x1526, lpOverlapped=0x1121de08) returned 1
	[0280.297] GetFileType (hFile=0x224) returned 0x1
	[0280.297] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1526, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.297] GetFileType (hFile=0x224) returned 0x1
	[0280.297] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.297] WriteFile (in: hFile=0x224, lpBuffer=0x11314e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x11314e00*, lpNumberOfBytesWritten=0x1121ddfc*=0x22a, lpOverlapped=0x1121de08) returned 1
	[0280.298] GetFileType (hFile=0x224) returned 0x1
	[0280.298] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1526, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.298] CloseHandle (hObject=0x224) returned 1
	[0280.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf.tl30z")) returned 0x220
	[0280.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.333] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0280.338] SetEvent (hEvent=0x210) returned 1
	[0280.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf")) returned 0x220
	[0280.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF", dwFileAttributes=0x220) returned 1
	[0280.339] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0280.626] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0280.626] ReadFile (in: hFile=0x1d8, lpBuffer=0x1109e000, nNumberOfBytesToRead=0x1efc, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1109e000*, lpNumberOfBytesRead=0x11288e18*=0x1efc, lpOverlapped=0x0) returned 1
	[0280.639] SetEvent (hEvent=0x234) returned 1
	[0280.640] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112029b0 | out: pbBuffer=0x112029b0) returned 1
	[0280.640] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b2502 | out: pbBuffer=0x110b2502) returned 1
	[0280.641] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112029e0 | out: pbBuffer=0x112029e0) returned 1
	[0280.641] GetFileType (hFile=0x1d8) returned 0x1
	[0280.641] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.642] WriteFile (in: hFile=0x1d8, lpBuffer=0x110c0000*, nNumberOfBytesToWrite=0x1efc, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x110c0000*, lpNumberOfBytesWritten=0x11219dfc*=0x1efc, lpOverlapped=0x11219e08) returned 1
	[0280.642] GetFileType (hFile=0x1d8) returned 0x1
	[0280.642] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1efc, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.642] GetFileType (hFile=0x1d8) returned 0x1
	[0280.643] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.643] WriteFile (in: hFile=0x1d8, lpBuffer=0x110c4000*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x110c4000*, lpNumberOfBytesWritten=0x11219dfc*=0x236, lpOverlapped=0x11219e08) returned 1
	[0280.643] GetFileType (hFile=0x1d8) returned 0x1
	[0280.643] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1efc, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.643] CloseHandle (hObject=0x1d8) returned 1
	[0280.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf.tl30z")) returned 0x220
	[0280.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.654] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0280.657] SetEvent (hEvent=0x234) returned 1
	[0280.657] SetEvent (hEvent=0x26c) returned 1
	[0280.657] SwitchToThread () returned 1
	[0280.660] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0280.708] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0280.737] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0280.775] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0280.827] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0280.834] SetEvent (hEvent=0x248) returned 1
	[0280.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid")) returned 0x220
	[0280.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID", dwFileAttributes=0x220) returned 1
	[0280.836] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0281.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.072] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0281.072] ReadFile (in: hFile=0x1d8, lpBuffer=0x11452000, nNumberOfBytesToRead=0x1c0a, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11452000*, lpNumberOfBytesRead=0x1128ce18*=0x1c0a, lpOverlapped=0x0) returned 1
	[0281.076] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0281.076] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6568 | out: pbBuffer=0x113e6568) returned 1
	[0281.076] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e8902 | out: pbBuffer=0x110e8902) returned 1
	[0281.076] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e8938 | out: pbBuffer=0x110e8938) returned 1
	[0281.076] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e8971 | out: pbBuffer=0x110e8971) returned 1
	[0281.076] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65a0 | out: pbBuffer=0x113e65a0) returned 1
	[0281.077] GetFileType (hFile=0x1d8) returned 0x1
	[0281.077] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.077] WriteFile (in: hFile=0x1d8, lpBuffer=0x113ca000*, nNumberOfBytesToWrite=0x1c0a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113ca000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1c0a, lpOverlapped=0x1102be08) returned 1
	[0281.077] GetFileType (hFile=0x1d8) returned 0x1
	[0281.077] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1c0a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.077] GetFileType (hFile=0x1d8) returned 0x1
	[0281.077] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.078] WriteFile (in: hFile=0x1d8, lpBuffer=0x110df500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110df500*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0281.078] GetFileType (hFile=0x1d8) returned 0x1
	[0281.078] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1c0a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.078] CloseHandle (hObject=0x1d8) returned 1
	[0281.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid.tl30z")) returned 0x220
	[0281.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0281.090] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0281.107] SetEvent (hEvent=0x248) returned 1
	[0281.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf")) returned 0x220
	[0281.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF", dwFileAttributes=0x220) returned 1
	[0281.108] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.243] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0281.243] ReadFile (in: hFile=0x1d8, lpBuffer=0x1122e000, nNumberOfBytesToRead=0x2bb6, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1122e000*, lpNumberOfBytesRead=0x1128ce18*=0x2bb6, lpOverlapped=0x0) returned 1
	[0281.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332ae0 | out: pbBuffer=0x11332ae0) returned 1
	[0281.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332ad8 | out: pbBuffer=0x11332ad8) returned 1
	[0281.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11226a02 | out: pbBuffer=0x11226a02) returned 1
	[0281.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11226a3b | out: pbBuffer=0x11226a3b) returned 1
	[0281.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11226a5b | out: pbBuffer=0x11226a5b) returned 1
	[0281.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11226a8f | out: pbBuffer=0x11226a8f) returned 1
	[0281.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11226aa1 | out: pbBuffer=0x11226aa1) returned 1
	[0281.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332b10 | out: pbBuffer=0x11332b10) returned 1
	[0281.248] GetFileType (hFile=0x1d8) returned 0x1
	[0281.248] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.248] WriteFile (in: hFile=0x1d8, lpBuffer=0x112ae000*, nNumberOfBytesToWrite=0x2bb6, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112ae000*, lpNumberOfBytesWritten=0x11031dfc*=0x2bb6, lpOverlapped=0x11031e08) returned 1
	[0281.249] GetFileType (hFile=0x1d8) returned 0x1
	[0281.249] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2bb6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.249] GetFileType (hFile=0x1d8) returned 0x1
	[0281.249] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.249] WriteFile (in: hFile=0x1d8, lpBuffer=0x1122ce00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1122ce00*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0281.249] GetFileType (hFile=0x1d8) returned 0x1
	[0281.249] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2bb6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.249] CloseHandle (hObject=0x1d8) returned 1
	[0281.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf.tl30z")) returned 0x220
	[0281.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.264] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0281.301] SetEvent (hEvent=0x248) returned 1
	[0281.301] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf")) returned 0x220
	[0281.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF", dwFileAttributes=0x220) returned 1
	[0281.302] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.470] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0281.470] ReadFile (in: hFile=0x1d8, lpBuffer=0x11090000, nNumberOfBytesToRead=0x31cc, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x1128ce18*=0x31cc, lpOverlapped=0x0) returned 1
	[0281.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0281.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107a802 | out: pbBuffer=0x1107a802) returned 1
	[0281.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107a8ad | out: pbBuffer=0x1107a8ad) returned 1
	[0281.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107a8ad | out: pbBuffer=0x1107a8ad) returned 1
	[0281.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0281.717] GetFileType (hFile=0x1d8) returned 0x1
	[0281.717] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.718] WriteFile (in: hFile=0x1d8, lpBuffer=0x11368000*, nNumberOfBytesToWrite=0x31cc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11368000*, lpNumberOfBytesWritten=0x11031dfc*=0x31cc, lpOverlapped=0x11031e08) returned 1
	[0281.718] GetFileType (hFile=0x1d8) returned 0x1
	[0281.718] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x31cc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.718] GetFileType (hFile=0x1d8) returned 0x1
	[0281.718] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.719] WriteFile (in: hFile=0x1d8, lpBuffer=0x1113ee00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1113ee00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0281.719] GetFileType (hFile=0x1d8) returned 0x1
	[0281.719] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x31cc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.719] CloseHandle (hObject=0x1d8) returned 1
	[0281.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf.tl30z")) returned 0x220
	[0281.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.775] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0281.955] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0281.998] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.029] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.056] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.087] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.117] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.155] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.193] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.229] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.416] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.485] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.535] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.586] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.646] SetEvent (hEvent=0x118) returned 1
	[0282.647] SetEvent (hEvent=0x1f0) returned 1
	[0282.648] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0282.658] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.658] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0282.661] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.661] SetEvent (hEvent=0x210) returned 1
	[0282.661] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0282.667] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.668] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0283.260] SetEvent (hEvent=0x210) returned 1
	[0283.260] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0283.263] SetEvent (hEvent=0x210) returned 1
	[0283.263] SwitchToThread () returned 1
	[0283.267] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0283.283] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0283.294] SetEvent (hEvent=0x26c) returned 1
	[0283.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 0x220
	[0283.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG", dwFileAttributes=0x220) returned 1
	[0283.295] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.tl30z"), dwFlags=0x1) returned 1
	[0283.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.502] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0283.502] ReadFile (in: hFile=0x288, lpBuffer=0x11430000, nNumberOfBytesToRead=0x559a, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11288e18*=0x559a, lpOverlapped=0x0) returned 1
	[0283.507] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0283.507] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e358 | out: pbBuffer=0x1104e358) returned 1
	[0283.508] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1140b302 | out: pbBuffer=0x1140b302) returned 1
	[0283.508] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0283.509] GetFileType (hFile=0x288) returned 0x1
	[0283.509] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.509] WriteFile (in: hFile=0x288, lpBuffer=0x113b4000*, nNumberOfBytesToWrite=0x559a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113b4000*, lpNumberOfBytesWritten=0x1102bdfc*=0x559a, lpOverlapped=0x1102be08) returned 1
	[0283.509] GetFileType (hFile=0x288) returned 0x1
	[0283.510] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x559a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.510] GetFileType (hFile=0x288) returned 0x1
	[0283.510] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.510] WriteFile (in: hFile=0x288, lpBuffer=0x1144e000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1144e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0283.510] GetFileType (hFile=0x288) returned 0x1
	[0283.510] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x559a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.510] CloseHandle (hObject=0x288) returned 1
	[0283.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.tl30z")) returned 0x220
	[0283.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0283.520] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0283.525] SetEvent (hEvent=0x26c) returned 1
	[0283.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 0x220
	[0283.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG", dwFileAttributes=0x220) returned 1
	[0283.526] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.tl30z"), dwFlags=0x1) returned 1
	[0283.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0283.755] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0283.755] ReadFile (in: hFile=0x1d4, lpBuffer=0x111daa00, nNumberOfBytesToRead=0x227a, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x111daa00*, lpNumberOfBytesRead=0x11288e18*=0x227a, lpOverlapped=0x0) returned 1
	[0283.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6080 | out: pbBuffer=0x113e6080) returned 1
	[0283.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122d302 | out: pbBuffer=0x1122d302) returned 1
	[0283.763] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e60b0 | out: pbBuffer=0x113e60b0) returned 1
	[0283.763] GetFileType (hFile=0x1d4) returned 0x1
	[0283.763] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.763] WriteFile (in: hFile=0x1d4, lpBuffer=0x112a4000*, nNumberOfBytesToWrite=0x227a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112a4000*, lpNumberOfBytesWritten=0x1102bdfc*=0x227a, lpOverlapped=0x1102be08) returned 1
	[0283.764] GetFileType (hFile=0x1d4) returned 0x1
	[0283.764] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x227a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.764] GetFileType (hFile=0x1d4) returned 0x1
	[0283.764] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.764] WriteFile (in: hFile=0x1d4, lpBuffer=0x11294a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11294a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0283.765] GetFileType (hFile=0x1d4) returned 0x1
	[0283.765] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x227a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.765] CloseHandle (hObject=0x1d4) returned 1
	[0283.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.tl30z")) returned 0x220
	[0283.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0283.772] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0283.780] SetEvent (hEvent=0x26c) returned 1
	[0283.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 0x220
	[0283.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG", dwFileAttributes=0x220) returned 1
	[0283.780] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.tl30z"), dwFlags=0x1) returned 1
	[0283.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0283.954] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0283.955] ReadFile (in: hFile=0x1d4, lpBuffer=0x1137c000, nNumberOfBytesToRead=0x3b29, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1137c000*, lpNumberOfBytesRead=0x11288e18*=0x3b29, lpOverlapped=0x0) returned 1
	[0283.958] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0283.958] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0283.958] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11372802 | out: pbBuffer=0x11372802) returned 1
	[0283.959] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11372819 | out: pbBuffer=0x11372819) returned 1
	[0283.959] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0283.959] GetFileType (hFile=0x1d4) returned 0x1
	[0283.959] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.960] WriteFile (in: hFile=0x1d4, lpBuffer=0x11468000*, nNumberOfBytesToWrite=0x3b29, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x11468000*, lpNumberOfBytesWritten=0x1138fdfc*=0x3b29, lpOverlapped=0x1138fe08) returned 1
	[0283.960] GetFileType (hFile=0x1d4) returned 0x1
	[0283.960] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3b29, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.960] GetFileType (hFile=0x1d4) returned 0x1
	[0283.960] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.960] WriteFile (in: hFile=0x1d4, lpBuffer=0x1133ea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x1133ea80*, lpNumberOfBytesWritten=0x1138fdfc*=0x230, lpOverlapped=0x1138fe08) returned 1
	[0283.961] GetFileType (hFile=0x1d4) returned 0x1
	[0283.961] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3b29, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.961] CloseHandle (hObject=0x1d4) returned 1
	[0283.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.tl30z")) returned 0x220
	[0283.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0283.965] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0283.982] SetEvent (hEvent=0x210) returned 1
	[0283.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 0x220
	[0283.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG", dwFileAttributes=0x220) returned 1
	[0283.982] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.tl30z"), dwFlags=0x1) returned 1
	[0284.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.117] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0284.117] ReadFile (in: hFile=0x1d4, lpBuffer=0x11306000, nNumberOfBytesToRead=0xc53a, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11306000*, lpNumberOfBytesRead=0x11288e18*=0xc53a, lpOverlapped=0x0) returned 1
	[0284.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0284.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332668 | out: pbBuffer=0x11332668) returned 1
	[0284.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b6902 | out: pbBuffer=0x111b6902) returned 1
	[0284.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b6914 | out: pbBuffer=0x111b6914) returned 1
	[0284.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b694b | out: pbBuffer=0x111b694b) returned 1
	[0284.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0284.128] GetFileType (hFile=0x1d4) returned 0x1
	[0284.128] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.128] WriteFile (in: hFile=0x1d4, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0xc53a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1102bdfc*=0xc53a, lpOverlapped=0x1102be08) returned 1
	[0284.129] GetFileType (hFile=0x1d4) returned 0x1
	[0284.129] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xc53a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.129] GetFileType (hFile=0x1d4) returned 0x1
	[0284.129] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.129] WriteFile (in: hFile=0x1d4, lpBuffer=0x111a3880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111a3880*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0284.129] GetFileType (hFile=0x1d4) returned 0x1
	[0284.129] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xc53a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.130] CloseHandle (hObject=0x1d4) returned 1
	[0284.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.tl30z")) returned 0x220
	[0284.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0284.137] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0284.141] SetEvent (hEvent=0x210) returned 1
	[0284.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 0x220
	[0284.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF", dwFileAttributes=0x220) returned 1
	[0284.142] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.341] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0284.341] ReadFile (in: hFile=0x1d4, lpBuffer=0x11382000, nNumberOfBytesToRead=0x5ee4, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11382000*, lpNumberOfBytesRead=0x11288e18*=0x5ee4, lpOverlapped=0x0) returned 1
	[0284.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112022a0 | out: pbBuffer=0x112022a0) returned 1
	[0284.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202298 | out: pbBuffer=0x11202298) returned 1
	[0284.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261302 | out: pbBuffer=0x11261302) returned 1
	[0284.348] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112022d0 | out: pbBuffer=0x112022d0) returned 1
	[0284.348] GetFileType (hFile=0x1d4) returned 0x1
	[0284.348] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.349] WriteFile (in: hFile=0x1d4, lpBuffer=0x113b4000*, nNumberOfBytesToWrite=0x5ee4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113b4000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5ee4, lpOverlapped=0x1102be08) returned 1
	[0284.349] GetFileType (hFile=0x1d4) returned 0x1
	[0284.349] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5ee4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.349] GetFileType (hFile=0x1d4) returned 0x1
	[0284.349] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.349] WriteFile (in: hFile=0x1d4, lpBuffer=0x11253c00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11253c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0284.350] GetFileType (hFile=0x1d4) returned 0x1
	[0284.350] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5ee4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.350] CloseHandle (hObject=0x1d4) returned 1
	[0284.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.tl30z")) returned 0x220
	[0284.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.372] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0284.381] SetEvent (hEvent=0x234) returned 1
	[0284.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf")) returned 0x220
	[0284.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF", dwFileAttributes=0x220) returned 1
	[0284.382] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.605] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0284.605] ReadFile (in: hFile=0x1d4, lpBuffer=0x11324000, nNumberOfBytesToRead=0x2610, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11324000*, lpNumberOfBytesRead=0x11288e18*=0x2610, lpOverlapped=0x0) returned 1
	[0284.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0284.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11242802 | out: pbBuffer=0x11242802) returned 1
	[0284.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1124280b | out: pbBuffer=0x1124280b) returned 1
	[0284.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0284.618] GetFileType (hFile=0x1d4) returned 0x1
	[0284.618] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1123bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.618] WriteFile (in: hFile=0x1d4, lpBuffer=0x1144c000*, nNumberOfBytesToWrite=0x2610, lpNumberOfBytesWritten=0x1123bdfc, lpOverlapped=0x1123be08 | out: lpBuffer=0x1144c000*, lpNumberOfBytesWritten=0x1123bdfc*=0x2610, lpOverlapped=0x1123be08) returned 1
	[0284.618] GetFileType (hFile=0x1d4) returned 0x1
	[0284.619] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2610, lpNewFilePointer=0x0, dwMoveMethod=0x1123bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.619] GetFileType (hFile=0x1d4) returned 0x1
	[0284.619] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1123bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.619] WriteFile (in: hFile=0x1d4, lpBuffer=0x110d8a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1123bdfc, lpOverlapped=0x1123be08 | out: lpBuffer=0x110d8a80*, lpNumberOfBytesWritten=0x1123bdfc*=0x224, lpOverlapped=0x1123be08) returned 1
	[0284.619] GetFileType (hFile=0x1d4) returned 0x1
	[0284.619] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2610, lpNewFilePointer=0x0, dwMoveMethod=0x1123bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.619] CloseHandle (hObject=0x1d4) returned 1
	[0284.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.tl30z")) returned 0x220
	[0284.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.630] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0284.639] SetEvent (hEvent=0x118) returned 1
	[0284.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf")) returned 0x220
	[0284.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF", dwFileAttributes=0x220) returned 1
	[0284.640] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.913] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0284.913] ReadFile (in: hFile=0x1d4, lpBuffer=0x1111c000, nNumberOfBytesToRead=0xd42, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1111c000*, lpNumberOfBytesRead=0x11288e18*=0xd42, lpOverlapped=0x0) returned 1
	[0284.918] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0284.918] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11243202 | out: pbBuffer=0x11243202) returned 1
	[0284.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0284.919] GetFileType (hFile=0x1d4) returned 0x1
	[0284.919] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1123bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.919] WriteFile (in: hFile=0x1d4, lpBuffer=0x1113a000*, nNumberOfBytesToWrite=0xd42, lpNumberOfBytesWritten=0x1123bdfc, lpOverlapped=0x1123be08 | out: lpBuffer=0x1113a000*, lpNumberOfBytesWritten=0x1123bdfc*=0xd42, lpOverlapped=0x1123be08) returned 1
	[0284.920] GetFileType (hFile=0x1d4) returned 0x1
	[0284.920] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xd42, lpNewFilePointer=0x0, dwMoveMethod=0x1123bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.920] GetFileType (hFile=0x1d4) returned 0x1
	[0284.920] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1123bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.920] WriteFile (in: hFile=0x1d4, lpBuffer=0x110d9880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1123bdfc, lpOverlapped=0x1123be08 | out: lpBuffer=0x110d9880*, lpNumberOfBytesWritten=0x1123bdfc*=0x227, lpOverlapped=0x1123be08) returned 1
	[0284.921] GetFileType (hFile=0x1d4) returned 0x1
	[0284.921] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xd42, lpNewFilePointer=0x0, dwMoveMethod=0x1123bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.921] CloseHandle (hObject=0x1d4) returned 1
	[0284.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.tl30z")) returned 0x220
	[0284.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.934] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0284.950] SetEvent (hEvent=0x118) returned 1
	[0284.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg")) returned 0x220
	[0284.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG", dwFileAttributes=0x220) returned 1
	[0284.951] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.tl30z"), dwFlags=0x1) returned 1
	[0285.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.124] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0285.124] ReadFile (in: hFile=0x1d4, lpBuffer=0x111b4000, nNumberOfBytesToRead=0xcd2, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x111b4000*, lpNumberOfBytesRead=0x11288e18*=0xcd2, lpOverlapped=0x0) returned 1
	[0285.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0285.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11243302 | out: pbBuffer=0x11243302) returned 1
	[0285.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0285.131] GetFileType (hFile=0x1d4) returned 0x1
	[0285.131] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.131] WriteFile (in: hFile=0x1d4, lpBuffer=0x11386000*, nNumberOfBytesToWrite=0xcd2, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11386000*, lpNumberOfBytesWritten=0x1102bdfc*=0xcd2, lpOverlapped=0x1102be08) returned 1
	[0285.132] GetFileType (hFile=0x1d4) returned 0x1
	[0285.132] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xcd2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.132] GetFileType (hFile=0x1d4) returned 0x1
	[0285.132] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.132] WriteFile (in: hFile=0x1d4, lpBuffer=0x110d9880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110d9880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0285.132] GetFileType (hFile=0x1d4) returned 0x1
	[0285.132] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xcd2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.132] CloseHandle (hObject=0x1d4) returned 1
	[0285.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.tl30z")) returned 0x220
	[0285.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0285.143] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0285.151] SetEvent (hEvent=0x210) returned 1
	[0285.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg")) returned 0x220
	[0285.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG", dwFileAttributes=0x220) returned 1
	[0285.152] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg.tl30z"), dwFlags=0x1) returned 1
	[0285.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.357] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0285.357] ReadFile (in: hFile=0x1d4, lpBuffer=0x11248000, nNumberOfBytesToRead=0xab74, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11248000*, lpNumberOfBytesRead=0x11288e18*=0xab74, lpOverlapped=0x0) returned 1
	[0285.365] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0285.365] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116e802 | out: pbBuffer=0x1116e802) returned 1
	[0285.365] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116e831 | out: pbBuffer=0x1116e831) returned 1
	[0285.366] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0285.367] GetFileType (hFile=0x1d4) returned 0x1
	[0285.367] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.367] WriteFile (in: hFile=0x1d4, lpBuffer=0x11146000*, nNumberOfBytesToWrite=0xab74, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x11146000*, lpNumberOfBytesWritten=0x110ebdfc*=0xab74, lpOverlapped=0x110ebe08) returned 1
	[0285.368] GetFileType (hFile=0x1d4) returned 0x1
	[0285.368] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xab74, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.368] GetFileType (hFile=0x1d4) returned 0x1
	[0285.368] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.369] WriteFile (in: hFile=0x1d4, lpBuffer=0x11156000*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x11156000*, lpNumberOfBytesWritten=0x110ebdfc*=0x236, lpOverlapped=0x110ebe08) returned 1
	[0285.369] GetFileType (hFile=0x1d4) returned 0x1
	[0285.369] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xab74, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.369] CloseHandle (hObject=0x1d4) returned 1
	[0285.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg.tl30z")) returned 0x220
	[0285.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0285.376] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0285.385] SetEvent (hEvent=0x210) returned 1
	[0285.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif")) returned 0x220
	[0285.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF", dwFileAttributes=0x220) returned 1
	[0285.386] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif.tl30z"), dwFlags=0x1) returned 1
	[0285.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.568] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0285.568] ReadFile (in: hFile=0x1d4, lpBuffer=0x111e4000, nNumberOfBytesToRead=0x4dd3, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x111e4000*, lpNumberOfBytesRead=0x11288e18*=0x4dd3, lpOverlapped=0x0) returned 1
	[0285.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332c50 | out: pbBuffer=0x11332c50) returned 1
	[0285.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130b302 | out: pbBuffer=0x1130b302) returned 1
	[0285.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130b319 | out: pbBuffer=0x1130b319) returned 1
	[0285.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332c80 | out: pbBuffer=0x11332c80) returned 1
	[0285.576] SetEvent (hEvent=0x210) returned 1
	[0285.576] GetFileType (hFile=0x1d4) returned 0x1
	[0285.576] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.577] WriteFile (in: hFile=0x1d4, lpBuffer=0x11be4000*, nNumberOfBytesToWrite=0x4dd3, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11be4000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4dd3, lpOverlapped=0x1102be08) returned 1
	[0285.577] GetFileType (hFile=0x1d4) returned 0x1
	[0285.577] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4dd3, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.577] GetFileType (hFile=0x1d4) returned 0x1
	[0285.577] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.577] WriteFile (in: hFile=0x1d4, lpBuffer=0x11200380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11200380*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0285.578] GetFileType (hFile=0x1d4) returned 0x1
	[0285.578] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4dd3, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.578] CloseHandle (hObject=0x1d4) returned 1
	[0285.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif.tl30z")) returned 0x220
	[0285.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.595] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0285.597] SetEvent (hEvent=0x210) returned 1
	[0285.597] SetEvent (hEvent=0x118) returned 1
	[0285.598] SwitchToThread () returned 1
	[0285.635] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0286.368] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0286.371] SetEvent (hEvent=0x210) returned 1
	[0286.371] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0286.377] SetEvent (hEvent=0x210) returned 1
	[0286.378] SwitchToThread () returned 1
	[0286.386] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0286.394] SetEvent (hEvent=0x234) returned 1
	[0286.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp")) returned 0x220
	[0286.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP", dwFileAttributes=0x220) returned 1
	[0286.394] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp.tl30z"), dwFlags=0x1) returned 1
	[0286.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.603] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0286.603] ReadFile (in: hFile=0x1d4, lpBuffer=0x11430000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x1128ce18*=0x7db8, lpOverlapped=0x0) returned 1
	[0286.611] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0286.611] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0286.611] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116a802 | out: pbBuffer=0x1116a802) returned 1
	[0286.611] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116a887 | out: pbBuffer=0x1116a887) returned 1
	[0286.611] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116a8ae | out: pbBuffer=0x1116a8ae) returned 1
	[0286.611] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116a8d5 | out: pbBuffer=0x1116a8d5) returned 1
	[0286.612] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0286.613] GetFileType (hFile=0x1d4) returned 0x1
	[0286.613] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.613] WriteFile (in: hFile=0x1d4, lpBuffer=0x11bc6000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x113bbdfc, lpOverlapped=0x113bbe08 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesWritten=0x113bbdfc*=0x7db8, lpOverlapped=0x113bbe08) returned 1
	[0286.614] GetFileType (hFile=0x1d4) returned 0x1
	[0286.614] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x113bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.614] GetFileType (hFile=0x1d4) returned 0x1
	[0286.614] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.614] WriteFile (in: hFile=0x1d4, lpBuffer=0x11360a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x113bbdfc, lpOverlapped=0x113bbe08 | out: lpBuffer=0x11360a80*, lpNumberOfBytesWritten=0x113bbdfc*=0x236, lpOverlapped=0x113bbe08) returned 1
	[0286.615] GetFileType (hFile=0x1d4) returned 0x1
	[0286.615] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x113bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.615] CloseHandle (hObject=0x1d4) returned 1
	[0286.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp.tl30z")) returned 0x220
	[0286.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0286.625] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0286.642] SetEvent (hEvent=0x234) returned 1
	[0286.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp")) returned 0x220
	[0286.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP", dwFileAttributes=0x220) returned 1
	[0286.642] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp.tl30z"), dwFlags=0x1) returned 1
	[0286.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.854] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0286.854] ReadFile (in: hFile=0x1d4, lpBuffer=0x110a0000, nNumberOfBytesToRead=0x7f68, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110a0000*, lpNumberOfBytesRead=0x1128ce18*=0x7f68, lpOverlapped=0x0) returned 1
	[0286.867] SetEvent (hEvent=0x234) returned 1
	[0286.868] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332470 | out: pbBuffer=0x11332470) returned 1
	[0286.868] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332468 | out: pbBuffer=0x11332468) returned 1
	[0286.868] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11218a02 | out: pbBuffer=0x11218a02) returned 1
	[0286.869] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324a0 | out: pbBuffer=0x113324a0) returned 1
	[0286.870] GetFileType (hFile=0x1d4) returned 0x1
	[0286.870] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.871] WriteFile (in: hFile=0x1d4, lpBuffer=0x11c02000*, nNumberOfBytesToWrite=0x7f68, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c02000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7f68, lpOverlapped=0x1102be08) returned 1
	[0286.871] GetFileType (hFile=0x1d4) returned 0x1
	[0286.871] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7f68, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.872] GetFileType (hFile=0x1d4) returned 0x1
	[0286.872] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.872] WriteFile (in: hFile=0x1d4, lpBuffer=0x110ba380*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110ba380*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0286.872] GetFileType (hFile=0x1d4) returned 0x1
	[0286.872] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7f68, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.872] CloseHandle (hObject=0x1d4) returned 1
	[0286.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp.tl30z")) returned 0x220
	[0286.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0286.912] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0286.914] SetEvent (hEvent=0x234) returned 1
	[0286.914] SetEvent (hEvent=0x210) returned 1
	[0286.914] SwitchToThread () returned 1
	[0286.920] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0286.966] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.009] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.086] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.133] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.179] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.391] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.446] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.507] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.538] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.585] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.616] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.655] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.664] SetEvent (hEvent=0x234) returned 1
	[0287.665] SetEvent (hEvent=0x1f0) returned 1
	[0287.665] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x0
	[0287.670] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x0
	[0287.678] SetEvent (hEvent=0x118) returned 1
	[0287.678] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0287.684] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.684] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.957] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.495] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.498] SetEvent (hEvent=0x118) returned 1
	[0288.498] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.506] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.523] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.564] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.606] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.642] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.683] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.736] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.778] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.825] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.873] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.959] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.014] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.047] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.092] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.125] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.178] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.212] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.275] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.341] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.383] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.431] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.467] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.494] SetEvent (hEvent=0x118) returned 1
	[0289.495] SetEvent (hEvent=0x1f0) returned 1
	[0289.495] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0289.504] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.505] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0289.507] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.508] SetEvent (hEvent=0x118) returned 1
	[0289.508] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0289.516] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.517] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.662] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0290.392] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0290.394] SetEvent (hEvent=0x248) returned 1
	[0290.394] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0290.405] SetEvent (hEvent=0x248) returned 1
	[0290.405] SwitchToThread () returned 1
	[0290.409] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0290.416] SetEvent (hEvent=0x248) returned 1
	[0290.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf")) returned 0x220
	[0290.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF", dwFileAttributes=0x220) returned 1
	[0290.417] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.633] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0290.633] ReadFile (in: hFile=0x1d4, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x864, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x1128be18*=0x864, lpOverlapped=0x0) returned 1
	[0290.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0290.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f268 | out: pbBuffer=0x1140f268) returned 1
	[0290.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1105f202 | out: pbBuffer=0x1105f202) returned 1
	[0290.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105f2eb | out: pbBuffer=0x1105f2eb) returned 1
	[0290.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0290.646] GetFileType (hFile=0x1d4) returned 0x1
	[0290.646] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11455de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.646] WriteFile (in: hFile=0x1d4, lpBuffer=0x11325000*, nNumberOfBytesToWrite=0x864, lpNumberOfBytesWritten=0x11455dfc, lpOverlapped=0x11455e08 | out: lpBuffer=0x11325000*, lpNumberOfBytesWritten=0x11455dfc*=0x864, lpOverlapped=0x11455e08) returned 1
	[0290.652] GetFileType (hFile=0x1d4) returned 0x1
	[0290.652] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x864, lpNewFilePointer=0x0, dwMoveMethod=0x11455de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.652] GetFileType (hFile=0x1d4) returned 0x1
	[0290.652] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11455de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.653] WriteFile (in: hFile=0x1d4, lpBuffer=0x11361880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11455dfc, lpOverlapped=0x11455e08 | out: lpBuffer=0x11361880*, lpNumberOfBytesWritten=0x11455dfc*=0x224, lpOverlapped=0x11455e08) returned 1
	[0290.653] GetFileType (hFile=0x1d4) returned 0x1
	[0290.653] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x864, lpNewFilePointer=0x0, dwMoveMethod=0x11455de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.653] CloseHandle (hObject=0x1d4) returned 1
	[0290.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf.tl30z")) returned 0x220
	[0290.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.673] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0290.683] SetEvent (hEvent=0x248) returned 1
	[0290.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf")) returned 0x220
	[0290.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF", dwFileAttributes=0x220) returned 1
	[0290.683] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.951] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0290.951] ReadFile (in: hFile=0x1d4, lpBuffer=0x110f0000, nNumberOfBytesToRead=0x2358, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x110f0000*, lpNumberOfBytesRead=0x1128be18*=0x2358, lpOverlapped=0x0) returned 1
	[0290.957] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0290.958] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11303302 | out: pbBuffer=0x11303302) returned 1
	[0290.958] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0290.958] GetFileType (hFile=0x1d4) returned 0x1
	[0290.958] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.958] WriteFile (in: hFile=0x1d4, lpBuffer=0x110b2000*, nNumberOfBytesToWrite=0x2358, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x110b2000*, lpNumberOfBytesWritten=0x112fddfc*=0x2358, lpOverlapped=0x112fde08) returned 1
	[0290.959] GetFileType (hFile=0x1d4) returned 0x1
	[0290.959] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2358, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.959] GetFileType (hFile=0x1d4) returned 0x1
	[0290.959] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.959] WriteFile (in: hFile=0x1d4, lpBuffer=0x11315880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x11315880*, lpNumberOfBytesWritten=0x112fddfc*=0x22a, lpOverlapped=0x112fde08) returned 1
	[0290.960] GetFileType (hFile=0x1d4) returned 0x1
	[0290.960] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2358, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.960] CloseHandle (hObject=0x1d4) returned 1
	[0290.972] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf.tl30z")) returned 0x220
	[0290.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.975] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0290.985] SetEvent (hEvent=0x234) returned 1
	[0290.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf")) returned 0x220
	[0290.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF", dwFileAttributes=0x220) returned 1
	[0290.985] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.200] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0291.201] ReadFile (in: hFile=0x1d4, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x4330, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x1128be18*=0x4330, lpOverlapped=0x0) returned 1
	[0291.216] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0291.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0291.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11248802 | out: pbBuffer=0x11248802) returned 1
	[0291.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0291.217] GetFileType (hFile=0x1d4) returned 0x1
	[0291.218] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.218] WriteFile (in: hFile=0x1d4, lpBuffer=0x11338000*, nNumberOfBytesToWrite=0x4330, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11338000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4330, lpOverlapped=0x1102be08) returned 1
	[0291.218] GetFileType (hFile=0x1d4) returned 0x1
	[0291.218] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4330, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.218] GetFileType (hFile=0x1d4) returned 0x1
	[0291.219] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.219] WriteFile (in: hFile=0x1d4, lpBuffer=0x11126e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11126e00*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0291.219] GetFileType (hFile=0x1d4) returned 0x1
	[0291.219] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4330, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.219] CloseHandle (hObject=0x1d4) returned 1
	[0291.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf.tl30z")) returned 0x220
	[0291.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.234] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.241] SetEvent (hEvent=0x234) returned 1
	[0291.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf")) returned 0x220
	[0291.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF", dwFileAttributes=0x220) returned 1
	[0291.242] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.425] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0291.425] ReadFile (in: hFile=0x1d4, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x571c, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x1128be18*=0x571c, lpOverlapped=0x0) returned 1
	[0291.431] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3e0 | out: pbBuffer=0x1140f3e0) returned 1
	[0291.432] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11373c02 | out: pbBuffer=0x11373c02) returned 1
	[0291.432] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11373c82 | out: pbBuffer=0x11373c82) returned 1
	[0291.432] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11373cb9 | out: pbBuffer=0x11373cb9) returned 1
	[0291.432] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0291.433] GetFileType (hFile=0x1d4) returned 0x1
	[0291.433] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.433] WriteFile (in: hFile=0x1d4, lpBuffer=0x113b8000*, nNumberOfBytesToWrite=0x571c, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x113b8000*, lpNumberOfBytesWritten=0x1141ddfc*=0x571c, lpOverlapped=0x1141de08) returned 1
	[0291.434] GetFileType (hFile=0x1d4) returned 0x1
	[0291.434] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x571c, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.434] GetFileType (hFile=0x1d4) returned 0x1
	[0291.434] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.434] WriteFile (in: hFile=0x1d4, lpBuffer=0x110de700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x110de700*, lpNumberOfBytesWritten=0x1141ddfc*=0x230, lpOverlapped=0x1141de08) returned 1
	[0291.434] GetFileType (hFile=0x1d4) returned 0x1
	[0291.434] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x571c, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.434] CloseHandle (hObject=0x1d4) returned 1
	[0291.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf.tl30z")) returned 0x220
	[0291.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.449] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.457] SetEvent (hEvent=0x234) returned 1
	[0291.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf")) returned 0x220
	[0291.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF", dwFileAttributes=0x220) returned 1
	[0291.458] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0291.542] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x111a9e08 | out: lpMode=0x111a9e08) returned 0
	[0291.542] ReadFile (in: hFile=0x1fc, lpBuffer=0x111f0000, nNumberOfBytesToRead=0x4ef4, lpNumberOfBytesRead=0x111a9e18, lpOverlapped=0x0 | out: lpBuffer=0x111f0000*, lpNumberOfBytesRead=0x111a9e18*=0x4ef4, lpOverlapped=0x0) returned 1
	[0291.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0291.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11202802 | out: pbBuffer=0x11202802) returned 1
	[0291.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112028dc | out: pbBuffer=0x112028dc) returned 1
	[0291.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0291.550] SetEvent (hEvent=0x234) returned 1
	[0291.550] GetFileType (hFile=0x1fc) returned 0x1
	[0291.551] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.551] WriteFile (in: hFile=0x1fc, lpBuffer=0x11bd8000*, nNumberOfBytesToWrite=0x4ef4, lpNumberOfBytesWritten=0x111a9dfc, lpOverlapped=0x111a9e08 | out: lpBuffer=0x11bd8000*, lpNumberOfBytesWritten=0x111a9dfc*=0x4ef4, lpOverlapped=0x111a9e08) returned 1
	[0291.551] GetFileType (hFile=0x1fc) returned 0x1
	[0291.551] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ef4, lpNewFilePointer=0x0, dwMoveMethod=0x111a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.551] GetFileType (hFile=0x1fc) returned 0x1
	[0291.551] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.552] WriteFile (in: hFile=0x1fc, lpBuffer=0x11218a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x111a9dfc, lpOverlapped=0x111a9e08 | out: lpBuffer=0x11218a80*, lpNumberOfBytesWritten=0x111a9dfc*=0x233, lpOverlapped=0x111a9e08) returned 1
	[0291.552] GetFileType (hFile=0x1fc) returned 0x1
	[0291.552] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ef4, lpNewFilePointer=0x0, dwMoveMethod=0x111a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.552] CloseHandle (hObject=0x1fc) returned 1
	[0291.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf.tl30z")) returned 0x220
	[0291.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.559] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.560] SetEvent (hEvent=0x234) returned 1
	[0291.560] SetEvent (hEvent=0x218) returned 1
	[0291.560] SwitchToThread () returned 1
	[0291.563] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.580] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.594] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.612] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.627] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.644] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.658] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.674] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.690] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.704] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.719] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.735] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.749] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.777] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.801] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.823] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.834] SetEvent (hEvent=0x234) returned 1
	[0291.835] SetEvent (hEvent=0x1f0) returned 1
	[0291.835] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0291.838] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.838] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0291.840] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.840] SetEvent (hEvent=0x248) returned 1
	[0291.841] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x0
	[0291.878] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0292.126] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0292.221] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0292.255] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0292.256] SetEvent (hEvent=0x248) returned 1
	[0292.256] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0292.261] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0292.289] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0292.306] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0292.324] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0292.346] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0292.960] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0292.968] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.003] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.008] SetEvent (hEvent=0x210) returned 1
	[0293.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf")) returned 0x220
	[0293.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF", dwFileAttributes=0x220) returned 1
	[0293.009] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0293.095] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0293.095] ReadFile (in: hFile=0x224, lpBuffer=0x11098000, nNumberOfBytesToRead=0x6890, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11098000*, lpNumberOfBytesRead=0x1131ce18*=0x6890, lpOverlapped=0x0) returned 1
	[0293.102] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0293.102] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332668 | out: pbBuffer=0x11332668) returned 1
	[0293.102] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ae702 | out: pbBuffer=0x110ae702) returned 1
	[0293.102] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110ae76b | out: pbBuffer=0x110ae76b) returned 1
	[0293.103] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0293.105] GetFileType (hFile=0x224) returned 0x1
	[0293.105] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.105] WriteFile (in: hFile=0x224, lpBuffer=0x111d6000*, nNumberOfBytesToWrite=0x6890, lpNumberOfBytesWritten=0x113addfc, lpOverlapped=0x113ade08 | out: lpBuffer=0x111d6000*, lpNumberOfBytesWritten=0x113addfc*=0x6890, lpOverlapped=0x113ade08) returned 1
	[0293.105] GetFileType (hFile=0x224) returned 0x1
	[0293.106] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6890, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.106] GetFileType (hFile=0x224) returned 0x1
	[0293.106] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.106] WriteFile (in: hFile=0x224, lpBuffer=0x110df500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113addfc, lpOverlapped=0x113ade08 | out: lpBuffer=0x110df500*, lpNumberOfBytesWritten=0x113addfc*=0x227, lpOverlapped=0x113ade08) returned 1
	[0293.106] GetFileType (hFile=0x224) returned 0x1
	[0293.106] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6890, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.106] CloseHandle (hObject=0x224) returned 1
	[0293.107] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf.tl30z")) returned 0x220
	[0293.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.110] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.112] SetEvent (hEvent=0x210) returned 1
	[0293.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf")) returned 0x220
	[0293.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF", dwFileAttributes=0x220) returned 1
	[0293.113] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0293.189] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0293.189] ReadFile (in: hFile=0x1fc, lpBuffer=0x11322a00, nNumberOfBytesToRead=0x2044, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11322a00*, lpNumberOfBytesRead=0x1131ce18*=0x2044, lpOverlapped=0x0) returned 1
	[0293.198] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1124c490 | out: pbBuffer=0x1124c490) returned 1
	[0293.198] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136bc02 | out: pbBuffer=0x1136bc02) returned 1
	[0293.199] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1124c4c0 | out: pbBuffer=0x1124c4c0) returned 1
	[0293.200] GetFileType (hFile=0x1fc) returned 0x1
	[0293.200] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.200] WriteFile (in: hFile=0x1fc, lpBuffer=0x1114a000*, nNumberOfBytesToWrite=0x2044, lpNumberOfBytesWritten=0x113abdfc, lpOverlapped=0x113abe08 | out: lpBuffer=0x1114a000*, lpNumberOfBytesWritten=0x113abdfc*=0x2044, lpOverlapped=0x113abe08) returned 1
	[0293.201] GetFileType (hFile=0x1fc) returned 0x1
	[0293.201] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2044, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.201] GetFileType (hFile=0x1fc) returned 0x1
	[0293.201] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.201] WriteFile (in: hFile=0x1fc, lpBuffer=0x11132e00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x113abdfc, lpOverlapped=0x113abe08 | out: lpBuffer=0x11132e00*, lpNumberOfBytesWritten=0x113abdfc*=0x221, lpOverlapped=0x113abe08) returned 1
	[0293.202] GetFileType (hFile=0x1fc) returned 0x1
	[0293.202] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2044, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.202] CloseHandle (hObject=0x1fc) returned 1
	[0293.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf.tl30z")) returned 0x220
	[0293.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.211] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.215] SetEvent (hEvent=0x210) returned 1
	[0293.215] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf")) returned 0x220
	[0293.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF", dwFileAttributes=0x220) returned 1
	[0293.216] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0293.314] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0293.314] ReadFile (in: hFile=0x224, lpBuffer=0x11412000, nNumberOfBytesToRead=0xe3c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11412000*, lpNumberOfBytesRead=0x1131ce18*=0xe3c, lpOverlapped=0x0) returned 1
	[0293.321] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0293.321] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4a8 | out: pbBuffer=0x1104e4a8) returned 1
	[0293.321] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11418802 | out: pbBuffer=0x11418802) returned 1
	[0293.321] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11418886 | out: pbBuffer=0x11418886) returned 1
	[0293.322] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1141888a | out: pbBuffer=0x1141888a) returned 1
	[0293.322] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0293.324] GetFileType (hFile=0x224) returned 0x1
	[0293.324] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.324] WriteFile (in: hFile=0x224, lpBuffer=0x11390000*, nNumberOfBytesToWrite=0xe3c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11390000*, lpNumberOfBytesWritten=0x11031dfc*=0xe3c, lpOverlapped=0x11031e08) returned 1
	[0293.324] GetFileType (hFile=0x224) returned 0x1
	[0293.324] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe3c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.325] GetFileType (hFile=0x224) returned 0x1
	[0293.325] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.325] WriteFile (in: hFile=0x224, lpBuffer=0x11355500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11355500*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0293.326] GetFileType (hFile=0x224) returned 0x1
	[0293.326] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe3c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.326] CloseHandle (hObject=0x224) returned 1
	[0293.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf.tl30z")) returned 0x220
	[0293.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf")) returned 0x220
	[0293.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF", dwFileAttributes=0x220) returned 1
	[0293.332] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0293.414] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0293.414] ReadFile (in: hFile=0x1fc, lpBuffer=0x11134000, nNumberOfBytesToRead=0x4146, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11134000*, lpNumberOfBytesRead=0x1131ce18*=0x4146, lpOverlapped=0x0) returned 1
	[0293.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6320 | out: pbBuffer=0x113e6320) returned 1
	[0293.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e5102 | out: pbBuffer=0x113e5102) returned 1
	[0293.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e512d | out: pbBuffer=0x113e512d) returned 1
	[0293.419] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6350 | out: pbBuffer=0x113e6350) returned 1
	[0293.419] GetFileType (hFile=0x1fc) returned 0x1
	[0293.419] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.420] WriteFile (in: hFile=0x1fc, lpBuffer=0x11114000*, nNumberOfBytesToWrite=0x4146, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11114000*, lpNumberOfBytesWritten=0x11031dfc*=0x4146, lpOverlapped=0x11031e08) returned 1
	[0293.420] GetFileType (hFile=0x1fc) returned 0x1
	[0293.420] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4146, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.420] GetFileType (hFile=0x1fc) returned 0x1
	[0293.420] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.420] WriteFile (in: hFile=0x1fc, lpBuffer=0x11132e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11132e00*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0293.421] GetFileType (hFile=0x1fc) returned 0x1
	[0293.421] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4146, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.421] CloseHandle (hObject=0x1fc) returned 1
	[0293.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf.tl30z")) returned 0x220
	[0293.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.424] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg")) returned 0x220
	[0293.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG", dwFileAttributes=0x220) returned 1
	[0293.426] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0293.521] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0293.521] ReadFile (in: hFile=0x1d4, lpBuffer=0x1121a000, nNumberOfBytesToRead=0x5285, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1121a000*, lpNumberOfBytesRead=0x1131ce18*=0x5285, lpOverlapped=0x0) returned 1
	[0293.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6d0 | out: pbBuffer=0x1140f6d0) returned 1
	[0293.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f6c8 | out: pbBuffer=0x1140f6c8) returned 1
	[0293.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d1202 | out: pbBuffer=0x111d1202) returned 1
	[0293.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d1297 | out: pbBuffer=0x111d1297) returned 1
	[0293.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f700 | out: pbBuffer=0x1140f700) returned 1
	[0293.529] SetEvent (hEvent=0x218) returned 1
	[0293.530] GetFileType (hFile=0x1d4) returned 0x1
	[0293.530] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.530] WriteFile (in: hFile=0x1d4, lpBuffer=0x11be6000*, nNumberOfBytesToWrite=0x5285, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x11be6000*, lpNumberOfBytesWritten=0x113efdfc*=0x5285, lpOverlapped=0x113efe08) returned 1
	[0293.531] GetFileType (hFile=0x1d4) returned 0x1
	[0293.531] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5285, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.531] GetFileType (hFile=0x1d4) returned 0x1
	[0293.531] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.531] WriteFile (in: hFile=0x1d4, lpBuffer=0x1123a380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x1123a380*, lpNumberOfBytesWritten=0x113efdfc*=0x22a, lpOverlapped=0x113efe08) returned 1
	[0293.532] GetFileType (hFile=0x1d4) returned 0x1
	[0293.532] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5285, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.532] CloseHandle (hObject=0x1d4) returned 1
	[0293.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg.tl30z")) returned 0x220
	[0293.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.538] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.540] SetEvent (hEvent=0x218) returned 1
	[0293.540] SetEvent (hEvent=0x210) returned 1
	[0293.540] SwitchToThread () returned 1
	[0293.543] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.545] SetEvent (hEvent=0x210) returned 1
	[0293.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg")) returned 0x220
	[0293.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG", dwFileAttributes=0x220) returned 1
	[0293.546] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0293.635] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0293.635] ReadFile (in: hFile=0x288, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x8a5b, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x11288e18*=0x8a5b, lpOverlapped=0x0) returned 1
	[0293.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0293.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ba802 | out: pbBuffer=0x113ba802) returned 1
	[0293.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0293.653] GetFileType (hFile=0x288) returned 0x1
	[0293.653] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.653] WriteFile (in: hFile=0x288, lpBuffer=0x112a6000*, nNumberOfBytesToWrite=0x8a5b, lpNumberOfBytesWritten=0x112a3dfc, lpOverlapped=0x112a3e08 | out: lpBuffer=0x112a6000*, lpNumberOfBytesWritten=0x112a3dfc*=0x8a5b, lpOverlapped=0x112a3e08) returned 1
	[0293.654] GetFileType (hFile=0x288) returned 0x1
	[0293.654] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x8a5b, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.654] GetFileType (hFile=0x288) returned 0x1
	[0293.654] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.654] WriteFile (in: hFile=0x288, lpBuffer=0x11458a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112a3dfc, lpOverlapped=0x112a3e08 | out: lpBuffer=0x11458a80*, lpNumberOfBytesWritten=0x112a3dfc*=0x233, lpOverlapped=0x112a3e08) returned 1
	[0293.655] GetFileType (hFile=0x288) returned 0x1
	[0293.655] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x8a5b, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.655] CloseHandle (hObject=0x288) returned 1
	[0293.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg.tl30z")) returned 0x220
	[0293.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.746] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.751] SetEvent (hEvent=0x210) returned 1
	[0293.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg")) returned 0x220
	[0293.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG", dwFileAttributes=0x220) returned 1
	[0293.751] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.829] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0294.094] SetEvent (hEvent=0x210) returned 1
	[0294.095] SetEvent (hEvent=0x218) returned 1
	[0294.095] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0294.424] SetEvent (hEvent=0x234) returned 1
	[0294.424] SetEvent (hEvent=0x210) returned 1
	[0294.424] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0294.696] SetEvent (hEvent=0x218) returned 1
	[0294.696] SetEvent (hEvent=0x234) returned 1
	[0294.696] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.180] SetEvent (hEvent=0x26c) returned 1
	[0295.180] SetEvent (hEvent=0x218) returned 1
	[0295.180] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.643] SetEvent (hEvent=0x118) returned 1
	[0295.643] SetEvent (hEvent=0x218) returned 1
	[0295.643] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.899] SetEvent (hEvent=0x218) returned 1
	[0295.899] SetEvent (hEvent=0x118) returned 1
	[0295.899] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.229] SetEvent (hEvent=0x118) returned 1
	[0296.229] SetEvent (hEvent=0x218) returned 1
	[0296.229] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.552] SetEvent (hEvent=0x210) returned 1
	[0296.552] SetEvent (hEvent=0x118) returned 1
	[0296.552] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.759] SetEvent (hEvent=0x218) returned 1
	[0296.759] SetEvent (hEvent=0x210) returned 1
	[0296.759] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0297.124] SetEvent (hEvent=0x234) returned 1
	[0297.124] SetEvent (hEvent=0x218) returned 1
	[0297.124] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0297.590] SetEvent (hEvent=0x218) returned 1
	[0297.590] SetEvent (hEvent=0x118) returned 1
	[0297.590] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0298.011] SetEvent (hEvent=0x218) returned 1
	[0298.011] SetEvent (hEvent=0x210) returned 1
	[0298.011] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0298.811] SetEvent (hEvent=0x234) returned 1
	[0298.811] SetEvent (hEvent=0x218) returned 1
	[0298.811] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.232] SetEvent (hEvent=0x118) returned 1
	[0299.232] SetEvent (hEvent=0x234) returned 1
	[0299.232] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.508] SetEvent (hEvent=0x234) returned 1
	[0299.508] SetEvent (hEvent=0x118) returned 1
	[0299.508] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.871] SetEvent (hEvent=0x118) returned 1
	[0299.871] SetEvent (hEvent=0x234) returned 1
	[0299.871] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0300.084] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0300.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf")) returned 0x220
	[0300.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF", dwFileAttributes=0x220) returned 1
	[0300.088] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.129] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0300.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0300.140] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0300.140] ReadFile (in: hFile=0x21c, lpBuffer=0x1144c000, nNumberOfBytesToRead=0xcec6, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1144c000*, lpNumberOfBytesRead=0x11022e18*=0xcec6, lpOverlapped=0x0) returned 1
	[0300.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6700 | out: pbBuffer=0x113e6700) returned 1
	[0300.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c4e002 | out: pbBuffer=0x11c4e002) returned 1
	[0300.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c4e027 | out: pbBuffer=0x11c4e027) returned 1
	[0300.911] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6730 | out: pbBuffer=0x113e6730) returned 1
	[0300.912] GetFileType (hFile=0x21c) returned 0x1
	[0300.912] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.912] WriteFile (in: hFile=0x21c, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0xcec6, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x1102ddfc*=0xcec6, lpOverlapped=0x1102de08) returned 1
	[0300.913] GetFileType (hFile=0x21c) returned 0x1
	[0300.913] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xcec6, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.914] GetFileType (hFile=0x21c) returned 0x1
	[0300.914] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.914] WriteFile (in: hFile=0x21c, lpBuffer=0x11c08000*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11c08000*, lpNumberOfBytesWritten=0x1102ddfc*=0x236, lpOverlapped=0x1102de08) returned 1
	[0300.915] GetFileType (hFile=0x21c) returned 0x1
	[0300.915] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xcec6, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.915] CloseHandle (hObject=0x21c) returned 1
	[0301.017] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf.tl30z")) returned 0x220
	[0301.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.131] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.141] SetEvent (hEvent=0x27c) returned 1
	[0301.141] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.143] SetEvent (hEvent=0x240) returned 1
	[0301.143] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.152] SetEvent (hEvent=0x248) returned 1
	[0301.152] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.154] GetFileType (hFile=0x2a0) returned 0x1
	[0301.154] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.155] WriteFile (in: hFile=0x2a0, lpBuffer=0x113c2a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x113c2a80*, lpNumberOfBytesWritten=0x113b3dfc*=0x227, lpOverlapped=0x113b3e08) returned 1
	[0301.160] GetFileType (hFile=0x2a0) returned 0x1
	[0301.160] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xa410, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.160] CloseHandle (hObject=0x2a0) returned 1
	[0301.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf.tl30z")) returned 0x220
	[0301.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.197] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.237] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.253] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.262] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.280] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.312] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf")) returned 0x220
	[0301.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF", dwFileAttributes=0x220) returned 1
	[0301.321] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0301.427] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0301.427] ReadFile (in: hFile=0x250, lpBuffer=0x11104800, nNumberOfBytesToRead=0x4330, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11104800*, lpNumberOfBytesRead=0x11428e18*=0x4330, lpOverlapped=0x0) returned 1
	[0301.434] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158570 | out: pbBuffer=0x11158570) returned 1
	[0301.434] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158568 | out: pbBuffer=0x11158568) returned 1
	[0301.434] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110eb202 | out: pbBuffer=0x110eb202) returned 1
	[0301.434] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110eb2d1 | out: pbBuffer=0x110eb2d1) returned 1
	[0301.434] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111585a0 | out: pbBuffer=0x111585a0) returned 1
	[0301.435] GetFileType (hFile=0x250) returned 0x1
	[0301.435] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.435] WriteFile (in: hFile=0x250, lpBuffer=0x11436000*, nNumberOfBytesToWrite=0x4330, lpNumberOfBytesWritten=0x1135bdfc, lpOverlapped=0x1135be08 | out: lpBuffer=0x11436000*, lpNumberOfBytesWritten=0x1135bdfc*=0x4330, lpOverlapped=0x1135be08) returned 1
	[0301.436] GetFileType (hFile=0x250) returned 0x1
	[0301.436] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4330, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.436] GetFileType (hFile=0x250) returned 0x1
	[0301.436] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.436] WriteFile (in: hFile=0x250, lpBuffer=0x111f6700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1135bdfc, lpOverlapped=0x1135be08 | out: lpBuffer=0x111f6700*, lpNumberOfBytesWritten=0x1135bdfc*=0x227, lpOverlapped=0x1135be08) returned 1
	[0301.437] GetFileType (hFile=0x250) returned 0x1
	[0301.437] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4330, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.437] CloseHandle (hObject=0x250) returned 1
	[0301.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf.tl30z")) returned 0x220
	[0301.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.441] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.444] SetEvent (hEvent=0x24c) returned 1
	[0301.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf")) returned 0x220
	[0301.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF", dwFileAttributes=0x220) returned 1
	[0301.445] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0301.573] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0301.573] ReadFile (in: hFile=0x1b4, lpBuffer=0x11382000, nNumberOfBytesToRead=0x3854, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11382000*, lpNumberOfBytesRead=0x11428e18*=0x3854, lpOverlapped=0x0) returned 1
	[0301.581] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158400 | out: pbBuffer=0x11158400) returned 1
	[0301.581] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111583f8 | out: pbBuffer=0x111583f8) returned 1
	[0301.581] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267e02 | out: pbBuffer=0x11267e02) returned 1
	[0301.581] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158430 | out: pbBuffer=0x11158430) returned 1
	[0301.582] GetFileType (hFile=0x1b4) returned 0x1
	[0301.582] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.582] WriteFile (in: hFile=0x1b4, lpBuffer=0x11324000*, nNumberOfBytesToWrite=0x3854, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11324000*, lpNumberOfBytesWritten=0x11339dfc*=0x3854, lpOverlapped=0x11339e08) returned 1
	[0301.583] GetFileType (hFile=0x1b4) returned 0x1
	[0301.583] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3854, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.583] GetFileType (hFile=0x1b4) returned 0x1
	[0301.583] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.583] WriteFile (in: hFile=0x1b4, lpBuffer=0x113faa80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x113faa80*, lpNumberOfBytesWritten=0x11339dfc*=0x22a, lpOverlapped=0x11339e08) returned 1
	[0301.584] GetFileType (hFile=0x1b4) returned 0x1
	[0301.584] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3854, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.584] CloseHandle (hObject=0x1b4) returned 1
	[0301.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf.tl30z")) returned 0x220
	[0301.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf")) returned 0x220
	[0301.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF", dwFileAttributes=0x220) returned 1
	[0301.589] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0301.667] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0301.667] ReadFile (in: hFile=0x250, lpBuffer=0x11bd8000, nNumberOfBytesToRead=0x3700, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11bd8000*, lpNumberOfBytesRead=0x11428e18*=0x3700, lpOverlapped=0x0) returned 1
	[0301.673] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0301.673] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f8802 | out: pbBuffer=0x112f8802) returned 1
	[0301.674] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0301.674] GetFileType (hFile=0x250) returned 0x1
	[0301.674] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.674] WriteFile (in: hFile=0x250, lpBuffer=0x112ba000*, nNumberOfBytesToWrite=0x3700, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112ba000*, lpNumberOfBytesWritten=0x11031dfc*=0x3700, lpOverlapped=0x11031e08) returned 1
	[0301.675] GetFileType (hFile=0x250) returned 0x1
	[0301.675] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3700, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.675] GetFileType (hFile=0x250) returned 0x1
	[0301.675] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.675] WriteFile (in: hFile=0x250, lpBuffer=0x1130aa80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1130aa80*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0301.676] GetFileType (hFile=0x250) returned 0x1
	[0301.676] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3700, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.676] CloseHandle (hObject=0x250) returned 1
	[0301.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf.tl30z")) returned 0x220
	[0301.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.679] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.684] SetEvent (hEvent=0x284) returned 1
	[0301.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf")) returned 0x220
	[0301.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF", dwFileAttributes=0x220) returned 1
	[0301.685] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.755] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.766] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.229] SetEvent (hEvent=0x174) returned 1
	[0302.229] SetEvent (hEvent=0x284) returned 1
	[0302.229] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.235] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.245] SetEvent (hEvent=0x164) returned 1
	[0302.245] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.256] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.349] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.564] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.566] SetEvent (hEvent=0x248) returned 1
	[0302.566] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf")) returned 0x220
	[0302.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF", dwFileAttributes=0x220) returned 1
	[0302.570] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.665] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0302.665] ReadFile (in: hFile=0x1d8, lpBuffer=0x1129b800, nNumberOfBytesToRead=0x4236, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1129b800*, lpNumberOfBytesRead=0x11022e18*=0x4236, lpOverlapped=0x0) returned 1
	[0302.669] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111586d0 | out: pbBuffer=0x111586d0) returned 1
	[0302.670] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11227402 | out: pbBuffer=0x11227402) returned 1
	[0302.670] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1122749e | out: pbBuffer=0x1122749e) returned 1
	[0302.670] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158700 | out: pbBuffer=0x11158700) returned 1
	[0302.671] GetFileType (hFile=0x1d8) returned 0x1
	[0302.671] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.671] WriteFile (in: hFile=0x1d8, lpBuffer=0x11322000*, nNumberOfBytesToWrite=0x4236, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11322000*, lpNumberOfBytesWritten=0x1133fdfc*=0x4236, lpOverlapped=0x1133fe08) returned 1
	[0302.672] GetFileType (hFile=0x1d8) returned 0x1
	[0302.672] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4236, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.672] GetFileType (hFile=0x1d8) returned 0x1
	[0302.672] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.672] WriteFile (in: hFile=0x1d8, lpBuffer=0x113fa700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113fa700*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0302.672] GetFileType (hFile=0x1d8) returned 0x1
	[0302.672] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4236, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.673] CloseHandle (hObject=0x1d8) returned 1
	[0302.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf.tl30z")) returned 0x220
	[0302.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.676] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.680] SetEvent (hEvent=0x160) returned 1
	[0302.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf")) returned 0x220
	[0302.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF", dwFileAttributes=0x220) returned 1
	[0302.682] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.757] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0302.758] ReadFile (in: hFile=0x1d8, lpBuffer=0x11106000, nNumberOfBytesToRead=0x2b0e, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11106000*, lpNumberOfBytesRead=0x11022e18*=0x2b0e, lpOverlapped=0x0) returned 1
	[0302.764] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f550 | out: pbBuffer=0x1140f550) returned 1
	[0302.764] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110f0902 | out: pbBuffer=0x110f0902) returned 1
	[0302.764] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110f097b | out: pbBuffer=0x110f097b) returned 1
	[0302.765] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f580 | out: pbBuffer=0x1140f580) returned 1
	[0302.765] GetFileType (hFile=0x1d8) returned 0x1
	[0302.765] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.766] WriteFile (in: hFile=0x1d8, lpBuffer=0x1116a000*, nNumberOfBytesToWrite=0x2b0e, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1116a000*, lpNumberOfBytesWritten=0x1102ddfc*=0x2b0e, lpOverlapped=0x1102de08) returned 1
	[0302.766] GetFileType (hFile=0x1d8) returned 0x1
	[0302.766] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2b0e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.766] GetFileType (hFile=0x1d8) returned 0x1
	[0302.766] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.766] WriteFile (in: hFile=0x1d8, lpBuffer=0x110ad500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110ad500*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0302.767] GetFileType (hFile=0x1d8) returned 0x1
	[0302.767] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2b0e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.767] CloseHandle (hObject=0x1d8) returned 1
	[0302.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf.tl30z")) returned 0x220
	[0302.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.769] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.771] SetEvent (hEvent=0x160) returned 1
	[0302.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf")) returned 0x220
	[0302.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF", dwFileAttributes=0x220) returned 1
	[0302.772] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0302.892] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0302.892] ReadFile (in: hFile=0x250, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x103e, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x11022e18*=0x103e, lpOverlapped=0x0) returned 1
	[0302.897] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0302.897] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1132e802 | out: pbBuffer=0x1132e802) returned 1
	[0302.897] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0302.897] GetFileType (hFile=0x250) returned 0x1
	[0302.898] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.898] WriteFile (in: hFile=0x250, lpBuffer=0x1141a000*, nNumberOfBytesToWrite=0x103e, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1141a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x103e, lpOverlapped=0x1102be08) returned 1
	[0302.898] GetFileType (hFile=0x250) returned 0x1
	[0302.898] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x103e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.898] GetFileType (hFile=0x250) returned 0x1
	[0302.898] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.899] WriteFile (in: hFile=0x250, lpBuffer=0x11386a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11386a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0302.899] GetFileType (hFile=0x250) returned 0x1
	[0302.899] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x103e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.899] CloseHandle (hObject=0x250) returned 1
	[0302.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf.tl30z")) returned 0x220
	[0302.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.902] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.903] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.907] SetEvent (hEvent=0x160) returned 1
	[0302.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg")) returned 0x220
	[0302.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG", dwFileAttributes=0x220) returned 1
	[0302.907] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0303.010] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0303.010] ReadFile (in: hFile=0x1fc, lpBuffer=0x11106000, nNumberOfBytesToRead=0x544c, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11106000*, lpNumberOfBytesRead=0x11425e18*=0x544c, lpOverlapped=0x0) returned 1
	[0303.015] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0303.015] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1132fd02 | out: pbBuffer=0x1132fd02) returned 1
	[0303.015] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132fd7c | out: pbBuffer=0x1132fd7c) returned 1
	[0303.016] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f430 | out: pbBuffer=0x1140f430) returned 1
	[0303.016] GetFileType (hFile=0x1fc) returned 0x1
	[0303.016] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.017] WriteFile (in: hFile=0x1fc, lpBuffer=0x1115a000*, nNumberOfBytesToWrite=0x544c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1115a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x544c, lpOverlapped=0x1102be08) returned 1
	[0303.017] GetFileType (hFile=0x1fc) returned 0x1
	[0303.017] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x544c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.017] GetFileType (hFile=0x1fc) returned 0x1
	[0303.018] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.018] WriteFile (in: hFile=0x1fc, lpBuffer=0x1111e700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1111e700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0303.018] GetFileType (hFile=0x1fc) returned 0x1
	[0303.018] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x544c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.018] CloseHandle (hObject=0x1fc) returned 1
	[0303.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg.tl30z")) returned 0x220
	[0303.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.021] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.025] SetEvent (hEvent=0x160) returned 1
	[0303.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf")) returned 0x220
	[0303.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF", dwFileAttributes=0x220) returned 1
	[0303.025] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf.tl30z"), dwFlags=0x1) returned 1
	[0303.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.114] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0303.114] ReadFile (in: hFile=0x1d8, lpBuffer=0x1128fa80, nNumberOfBytesToRead=0x1a00, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1128fa80*, lpNumberOfBytesRead=0x11425e18*=0x1a00, lpOverlapped=0x0) returned 1
	[0303.118] SetEvent (hEvent=0x160) returned 1
	[0303.119] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158c90 | out: pbBuffer=0x11158c90) returned 1
	[0303.120] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158c88 | out: pbBuffer=0x11158c88) returned 1
	[0303.120] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116da02 | out: pbBuffer=0x1116da02) returned 1
	[0303.120] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116da68 | out: pbBuffer=0x1116da68) returned 1
	[0303.120] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116daa7 | out: pbBuffer=0x1116daa7) returned 1
	[0303.120] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158cc0 | out: pbBuffer=0x11158cc0) returned 1
	[0303.120] GetFileType (hFile=0x1d8) returned 0x1
	[0303.121] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.121] WriteFile (in: hFile=0x1d8, lpBuffer=0x11226000*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11226000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1a00, lpOverlapped=0x1133fe08) returned 1
	[0303.121] GetFileType (hFile=0x1d8) returned 0x1
	[0303.121] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1a00, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.121] GetFileType (hFile=0x1d8) returned 0x1
	[0303.121] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.122] WriteFile (in: hFile=0x1d8, lpBuffer=0x11315c00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11315c00*, lpNumberOfBytesWritten=0x1133fdfc*=0x221, lpOverlapped=0x1133fe08) returned 1
	[0303.122] GetFileType (hFile=0x1d8) returned 0x1
	[0303.122] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1a00, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.122] CloseHandle (hObject=0x1d8) returned 1
	[0303.124] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf.tl30z")) returned 0x220
	[0303.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0303.127] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.129] SetEvent (hEvent=0x160) returned 1
	[0303.130] SetEvent (hEvent=0x164) returned 1
	[0303.130] SwitchToThread () returned 1
	[0303.325] SwitchToThread () returned 1
	[0303.344] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.390] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.411] SetEvent (hEvent=0x160) returned 1
	[0303.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg")) returned 0x220
	[0303.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG", dwFileAttributes=0x220) returned 1
	[0303.412] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0303.500] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0303.500] ReadFile (in: hFile=0x1fc, lpBuffer=0x111ea800, nNumberOfBytesToRead=0x40f2, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x111ea800*, lpNumberOfBytesRead=0x1128be18*=0x40f2, lpOverlapped=0x0) returned 1
	[0303.505] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158270 | out: pbBuffer=0x11158270) returned 1
	[0303.505] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158268 | out: pbBuffer=0x11158268) returned 1
	[0303.505] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130f302 | out: pbBuffer=0x1130f302) returned 1
	[0303.505] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130f34e | out: pbBuffer=0x1130f34e) returned 1
	[0303.505] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582a0 | out: pbBuffer=0x111582a0) returned 1
	[0303.506] GetFileType (hFile=0x1fc) returned 0x1
	[0303.506] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.506] WriteFile (in: hFile=0x1fc, lpBuffer=0x11bca000*, nNumberOfBytesToWrite=0x40f2, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11bca000*, lpNumberOfBytesWritten=0x1102ddfc*=0x40f2, lpOverlapped=0x1102de08) returned 1
	[0303.507] GetFileType (hFile=0x1fc) returned 0x1
	[0303.507] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x40f2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.507] GetFileType (hFile=0x1fc) returned 0x1
	[0303.507] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.508] WriteFile (in: hFile=0x1fc, lpBuffer=0x111d5880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111d5880*, lpNumberOfBytesWritten=0x1102ddfc*=0x22a, lpOverlapped=0x1102de08) returned 1
	[0303.508] GetFileType (hFile=0x1fc) returned 0x1
	[0303.508] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x40f2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.508] CloseHandle (hObject=0x1fc) returned 1
	[0303.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg.tl30z")) returned 0x220
	[0303.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.524] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.530] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.554] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.572] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.590] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.599] SetEvent (hEvent=0x160) returned 1
	[0303.600] SetEvent (hEvent=0x174) returned 1
	[0303.600] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x0
	[0303.602] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x0
	[0303.603] SetEvent (hEvent=0x1e0) returned 1
	[0303.604] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0303.607] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.630] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.651] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.662] SetEvent (hEvent=0x1e0) returned 1
	[0303.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg")) returned 0x220
	[0303.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG", dwFileAttributes=0x220) returned 1
	[0303.663] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0303.755] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0303.755] ReadFile (in: hFile=0x2a0, lpBuffer=0x110e9000, nNumberOfBytesToRead=0x2cdd, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x110e9000*, lpNumberOfBytesRead=0x11022e18*=0x2cdd, lpOverlapped=0x0) returned 1
	[0303.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158590 | out: pbBuffer=0x11158590) returned 1
	[0303.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113be802 | out: pbBuffer=0x113be802) returned 1
	[0303.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113be816 | out: pbBuffer=0x113be816) returned 1
	[0303.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111585c0 | out: pbBuffer=0x111585c0) returned 1
	[0303.761] GetFileType (hFile=0x2a0) returned 0x1
	[0303.761] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.762] WriteFile (in: hFile=0x2a0, lpBuffer=0x1110e000*, nNumberOfBytesToWrite=0x2cdd, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1110e000*, lpNumberOfBytesWritten=0x1102ddfc*=0x2cdd, lpOverlapped=0x1102de08) returned 1
	[0303.763] GetFileType (hFile=0x2a0) returned 0x1
	[0303.763] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x2cdd, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.763] GetFileType (hFile=0x2a0) returned 0x1
	[0303.763] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.763] WriteFile (in: hFile=0x2a0, lpBuffer=0x11151880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11151880*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0303.763] GetFileType (hFile=0x2a0) returned 0x1
	[0303.763] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x2cdd, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.764] CloseHandle (hObject=0x2a0) returned 1
	[0303.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg.tl30z")) returned 0x220
	[0303.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg")) returned 0x220
	[0303.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG", dwFileAttributes=0x220) returned 1
	[0303.767] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.831] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0303.831] ReadFile (in: hFile=0x1d8, lpBuffer=0x11454000, nNumberOfBytesToRead=0xa9e2, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11454000*, lpNumberOfBytesRead=0x11023e18*=0xa9e2, lpOverlapped=0x0) returned 1
	[0303.836] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158a40 | out: pbBuffer=0x11158a40) returned 1
	[0303.836] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11468602 | out: pbBuffer=0x11468602) returned 1
	[0303.837] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158a70 | out: pbBuffer=0x11158a70) returned 1
	[0303.838] GetFileType (hFile=0x1d8) returned 0x1
	[0303.838] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.838] WriteFile (in: hFile=0x1d8, lpBuffer=0x111e6000*, nNumberOfBytesToWrite=0xa9e2, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111e6000*, lpNumberOfBytesWritten=0x1102ddfc*=0xa9e2, lpOverlapped=0x1102de08) returned 1
	[0303.839] GetFileType (hFile=0x1d8) returned 0x1
	[0303.839] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa9e2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.839] GetFileType (hFile=0x1d8) returned 0x1
	[0303.839] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.839] WriteFile (in: hFile=0x1d8, lpBuffer=0x11470380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11470380*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0303.840] GetFileType (hFile=0x1d8) returned 0x1
	[0303.840] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa9e2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.840] CloseHandle (hObject=0x1d8) returned 1
	[0303.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg.tl30z")) returned 0x220
	[0303.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.848] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.854] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.865] SetEvent (hEvent=0x1e0) returned 1
	[0303.865] SetEvent (hEvent=0x174) returned 1
	[0303.865] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x0
	[0303.867] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x0
	[0303.868] SetEvent (hEvent=0x24c) returned 1
	[0303.868] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0303.871] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.891] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.913] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.955] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.972] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.991] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.014] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.037] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.047] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.067] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.079] SetEvent (hEvent=0x248) returned 1
	[0304.080] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.101] SetEvent (hEvent=0x284) returned 1
	[0304.101] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg")) returned 0x220
	[0304.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG", dwFileAttributes=0x220) returned 1
	[0304.115] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0304.306] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0304.306] ReadFile (in: hFile=0x1fc, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x6b24, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11319e18*=0x6b24, lpOverlapped=0x0) returned 1
	[0304.317] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0304.317] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0304.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11376802 | out: pbBuffer=0x11376802) returned 1
	[0304.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11376816 | out: pbBuffer=0x11376816) returned 1
	[0304.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113768b8 | out: pbBuffer=0x113768b8) returned 1
	[0304.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0304.319] GetFileType (hFile=0x1fc) returned 0x1
	[0304.319] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.319] WriteFile (in: hFile=0x1fc, lpBuffer=0x1135a000*, nNumberOfBytesToWrite=0x6b24, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x6b24, lpOverlapped=0x1102be08) returned 1
	[0304.320] GetFileType (hFile=0x1fc) returned 0x1
	[0304.320] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6b24, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.320] GetFileType (hFile=0x1fc) returned 0x1
	[0304.320] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.320] WriteFile (in: hFile=0x1fc, lpBuffer=0x11444a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11444a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0304.321] GetFileType (hFile=0x1fc) returned 0x1
	[0304.321] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6b24, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.321] CloseHandle (hObject=0x1fc) returned 1
	[0304.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg.tl30z")) returned 0x220
	[0304.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg")) returned 0x220
	[0304.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG", dwFileAttributes=0x220) returned 1
	[0304.337] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0304.597] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0304.597] ReadFile (in: hFile=0x1d8, lpBuffer=0x11176000, nNumberOfBytesToRead=0x8fc7, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11176000*, lpNumberOfBytesRead=0x11319e18*=0x8fc7, lpOverlapped=0x0) returned 1
	[0304.605] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0304.605] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0304.605] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1139f302 | out: pbBuffer=0x1139f302) returned 1
	[0304.605] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139f327 | out: pbBuffer=0x1139f327) returned 1
	[0304.605] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139f3e2 | out: pbBuffer=0x1139f3e2) returned 1
	[0304.606] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0304.606] GetFileType (hFile=0x1d8) returned 0x1
	[0304.606] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.607] WriteFile (in: hFile=0x1d8, lpBuffer=0x110f0000*, nNumberOfBytesToWrite=0x8fc7, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110f0000*, lpNumberOfBytesWritten=0x11031dfc*=0x8fc7, lpOverlapped=0x11031e08) returned 1
	[0304.607] GetFileType (hFile=0x1d8) returned 0x1
	[0304.607] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8fc7, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.607] GetFileType (hFile=0x1d8) returned 0x1
	[0304.608] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.608] WriteFile (in: hFile=0x1d8, lpBuffer=0x11299880*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11299880*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0304.608] GetFileType (hFile=0x1d8) returned 0x1
	[0304.608] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8fc7, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.608] CloseHandle (hObject=0x1d8) returned 1
	[0304.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg.tl30z")) returned 0x220
	[0304.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.611] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.615] SetEvent (hEvent=0x284) returned 1
	[0304.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg")) returned 0x220
	[0304.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG", dwFileAttributes=0x220) returned 1
	[0304.615] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0304.722] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0304.722] ReadFile (in: hFile=0x1fc, lpBuffer=0x11058000, nNumberOfBytesToRead=0x87a4, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11319e18*=0x87a4, lpOverlapped=0x0) returned 1
	[0304.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0304.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a4802 | out: pbBuffer=0x113a4802) returned 1
	[0304.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a48c9 | out: pbBuffer=0x113a48c9) returned 1
	[0304.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a48d7 | out: pbBuffer=0x113a48d7) returned 1
	[0304.731] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0304.732] GetFileType (hFile=0x1fc) returned 0x1
	[0304.732] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.732] WriteFile (in: hFile=0x1fc, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0x87a4, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x1139fdfc*=0x87a4, lpOverlapped=0x1139fe08) returned 1
	[0304.732] GetFileType (hFile=0x1fc) returned 0x1
	[0304.732] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x87a4, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.733] GetFileType (hFile=0x1fc) returned 0x1
	[0304.733] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.733] WriteFile (in: hFile=0x1fc, lpBuffer=0x113fca80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x113fca80*, lpNumberOfBytesWritten=0x1139fdfc*=0x230, lpOverlapped=0x1139fe08) returned 1
	[0304.733] GetFileType (hFile=0x1fc) returned 0x1
	[0304.733] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x87a4, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.733] CloseHandle (hObject=0x1fc) returned 1
	[0304.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg.tl30z")) returned 0x220
	[0304.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.735] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.737] SetEvent (hEvent=0x160) returned 1
	[0304.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg")) returned 0x220
	[0304.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG", dwFileAttributes=0x220) returned 1
	[0304.738] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0304.809] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0304.809] ReadFile (in: hFile=0x2a0, lpBuffer=0x111dc000, nNumberOfBytesToRead=0x8cc6, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x111dc000*, lpNumberOfBytesRead=0x11319e18*=0x8cc6, lpOverlapped=0x0) returned 1
	[0304.819] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111583f0 | out: pbBuffer=0x111583f0) returned 1
	[0304.819] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111583e8 | out: pbBuffer=0x111583e8) returned 1
	[0304.819] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ea602 | out: pbBuffer=0x111ea602) returned 1
	[0304.819] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ea60e | out: pbBuffer=0x111ea60e) returned 1
	[0304.819] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ea69a | out: pbBuffer=0x111ea69a) returned 1
	[0304.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158420 | out: pbBuffer=0x11158420) returned 1
	[0304.822] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x0
	[0304.823] SetEvent (hEvent=0x150) returned 1
	[0304.823] SetEvent (hEvent=0x248) returned 1
	[0304.824] GetFileType (hFile=0x2a0) returned 0x1
	[0304.824] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.824] WriteFile (in: hFile=0x2a0, lpBuffer=0x11226000*, nNumberOfBytesToWrite=0x8cc6, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11226000*, lpNumberOfBytesWritten=0x1133fdfc*=0x8cc6, lpOverlapped=0x1133fe08) returned 1
	[0304.824] GetFileType (hFile=0x2a0) returned 0x1
	[0304.824] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x8cc6, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.824] GetFileType (hFile=0x2a0) returned 0x1
	[0304.825] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.825] WriteFile (in: hFile=0x2a0, lpBuffer=0x11135500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11135500*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0304.825] GetFileType (hFile=0x2a0) returned 0x1
	[0304.825] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x8cc6, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.825] CloseHandle (hObject=0x2a0) returned 1
	[0304.830] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg.tl30z")) returned 0x220
	[0304.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.834] SwitchToThread () returned 1
	[0304.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg")) returned 0x220
	[0304.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG", dwFileAttributes=0x220) returned 1
	[0304.836] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0304.940] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0304.940] ReadFile (in: hFile=0x1d4, lpBuffer=0x110f0000, nNumberOfBytesToRead=0x8616, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x110f0000*, lpNumberOfBytesRead=0x1131be18*=0x8616, lpOverlapped=0x0) returned 1
	[0304.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0304.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f278 | out: pbBuffer=0x1140f278) returned 1
	[0304.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f7302 | out: pbBuffer=0x111f7302) returned 1
	[0304.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f7328 | out: pbBuffer=0x111f7328) returned 1
	[0304.949] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0304.950] GetFileType (hFile=0x1d4) returned 0x1
	[0304.950] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.950] WriteFile (in: hFile=0x1d4, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0x8616, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x1133fdfc*=0x8616, lpOverlapped=0x1133fe08) returned 1
	[0304.976] GetFileType (hFile=0x1d4) returned 0x1
	[0304.976] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8616, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.976] GetFileType (hFile=0x1d4) returned 0x1
	[0304.977] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.977] WriteFile (in: hFile=0x1d4, lpBuffer=0x11135c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11135c00*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0304.977] GetFileType (hFile=0x1d4) returned 0x1
	[0304.977] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8616, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.977] CloseHandle (hObject=0x1d4) returned 1
	[0304.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg.tl30z")) returned 0x220
	[0304.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.993] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.997] SetEvent (hEvent=0x284) returned 1
	[0304.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg")) returned 0x220
	[0304.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG", dwFileAttributes=0x220) returned 1
	[0304.998] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0305.154] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0305.154] ReadFile (in: hFile=0x250, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x83cf, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x1131be18*=0x83cf, lpOverlapped=0x0) returned 1
	[0305.165] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0305.166] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bfc902 | out: pbBuffer=0x11bfc902) returned 1
	[0305.166] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0305.167] GetFileType (hFile=0x250) returned 0x1
	[0305.167] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.168] WriteFile (in: hFile=0x250, lpBuffer=0x1116c000*, nNumberOfBytesToWrite=0x83cf, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1116c000*, lpNumberOfBytesWritten=0x1133bdfc*=0x83cf, lpOverlapped=0x1133be08) returned 1
	[0305.168] GetFileType (hFile=0x250) returned 0x1
	[0305.168] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x83cf, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.168] GetFileType (hFile=0x250) returned 0x1
	[0305.169] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.169] WriteFile (in: hFile=0x250, lpBuffer=0x11bdf500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11bdf500*, lpNumberOfBytesWritten=0x1133bdfc*=0x236, lpOverlapped=0x1133be08) returned 1
	[0305.169] GetFileType (hFile=0x250) returned 0x1
	[0305.169] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x83cf, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.169] CloseHandle (hObject=0x250) returned 1
	[0305.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg.tl30z")) returned 0x220
	[0305.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.173] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.174] SetEvent (hEvent=0x174) returned 1
	[0305.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg")) returned 0x220
	[0305.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG", dwFileAttributes=0x220) returned 1
	[0305.175] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0305.282] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0305.282] ReadFile (in: hFile=0x250, lpBuffer=0x112c2000, nNumberOfBytesToRead=0x8014, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x112c2000*, lpNumberOfBytesRead=0x1131be18*=0x8014, lpOverlapped=0x0) returned 1
	[0305.302] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0305.302] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3e8 | out: pbBuffer=0x1140f3e8) returned 1
	[0305.303] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bfde02 | out: pbBuffer=0x11bfde02) returned 1
	[0305.303] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0305.304] GetFileType (hFile=0x250) returned 0x1
	[0305.304] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.304] WriteFile (in: hFile=0x250, lpBuffer=0x1121a000*, nNumberOfBytesToWrite=0x8014, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1121a000*, lpNumberOfBytesWritten=0x1133bdfc*=0x8014, lpOverlapped=0x1133be08) returned 1
	[0305.305] GetFileType (hFile=0x250) returned 0x1
	[0305.305] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x8014, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.305] GetFileType (hFile=0x250) returned 0x1
	[0305.305] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.305] WriteFile (in: hFile=0x250, lpBuffer=0x11091180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11091180*, lpNumberOfBytesWritten=0x1133bdfc*=0x224, lpOverlapped=0x1133be08) returned 1
	[0305.306] GetFileType (hFile=0x250) returned 0x1
	[0305.306] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x8014, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.306] CloseHandle (hObject=0x250) returned 1
	[0305.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg.tl30z")) returned 0x220
	[0305.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.311] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.314] SetEvent (hEvent=0x1e0) returned 1
	[0305.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg")) returned 0x220
	[0305.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG", dwFileAttributes=0x220) returned 1
	[0305.315] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0305.411] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0305.411] ReadFile (in: hFile=0x1b4, lpBuffer=0x11430000, nNumberOfBytesToRead=0x3b43, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x1131be18*=0x3b43, lpOverlapped=0x0) returned 1
	[0305.422] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0305.423] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6288 | out: pbBuffer=0x113e6288) returned 1
	[0305.423] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f1202 | out: pbBuffer=0x112f1202) returned 1
	[0305.423] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62c0 | out: pbBuffer=0x113e62c0) returned 1
	[0305.424] GetFileType (hFile=0x1b4) returned 0x1
	[0305.424] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.424] WriteFile (in: hFile=0x1b4, lpBuffer=0x11142000*, nNumberOfBytesToWrite=0x3b43, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11142000*, lpNumberOfBytesWritten=0x1102ddfc*=0x3b43, lpOverlapped=0x1102de08) returned 1
	[0305.424] GetFileType (hFile=0x1b4) returned 0x1
	[0305.425] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3b43, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.425] GetFileType (hFile=0x1b4) returned 0x1
	[0305.425] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.425] WriteFile (in: hFile=0x1b4, lpBuffer=0x11419880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11419880*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0305.425] GetFileType (hFile=0x1b4) returned 0x1
	[0305.425] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3b43, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.426] CloseHandle (hObject=0x1b4) returned 1
	[0305.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg.tl30z")) returned 0x220
	[0305.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.430] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.433] SetEvent (hEvent=0x174) returned 1
	[0305.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg")) returned 0x220
	[0305.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG", dwFileAttributes=0x220) returned 1
	[0305.434] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0305.522] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0305.522] ReadFile (in: hFile=0x1b4, lpBuffer=0x111c0000, nNumberOfBytesToRead=0x98c7, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x1131be18*=0x98c7, lpOverlapped=0x0) returned 1
	[0305.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f720 | out: pbBuffer=0x1140f720) returned 1
	[0305.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f718 | out: pbBuffer=0x1140f718) returned 1
	[0305.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bdd402 | out: pbBuffer=0x11bdd402) returned 1
	[0305.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bdd42f | out: pbBuffer=0x11bdd42f) returned 1
	[0305.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f750 | out: pbBuffer=0x1140f750) returned 1
	[0305.529] GetFileType (hFile=0x1b4) returned 0x1
	[0305.530] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.530] WriteFile (in: hFile=0x1b4, lpBuffer=0x111fc000*, nNumberOfBytesToWrite=0x98c7, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x111fc000*, lpNumberOfBytesWritten=0x11339dfc*=0x98c7, lpOverlapped=0x11339e08) returned 1
	[0305.530] GetFileType (hFile=0x1b4) returned 0x1
	[0305.530] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x98c7, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.531] GetFileType (hFile=0x1b4) returned 0x1
	[0305.531] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.531] WriteFile (in: hFile=0x1b4, lpBuffer=0x111ce700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x111ce700*, lpNumberOfBytesWritten=0x11339dfc*=0x233, lpOverlapped=0x11339e08) returned 1
	[0305.531] GetFileType (hFile=0x1b4) returned 0x1
	[0305.531] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x98c7, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.531] CloseHandle (hObject=0x1b4) returned 1
	[0305.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg.tl30z")) returned 0x220
	[0305.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.537] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.543] SetEvent (hEvent=0x174) returned 1
	[0305.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png")) returned 0x220
	[0305.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG", dwFileAttributes=0x220) returned 1
	[0305.543] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png.tl30z"), dwFlags=0x1) returned 1
	[0305.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0305.781] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0305.781] ReadFile (in: hFile=0x1d4, lpBuffer=0x112b2000, nNumberOfBytesToRead=0xedc0, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x112b2000*, lpNumberOfBytesRead=0x1131be18*=0xedc0, lpOverlapped=0x0) returned 1
	[0305.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0305.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0305.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137d302 | out: pbBuffer=0x1137d302) returned 1
	[0305.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0305.795] GetFileType (hFile=0x1d4) returned 0x1
	[0305.795] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.795] WriteFile (in: hFile=0x1d4, lpBuffer=0x111c8000*, nNumberOfBytesToWrite=0xedc0, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111c8000*, lpNumberOfBytesWritten=0x1102ddfc*=0xedc0, lpOverlapped=0x1102de08) returned 1
	[0305.796] GetFileType (hFile=0x1d4) returned 0x1
	[0305.796] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xedc0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.796] GetFileType (hFile=0x1d4) returned 0x1
	[0305.797] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.797] WriteFile (in: hFile=0x1d4, lpBuffer=0x11371880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11371880*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0305.821] GetFileType (hFile=0x1d4) returned 0x1
	[0305.821] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xedc0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.821] CloseHandle (hObject=0x1d4) returned 1
	[0305.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png.tl30z")) returned 0x220
	[0305.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.893] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.948] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.953] SetEvent (hEvent=0x248) returned 1
	[0305.953] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.957] SetEvent (hEvent=0x248) returned 1
	[0305.957] SwitchToThread () returned 1
	[0305.959] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.963] SetEvent (hEvent=0x248) returned 1
	[0305.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf")) returned 0x220
	[0305.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF", dwFileAttributes=0x220) returned 1
	[0305.964] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0306.075] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0306.075] ReadFile (in: hFile=0x250, lpBuffer=0x11306000, nNumberOfBytesToRead=0x1090, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11306000*, lpNumberOfBytesRead=0x1131be18*=0x1090, lpOverlapped=0x0) returned 1
	[0306.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0306.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6268 | out: pbBuffer=0x113e6268) returned 1
	[0306.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11413202 | out: pbBuffer=0x11413202) returned 1
	[0306.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11413223 | out: pbBuffer=0x11413223) returned 1
	[0306.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114132d9 | out: pbBuffer=0x114132d9) returned 1
	[0306.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0306.081] GetFileType (hFile=0x250) returned 0x1
	[0306.081] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.081] WriteFile (in: hFile=0x250, lpBuffer=0x113f4000*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113f4000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1090, lpOverlapped=0x1133fe08) returned 1
	[0306.082] GetFileType (hFile=0x250) returned 0x1
	[0306.082] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1090, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.082] GetFileType (hFile=0x250) returned 0x1
	[0306.082] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.082] WriteFile (in: hFile=0x250, lpBuffer=0x11331880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11331880*, lpNumberOfBytesWritten=0x1133fdfc*=0x221, lpOverlapped=0x1133fe08) returned 1
	[0306.082] GetFileType (hFile=0x250) returned 0x1
	[0306.082] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1090, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.082] CloseHandle (hObject=0x250) returned 1
	[0306.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf.tl30z")) returned 0x220
	[0306.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.086] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0306.087] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0306.090] SetEvent (hEvent=0x248) returned 1
	[0306.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf")) returned 0x220
	[0306.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF", dwFileAttributes=0x220) returned 1
	[0306.091] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0306.172] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0306.172] ReadFile (in: hFile=0x1b4, lpBuffer=0x113f3000, nNumberOfBytesToRead=0xeaa, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x113f3000*, lpNumberOfBytesRead=0x1131de18*=0xeaa, lpOverlapped=0x0) returned 1
	[0306.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0306.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0306.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11413c02 | out: pbBuffer=0x11413c02) returned 1
	[0306.178] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0306.178] GetFileType (hFile=0x1b4) returned 0x1
	[0306.179] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.179] WriteFile (in: hFile=0x1b4, lpBuffer=0x1145e000*, nNumberOfBytesToWrite=0xeaa, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1145e000*, lpNumberOfBytesWritten=0x1133fdfc*=0xeaa, lpOverlapped=0x1133fe08) returned 1
	[0306.179] GetFileType (hFile=0x1b4) returned 0x1
	[0306.179] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xeaa, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.179] GetFileType (hFile=0x1b4) returned 0x1
	[0306.180] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.180] WriteFile (in: hFile=0x1b4, lpBuffer=0x11442700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11442700*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0306.180] GetFileType (hFile=0x1b4) returned 0x1
	[0306.180] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xeaa, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.180] CloseHandle (hObject=0x1b4) returned 1
	[0306.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf.tl30z")) returned 0x220
	[0306.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.183] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0306.187] SetEvent (hEvent=0x24c) returned 1
	[0306.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf")) returned 0x220
	[0306.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF", dwFileAttributes=0x220) returned 1
	[0306.188] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.272] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0306.272] ReadFile (in: hFile=0x2a0, lpBuffer=0x113bca00, nNumberOfBytesToRead=0x20ca, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x113bca00*, lpNumberOfBytesRead=0x1131de18*=0x20ca, lpOverlapped=0x0) returned 1
	[0306.282] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2e0 | out: pbBuffer=0x1140f2e0) returned 1
	[0306.282] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11100602 | out: pbBuffer=0x11100602) returned 1
	[0306.282] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11100612 | out: pbBuffer=0x11100612) returned 1
	[0306.283] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f310 | out: pbBuffer=0x1140f310) returned 1
	[0306.283] GetFileType (hFile=0x2a0) returned 0x1
	[0306.283] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.284] WriteFile (in: hFile=0x2a0, lpBuffer=0x11114000*, nNumberOfBytesToWrite=0x20ca, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11114000*, lpNumberOfBytesWritten=0x11339dfc*=0x20ca, lpOverlapped=0x11339e08) returned 1
	[0306.284] GetFileType (hFile=0x2a0) returned 0x1
	[0306.284] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x20ca, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.284] GetFileType (hFile=0x2a0) returned 0x1
	[0306.285] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.285] WriteFile (in: hFile=0x2a0, lpBuffer=0x11118000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11118000*, lpNumberOfBytesWritten=0x11339dfc*=0x227, lpOverlapped=0x11339e08) returned 1
	[0306.285] GetFileType (hFile=0x2a0) returned 0x1
	[0306.285] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x20ca, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.285] CloseHandle (hObject=0x2a0) returned 1
	[0306.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf.tl30z")) returned 0x220
	[0306.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.300] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0306.305] SetEvent (hEvent=0x24c) returned 1
	[0306.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf")) returned 0x220
	[0306.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF", dwFileAttributes=0x220) returned 1
	[0306.306] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0306.433] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0306.434] ReadFile (in: hFile=0x1b4, lpBuffer=0x11146000, nNumberOfBytesToRead=0x38c6, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11146000*, lpNumberOfBytesRead=0x1131de18*=0x38c6, lpOverlapped=0x0) returned 1
	[0306.438] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0306.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e628 | out: pbBuffer=0x1104e628) returned 1
	[0306.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11418802 | out: pbBuffer=0x11418802) returned 1
	[0306.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0306.440] GetFileType (hFile=0x1b4) returned 0x1
	[0306.440] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.440] WriteFile (in: hFile=0x1b4, lpBuffer=0x113da000*, nNumberOfBytesToWrite=0x38c6, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113da000*, lpNumberOfBytesWritten=0x1133fdfc*=0x38c6, lpOverlapped=0x1133fe08) returned 1
	[0306.440] GetFileType (hFile=0x1b4) returned 0x1
	[0306.440] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x38c6, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.441] GetFileType (hFile=0x1b4) returned 0x1
	[0306.441] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.441] WriteFile (in: hFile=0x1b4, lpBuffer=0x11351880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11351880*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0306.441] GetFileType (hFile=0x1b4) returned 0x1
	[0306.441] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x38c6, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.441] CloseHandle (hObject=0x1b4) returned 1
	[0306.442] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf.tl30z")) returned 0x220
	[0306.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.444] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0306.447] SetEvent (hEvent=0x248) returned 1
	[0306.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf")) returned 0x220
	[0306.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF", dwFileAttributes=0x220) returned 1
	[0306.448] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0306.525] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0306.525] ReadFile (in: hFile=0x1d4, lpBuffer=0x113df800, nNumberOfBytesToRead=0x1580, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x113df800*, lpNumberOfBytesRead=0x1131de18*=0x1580, lpOverlapped=0x0) returned 1
	[0306.530] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332460 | out: pbBuffer=0x11332460) returned 1
	[0306.530] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332458 | out: pbBuffer=0x11332458) returned 1
	[0306.531] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11306802 | out: pbBuffer=0x11306802) returned 1
	[0306.531] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11306837 | out: pbBuffer=0x11306837) returned 1
	[0306.531] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332490 | out: pbBuffer=0x11332490) returned 1
	[0306.531] GetFileType (hFile=0x1d4) returned 0x1
	[0306.531] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.532] WriteFile (in: hFile=0x1d4, lpBuffer=0x110a4000*, nNumberOfBytesToWrite=0x1580, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110a4000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1580, lpOverlapped=0x1133fe08) returned 1
	[0306.532] GetFileType (hFile=0x1d4) returned 0x1
	[0306.532] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1580, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.532] GetFileType (hFile=0x1d4) returned 0x1
	[0306.532] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.532] WriteFile (in: hFile=0x1d4, lpBuffer=0x110a0380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110a0380*, lpNumberOfBytesWritten=0x1133fdfc*=0x224, lpOverlapped=0x1133fe08) returned 1
	[0306.533] GetFileType (hFile=0x1d4) returned 0x1
	[0306.533] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1580, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.533] CloseHandle (hObject=0x1d4) returned 1
	[0306.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf.tl30z")) returned 0x220
	[0306.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.541] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0306.543] SetEvent (hEvent=0x248) returned 1
	[0306.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf")) returned 0x220
	[0306.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF", dwFileAttributes=0x220) returned 1
	[0306.544] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0306.635] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0306.635] ReadFile (in: hFile=0x1fc, lpBuffer=0x1124ec00, nNumberOfBytesToRead=0xb60, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1124ec00*, lpNumberOfBytesRead=0x1131de18*=0xb60, lpOverlapped=0x0) returned 1
	[0306.640] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6e0 | out: pbBuffer=0x1140f6e0) returned 1
	[0306.640] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f6d8 | out: pbBuffer=0x1140f6d8) returned 1
	[0306.640] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123d102 | out: pbBuffer=0x1123d102) returned 1
	[0306.640] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f710 | out: pbBuffer=0x1140f710) returned 1
	[0306.641] GetFileType (hFile=0x1fc) returned 0x1
	[0306.641] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.641] WriteFile (in: hFile=0x1fc, lpBuffer=0x1146c000*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1146c000*, lpNumberOfBytesWritten=0x1102ddfc*=0xb60, lpOverlapped=0x1102de08) returned 1
	[0306.641] GetFileType (hFile=0x1fc) returned 0x1
	[0306.641] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xb60, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.642] GetFileType (hFile=0x1fc) returned 0x1
	[0306.642] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.642] WriteFile (in: hFile=0x1fc, lpBuffer=0x11464380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11464380*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0306.642] GetFileType (hFile=0x1fc) returned 0x1
	[0306.642] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xb60, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.642] CloseHandle (hObject=0x1fc) returned 1
	[0306.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf.tl30z")) returned 0x220
	[0306.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.653] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0306.657] SetEvent (hEvent=0x248) returned 1
	[0306.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf")) returned 0x220
	[0306.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF", dwFileAttributes=0x220) returned 1
	[0306.657] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0306.756] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0306.756] ReadFile (in: hFile=0x1fc, lpBuffer=0x1123e000, nNumberOfBytesToRead=0x7d14, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1123e000*, lpNumberOfBytesRead=0x1131de18*=0x7d14, lpOverlapped=0x0) returned 1
	[0306.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0306.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123c802 | out: pbBuffer=0x1123c802) returned 1
	[0306.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1123c81d | out: pbBuffer=0x1123c81d) returned 1
	[0306.763] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0306.764] GetFileType (hFile=0x1fc) returned 0x1
	[0306.764] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.764] WriteFile (in: hFile=0x1fc, lpBuffer=0x110f0000*, nNumberOfBytesToWrite=0x7d14, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110f0000*, lpNumberOfBytesWritten=0x1133bdfc*=0x7d14, lpOverlapped=0x1133be08) returned 1
	[0306.764] GetFileType (hFile=0x1fc) returned 0x1
	[0306.765] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x7d14, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.765] GetFileType (hFile=0x1fc) returned 0x1
	[0306.765] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.765] WriteFile (in: hFile=0x1fc, lpBuffer=0x11464a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11464a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0306.765] GetFileType (hFile=0x1fc) returned 0x1
	[0306.765] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x7d14, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.765] CloseHandle (hObject=0x1fc) returned 1
	[0306.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf.tl30z")) returned 0x220
	[0306.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.770] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0306.773] SetEvent (hEvent=0x24c) returned 1
	[0306.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf")) returned 0x220
	[0306.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF", dwFileAttributes=0x220) returned 1
	[0306.773] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.903] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0306.903] ReadFile (in: hFile=0x2a0, lpBuffer=0x11438000, nNumberOfBytesToRead=0xba4, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11438000*, lpNumberOfBytesRead=0x1131de18*=0xba4, lpOverlapped=0x0) returned 1
	[0306.908] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0306.908] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0306.908] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11255302 | out: pbBuffer=0x11255302) returned 1
	[0306.908] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11255368 | out: pbBuffer=0x11255368) returned 1
	[0306.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112553e8 | out: pbBuffer=0x112553e8) returned 1
	[0306.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0306.909] GetFileType (hFile=0x2a0) returned 0x1
	[0306.909] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.910] WriteFile (in: hFile=0x2a0, lpBuffer=0x113ac000*, nNumberOfBytesToWrite=0xba4, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x113ac000*, lpNumberOfBytesWritten=0x1124bdfc*=0xba4, lpOverlapped=0x1124be08) returned 1
	[0306.910] GetFileType (hFile=0x2a0) returned 0x1
	[0306.910] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xba4, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.910] GetFileType (hFile=0x2a0) returned 0x1
	[0306.910] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.910] WriteFile (in: hFile=0x2a0, lpBuffer=0x11229880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11229880*, lpNumberOfBytesWritten=0x1124bdfc*=0x22a, lpOverlapped=0x1124be08) returned 1
	[0306.911] GetFileType (hFile=0x2a0) returned 0x1
	[0306.911] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xba4, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.911] CloseHandle (hObject=0x2a0) returned 1
	[0306.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf.tl30z")) returned 0x220
	[0306.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.914] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0306.918] SetEvent (hEvent=0x24c) returned 1
	[0306.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf")) returned 0x220
	[0306.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF", dwFileAttributes=0x220) returned 1
	[0306.919] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0307.067] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0307.067] ReadFile (in: hFile=0x1d8, lpBuffer=0x11292000, nNumberOfBytesToRead=0x7c46, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11292000*, lpNumberOfBytesRead=0x1131de18*=0x7c46, lpOverlapped=0x0) returned 1
	[0307.073] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66d0 | out: pbBuffer=0x113e66d0) returned 1
	[0307.073] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c7402 | out: pbBuffer=0x113c7402) returned 1
	[0307.073] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c74c9 | out: pbBuffer=0x113c74c9) returned 1
	[0307.074] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6700 | out: pbBuffer=0x113e6700) returned 1
	[0307.074] GetFileType (hFile=0x1d8) returned 0x1
	[0307.075] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.075] WriteFile (in: hFile=0x1d8, lpBuffer=0x111d8000*, nNumberOfBytesToWrite=0x7c46, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x111d8000*, lpNumberOfBytesWritten=0x1124bdfc*=0x7c46, lpOverlapped=0x1124be08) returned 1
	[0307.075] GetFileType (hFile=0x1d8) returned 0x1
	[0307.075] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7c46, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.076] GetFileType (hFile=0x1d8) returned 0x1
	[0307.076] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.076] WriteFile (in: hFile=0x1d8, lpBuffer=0x112ae380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x112ae380*, lpNumberOfBytesWritten=0x1124bdfc*=0x230, lpOverlapped=0x1124be08) returned 1
	[0307.076] GetFileType (hFile=0x1d8) returned 0x1
	[0307.076] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7c46, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.076] CloseHandle (hObject=0x1d8) returned 1
	[0307.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf.tl30z")) returned 0x220
	[0307.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.080] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0307.082] SetEvent (hEvent=0x24c) returned 1
	[0307.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf")) returned 0x220
	[0307.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF", dwFileAttributes=0x220) returned 1
	[0307.083] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.160] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0307.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0307.172] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0307.172] ReadFile (in: hFile=0x1d8, lpBuffer=0x1118d800, nNumberOfBytesToRead=0x16a0, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1118d800*, lpNumberOfBytesRead=0x1131de18*=0x16a0, lpOverlapped=0x0) returned 1
	[0307.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0307.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0307.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11108802 | out: pbBuffer=0x11108802) returned 1
	[0307.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11108849 | out: pbBuffer=0x11108849) returned 1
	[0307.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0307.178] GetFileType (hFile=0x1d8) returned 0x1
	[0307.178] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.178] WriteFile (in: hFile=0x1d8, lpBuffer=0x1142c000*, nNumberOfBytesToWrite=0x16a0, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1142c000*, lpNumberOfBytesWritten=0x1133bdfc*=0x16a0, lpOverlapped=0x1133be08) returned 1
	[0307.178] GetFileType (hFile=0x1d8) returned 0x1
	[0307.178] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x16a0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.178] GetFileType (hFile=0x1d8) returned 0x1
	[0307.178] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.179] WriteFile (in: hFile=0x1d8, lpBuffer=0x1114ea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1114ea80*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0307.179] GetFileType (hFile=0x1d8) returned 0x1
	[0307.179] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x16a0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.179] CloseHandle (hObject=0x1d8) returned 1
	[0307.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf.tl30z")) returned 0x220
	[0307.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.183] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0307.185] SetEvent (hEvent=0x284) returned 1
	[0307.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf")) returned 0x220
	[0307.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF", dwFileAttributes=0x220) returned 1
	[0307.186] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.265] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0307.265] ReadFile (in: hFile=0x2a0, lpBuffer=0x1118f000, nNumberOfBytesToRead=0x15b0, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1118f000*, lpNumberOfBytesRead=0x1131de18*=0x15b0, lpOverlapped=0x0) returned 1
	[0307.270] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3e0 | out: pbBuffer=0x1140f3e0) returned 1
	[0307.270] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3d8 | out: pbBuffer=0x1140f3d8) returned 1
	[0307.270] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11109d02 | out: pbBuffer=0x11109d02) returned 1
	[0307.270] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0307.271] GetFileType (hFile=0x2a0) returned 0x1
	[0307.271] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.271] WriteFile (in: hFile=0x2a0, lpBuffer=0x111ae000*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111ae000*, lpNumberOfBytesWritten=0x1133bdfc*=0x15b0, lpOverlapped=0x1133be08) returned 1
	[0307.271] GetFileType (hFile=0x2a0) returned 0x1
	[0307.271] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x15b0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.272] GetFileType (hFile=0x2a0) returned 0x1
	[0307.272] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.272] WriteFile (in: hFile=0x2a0, lpBuffer=0x1119ca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1119ca80*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0307.272] GetFileType (hFile=0x2a0) returned 0x1
	[0307.272] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x15b0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.272] CloseHandle (hObject=0x2a0) returned 1
	[0307.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf.tl30z")) returned 0x220
	[0307.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.276] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0307.279] SetEvent (hEvent=0x284) returned 1
	[0307.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf")) returned 0x220
	[0307.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF", dwFileAttributes=0x220) returned 1
	[0307.280] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.373] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0307.373] ReadFile (in: hFile=0x2a0, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x70f0, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x1131de18*=0x70f0, lpOverlapped=0x0) returned 1
	[0307.412] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0307.415] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0307.416] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cb002 | out: pbBuffer=0x113cb002) returned 1
	[0307.416] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cb02b | out: pbBuffer=0x113cb02b) returned 1
	[0307.416] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332840 | out: pbBuffer=0x11332840) returned 1
	[0307.417] GetFileType (hFile=0x2a0) returned 0x1
	[0307.418] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.418] WriteFile (in: hFile=0x2a0, lpBuffer=0x1121c000*, nNumberOfBytesToWrite=0x70f0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1121c000*, lpNumberOfBytesWritten=0x11031dfc*=0x70f0, lpOverlapped=0x11031e08) returned 1
	[0307.418] GetFileType (hFile=0x2a0) returned 0x1
	[0307.419] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x70f0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.419] GetFileType (hFile=0x2a0) returned 0x1
	[0307.419] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.419] WriteFile (in: hFile=0x2a0, lpBuffer=0x1109a380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1109a380*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0307.420] GetFileType (hFile=0x2a0) returned 0x1
	[0307.421] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x70f0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.421] CloseHandle (hObject=0x2a0) returned 1
	[0307.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf.tl30z")) returned 0x220
	[0307.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.425] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0307.428] SetEvent (hEvent=0x160) returned 1
	[0307.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf")) returned 0x220
	[0307.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF", dwFileAttributes=0x220) returned 1
	[0307.431] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0307.515] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0307.515] ReadFile (in: hFile=0x1d4, lpBuffer=0x11208000, nNumberOfBytesToRead=0xcd9d, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11208000*, lpNumberOfBytesRead=0x1131de18*=0xcd9d, lpOverlapped=0x0) returned 1
	[0307.522] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0307.522] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0307.522] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1126c802 | out: pbBuffer=0x1126c802) returned 1
	[0307.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126c80b | out: pbBuffer=0x1126c80b) returned 1
	[0307.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126c8d3 | out: pbBuffer=0x1126c8d3) returned 1
	[0307.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0307.524] GetFileType (hFile=0x1d4) returned 0x1
	[0307.524] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.525] WriteFile (in: hFile=0x1d4, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0xcd9d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x1102ddfc*=0xcd9d, lpOverlapped=0x1102de08) returned 1
	[0307.526] GetFileType (hFile=0x1d4) returned 0x1
	[0307.526] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xcd9d, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.526] GetFileType (hFile=0x1d4) returned 0x1
	[0307.526] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.526] WriteFile (in: hFile=0x1d4, lpBuffer=0x111eae00*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111eae00*, lpNumberOfBytesWritten=0x1102ddfc*=0x239, lpOverlapped=0x1102de08) returned 1
	[0307.531] GetFileType (hFile=0x1d4) returned 0x1
	[0307.531] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xcd9d, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.531] CloseHandle (hObject=0x1d4) returned 1
	[0307.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf.tl30z")) returned 0x220
	[0307.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.534] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0307.538] SetEvent (hEvent=0x24c) returned 1
	[0307.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf")) returned 0x220
	[0307.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF", dwFileAttributes=0x220) returned 1
	[0307.539] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0307.631] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0307.631] ReadFile (in: hFile=0x1d8, lpBuffer=0x110f0000, nNumberOfBytesToRead=0x28ae, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x110f0000*, lpNumberOfBytesRead=0x1131de18*=0x28ae, lpOverlapped=0x0) returned 1
	[0307.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0307.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11391c02 | out: pbBuffer=0x11391c02) returned 1
	[0307.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e510 | out: pbBuffer=0x1104e510) returned 1
	[0307.639] GetFileType (hFile=0x1d8) returned 0x1
	[0307.639] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.639] WriteFile (in: hFile=0x1d8, lpBuffer=0x11226000*, nNumberOfBytesToWrite=0x28ae, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11226000*, lpNumberOfBytesWritten=0x1133fdfc*=0x28ae, lpOverlapped=0x1133fe08) returned 1
	[0307.639] GetFileType (hFile=0x1d8) returned 0x1
	[0307.639] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x28ae, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.640] GetFileType (hFile=0x1d8) returned 0x1
	[0307.640] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.640] WriteFile (in: hFile=0x1d8, lpBuffer=0x111d0700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111d0700*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0307.640] GetFileType (hFile=0x1d8) returned 0x1
	[0307.640] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x28ae, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.640] CloseHandle (hObject=0x1d8) returned 1
	[0307.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf.tl30z")) returned 0x220
	[0307.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.645] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0307.646] SetEvent (hEvent=0x24c) returned 1
	[0307.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf")) returned 0x220
	[0307.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF", dwFileAttributes=0x220) returned 1
	[0307.647] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0307.724] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0307.724] ReadFile (in: hFile=0x1d8, lpBuffer=0x1113e000, nNumberOfBytesToRead=0x14c4, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1113e000*, lpNumberOfBytesRead=0x1131de18*=0x14c4, lpOverlapped=0x0) returned 1
	[0307.732] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0307.732] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324f8 | out: pbBuffer=0x113324f8) returned 1
	[0307.732] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11135d02 | out: pbBuffer=0x11135d02) returned 1
	[0307.732] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11135dd3 | out: pbBuffer=0x11135dd3) returned 1
	[0307.733] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0307.733] GetFileType (hFile=0x1d8) returned 0x1
	[0307.733] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.733] WriteFile (in: hFile=0x1d8, lpBuffer=0x11160000*, nNumberOfBytesToWrite=0x14c4, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11160000*, lpNumberOfBytesWritten=0x1133bdfc*=0x14c4, lpOverlapped=0x1133be08) returned 1
	[0307.734] GetFileType (hFile=0x1d8) returned 0x1
	[0307.734] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x14c4, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.734] GetFileType (hFile=0x1d8) returned 0x1
	[0307.734] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.734] WriteFile (in: hFile=0x1d8, lpBuffer=0x11150700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11150700*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0307.735] GetFileType (hFile=0x1d8) returned 0x1
	[0307.735] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x14c4, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.735] CloseHandle (hObject=0x1d8) returned 1
	[0307.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf.tl30z")) returned 0x220
	[0307.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.738] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0307.742] SetEvent (hEvent=0x24c) returned 1
	[0307.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf")) returned 0x220
	[0307.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF", dwFileAttributes=0x220) returned 1
	[0307.742] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.820] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0307.820] ReadFile (in: hFile=0x2a0, lpBuffer=0x1142d000, nNumberOfBytesToRead=0xdb8, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1142d000*, lpNumberOfBytesRead=0x1131de18*=0xdb8, lpOverlapped=0x0) returned 1
	[0307.825] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332370 | out: pbBuffer=0x11332370) returned 1
	[0307.825] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267202 | out: pbBuffer=0x11267202) returned 1
	[0307.826] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0307.826] GetFileType (hFile=0x2a0) returned 0x1
	[0307.826] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.826] WriteFile (in: hFile=0x2a0, lpBuffer=0x111b2000*, nNumberOfBytesToWrite=0xdb8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111b2000*, lpNumberOfBytesWritten=0x1102bdfc*=0xdb8, lpOverlapped=0x1102be08) returned 1
	[0307.827] GetFileType (hFile=0x2a0) returned 0x1
	[0307.827] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xdb8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.827] GetFileType (hFile=0x2a0) returned 0x1
	[0307.827] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.827] WriteFile (in: hFile=0x2a0, lpBuffer=0x1119dc00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1119dc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0307.828] GetFileType (hFile=0x2a0) returned 0x1
	[0307.828] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xdb8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.828] CloseHandle (hObject=0x2a0) returned 1
	[0307.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf.tl30z")) returned 0x220
	[0307.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.831] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0307.835] SetEvent (hEvent=0x284) returned 1
	[0307.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf")) returned 0x220
	[0307.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF", dwFileAttributes=0x220) returned 1
	[0307.836] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.913] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0307.913] ReadFile (in: hFile=0x2a0, lpBuffer=0x11065100, nNumberOfBytesToRead=0x66c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11065100*, lpNumberOfBytesRead=0x1128ce18*=0x66c, lpOverlapped=0x0) returned 1
	[0307.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0307.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6268 | out: pbBuffer=0x113e6268) returned 1
	[0307.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11419302 | out: pbBuffer=0x11419302) returned 1
	[0307.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0307.920] GetFileType (hFile=0x2a0) returned 0x1
	[0307.920] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.921] WriteFile (in: hFile=0x2a0, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x66c, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x11339dfc*=0x66c, lpOverlapped=0x11339e08) returned 1
	[0307.921] GetFileType (hFile=0x2a0) returned 0x1
	[0307.921] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x66c, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.921] GetFileType (hFile=0x2a0) returned 0x1
	[0307.921] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.921] WriteFile (in: hFile=0x2a0, lpBuffer=0x11359880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11359880*, lpNumberOfBytesWritten=0x11339dfc*=0x22a, lpOverlapped=0x11339e08) returned 1
	[0307.922] GetFileType (hFile=0x2a0) returned 0x1
	[0307.922] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x66c, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.922] CloseHandle (hObject=0x2a0) returned 1
	[0307.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf.tl30z")) returned 0x220
	[0307.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.926] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0307.928] SetEvent (hEvent=0x174) returned 1
	[0307.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf")) returned 0x220
	[0307.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF", dwFileAttributes=0x220) returned 1
	[0307.928] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0308.088] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0308.089] ReadFile (in: hFile=0x1fc, lpBuffer=0x11243000, nNumberOfBytesToRead=0xfe4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11243000*, lpNumberOfBytesRead=0x1128ce18*=0xfe4, lpOverlapped=0x0) returned 1
	[0308.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6c0 | out: pbBuffer=0x1140f6c0) returned 1
	[0308.094] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b9002 | out: pbBuffer=0x112b9002) returned 1
	[0308.094] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6f0 | out: pbBuffer=0x1140f6f0) returned 1
	[0308.095] GetFileType (hFile=0x1fc) returned 0x1
	[0308.095] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.095] WriteFile (in: hFile=0x1fc, lpBuffer=0x111f4000*, nNumberOfBytesToWrite=0xfe4, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111f4000*, lpNumberOfBytesWritten=0x1133fdfc*=0xfe4, lpOverlapped=0x1133fe08) returned 1
	[0308.095] GetFileType (hFile=0x1fc) returned 0x1
	[0308.095] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xfe4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.096] GetFileType (hFile=0x1fc) returned 0x1
	[0308.096] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.096] WriteFile (in: hFile=0x1fc, lpBuffer=0x111e0380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111e0380*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0308.096] GetFileType (hFile=0x1fc) returned 0x1
	[0308.096] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xfe4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.096] CloseHandle (hObject=0x1fc) returned 1
	[0308.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf.tl30z")) returned 0x220
	[0308.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.098] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.100] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.102] SetEvent (hEvent=0x174) returned 1
	[0308.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf")) returned 0x220
	[0308.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF", dwFileAttributes=0x220) returned 1
	[0308.102] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0308.176] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0308.176] ReadFile (in: hFile=0x250, lpBuffer=0x11144000, nNumberOfBytesToRead=0xd28, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11144000*, lpNumberOfBytesRead=0x1131be18*=0xd28, lpOverlapped=0x0) returned 1
	[0308.181] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66c0 | out: pbBuffer=0x113e66c0) returned 1
	[0308.181] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66b8 | out: pbBuffer=0x113e66b8) returned 1
	[0308.181] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125b202 | out: pbBuffer=0x1125b202) returned 1
	[0308.181] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125b2d0 | out: pbBuffer=0x1125b2d0) returned 1
	[0308.182] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66f0 | out: pbBuffer=0x113e66f0) returned 1
	[0308.182] GetFileType (hFile=0x250) returned 0x1
	[0308.182] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0308.182] WriteFile (in: hFile=0x250, lpBuffer=0x1116e000*, nNumberOfBytesToWrite=0xd28, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1116e000*, lpNumberOfBytesWritten=0x11339dfc*=0xd28, lpOverlapped=0x11339e08) returned 1
	[0308.183] GetFileType (hFile=0x250) returned 0x1
	[0308.183] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xd28, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0308.183] GetFileType (hFile=0x250) returned 0x1
	[0308.183] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0308.183] WriteFile (in: hFile=0x250, lpBuffer=0x1115c380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1115c380*, lpNumberOfBytesWritten=0x11339dfc*=0x227, lpOverlapped=0x11339e08) returned 1
	[0308.183] GetFileType (hFile=0x250) returned 0x1
	[0308.183] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xd28, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0308.184] CloseHandle (hObject=0x250) returned 1
	[0308.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf.tl30z")) returned 0x220
	[0308.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.186] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.189] SetEvent (hEvent=0x174) returned 1
	[0308.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf")) returned 0x220
	[0308.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF", dwFileAttributes=0x220) returned 1
	[0308.190] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0308.350] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0308.351] ReadFile (in: hFile=0x1d8, lpBuffer=0x112e0d80, nNumberOfBytesToRead=0xc84, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x112e0d80*, lpNumberOfBytesRead=0x1131be18*=0xc84, lpOverlapped=0x0) returned 1
	[0308.356] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126690 | out: pbBuffer=0x11126690) returned 1
	[0308.356] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126688 | out: pbBuffer=0x11126688) returned 1
	[0308.356] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1140b202 | out: pbBuffer=0x1140b202) returned 1
	[0308.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140b259 | out: pbBuffer=0x1140b259) returned 1
	[0308.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111266c0 | out: pbBuffer=0x111266c0) returned 1
	[0308.357] GetFileType (hFile=0x1d8) returned 0x1
	[0308.357] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.357] WriteFile (in: hFile=0x1d8, lpBuffer=0x11384000*, nNumberOfBytesToWrite=0xc84, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11384000*, lpNumberOfBytesWritten=0x1102bdfc*=0xc84, lpOverlapped=0x1102be08) returned 1
	[0308.358] GetFileType (hFile=0x1d8) returned 0x1
	[0308.358] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc84, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.358] GetFileType (hFile=0x1d8) returned 0x1
	[0308.358] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.358] WriteFile (in: hFile=0x1d8, lpBuffer=0x1134e380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1134e380*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0308.358] GetFileType (hFile=0x1d8) returned 0x1
	[0308.359] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc84, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.359] CloseHandle (hObject=0x1d8) returned 1
	[0308.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf.tl30z")) returned 0x220
	[0308.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.361] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.365] SetEvent (hEvent=0x174) returned 1
	[0308.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf")) returned 0x220
	[0308.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF", dwFileAttributes=0x220) returned 1
	[0308.366] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0308.439] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0308.439] ReadFile (in: hFile=0x1fc, lpBuffer=0x11130000, nNumberOfBytesToRead=0x2120, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11130000*, lpNumberOfBytesRead=0x1131be18*=0x2120, lpOverlapped=0x0) returned 1
	[0308.444] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0308.445] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4c8 | out: pbBuffer=0x1104e4c8) returned 1
	[0308.445] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11185d02 | out: pbBuffer=0x11185d02) returned 1
	[0308.445] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0308.446] GetFileType (hFile=0x1fc) returned 0x1
	[0308.446] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.446] WriteFile (in: hFile=0x1fc, lpBuffer=0x110f8000*, nNumberOfBytesToWrite=0x2120, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110f8000*, lpNumberOfBytesWritten=0x1133bdfc*=0x2120, lpOverlapped=0x1133be08) returned 1
	[0308.446] GetFileType (hFile=0x1fc) returned 0x1
	[0308.447] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2120, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.447] GetFileType (hFile=0x1fc) returned 0x1
	[0308.447] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.447] WriteFile (in: hFile=0x1fc, lpBuffer=0x113a4700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113a4700*, lpNumberOfBytesWritten=0x1133bdfc*=0x221, lpOverlapped=0x1133be08) returned 1
	[0308.447] GetFileType (hFile=0x1fc) returned 0x1
	[0308.447] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2120, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.448] CloseHandle (hObject=0x1fc) returned 1
	[0308.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf.tl30z")) returned 0x220
	[0308.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.451] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.455] SetEvent (hEvent=0x174) returned 1
	[0308.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf")) returned 0x220
	[0308.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF", dwFileAttributes=0x220) returned 1
	[0308.456] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x29c
	[0308.536] GetConsoleMode (in: hConsoleHandle=0x29c, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0308.536] ReadFile (in: hFile=0x29c, lpBuffer=0x113c8000, nNumberOfBytesToRead=0x2fb8, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x113c8000*, lpNumberOfBytesRead=0x1131be18*=0x2fb8, lpOverlapped=0x0) returned 1
	[0308.867] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.944] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332600 | out: pbBuffer=0x11332600) returned 1
	[0308.944] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113325f8 | out: pbBuffer=0x113325f8) returned 1
	[0308.944] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c44602 | out: pbBuffer=0x11c44602) returned 1
	[0308.944] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c44615 | out: pbBuffer=0x11c44615) returned 1
	[0308.944] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c446d7 | out: pbBuffer=0x11c446d7) returned 1
	[0308.945] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332630 | out: pbBuffer=0x11332630) returned 1
	[0308.945] GetFileType (hFile=0x29c) returned 0x1
	[0308.945] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.945] WriteFile (in: hFile=0x29c, lpBuffer=0x1137c000*, nNumberOfBytesToWrite=0x2fb8, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1137c000*, lpNumberOfBytesWritten=0x1133fdfc*=0x2fb8, lpOverlapped=0x1133fe08) returned 1
	[0308.946] GetFileType (hFile=0x29c) returned 0x1
	[0308.946] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x2fb8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.946] GetFileType (hFile=0x29c) returned 0x1
	[0308.946] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.946] WriteFile (in: hFile=0x29c, lpBuffer=0x11bf1c00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11bf1c00*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0308.947] GetFileType (hFile=0x29c) returned 0x1
	[0308.947] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x2fb8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.947] CloseHandle (hObject=0x29c) returned 1
	[0308.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf.tl30z")) returned 0x220
	[0308.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.948] SetEvent (hEvent=0x160) returned 1
	[0308.948] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.273] SetEvent (hEvent=0x1bc) returned 1
	[0309.273] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0309.277] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.277] SetEvent (hEvent=0x1bc) returned 1
	[0309.277] SetEvent (hEvent=0x210) returned 1
	[0309.277] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0309.280] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.280] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0309.285] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.285] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0309.296] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.296] SetEvent (hEvent=0x150) returned 1
	[0309.296] SetEvent (hEvent=0x218) returned 1
	[0309.297] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0309.299] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf")) returned 0x220
	[0309.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF", dwFileAttributes=0x220) returned 1
	[0309.299] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0309.454] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x110ace08 | out: lpMode=0x110ace08) returned 0
	[0309.455] ReadFile (in: hFile=0x224, lpBuffer=0x112f4000, nNumberOfBytesToRead=0x4124, lpNumberOfBytesRead=0x110ace18, lpOverlapped=0x0 | out: lpBuffer=0x112f4000*, lpNumberOfBytesRead=0x110ace18*=0x4124, lpOverlapped=0x0) returned 1
	[0309.461] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0309.461] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11308802 | out: pbBuffer=0x11308802) returned 1
	[0309.461] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0309.462] GetFileType (hFile=0x224) returned 0x1
	[0309.462] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.462] WriteFile (in: hFile=0x224, lpBuffer=0x11c58000*, nNumberOfBytesToWrite=0x4124, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c58000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4124, lpOverlapped=0x1102be08) returned 1
	[0309.462] GetFileType (hFile=0x224) returned 0x1
	[0309.463] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4124, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.463] GetFileType (hFile=0x224) returned 0x1
	[0309.463] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.463] WriteFile (in: hFile=0x224, lpBuffer=0x112e9880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112e9880*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0309.463] GetFileType (hFile=0x224) returned 0x1
	[0309.463] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4124, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.464] CloseHandle (hObject=0x224) returned 1
	[0309.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf.tl30z")) returned 0x220
	[0309.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.475] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.479] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.498] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.519] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.536] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.561] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.574] SetEvent (hEvent=0x164) returned 1
	[0309.575] SetEvent (hEvent=0x1e8) returned 1
	[0309.575] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0309.577] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.578] SetEvent (hEvent=0x1e8) returned 1
	[0309.578] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0309.581] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.581] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0309.584] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.584] SetEvent (hEvent=0x218) returned 1
	[0309.584] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0x1) returned 0x102
	[0309.586] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.586] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0311.024] SetEvent (hEvent=0x1e0) returned 1
	[0311.024] SetEvent (hEvent=0x118) returned 1
	[0311.024] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0311.029] SetEvent (hEvent=0x1e0) returned 1
	[0311.029] SetEvent (hEvent=0x22c) returned 1
	[0311.029] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0311.722] SetEvent (hEvent=0x22c) returned 1
	[0311.722] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0311.727] SetEvent (hEvent=0x1e8) returned 1
	[0311.727] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0312.044] SetEvent (hEvent=0x22c) returned 1
	[0312.044] SetEvent (hEvent=0x1e8) returned 1
	[0312.044] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0312.344] SetEvent (hEvent=0x218) returned 1
	[0312.344] SetEvent (hEvent=0x22c) returned 1
	[0312.344] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0313.646] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0313.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp")) returned 0x220
	[0313.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP", dwFileAttributes=0x220) returned 1
	[0313.648] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0313.693] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11091e08 | out: lpMode=0x11091e08) returned 0
	[0313.696] ReadFile (in: hFile=0x1d8, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x11091e18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x11091e18*=0x7db8, lpOverlapped=0x0) returned 1
	[0313.817] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0313.817] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11151202 | out: pbBuffer=0x11151202) returned 1
	[0313.817] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11151211 | out: pbBuffer=0x11151211) returned 1
	[0313.818] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0313.818] GetFileType (hFile=0x1d8) returned 0x1
	[0313.818] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11149de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.818] WriteFile (in: hFile=0x1d8, lpBuffer=0x11c12000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x11149dfc, lpOverlapped=0x11149e08 | out: lpBuffer=0x11c12000*, lpNumberOfBytesWritten=0x11149dfc*=0x7db8, lpOverlapped=0x11149e08) returned 1
	[0313.819] GetFileType (hFile=0x1d8) returned 0x1
	[0313.819] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x11149de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.819] GetFileType (hFile=0x1d8) returned 0x1
	[0313.819] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11149de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.820] WriteFile (in: hFile=0x1d8, lpBuffer=0x11165880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11149dfc, lpOverlapped=0x11149e08 | out: lpBuffer=0x11165880*, lpNumberOfBytesWritten=0x11149dfc*=0x236, lpOverlapped=0x11149e08) returned 1
	[0313.820] GetFileType (hFile=0x1d8) returned 0x1
	[0313.820] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x11149de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.820] CloseHandle (hObject=0x1d8) returned 1
	[0313.831] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0313.882] SetEvent (hEvent=0x27c) returned 1
	[0313.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp.tl30z")) returned 0x220
	[0313.882] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.323] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.371] SetEvent (hEvent=0x1bc) returned 1
	[0314.371] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg.tl30z")) returned 0x220
	[0314.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0314.426] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0317.593] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0317.598] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0317.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf")) returned 0x220
	[0317.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF", dwFileAttributes=0x220) returned 1
	[0317.600] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0317.639] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1123fe08 | out: lpMode=0x1123fe08) returned 0
	[0317.639] ReadFile (in: hFile=0x2a0, lpBuffer=0x1125a000, nNumberOfBytesToRead=0x60c, lpNumberOfBytesRead=0x1123fe18, lpOverlapped=0x0 | out: lpBuffer=0x1125a000*, lpNumberOfBytesRead=0x1123fe18*=0x60c, lpOverlapped=0x0) returned 1
	[0317.690] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0317.697] SetEvent (hEvent=0x134) returned 1
	[0317.697] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) returned 0x0
	[0317.863] SetEvent (hEvent=0x25c) returned 1
	[0317.863] WaitForSingleObject (hHandle=0x1b0, dwMilliseconds=0xffffffff) 

Thread:
	id = 29
	os_tid = 0x4a8

	[0145.455] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x320bff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x320bff30*=0x170) returned 1
	[0145.455] VirtualQuery (in: lpAddress=0x320bff40, lpBuffer=0x320bff40, dwLength=0x1c | out: lpBuffer=0x320bff40*(BaseAddress=0x320bf000, AllocationBase=0x31fc0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0145.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x112d0000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174
	[0145.457] CloseHandle (hObject=0x174) returned 1
	[0145.458] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80
	[0145.458] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0145.459] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.tl30z"), dwFlags=0x1) returned 1
	[0146.052] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x174
	[0146.053] GetConsoleMode (in: hConsoleHandle=0x174, lpMode=0x11429e08 | out: lpMode=0x11429e08) returned 0
	[0146.054] ReadFile (in: hFile=0x174, lpBuffer=0x111b4000, nNumberOfBytesToRead=0xc74, lpNumberOfBytesRead=0x11429e18, lpOverlapped=0x0 | out: lpBuffer=0x111b4000*, lpNumberOfBytesRead=0x11429e18*=0xc74, lpOverlapped=0x0) returned 1
	[0146.095] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e430 | out: pbBuffer=0x1142e430) returned 1
	[0146.095] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136fd02 | out: pbBuffer=0x1136fd02) returned 1
	[0146.095] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136fd26 | out: pbBuffer=0x1136fd26) returned 1
	[0146.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e460 | out: pbBuffer=0x1142e460) returned 1
	[0146.097] GetFileType (hFile=0x174) returned 0x1
	[0146.097] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0146.098] WriteFile (in: hFile=0x174, lpBuffer=0x11232000*, nNumberOfBytesToWrite=0xc74, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11232000*, lpNumberOfBytesWritten=0x1133fdfc*=0xc74, lpOverlapped=0x1133fe08) returned 1
	[0146.099] GetFileType (hFile=0x174) returned 0x1
	[0146.099] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0xc74, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0146.100] GetFileType (hFile=0x174) returned 0x1
	[0146.100] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0146.100] WriteFile (in: hFile=0x174, lpBuffer=0x11214a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11214a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0146.100] GetFileType (hFile=0x174) returned 0x1
	[0146.100] SetFilePointerEx (in: hFile=0x174, liDistanceToMove=0xc74, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0146.101] CloseHandle (hObject=0x174) returned 1
	[0146.102] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.tl30z" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.tl30z")) returned 0x20
	[0146.102] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.tl30z", dwFileAttributes=0x21) returned 1
	[0146.103] SetEvent (hEvent=0x1b0) returned 1
	[0146.103] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x174
	[0146.103] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0146.950] SetEvent (hEvent=0x1c4) returned 1
	[0146.950] SetEvent (hEvent=0x118) returned 1
	[0146.950] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0175.426] SetEvent (hEvent=0x1bc) returned 1
	[0175.426] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 0x80
	[0175.427] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", dwFileAttributes=0x80) returned 1
	[0175.427] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.tl30z"), dwFlags=0x1) returned 1
	[0184.829] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0
	[0184.998] GetConsoleMode (in: hConsoleHandle=0x1e0, lpMode=0x11253e08 | out: lpMode=0x11253e08) returned 0
	[0184.998] ReadFile (in: hFile=0x1e0, lpBuffer=0x11331500, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x11253e18, lpOverlapped=0x0 | out: lpBuffer=0x11331500*, lpNumberOfBytesRead=0x11253e18*=0x37e, lpOverlapped=0x0) returned 1
	[0185.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e2f0 | out: pbBuffer=0x1104e2f0) returned 1
	[0185.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e2e8 | out: pbBuffer=0x1104e2e8) returned 1
	[0185.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11321302 | out: pbBuffer=0x11321302) returned 1
	[0185.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11321373 | out: pbBuffer=0x11321373) returned 1
	[0185.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132137d | out: pbBuffer=0x1132137d) returned 1
	[0185.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132139c | out: pbBuffer=0x1132139c) returned 1
	[0185.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e320 | out: pbBuffer=0x1104e320) returned 1
	[0185.132] GetFileType (hFile=0x1e0) returned 0x1
	[0185.132] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11253de0 | out: lpNewFilePointer=0x0) returned 1
	[0185.132] WriteFile (in: hFile=0x1e0, lpBuffer=0x11311000*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x11253dfc, lpOverlapped=0x11253e08 | out: lpBuffer=0x11311000*, lpNumberOfBytesWritten=0x11253dfc*=0x37e, lpOverlapped=0x11253e08) returned 1
	[0185.133] GetFileType (hFile=0x1e0) returned 0x1
	[0185.133] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x11253de0 | out: lpNewFilePointer=0x0) returned 1
	[0185.133] GetFileType (hFile=0x1e0) returned 0x1
	[0185.133] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11253de0 | out: lpNewFilePointer=0x0) returned 1
	[0185.133] WriteFile (in: hFile=0x1e0, lpBuffer=0x11256380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11253dfc, lpOverlapped=0x11253e08 | out: lpBuffer=0x11256380*, lpNumberOfBytesWritten=0x11253dfc*=0x230, lpOverlapped=0x11253e08) returned 1
	[0185.134] GetFileType (hFile=0x1e0) returned 0x1
	[0185.134] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x11253de0 | out: lpNewFilePointer=0x0) returned 1
	[0185.134] CloseHandle (hObject=0x1e0) returned 1
	[0185.224] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.tl30z")) returned 0x20
	[0185.225] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0185.476] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0198.218] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20
	[0198.219] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf", dwFileAttributes=0x20) returned 0
	[0198.219] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\msyh_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0198.301] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0198.385] SetEvent (hEvent=0x1c4) returned 1
	[0198.385] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0212.602] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 0x20
	[0212.602] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0212.602] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0218.057] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0218.160] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11554e08 | out: lpMode=0x11554e08) returned 0
	[0218.160] ReadFile (in: hFile=0x1f4, lpBuffer=0x11411000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11554e18, lpOverlapped=0x0 | out: lpBuffer=0x11411000*, lpNumberOfBytesRead=0x11554e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0218.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364590 | out: pbBuffer=0x11364590) returned 1
	[0218.209] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11364588 | out: pbBuffer=0x11364588) returned 1
	[0218.209] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11564a02 | out: pbBuffer=0x11564a02) returned 1
	[0218.209] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11564aa4 | out: pbBuffer=0x11564aa4) returned 1
	[0218.209] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11564acd | out: pbBuffer=0x11564acd) returned 1
	[0218.209] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113645c0 | out: pbBuffer=0x113645c0) returned 1
	[0218.210] GetFileType (hFile=0x1f4) returned 0x1
	[0218.210] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0218.211] WriteFile (in: hFile=0x1f4, lpBuffer=0x11bb8000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bb8000*, lpNumberOfBytesWritten=0x1102bdfc*=0x6ccc, lpOverlapped=0x1102be08) returned 1
	[0218.211] GetFileType (hFile=0x1f4) returned 0x1
	[0218.211] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0218.211] GetFileType (hFile=0x1f4) returned 0x1
	[0218.212] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0218.212] WriteFile (in: hFile=0x1f4, lpBuffer=0x11563500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11563500*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0218.212] GetFileType (hFile=0x1f4) returned 0x1
	[0218.212] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0218.212] CloseHandle (hObject=0x1f4) returned 1
	[0218.302] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.tl30z")) returned 0x20
	[0218.302] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0218.319] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0300.235] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0300.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf")) returned 0x220
	[0300.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF", dwFileAttributes=0x220) returned 1
	[0300.239] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0300.279] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x111cfe08 | out: lpMode=0x111cfe08) returned 0
	[0300.279] ReadFile (in: hFile=0x184, lpBuffer=0x1120e000, nNumberOfBytesToRead=0x1294, lpNumberOfBytesRead=0x111cfe18, lpOverlapped=0x0 | out: lpBuffer=0x1120e000*, lpNumberOfBytesRead=0x111cfe18*=0x1294, lpOverlapped=0x0) returned 1
	[0300.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158300 | out: pbBuffer=0x11158300) returned 1
	[0300.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111582f8 | out: pbBuffer=0x111582f8) returned 1
	[0300.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122eb02 | out: pbBuffer=0x1122eb02) returned 1
	[0300.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1122ebc4 | out: pbBuffer=0x1122ebc4) returned 1
	[0300.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158330 | out: pbBuffer=0x11158330) returned 1
	[0300.521] GetFileType (hFile=0x184) returned 0x1
	[0300.521] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.521] WriteFile (in: hFile=0x184, lpBuffer=0x11368000*, nNumberOfBytesToWrite=0x1294, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11368000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1294, lpOverlapped=0x1133fe08) returned 1
	[0300.521] GetFileType (hFile=0x184) returned 0x1
	[0300.521] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x1294, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.521] GetFileType (hFile=0x184) returned 0x1
	[0300.521] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.522] WriteFile (in: hFile=0x184, lpBuffer=0x110e4380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110e4380*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0300.522] GetFileType (hFile=0x184) returned 0x1
	[0300.522] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x1294, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.522] CloseHandle (hObject=0x184) returned 1
	[0300.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf.tl30z")) returned 0x220
	[0300.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1
	[0300.558] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0300.561] SetEvent (hEvent=0x22c) returned 1
	[0300.561] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0300.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf")) returned 0x220
	[0300.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF", dwFileAttributes=0x220) returned 1
	[0300.608] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0300.664] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11446e08 | out: lpMode=0x11446e08) returned 0
	[0300.664] ReadFile (in: hFile=0x1b4, lpBuffer=0x11270000, nNumberOfBytesToRead=0xda0, lpNumberOfBytesRead=0x11446e18, lpOverlapped=0x0 | out: lpBuffer=0x11270000*, lpNumberOfBytesRead=0x11446e18*=0xda0, lpOverlapped=0x0) returned 1
	[0301.008] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0301.065] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332200 | out: pbBuffer=0x11332200) returned 1
	[0301.065] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113321f8 | out: pbBuffer=0x113321f8) returned 1
	[0301.066] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11280802 | out: pbBuffer=0x11280802) returned 1
	[0301.066] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332230 | out: pbBuffer=0x11332230) returned 1
	[0301.066] GetFileType (hFile=0x1b4) returned 0x1
	[0301.067] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135fde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.067] WriteFile (in: hFile=0x1b4, lpBuffer=0x11c56000*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x1135fdfc, lpOverlapped=0x1135fe08 | out: lpBuffer=0x11c56000*, lpNumberOfBytesWritten=0x1135fdfc*=0xda0, lpOverlapped=0x1135fe08) returned 1
	[0301.074] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0301.121] GetFileType (hFile=0x1b4) returned 0x1
	[0301.121] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xda0, lpNewFilePointer=0x0, dwMoveMethod=0x1135fde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.121] GetFileType (hFile=0x1b4) returned 0x1
	[0301.121] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135fde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.122] WriteFile (in: hFile=0x1b4, lpBuffer=0x11142a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1135fdfc, lpOverlapped=0x1135fe08 | out: lpBuffer=0x11142a80*, lpNumberOfBytesWritten=0x1135fdfc*=0x227, lpOverlapped=0x1135fe08) returned 1
	[0301.137] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0301.146] GetFileType (hFile=0x1b4) returned 0x1
	[0301.146] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xda0, lpNewFilePointer=0x0, dwMoveMethod=0x1135fde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.146] CloseHandle (hObject=0x1b4) returned 1
	[0301.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf.tl30z")) returned 0x220
	[0301.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.193] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0301.767] SetEvent (hEvent=0x160) returned 1
	[0301.767] SetEvent (hEvent=0x24c) returned 1
	[0301.767] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0302.004] SetEvent (hEvent=0x248) returned 1
	[0302.004] SetEvent (hEvent=0x24c) returned 1
	[0302.004] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0302.227] SetEvent (hEvent=0x284) returned 1
	[0302.228] SetEvent (hEvent=0x1b0) returned 1
	[0302.228] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x1) returned 0x102
	[0302.229] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0302.229] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x1) returned 0x102
	[0302.231] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0302.231] SetEvent (hEvent=0x284) returned 1
	[0302.231] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x1) returned 0x0
	[0302.235] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0302.564] SetEvent (hEvent=0x248) returned 1
	[0302.564] SetEvent (hEvent=0x1b0) returned 1
	[0302.564] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0302.805] SetEvent (hEvent=0x160) returned 1
	[0302.805] SetEvent (hEvent=0x248) returned 1
	[0302.806] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0303.126] SetEvent (hEvent=0x160) returned 1
	[0303.126] SetEvent (hEvent=0x164) returned 1
	[0303.126] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0303.601] SetEvent (hEvent=0x1b0) returned 1
	[0303.601] SetEvent (hEvent=0x160) returned 1
	[0303.602] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0303.867] SetEvent (hEvent=0x1b0) returned 1
	[0303.867] SetEvent (hEvent=0x1e0) returned 1
	[0303.867] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0304.221] SetEvent (hEvent=0x284) returned 1
	[0304.221] SetEvent (hEvent=0x24c) returned 1
	[0304.221] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0304.831] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0304.833] SetEvent (hEvent=0x1e0) returned 1
	[0304.833] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0304.835] SetEvent (hEvent=0x1e0) returned 1
	[0304.835] SwitchToThread () returned 1
	[0304.838] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0304.915] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0304.939] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.118] SetEvent (hEvent=0x284) returned 1
	[0305.118] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.122] SetEvent (hEvent=0x284) returned 1
	[0305.122] SwitchToThread () returned 1
	[0305.124] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.129] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.153] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.177] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.190] SetEvent (hEvent=0x164) returned 1
	[0305.190] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg")) returned 0x220
	[0305.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG", dwFileAttributes=0x220) returned 1
	[0305.195] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0305.317] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0305.317] ReadFile (in: hFile=0x1fc, lpBuffer=0x1122a000, nNumberOfBytesToRead=0xd8f6, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1122a000*, lpNumberOfBytesRead=0x1128ce18*=0xd8f6, lpOverlapped=0x0) returned 1
	[0305.323] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f560 | out: pbBuffer=0x1140f560) returned 1
	[0305.323] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f558 | out: pbBuffer=0x1140f558) returned 1
	[0305.323] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11238802 | out: pbBuffer=0x11238802) returned 1
	[0305.324] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f590 | out: pbBuffer=0x1140f590) returned 1
	[0305.325] SetEvent (hEvent=0x1e0) returned 1
	[0305.326] GetFileType (hFile=0x1fc) returned 0x1
	[0305.326] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.326] WriteFile (in: hFile=0x1fc, lpBuffer=0x11130000*, nNumberOfBytesToWrite=0xd8f6, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11130000*, lpNumberOfBytesWritten=0x1133bdfc*=0xd8f6, lpOverlapped=0x1133be08) returned 1
	[0305.327] GetFileType (hFile=0x1fc) returned 0x1
	[0305.327] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd8f6, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.327] GetFileType (hFile=0x1fc) returned 0x1
	[0305.327] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.327] WriteFile (in: hFile=0x1fc, lpBuffer=0x11140000*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11140000*, lpNumberOfBytesWritten=0x1133bdfc*=0x239, lpOverlapped=0x1133be08) returned 1
	[0305.328] GetFileType (hFile=0x1fc) returned 0x1
	[0305.328] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd8f6, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.328] CloseHandle (hObject=0x1fc) returned 1
	[0305.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg.tl30z")) returned 0x220
	[0305.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.334] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.335] SetEvent (hEvent=0x1e0) returned 1
	[0305.335] SetEvent (hEvent=0x284) returned 1
	[0305.335] SwitchToThread () returned 1
	[0305.338] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.367] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.387] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.411] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.435] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.454] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.474] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.500] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.521] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.545] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png")) returned 0x220
	[0305.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG", dwFileAttributes=0x220) returned 1
	[0305.556] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png.tl30z"), dwFlags=0x1) returned 1
	[0305.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0305.801] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0305.801] ReadFile (in: hFile=0x1b4, lpBuffer=0x111d8000, nNumberOfBytesToRead=0x8bb6, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x111d8000*, lpNumberOfBytesRead=0x1128ce18*=0x8bb6, lpOverlapped=0x0) returned 1
	[0305.826] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0305.826] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4d8 | out: pbBuffer=0x1104e4d8) returned 1
	[0305.826] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bdd02 | out: pbBuffer=0x111bdd02) returned 1
	[0305.826] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111bdd94 | out: pbBuffer=0x111bdd94) returned 1
	[0305.827] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e510 | out: pbBuffer=0x1104e510) returned 1
	[0305.829] GetFileType (hFile=0x1b4) returned 0x1
	[0305.829] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.829] WriteFile (in: hFile=0x1b4, lpBuffer=0x110f4000*, nNumberOfBytesToWrite=0x8bb6, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110f4000*, lpNumberOfBytesWritten=0x1133fdfc*=0x8bb6, lpOverlapped=0x1133fe08) returned 1
	[0305.830] GetFileType (hFile=0x1b4) returned 0x1
	[0305.830] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x8bb6, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.831] GetFileType (hFile=0x1b4) returned 0x1
	[0305.831] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.831] WriteFile (in: hFile=0x1b4, lpBuffer=0x1146c700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1146c700*, lpNumberOfBytesWritten=0x1133fdfc*=0x236, lpOverlapped=0x1133fe08) returned 1
	[0305.832] GetFileType (hFile=0x1b4) returned 0x1
	[0305.832] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x8bb6, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.832] CloseHandle (hObject=0x1b4) returned 1
	[0305.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png.tl30z")) returned 0x220
	[0305.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.895] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0305.900] SetEvent (hEvent=0x248) returned 1
	[0305.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid")) returned 0x220
	[0305.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID", dwFileAttributes=0x220) returned 1
	[0305.901] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0306.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0306.040] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0306.040] ReadFile (in: hFile=0x250, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x16d3, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x1128ce18*=0x16d3, lpOverlapped=0x0) returned 1
	[0306.045] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323d0 | out: pbBuffer=0x113323d0) returned 1
	[0306.045] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113323c8 | out: pbBuffer=0x113323c8) returned 1
	[0306.045] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116b302 | out: pbBuffer=0x1116b302) returned 1
	[0306.045] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116b324 | out: pbBuffer=0x1116b324) returned 1
	[0306.046] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332400 | out: pbBuffer=0x11332400) returned 1
	[0306.046] GetFileType (hFile=0x250) returned 0x1
	[0306.046] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.046] WriteFile (in: hFile=0x250, lpBuffer=0x1117c000*, nNumberOfBytesToWrite=0x16d3, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1117c000*, lpNumberOfBytesWritten=0x1102ddfc*=0x16d3, lpOverlapped=0x1102de08) returned 1
	[0306.047] GetFileType (hFile=0x250) returned 0x1
	[0306.047] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x16d3, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.047] GetFileType (hFile=0x250) returned 0x1
	[0306.047] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.047] WriteFile (in: hFile=0x250, lpBuffer=0x1117fc00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1117fc00*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0306.047] GetFileType (hFile=0x250) returned 0x1
	[0306.048] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x16d3, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.048] CloseHandle (hObject=0x250) returned 1
	[0306.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid.tl30z")) returned 0x220
	[0306.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0306.051] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0306.055] SetEvent (hEvent=0x248) returned 1
	[0306.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf")) returned 0x220
	[0306.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF", dwFileAttributes=0x220) returned 1
	[0306.055] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0306.129] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0306.129] ReadFile (in: hFile=0x1b4, lpBuffer=0x11094000, nNumberOfBytesToRead=0x5044, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11094000*, lpNumberOfBytesRead=0x1128ce18*=0x5044, lpOverlapped=0x0) returned 1
	[0306.134] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4a0 | out: pbBuffer=0x1104e4a0) returned 1
	[0306.134] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e498 | out: pbBuffer=0x1104e498) returned 1
	[0306.134] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e1d02 | out: pbBuffer=0x110e1d02) returned 1
	[0306.135] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0306.135] GetFileType (hFile=0x1b4) returned 0x1
	[0306.135] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.136] WriteFile (in: hFile=0x1b4, lpBuffer=0x11234000*, nNumberOfBytesToWrite=0x5044, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11234000*, lpNumberOfBytesWritten=0x11339dfc*=0x5044, lpOverlapped=0x11339e08) returned 1
	[0306.136] GetFileType (hFile=0x1b4) returned 0x1
	[0306.136] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x5044, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.136] GetFileType (hFile=0x1b4) returned 0x1
	[0306.137] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.137] WriteFile (in: hFile=0x1b4, lpBuffer=0x110b2700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x110b2700*, lpNumberOfBytesWritten=0x11339dfc*=0x224, lpOverlapped=0x11339e08) returned 1
	[0306.137] GetFileType (hFile=0x1b4) returned 0x1
	[0306.137] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x5044, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.137] CloseHandle (hObject=0x1b4) returned 1
	[0306.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf.tl30z")) returned 0x220
	[0306.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.140] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0306.144] SetEvent (hEvent=0x24c) returned 1
	[0306.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf")) returned 0x220
	[0306.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF", dwFileAttributes=0x220) returned 1
	[0306.148] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0306.233] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0306.234] ReadFile (in: hFile=0x1b4, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x864, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x1128ce18*=0x864, lpOverlapped=0x0) returned 1
	[0306.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f170 | out: pbBuffer=0x1140f170) returned 1
	[0306.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f168 | out: pbBuffer=0x1140f168) returned 1
	[0306.240] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11249c02 | out: pbBuffer=0x11249c02) returned 1
	[0306.240] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11249ca0 | out: pbBuffer=0x11249ca0) returned 1
	[0306.240] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11249cb4 | out: pbBuffer=0x11249cb4) returned 1
	[0306.240] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1b0 | out: pbBuffer=0x1140f1b0) returned 1
	[0306.241] GetFileType (hFile=0x1b4) returned 0x1
	[0306.241] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.241] WriteFile (in: hFile=0x1b4, lpBuffer=0x111ff000*, nNumberOfBytesToWrite=0x864, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x111ff000*, lpNumberOfBytesWritten=0x11339dfc*=0x864, lpOverlapped=0x11339e08) returned 1
	[0306.241] GetFileType (hFile=0x1b4) returned 0x1
	[0306.241] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x864, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.241] GetFileType (hFile=0x1b4) returned 0x1
	[0306.242] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.242] WriteFile (in: hFile=0x1b4, lpBuffer=0x11473180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11473180*, lpNumberOfBytesWritten=0x11339dfc*=0x224, lpOverlapped=0x11339e08) returned 1
	[0306.242] GetFileType (hFile=0x1b4) returned 0x1
	[0306.242] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x864, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.242] CloseHandle (hObject=0x1b4) returned 1
	[0306.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf.tl30z")) returned 0x220
	[0306.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.246] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0306.248] SetEvent (hEvent=0x24c) returned 1
	[0306.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf")) returned 0x220
	[0306.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF", dwFileAttributes=0x220) returned 1
	[0306.249] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0306.393] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0306.393] ReadFile (in: hFile=0x1b4, lpBuffer=0x113f8000, nNumberOfBytesToRead=0x2ad4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x113f8000*, lpNumberOfBytesRead=0x1128ce18*=0x2ad4, lpOverlapped=0x0) returned 1
	[0306.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0306.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0306.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bd302 | out: pbBuffer=0x111bd302) returned 1
	[0306.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0306.401] GetFileType (hFile=0x1b4) returned 0x1
	[0306.401] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.401] WriteFile (in: hFile=0x1b4, lpBuffer=0x11126000*, nNumberOfBytesToWrite=0x2ad4, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11126000*, lpNumberOfBytesWritten=0x1133fdfc*=0x2ad4, lpOverlapped=0x1133fe08) returned 1
	[0306.401] GetFileType (hFile=0x1b4) returned 0x1
	[0306.402] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2ad4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.402] GetFileType (hFile=0x1b4) returned 0x1
	[0306.402] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.402] WriteFile (in: hFile=0x1b4, lpBuffer=0x110f7c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110f7c00*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0306.402] GetFileType (hFile=0x1b4) returned 0x1
	[0306.402] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2ad4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.402] CloseHandle (hObject=0x1b4) returned 1
	[0306.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf.tl30z")) returned 0x220
	[0306.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.405] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0306.408] SetEvent (hEvent=0x248) returned 1
	[0306.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf")) returned 0x220
	[0306.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF", dwFileAttributes=0x220) returned 1
	[0306.409] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0306.490] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0306.490] ReadFile (in: hFile=0x1d4, lpBuffer=0x11112000, nNumberOfBytesToRead=0x2f38, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11112000*, lpNumberOfBytesRead=0x1128ce18*=0x2f38, lpOverlapped=0x0) returned 1
	[0306.495] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113322e0 | out: pbBuffer=0x113322e0) returned 1
	[0306.495] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113322d8 | out: pbBuffer=0x113322d8) returned 1
	[0306.495] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11419d02 | out: pbBuffer=0x11419d02) returned 1
	[0306.495] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332310 | out: pbBuffer=0x11332310) returned 1
	[0306.496] GetFileType (hFile=0x1d4) returned 0x1
	[0306.496] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.496] WriteFile (in: hFile=0x1d4, lpBuffer=0x113ba000*, nNumberOfBytesToWrite=0x2f38, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113ba000*, lpNumberOfBytesWritten=0x1133fdfc*=0x2f38, lpOverlapped=0x1133fe08) returned 1
	[0306.497] GetFileType (hFile=0x1d4) returned 0x1
	[0306.497] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2f38, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.497] GetFileType (hFile=0x1d4) returned 0x1
	[0306.497] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.497] WriteFile (in: hFile=0x1d4, lpBuffer=0x11061500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11061500*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0306.498] GetFileType (hFile=0x1d4) returned 0x1
	[0306.499] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2f38, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.499] CloseHandle (hObject=0x1d4) returned 1
	[0306.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf.tl30z")) returned 0x220
	[0306.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.501] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0306.505] SetEvent (hEvent=0x248) returned 1
	[0306.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf")) returned 0x220
	[0306.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF", dwFileAttributes=0x220) returned 1
	[0306.505] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.588] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0306.588] ReadFile (in: hFile=0x2a0, lpBuffer=0x11234000, nNumberOfBytesToRead=0xc10, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11234000*, lpNumberOfBytesRead=0x1128ce18*=0xc10, lpOverlapped=0x0) returned 1
	[0306.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0306.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f568 | out: pbBuffer=0x1140f568) returned 1
	[0306.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123c702 | out: pbBuffer=0x1123c702) returned 1
	[0306.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1123c767 | out: pbBuffer=0x1123c767) returned 1
	[0306.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1123c7b5 | out: pbBuffer=0x1123c7b5) returned 1
	[0306.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0306.594] GetFileType (hFile=0x2a0) returned 0x1
	[0306.594] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.594] WriteFile (in: hFile=0x2a0, lpBuffer=0x11432000*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11432000*, lpNumberOfBytesWritten=0x1102ddfc*=0xc10, lpOverlapped=0x1102de08) returned 1
	[0306.595] GetFileType (hFile=0x2a0) returned 0x1
	[0306.595] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xc10, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.595] GetFileType (hFile=0x2a0) returned 0x1
	[0306.595] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.595] WriteFile (in: hFile=0x2a0, lpBuffer=0x110bf500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110bf500*, lpNumberOfBytesWritten=0x1102ddfc*=0x221, lpOverlapped=0x1102de08) returned 1
	[0306.595] GetFileType (hFile=0x2a0) returned 0x1
	[0306.596] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xc10, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.596] CloseHandle (hObject=0x2a0) returned 1
	[0306.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf.tl30z")) returned 0x220
	[0306.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.599] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0306.600] SetEvent (hEvent=0x248) returned 1
	[0306.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf")) returned 0x220
	[0306.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF", dwFileAttributes=0x220) returned 1
	[0306.601] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0306.710] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0306.710] ReadFile (in: hFile=0x1fc, lpBuffer=0x1116c000, nNumberOfBytesToRead=0x477c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1116c000*, lpNumberOfBytesRead=0x1128ce18*=0x477c, lpOverlapped=0x0) returned 1
	[0306.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332a60 | out: pbBuffer=0x11332a60) returned 1
	[0306.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11451302 | out: pbBuffer=0x11451302) returned 1
	[0306.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1145139b | out: pbBuffer=0x1145139b) returned 1
	[0306.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114513dd | out: pbBuffer=0x114513dd) returned 1
	[0306.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332a90 | out: pbBuffer=0x11332a90) returned 1
	[0306.717] GetFileType (hFile=0x1fc) returned 0x1
	[0306.718] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.718] WriteFile (in: hFile=0x1fc, lpBuffer=0x111a2000*, nNumberOfBytesToWrite=0x477c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111a2000*, lpNumberOfBytesWritten=0x1133fdfc*=0x477c, lpOverlapped=0x1133fe08) returned 1
	[0306.718] GetFileType (hFile=0x1fc) returned 0x1
	[0306.718] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x477c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.718] GetFileType (hFile=0x1fc) returned 0x1
	[0306.719] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.719] WriteFile (in: hFile=0x1fc, lpBuffer=0x11453c00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11453c00*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0306.719] GetFileType (hFile=0x1fc) returned 0x1
	[0306.719] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x477c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.719] CloseHandle (hObject=0x1fc) returned 1
	[0306.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf.tl30z")) returned 0x220
	[0306.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.722] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0306.726] SetEvent (hEvent=0x248) returned 1
	[0306.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf")) returned 0x220
	[0306.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF", dwFileAttributes=0x220) returned 1
	[0306.727] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.858] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1102be08 | out: lpMode=0x1102be08) returned 0
	[0306.858] ReadFile (in: hFile=0x2a0, lpBuffer=0x11466000, nNumberOfBytesToRead=0x23f8, lpNumberOfBytesRead=0x1102be18, lpOverlapped=0x0 | out: lpBuffer=0x11466000*, lpNumberOfBytesRead=0x1102be18*=0x23f8, lpOverlapped=0x0) returned 1
	[0306.866] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0306.866] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0306.866] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11398802 | out: pbBuffer=0x11398802) returned 1
	[0306.866] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11398823 | out: pbBuffer=0x11398823) returned 1
	[0306.867] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0306.867] GetFileType (hFile=0x2a0) returned 0x1
	[0306.867] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.867] WriteFile (in: hFile=0x2a0, lpBuffer=0x113d2000*, nNumberOfBytesToWrite=0x23f8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x23f8, lpOverlapped=0x1102be08) returned 1
	[0306.868] GetFileType (hFile=0x2a0) returned 0x1
	[0306.868] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x23f8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.868] GetFileType (hFile=0x2a0) returned 0x1
	[0306.868] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.868] WriteFile (in: hFile=0x2a0, lpBuffer=0x1135ca80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135ca80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0306.869] GetFileType (hFile=0x2a0) returned 0x1
	[0306.869] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x23f8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.869] CloseHandle (hObject=0x2a0) returned 1
	[0306.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf.tl30z")) returned 0x220
	[0306.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.873] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0306.877] SetEvent (hEvent=0x24c) returned 1
	[0306.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf")) returned 0x220
	[0306.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF", dwFileAttributes=0x220) returned 1
	[0306.877] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.025] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0307.025] ReadFile (in: hFile=0x2a0, lpBuffer=0x11302000, nNumberOfBytesToRead=0xd58, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11302000*, lpNumberOfBytesRead=0x1128ce18*=0xd58, lpOverlapped=0x0) returned 1
	[0307.031] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0307.031] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6548 | out: pbBuffer=0x113e6548) returned 1
	[0307.031] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c6902 | out: pbBuffer=0x113c6902) returned 1
	[0307.031] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c69b4 | out: pbBuffer=0x113c69b4) returned 1
	[0307.032] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0307.032] GetFileType (hFile=0x2a0) returned 0x1
	[0307.032] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.032] WriteFile (in: hFile=0x2a0, lpBuffer=0x1109e000*, nNumberOfBytesToWrite=0xd58, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x1109e000*, lpNumberOfBytesWritten=0x1124bdfc*=0xd58, lpOverlapped=0x1124be08) returned 1
	[0307.033] GetFileType (hFile=0x2a0) returned 0x1
	[0307.033] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xd58, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.033] GetFileType (hFile=0x2a0) returned 0x1
	[0307.033] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.033] WriteFile (in: hFile=0x2a0, lpBuffer=0x113c3500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x113c3500*, lpNumberOfBytesWritten=0x1124bdfc*=0x22a, lpOverlapped=0x1124be08) returned 1
	[0307.033] GetFileType (hFile=0x2a0) returned 0x1
	[0307.034] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xd58, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.034] CloseHandle (hObject=0x2a0) returned 1
	[0307.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf.tl30z")) returned 0x220
	[0307.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.037] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.043] SetEvent (hEvent=0x24c) returned 1
	[0307.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf")) returned 0x220
	[0307.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF", dwFileAttributes=0x220) returned 1
	[0307.044] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0307.122] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0307.122] ReadFile (in: hFile=0x1d4, lpBuffer=0x11150000, nNumberOfBytesToRead=0x1e00, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11150000*, lpNumberOfBytesRead=0x1128ce18*=0x1e00, lpOverlapped=0x0) returned 1
	[0307.129] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6f0 | out: pbBuffer=0x1140f6f0) returned 1
	[0307.129] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f6e8 | out: pbBuffer=0x1140f6e8) returned 1
	[0307.129] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11109302 | out: pbBuffer=0x11109302) returned 1
	[0307.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f720 | out: pbBuffer=0x1140f720) returned 1
	[0307.130] GetFileType (hFile=0x1d4) returned 0x1
	[0307.131] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.131] WriteFile (in: hFile=0x1d4, lpBuffer=0x11168000*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11168000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1e00, lpOverlapped=0x1133be08) returned 1
	[0307.131] GetFileType (hFile=0x1d4) returned 0x1
	[0307.131] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1e00, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.131] GetFileType (hFile=0x1d4) returned 0x1
	[0307.131] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.132] WriteFile (in: hFile=0x1d4, lpBuffer=0x1114ee00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1114ee00*, lpNumberOfBytesWritten=0x1133bdfc*=0x224, lpOverlapped=0x1133be08) returned 1
	[0307.132] GetFileType (hFile=0x1d4) returned 0x1
	[0307.132] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1e00, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.132] CloseHandle (hObject=0x1d4) returned 1
	[0307.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf.tl30z")) returned 0x220
	[0307.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.136] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.139] SetEvent (hEvent=0x24c) returned 1
	[0307.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf")) returned 0x220
	[0307.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF", dwFileAttributes=0x220) returned 1
	[0307.139] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.227] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0307.227] ReadFile (in: hFile=0x2a0, lpBuffer=0x11187300, nNumberOfBytesToRead=0x1248, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11187300*, lpNumberOfBytesRead=0x1128ce18*=0x1248, lpOverlapped=0x0) returned 1
	[0307.232] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0307.232] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11369202 | out: pbBuffer=0x11369202) returned 1
	[0307.233] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11369232 | out: pbBuffer=0x11369232) returned 1
	[0307.233] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0307.233] GetFileType (hFile=0x2a0) returned 0x1
	[0307.233] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.233] WriteFile (in: hFile=0x2a0, lpBuffer=0x113a0000*, nNumberOfBytesToWrite=0x1248, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113a0000*, lpNumberOfBytesWritten=0x11031dfc*=0x1248, lpOverlapped=0x11031e08) returned 1
	[0307.234] GetFileType (hFile=0x2a0) returned 0x1
	[0307.234] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1248, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.234] GetFileType (hFile=0x2a0) returned 0x1
	[0307.234] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.234] WriteFile (in: hFile=0x2a0, lpBuffer=0x11383880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11383880*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0307.235] GetFileType (hFile=0x2a0) returned 0x1
	[0307.235] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1248, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.235] CloseHandle (hObject=0x2a0) returned 1
	[0307.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf.tl30z")) returned 0x220
	[0307.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.237] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.238] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.242] SetEvent (hEvent=0x284) returned 1
	[0307.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf")) returned 0x220
	[0307.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF", dwFileAttributes=0x220) returned 1
	[0307.242] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.332] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0307.333] ReadFile (in: hFile=0x2a0, lpBuffer=0x11419800, nNumberOfBytesToRead=0x1694, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11419800*, lpNumberOfBytesRead=0x1131be18*=0x1694, lpOverlapped=0x0) returned 1
	[0307.337] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332680 | out: pbBuffer=0x11332680) returned 1
	[0307.338] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ca602 | out: pbBuffer=0x113ca602) returned 1
	[0307.338] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326b0 | out: pbBuffer=0x113326b0) returned 1
	[0307.338] GetFileType (hFile=0x2a0) returned 0x1
	[0307.338] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.338] WriteFile (in: hFile=0x2a0, lpBuffer=0x112fa000*, nNumberOfBytesToWrite=0x1694, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112fa000*, lpNumberOfBytesWritten=0x11031dfc*=0x1694, lpOverlapped=0x11031e08) returned 1
	[0307.339] GetFileType (hFile=0x2a0) returned 0x1
	[0307.339] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1694, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.340] GetFileType (hFile=0x2a0) returned 0x1
	[0307.340] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.340] WriteFile (in: hFile=0x2a0, lpBuffer=0x110dd500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110dd500*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0307.340] GetFileType (hFile=0x2a0) returned 0x1
	[0307.340] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1694, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.340] CloseHandle (hObject=0x2a0) returned 1
	[0307.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf.tl30z")) returned 0x220
	[0307.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.349] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.352] SetEvent (hEvent=0x284) returned 1
	[0307.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf")) returned 0x220
	[0307.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF", dwFileAttributes=0x220) returned 1
	[0307.353] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0307.454] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0307.454] ReadFile (in: hFile=0x1fc, lpBuffer=0x1113e000, nNumberOfBytesToRead=0x6bf6, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1113e000*, lpNumberOfBytesRead=0x1131be18*=0x6bf6, lpOverlapped=0x0) returned 1
	[0307.460] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332980 | out: pbBuffer=0x11332980) returned 1
	[0307.460] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cba02 | out: pbBuffer=0x113cba02) returned 1
	[0307.460] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cba0a | out: pbBuffer=0x113cba0a) returned 1
	[0307.460] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cba1d | out: pbBuffer=0x113cba1d) returned 1
	[0307.460] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cba33 | out: pbBuffer=0x113cba33) returned 1
	[0307.461] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113329b0 | out: pbBuffer=0x113329b0) returned 1
	[0307.461] GetFileType (hFile=0x1fc) returned 0x1
	[0307.462] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.462] WriteFile (in: hFile=0x1fc, lpBuffer=0x1145c000*, nNumberOfBytesToWrite=0x6bf6, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1145c000*, lpNumberOfBytesWritten=0x11031dfc*=0x6bf6, lpOverlapped=0x11031e08) returned 1
	[0307.462] GetFileType (hFile=0x1fc) returned 0x1
	[0307.462] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6bf6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.463] GetFileType (hFile=0x1fc) returned 0x1
	[0307.463] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.464] WriteFile (in: hFile=0x1fc, lpBuffer=0x1109b180*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1109b180*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0307.464] GetFileType (hFile=0x1fc) returned 0x1
	[0307.464] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6bf6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.464] CloseHandle (hObject=0x1fc) returned 1
	[0307.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf.tl30z")) returned 0x220
	[0307.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.467] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.470] SetEvent (hEvent=0x160) returned 1
	[0307.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf")) returned 0x220
	[0307.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF", dwFileAttributes=0x220) returned 1
	[0307.471] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0307.571] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0307.571] ReadFile (in: hFile=0x1d4, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x4e82, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x1131be18*=0x4e82, lpOverlapped=0x0) returned 1
	[0307.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0307.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6288 | out: pbBuffer=0x113e6288) returned 1
	[0307.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1126d302 | out: pbBuffer=0x1126d302) returned 1
	[0307.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62c0 | out: pbBuffer=0x113e62c0) returned 1
	[0307.578] GetFileType (hFile=0x1d4) returned 0x1
	[0307.578] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.578] WriteFile (in: hFile=0x1d4, lpBuffer=0x110cc000*, nNumberOfBytesToWrite=0x4e82, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110cc000*, lpNumberOfBytesWritten=0x1102ddfc*=0x4e82, lpOverlapped=0x1102de08) returned 1
	[0307.578] GetFileType (hFile=0x1d4) returned 0x1
	[0307.579] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4e82, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.579] GetFileType (hFile=0x1d4) returned 0x1
	[0307.579] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.579] WriteFile (in: hFile=0x1d4, lpBuffer=0x111ebc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111ebc00*, lpNumberOfBytesWritten=0x1102ddfc*=0x22a, lpOverlapped=0x1102de08) returned 1
	[0307.579] GetFileType (hFile=0x1d4) returned 0x1
	[0307.579] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4e82, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.580] CloseHandle (hObject=0x1d4) returned 1
	[0307.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf.tl30z")) returned 0x220
	[0307.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.583] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.587] SetEvent (hEvent=0x24c) returned 1
	[0307.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf")) returned 0x220
	[0307.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF", dwFileAttributes=0x220) returned 1
	[0307.588] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0307.668] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0307.669] ReadFile (in: hFile=0x1b4, lpBuffer=0x11258000, nNumberOfBytesToRead=0xce0, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11258000*, lpNumberOfBytesRead=0x1131be18*=0xce0, lpOverlapped=0x0) returned 1
	[0307.674] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0307.674] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e668 | out: pbBuffer=0x1104e668) returned 1
	[0307.674] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110fc602 | out: pbBuffer=0x110fc602) returned 1
	[0307.675] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e6a0 | out: pbBuffer=0x1104e6a0) returned 1
	[0307.675] GetFileType (hFile=0x1b4) returned 0x1
	[0307.675] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.676] WriteFile (in: hFile=0x1b4, lpBuffer=0x1111a000*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1111a000*, lpNumberOfBytesWritten=0x1133fdfc*=0xce0, lpOverlapped=0x1133fe08) returned 1
	[0307.676] GetFileType (hFile=0x1b4) returned 0x1
	[0307.676] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xce0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.676] GetFileType (hFile=0x1b4) returned 0x1
	[0307.676] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.676] WriteFile (in: hFile=0x1b4, lpBuffer=0x111d1500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111d1500*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0307.677] GetFileType (hFile=0x1b4) returned 0x1
	[0307.677] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xce0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.677] CloseHandle (hObject=0x1b4) returned 1
	[0307.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf.tl30z")) returned 0x220
	[0307.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.680] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf")) returned 0x220
	[0307.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF", dwFileAttributes=0x220) returned 1
	[0307.684] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0307.762] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0307.762] ReadFile (in: hFile=0x1b4, lpBuffer=0x11176000, nNumberOfBytesToRead=0x270, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11176000*, lpNumberOfBytesRead=0x1131be18*=0x270, lpOverlapped=0x0) returned 1
	[0307.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327e0 | out: pbBuffer=0x113327e0) returned 1
	[0307.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327d8 | out: pbBuffer=0x113327d8) returned 1
	[0307.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11165102 | out: pbBuffer=0x11165102) returned 1
	[0307.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11165189 | out: pbBuffer=0x11165189) returned 1
	[0307.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11165191 | out: pbBuffer=0x11165191) returned 1
	[0307.768] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0307.768] GetFileType (hFile=0x1b4) returned 0x1
	[0307.768] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.768] WriteFile (in: hFile=0x1b4, lpBuffer=0x1115f800*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1115f800*, lpNumberOfBytesWritten=0x1133bdfc*=0x270, lpOverlapped=0x1133be08) returned 1
	[0307.768] GetFileType (hFile=0x1b4) returned 0x1
	[0307.769] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.769] GetFileType (hFile=0x1b4) returned 0x1
	[0307.769] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.769] WriteFile (in: hFile=0x1b4, lpBuffer=0x11188380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11188380*, lpNumberOfBytesWritten=0x1133bdfc*=0x224, lpOverlapped=0x1133be08) returned 1
	[0307.769] GetFileType (hFile=0x1b4) returned 0x1
	[0307.769] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x270, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.769] CloseHandle (hObject=0x1b4) returned 1
	[0307.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf.tl30z")) returned 0x220
	[0307.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.773] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.777] SetEvent (hEvent=0x24c) returned 1
	[0307.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf")) returned 0x220
	[0307.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF", dwFileAttributes=0x220) returned 1
	[0307.778] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0307.856] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0307.856] ReadFile (in: hFile=0x250, lpBuffer=0x112e0000, nNumberOfBytesToRead=0x918, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x112e0000*, lpNumberOfBytesRead=0x1131be18*=0x918, lpOverlapped=0x0) returned 1
	[0307.863] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0307.863] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0307.863] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11324802 | out: pbBuffer=0x11324802) returned 1
	[0307.864] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0307.864] GetFileType (hFile=0x250) returned 0x1
	[0307.864] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.864] WriteFile (in: hFile=0x250, lpBuffer=0x110d2000*, nNumberOfBytesToWrite=0x918, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110d2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x918, lpOverlapped=0x1102be08) returned 1
	[0307.865] GetFileType (hFile=0x250) returned 0x1
	[0307.865] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x918, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.865] GetFileType (hFile=0x250) returned 0x1
	[0307.865] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.865] WriteFile (in: hFile=0x250, lpBuffer=0x113d6a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d6a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0307.865] GetFileType (hFile=0x250) returned 0x1
	[0307.866] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x918, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.866] CloseHandle (hObject=0x250) returned 1
	[0307.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf.tl30z")) returned 0x220
	[0307.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.876] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.894] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.912] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.930] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0307.954] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.017] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.044] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.088] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.104] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.123] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.142] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.158] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.175] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.191] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.203] SetEvent (hEvent=0x24c) returned 1
	[0308.207] SetEvent (hEvent=0x124) returned 1
	[0308.207] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x1) returned 0x102
	[0308.211] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.211] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x1) returned 0x102
	[0308.214] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.214] SetEvent (hEvent=0x164) returned 1
	[0308.214] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0x1) returned 0x102
	[0308.217] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.250] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.266] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.328] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.349] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.368] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.385] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.403] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.420] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.437] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.457] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.493] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.515] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf")) returned 0x220
	[0308.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF", dwFileAttributes=0x220) returned 1
	[0308.524] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x294
	[0308.580] GetConsoleMode (in: hConsoleHandle=0x294, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0308.580] ReadFile (in: hFile=0x294, lpBuffer=0x112b4000, nNumberOfBytesToRead=0x1c2c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112b4000*, lpNumberOfBytesRead=0x1128ce18*=0x1c2c, lpOverlapped=0x0) returned 1
	[0308.865] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0308.908] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332200 | out: pbBuffer=0x11332200) returned 1
	[0308.908] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113321f8 | out: pbBuffer=0x113321f8) returned 1
	[0308.908] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113fa802 | out: pbBuffer=0x113fa802) returned 1
	[0308.908] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113fa89f | out: pbBuffer=0x113fa89f) returned 1
	[0308.908] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332230 | out: pbBuffer=0x11332230) returned 1
	[0308.909] GetFileType (hFile=0x294) returned 0x1
	[0308.909] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.909] WriteFile (in: hFile=0x294, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0x1c2c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1c2c, lpOverlapped=0x1133fe08) returned 1
	[0308.910] GetFileType (hFile=0x294) returned 0x1
	[0308.910] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x1c2c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.910] GetFileType (hFile=0x294) returned 0x1
	[0308.910] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.910] WriteFile (in: hFile=0x294, lpBuffer=0x11234a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11234a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0308.910] GetFileType (hFile=0x294) returned 0x1
	[0308.911] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x1c2c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.911] CloseHandle (hObject=0x294) returned 1
	[0308.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf.tl30z")) returned 0x220
	[0308.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.912] SetEvent (hEvent=0x24c) returned 1
	[0308.912] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) returned 0x0
	[0317.690] SetEvent (hEvent=0x25c) returned 1
	[0317.690] SetEvent (hEvent=0x27c) returned 1
	[0317.690] WaitForSingleObject (hHandle=0x174, dwMilliseconds=0xffffffff) 

Thread:
	id = 30
	os_tid = 0x388

	[0145.463] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x321fff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x321fff30*=0x1b8) returned 1
	[0145.463] VirtualQuery (in: lpAddress=0x321fff40, lpBuffer=0x321fff40, dwLength=0x1c | out: lpBuffer=0x321fff40*(BaseAddress=0x321ff000, AllocationBase=0x32100000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0145.463] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1bc
	[0145.463] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0175.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x112cc1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc
	[0175.661] CloseHandle (hObject=0x1dc) returned 1
	[0175.661] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1
	[0176.844] SetEvent (hEvent=0x150) returned 1
	[0176.844] SetEvent (hEvent=0x1e8) returned 1
	[0176.844] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1
	[0179.934] SetEvent (hEvent=0x1f0) returned 1
	[0179.934] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1
	[0181.141] SetEvent (hEvent=0x150) returned 1
	[0181.141] SetEvent (hEvent=0x1f0) returned 1
	[0181.142] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1
	[0183.696] SetEvent (hEvent=0x118) returned 1
	[0183.696] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1
	[0185.776] SetEvent (hEvent=0x150) returned 1
	[0185.777] SetEvent (hEvent=0x164) returned 1
	[0185.777] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x11341ba4 | out: lpFileInformation=0x11341ba4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1
	[0186.879] SetEvent (hEvent=0x1e0) returned 1
	[0186.880] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\graphics\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0187.932] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11341db0 | out: lpMode=0x11341db0) returned 0
	[0187.932] WriteFile (in: hFile=0x184, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341d80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341d80*=0x292, lpOverlapped=0x0) returned 1
	[0187.935] CloseHandle (hObject=0x184) returned 1
	[0188.003] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics" (normalized: "c:\\588bce7c90097ed212\\graphics"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x738551a3, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x738551a3, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0188.574] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae)) returned 1
	[0188.576] SetEvent (hEvent=0x118) returned 1
	[0188.576] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1
	[0188.577] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1
	[0188.577] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1
	[0188.578] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158)) returned 1
	[0188.578] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150)) returned 1
	[0188.578] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1
	[0188.579] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1
	[0188.579] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1
	[0188.580] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1
	[0188.580] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1
	[0188.581] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113)) returned 1
	[0188.582] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520)) returned 1
	[0188.583] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce)) returned 1
	[0188.583] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9)) returned 1
	[0188.583] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1
	[0188.584] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b)) returned 1
	[0188.584] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1
	[0188.585] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1
	[0188.586] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7)) returned 1
	[0188.587] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000)) returned 1
	[0188.588] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000)) returned 1
	[0188.588] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420)) returned 1
	[0188.588] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x11341c28 | out: lpFileInformation=0x11341c28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1
	[0188.589] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0188.590] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x11341e34 | out: lpMode=0x11341e34) returned 0
	[0188.590] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x11341e04, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x11341e04*=0x292, lpOverlapped=0x0) returned 1
	[0188.594] CloseHandle (hObject=0x16c) returned 1
	[0188.595] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212" (normalized: "c:\\588bce7c90097ed212"), fInfoLevelId=0x0, lpFileInformation=0x11341cac | out: lpFileInformation=0x11341cac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x73df5dcd, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x73df5dcd, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0188.595] GetFileAttributesExW (in: lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x11341cac | out: lpFileInformation=0x11341cac*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1
	[0188.599] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0x11341cac | out: lpFileInformation=0x11341cac*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0188.600] CreateFileW (lpFileName="C:\\Boot\\" (normalized: "c:\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0188.600] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x11341b54 | out: lpFindFileData=0x11341b54*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f21f0
	[0188.603] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11341bd0 | out: lpFindFileData=0x11341bd0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.730] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0188.971] SetEvent (hEvent=0x164) returned 1
	[0188.972] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.289] SetEvent (hEvent=0x1e8) returned 1
	[0189.289] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.471] SwitchToThread () returned 1
	[0189.499] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0189.695] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.695] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0189.820] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.820] SetEvent (hEvent=0x1f0) returned 1
	[0189.820] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0189.981] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0189.981] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 0x80
	[0189.982] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", dwFileAttributes=0x80) returned 1
	[0189.983] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.tl30z"), dwFlags=0x1) returned 1
	[0189.984] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0189.985] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0189.985] ReadFile (in: hFile=0x1cc, lpBuffer=0x111d4000, nNumberOfBytesToRead=0x154cc, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x111d4000*, lpNumberOfBytesRead=0x11423e18*=0x154cc, lpOverlapped=0x0) returned 1
	[0190.161] SwitchToThread () returned 1
	[0190.290] SetEvent (hEvent=0x1f0) returned 1
	[0190.291] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0190.722] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.722] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0190.777] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.777] SetEvent (hEvent=0x1e0) returned 1
	[0190.777] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0190.852] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0190.852] SwitchToThread () returned 1
	[0191.014] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.251] SwitchToThread () returned 1
	[0191.416] SwitchToThread () returned 1
	[0191.516] VirtualAlloc (lpAddress=0x1134c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1134c000
	[0191.517] SetEvent (hEvent=0x1e8) returned 1
	[0191.517] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.575] SwitchToThread () returned 1
	[0191.653] SetEvent (hEvent=0x118) returned 1
	[0191.653] SetEvent (hEvent=0x164) returned 1
	[0191.654] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0191.736] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.736] SetEvent (hEvent=0x164) returned 1
	[0191.737] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0191.848] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.848] SetEvent (hEvent=0x164) returned 1
	[0191.848] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0191.926] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0191.926] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu")) returned 0x80
	[0191.926] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu", dwFileAttributes=0x80) returned 1
	[0191.927] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.tl30z" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.tl30z"), dwFlags=0x1) returned 1
	[0191.928] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.tl30z" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8
	[0191.928] GetConsoleMode (in: hConsoleHandle=0x1f8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0191.928] ReadFile (in: hFile=0x1f8, lpBuffer=0x1111a000, nNumberOfBytesToRead=0x58d5a, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1111a000*, lpNumberOfBytesRead=0x11316e18*=0x58d5a, lpOverlapped=0x0) returned 1
	[0191.954] VirtualAlloc (lpAddress=0x11384000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11384000
	[0191.955] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332410 | out: pbBuffer=0x11332410) returned 1
	[0191.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11330a02 | out: pbBuffer=0x11330a02) returned 1
	[0191.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332440 | out: pbBuffer=0x11332440) returned 1
	[0191.958] VirtualAlloc (lpAddress=0x110ea000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x110ea000
	[0191.960] VirtualAlloc (lpAddress=0x11396000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11396000
	[0191.961] VirtualAlloc (lpAddress=0x113a0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x113a0000
	[0191.962] VirtualAlloc (lpAddress=0x113f0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x113f0000
	[0191.964] VirtualAlloc (lpAddress=0x111c0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x111c0000
	[0191.967] VirtualAlloc (lpAddress=0x111c4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x111c4000
	[0191.969] VirtualAlloc (lpAddress=0x111ea000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x111ea000
	[0191.971] VirtualAlloc (lpAddress=0x111ee000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x111ee000
	[0191.973] VirtualAlloc (lpAddress=0x1130e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1130e000
	[0191.975] VirtualAlloc (lpAddress=0x11312000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11312000
	[0191.976] VirtualAlloc (lpAddress=0x1131e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1131e000
	[0192.118] SwitchToThread () returned 1
	[0192.370] VirtualAlloc (lpAddress=0x11116000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11116000
	[0192.372] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0193.773] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0194.244] ReadFile (in: hFile=0x1b4, lpBuffer=0x11430000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11428e18*=0x100000, lpOverlapped=0x0) returned 1
	[0194.426] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0194.526] SetEvent (hEvent=0x1e0) returned 1
	[0194.526] SetEvent (hEvent=0x164) returned 1
	[0194.526] GetFileAttributesW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26
	[0194.526] SetFileAttributesW (lpFileName="C:\\BOOTNXT", dwFileAttributes=0x26) returned 1
	[0194.527] MoveFileExW (lpExistingFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), lpNewFileName="C:\\BOOTNXT.tl30z" (normalized: "c:\\bootnxt.tl30z"), dwFlags=0x1) returned 1
	[0194.528] CreateFileW (lpFileName="C:\\BOOTNXT.tl30z" (normalized: "c:\\bootnxt.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0194.528] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0194.529] ReadFile (in: hFile=0x1c8, lpBuffer=0x11364014, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11364014*, lpNumberOfBytesRead=0x1128ce18*=0x1, lpOverlapped=0x0) returned 1
	[0194.683] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364110 | out: pbBuffer=0x11364110) returned 1
	[0194.683] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107a802 | out: pbBuffer=0x1107a802) returned 1
	[0194.683] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107a830 | out: pbBuffer=0x1107a830) returned 1
	[0194.683] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107a834 | out: pbBuffer=0x1107a834) returned 1
	[0194.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364140 | out: pbBuffer=0x11364140) returned 1
	[0194.684] GetFileType (hFile=0x1c8) returned 0x1
	[0194.684] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0194.684] WriteFile (in: hFile=0x1c8, lpBuffer=0x11556c00*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11556c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x1, lpOverlapped=0x1102be08) returned 1
	[0194.685] GetFileType (hFile=0x1c8) returned 0x1
	[0194.685] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0194.685] GetFileType (hFile=0x1c8) returned 0x1
	[0194.685] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0194.686] WriteFile (in: hFile=0x1c8, lpBuffer=0x1127ee00*, nNumberOfBytesToWrite=0x21b, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1127ee00*, lpNumberOfBytesWritten=0x1102bdfc*=0x21b, lpOverlapped=0x1102be08) returned 1
	[0194.686] GetFileType (hFile=0x1c8) returned 0x1
	[0194.686] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0194.686] CloseHandle (hObject=0x1c8) returned 1
	[0194.688] GetFileAttributesW (lpFileName="C:\\BOOTNXT.tl30z" (normalized: "c:\\bootnxt.tl30z")) returned 0x26
	[0194.689] SetFileAttributesW (lpFileName="C:\\BOOTNXT.tl30z", dwFileAttributes=0x27) returned 1
	[0194.689] GetFileAttributesW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd")) returned 0x26
	[0194.690] SetFileAttributesW (lpFileName="C:\\Boot\\BCD", dwFileAttributes=0x26) returned 1
	[0194.690] MoveFileExW (lpExistingFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), lpNewFileName="C:\\Boot\\BCD.tl30z" (normalized: "c:\\boot\\bcd.tl30z"), dwFlags=0x1) returned 0
	[0194.690] GetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log")) returned 0x26
	[0194.690] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG", dwFileAttributes=0x26) returned 1
	[0194.691] MoveFileExW (lpExistingFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), lpNewFileName="C:\\Boot\\BCD.LOG.tl30z" (normalized: "c:\\boot\\bcd.log.tl30z"), dwFlags=0x1) returned 0
	[0194.691] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0194.692] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0194.692] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0194.692] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0194.692] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0194.692] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1
	[0194.692] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1
	[0194.692] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1
	[0194.692] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1
	[0194.692] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1
	[0194.692] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1
	[0194.692] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1
	[0194.692] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1
	[0194.693] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1
	[0194.693] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1
	[0194.693] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1
	[0194.693] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0194.693] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0194.693] FindClose (in: hFindFile=0x7f22f0 | out: hFindFile=0x7f22f0) returned 1
	[0194.696] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467)) returned 1
	[0194.795] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a)) returned 1
	[0194.824] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0194.883] SwitchToThread () returned 1
	[0194.955] SwitchToThread () returned 1
	[0194.962] SetEvent (hEvent=0x1f0) returned 1
	[0194.962] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0194.999] SetEvent (hEvent=0x1f0) returned 1
	[0194.999] SetEvent (hEvent=0x1e0) returned 1
	[0194.999] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\chs_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0195.000] VirtualAlloc (lpAddress=0x11b4c000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b4c000
	[0195.036] GetFileType (hFile=0x1f8) returned 0x1
	[0195.036] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11317de0 | out: lpNewFilePointer=0x0) returned 1
	[0195.036] WriteFile (in: hFile=0x1f8, lpBuffer=0x11632000*, nNumberOfBytesToWrite=0x58d5a, lpNumberOfBytesWritten=0x11317dfc, lpOverlapped=0x11317e08 | out: lpBuffer=0x11632000*, lpNumberOfBytesWritten=0x11317dfc*=0x58d5a, lpOverlapped=0x11317e08) returned 1
	[0195.138] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0195.254] SetEvent (hEvent=0x1f0) returned 1
	[0195.254] GetFileType (hFile=0x1f8) returned 0x1
	[0195.255] SetFilePointerEx (in: hFile=0x1f8, liDistanceToMove=0x58d5a, lpNewFilePointer=0x0, dwMoveMethod=0x11317de0 | out: lpNewFilePointer=0x0) returned 1
	[0195.255] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0195.285] SetEvent (hEvent=0x1f0) returned 1
	[0195.285] SetEvent (hEvent=0x164) returned 1
	[0195.285] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu")) returned 0x80
	[0195.285] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu", dwFileAttributes=0x80) returned 1
	[0195.286] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.tl30z" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.tl30z"), dwFlags=0x1) returned 1
	[0195.287] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.tl30z" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0195.287] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0195.288] ReadFile (in: hFile=0x1d0, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x2578f, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x11023e18*=0x2578f, lpOverlapped=0x0) returned 1
	[0195.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e120 | out: pbBuffer=0x1142e120) returned 1
	[0195.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107aa02 | out: pbBuffer=0x1107aa02) returned 1
	[0195.328] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e150 | out: pbBuffer=0x1142e150) returned 1
	[0195.329] VirtualAlloc (lpAddress=0x115f8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x115f8000
	[0195.331] VirtualAlloc (lpAddress=0x115fc000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0x115fc000
	[0195.340] VirtualAlloc (lpAddress=0x1161a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1161a000
	[0195.341] VirtualAlloc (lpAddress=0x1161e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1161e000
	[0195.343] VirtualAlloc (lpAddress=0x11622000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11622000
	[0195.344] VirtualAlloc (lpAddress=0x11626000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11626000
	[0195.346] VirtualAlloc (lpAddress=0x1162a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1162a000
	[0195.347] VirtualAlloc (lpAddress=0x1162e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1162e000
	[0195.349] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0195.366] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0195.366] SetEvent (hEvent=0x150) returned 1
	[0195.366] SetEvent (hEvent=0x164) returned 1
	[0195.366] SetEvent (hEvent=0x1f0) returned 1
	[0195.368] GetFileType (hFile=0x1d0) returned 0x1
	[0195.368] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0195.368] WriteFile (in: hFile=0x1d0, lpBuffer=0x11b3e000*, nNumberOfBytesToWrite=0x2578f, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11b3e000*, lpNumberOfBytesWritten=0x1133fdfc*=0x2578f, lpOverlapped=0x1133fe08) returned 1
	[0195.370] GetFileType (hFile=0x1d0) returned 0x1
	[0195.370] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x2578f, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0195.370] GetFileType (hFile=0x1d0) returned 0x1
	[0195.370] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0195.370] WriteFile (in: hFile=0x1d0, lpBuffer=0x11082c00*, nNumberOfBytesToWrite=0x24e, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11082c00*, lpNumberOfBytesWritten=0x1133fdfc*=0x24e, lpOverlapped=0x1133fe08) returned 1
	[0195.420] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0195.450] GetFileType (hFile=0x1d0) returned 0x1
	[0195.450] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x2578f, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0195.450] CloseHandle (hObject=0x1d0) returned 1
	[0195.960] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.tl30z" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.tl30z")) returned 0x20
	[0195.960] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.tl30z", dwFileAttributes=0x21) returned 1
	[0195.961] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0196.734] SetEvent (hEvent=0x118) returned 1
	[0196.734] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0196.936] SetEvent (hEvent=0x118) returned 1
	[0196.937] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0197.188] SetEvent (hEvent=0x118) returned 1
	[0197.188] SetEvent (hEvent=0x1e0) returned 1
	[0197.188] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b)) returned 1
	[0197.362] SetEvent (hEvent=0x1e0) returned 1
	[0197.363] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588)) returned 1
	[0197.367] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506)) returned 1
	[0197.565] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f)) returned 1
	[0197.762] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b)) returned 1
	[0197.765] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a)) returned 1
	[0197.771] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb)) returned 1
	[0197.773] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b)) returned 1
	[0197.773] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255)) returned 1
	[0197.773] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b)) returned 1
	[0197.773] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b)) returned 1
	[0197.775] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2)) returned 1
	[0197.775] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66)) returned 1
	[0197.775] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3)) returned 1
	[0197.776] VirtualAlloc (lpAddress=0x11376000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11376000
	[0197.776] CreateFileW (lpFileName="C:\\Boot\\Fonts\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\fonts\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8
	[0198.108] GetConsoleMode (in: hConsoleHandle=0x1f8, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0198.108] WriteFile (in: hFile=0x1f8, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0198.111] CloseHandle (hObject=0x1f8) returned 1
	[0198.111] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x796a75be, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x796a75be, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0198.540] CreateFileW (lpFileName="C:\\Boot\\Resources\\" (normalized: "c:\\boot\\resources"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0198.540] VirtualAlloc (lpAddress=0x11354000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11354000
	[0198.541] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f20f0
	[0198.585] FindNextFileW (in: hFindFile=0x7f20f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.585] FindNextFileW (in: hFindFile=0x7f20f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1
	[0198.585] FindNextFileW (in: hFindFile=0x7f20f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0198.585] FindNextFileW (in: hFindFile=0x7f20f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0198.585] FindClose (in: hFindFile=0x7f20f0 | out: hFindFile=0x7f20f0) returned 1
	[0198.586] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0)) returned 1
	[0198.586] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\" (normalized: "c:\\boot\\resources\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0198.586] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x1102ba4c | out: lpFindFileData=0x1102ba4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f21f0
	[0198.587] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x1102bac8 | out: lpFindFileData=0x1102bac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.587] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x1102bac8 | out: lpFindFileData=0x1102bac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1
	[0198.587] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x1102bac8 | out: lpFindFileData=0x1102bac8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0198.587] FindClose (in: hFindFile=0x7f21f0 | out: hFindFile=0x7f21f0) returned 1
	[0198.587] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bb20 | out: lpFileInformation=0x1102bb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0)) returned 1
	[0198.588] SetEvent (hEvent=0x12c) returned 1
	[0198.588] VirtualAlloc (lpAddress=0x11356000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11356000
	[0198.588] VirtualAlloc (lpAddress=0x113c6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x113c6000
	[0198.589] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\resources\\en-us\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0198.589] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bd2c | out: lpMode=0x1102bd2c) returned 0
	[0198.589] VirtualAlloc (lpAddress=0x113c8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x113c8000
	[0198.590] WriteFile (in: hFile=0x16c, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bcfc, lpOverlapped=0x0 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1102bcfc*=0x292, lpOverlapped=0x0) returned 1
	[0198.593] CloseHandle (hObject=0x16c) returned 1
	[0198.593] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US" (normalized: "c:\\boot\\resources\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x79d51ef8, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x79d51ef8, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0198.593] CreateFileW (lpFileName="C:\\Boot\\Resources\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\resources\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0198.594] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0198.594] WriteFile (in: hFile=0x16c, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0198.596] CloseHandle (hObject=0x16c) returned 1
	[0198.597] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources" (normalized: "c:\\boot\\resources"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x79d5e28e, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x79d5e28e, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0198.597] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\" (normalized: "c:\\boot\\bg-bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0198.597] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f23f0
	[0198.597] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.598] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0198.598] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0198.598] FindClose (in: hFindFile=0x7f23f0 | out: hFindFile=0x7f23f0) returned 1
	[0198.598] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1
	[0198.598] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\bg-bg\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0198.863] SetEvent (hEvent=0x150) returned 1
	[0198.863] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0198.863] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0198.865] CloseHandle (hObject=0x16c) returned 1
	[0198.866] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bg-BG" (normalized: "c:\\boot\\bg-bg"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x79de1f0a, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x79de1f0a, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0198.866] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0)) returned 1
	[0198.911] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0)) returned 1
	[0198.961] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0198.961] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2470
	[0198.961] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0198.961] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0198.961] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0198.962] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0198.962] FindClose (in: hFindFile=0x7f2470 | out: hFindFile=0x7f2470) returned 1
	[0198.962] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58)) returned 1
	[0198.962] SetEvent (hEvent=0x12c) returned 1
	[0198.962] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0198.962] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\cs-cz\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0199.105] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0199.105] WriteFile (in: hFile=0x16c, lpBuffer=0x11350000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x11350000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0199.108] CloseHandle (hObject=0x16c) returned 1
	[0199.109] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7a1537d3, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7a1537d3, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0199.194] CreateFileW (lpFileName="C:\\Boot\\da-DK\\" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0199.194] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22b0
	[0199.255] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0199.256] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0199.256] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0199.256] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0199.256] FindClose (in: hFindFile=0x7f22b0 | out: hFindFile=0x7f22b0) returned 1
	[0199.256] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1
	[0199.257] SetEvent (hEvent=0x1b0) returned 1
	[0199.257] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0199.257] CreateFileW (lpFileName="C:\\Boot\\da-DK\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\da-dk\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0199.543] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0199.543] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0199.546] CloseHandle (hObject=0x16c) returned 1
	[0199.547] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7a42b0ea, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7a42b0ea, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0199.632] CreateFileW (lpFileName="C:\\Boot\\de-DE\\" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0199.633] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22f0
	[0199.633] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0199.633] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0199.634] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0199.634] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0199.634] FindClose (in: hFindFile=0x7f22f0 | out: hFindFile=0x7f22f0) returned 1
	[0199.634] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560)) returned 1
	[0199.684] SetEvent (hEvent=0x1c4) returned 1
	[0199.684] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0199.685] CreateFileW (lpFileName="C:\\Boot\\de-DE\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\de-de\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0199.826] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0199.826] WriteFile (in: hFile=0x16c, lpBuffer=0x11350000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x11350000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0199.830] CloseHandle (hObject=0x16c) returned 1
	[0199.830] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7a849b3f, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7a849b3f, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0199.916] CreateFileW (lpFileName="C:\\Boot\\el-GR\\" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0199.916] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2030
	[0199.917] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0199.917] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0199.917] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0199.917] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0199.917] FindClose (in: hFindFile=0x7f2030 | out: hFindFile=0x7f2030) returned 1
	[0199.917] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960)) returned 1
	[0199.918] SetEvent (hEvent=0x1b0) returned 1
	[0199.918] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0)) returned 1
	[0200.112] SetEvent (hEvent=0x1b0) returned 1
	[0200.113] CreateFileW (lpFileName="C:\\Boot\\el-GR\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\el-gr\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0200.401] SetEvent (hEvent=0x150) returned 1
	[0200.401] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0200.401] WriteFile (in: hFile=0x16c, lpBuffer=0x111c2000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x111c2000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0200.403] CloseHandle (hObject=0x16c) returned 1
	[0200.403] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7ac54de2, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7ac54de2, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0200.404] CreateFileW (lpFileName="C:\\Boot\\en-GB\\" (normalized: "c:\\boot\\en-gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0200.404] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2030
	[0200.404] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0200.404] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0200.404] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0200.405] FindClose (in: hFindFile=0x7f2030 | out: hFindFile=0x7f2030) returned 1
	[0200.405] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158)) returned 1
	[0200.405] SetEvent (hEvent=0x1b0) returned 1
	[0200.405] CreateFileW (lpFileName="C:\\Boot\\en-GB\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\en-gb\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0200.406] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0200.406] WriteFile (in: hFile=0x16c, lpBuffer=0x111c2000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x111c2000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0200.408] CloseHandle (hObject=0x16c) returned 1
	[0200.408] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-GB" (normalized: "c:\\boot\\en-gb"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7ae8c233, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7ae8c233, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0200.408] CreateFileW (lpFileName="C:\\Boot\\en-US\\" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0200.408] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2430
	[0200.409] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0200.409] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0200.409] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0200.409] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0200.409] FindClose (in: hFindFile=0x7f2430 | out: hFindFile=0x7f2430) returned 1
	[0200.409] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0)) returned 1
	[0200.579] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0)) returned 1
	[0200.579] CreateFileW (lpFileName="C:\\Boot\\en-US\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\en-us\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0200.914] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0200.914] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0200.916] CloseHandle (hObject=0x16c) returned 1
	[0200.917] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7b178b2b, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7b178b2b, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0201.086] CreateFileW (lpFileName="C:\\Boot\\es-ES\\" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0201.086] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1df0
	[0201.087] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0201.087] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0201.087] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0201.087] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0201.087] FindClose (in: hFindFile=0x7f1df0 | out: hFindFile=0x7f1df0) returned 1
	[0201.087] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1
	[0201.088] SetEvent (hEvent=0x12c) returned 1
	[0201.088] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0201.259] SetEvent (hEvent=0x12c) returned 1
	[0201.260] CreateFileW (lpFileName="C:\\Boot\\es-ES\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\es-es\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0201.620] SetEvent (hEvent=0x150) returned 1
	[0201.620] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0201.620] WriteFile (in: hFile=0x16c, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0201.624] CloseHandle (hObject=0x16c) returned 1
	[0201.624] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7b795acc, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7b795acc, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0201.624] CreateFileW (lpFileName="C:\\Boot\\es-MX\\" (normalized: "c:\\boot\\es-mx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0201.625] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2370
	[0201.625] FindNextFileW (in: hFindFile=0x7f2370, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0201.625] FindNextFileW (in: hFindFile=0x7f2370, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0201.625] FindNextFileW (in: hFindFile=0x7f2370, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0201.625] FindClose (in: hFindFile=0x7f2370 | out: hFindFile=0x7f2370) returned 1
	[0201.626] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1
	[0201.626] SetEvent (hEvent=0x12c) returned 1
	[0201.626] CreateFileW (lpFileName="C:\\Boot\\es-MX\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\es-mx\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0201.626] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0201.626] WriteFile (in: hFile=0x16c, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0201.629] CloseHandle (hObject=0x16c) returned 1
	[0201.630] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-MX" (normalized: "c:\\boot\\es-mx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7ba37a88, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7ba37a88, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0201.630] CreateFileW (lpFileName="C:\\Boot\\et-EE\\" (normalized: "c:\\boot\\et-ee"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0201.630] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f23f0
	[0201.630] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0201.630] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0201.630] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0201.631] FindClose (in: hFindFile=0x7f23f0 | out: hFindFile=0x7f23f0) returned 1
	[0201.634] GetFileAttributesExW (in: lpFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560)) returned 1
	[0201.731] CreateFileW (lpFileName="C:\\Boot\\et-EE\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\et-ee\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0201.733] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0201.733] WriteFile (in: hFile=0x16c, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0201.735] CloseHandle (hObject=0x16c) returned 1
	[0201.736] GetFileAttributesExW (in: lpFileName="C:\\Boot\\et-EE" (normalized: "c:\\boot\\et-ee"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7bb4c175, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7bb4c175, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0201.736] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0201.736] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2470
	[0201.737] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0201.737] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0201.737] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0201.737] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0201.737] FindClose (in: hFindFile=0x7f2470 | out: hFindFile=0x7f2470) returned 1
	[0201.737] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0201.738] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0201.738] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\fi-fi\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0201.889] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0201.889] WriteFile (in: hFile=0x16c, lpBuffer=0x111c2000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x111c2000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0201.892] CloseHandle (hObject=0x16c) returned 1
	[0201.892] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7bbc61d8, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7bbc61d8, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0201.990] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\" (normalized: "c:\\boot\\fr-ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0201.991] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22f0
	[0201.992] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0201.992] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0201.993] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0201.993] FindClose (in: hFindFile=0x7f22f0 | out: hFindFile=0x7f22f0) returned 1
	[0201.993] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560)) returned 1
	[0201.993] SetEvent (hEvent=0x12c) returned 1
	[0201.993] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\fr-ca\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0201.994] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0201.994] WriteFile (in: hFile=0x16c, lpBuffer=0x111c2000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x111c2000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0201.997] CloseHandle (hObject=0x16c) returned 1
	[0201.998] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-CA" (normalized: "c:\\boot\\fr-ca"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7bdcbb8e, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7bdcbb8e, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0201.998] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0201.998] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f23f0
	[0201.999] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0201.999] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0201.999] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0201.999] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0201.999] FindClose (in: hFindFile=0x7f23f0 | out: hFindFile=0x7f23f0) returned 1
	[0201.999] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558)) returned 1
	[0202.000] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0202.048] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\fr-fr\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0202.295] SetEvent (hEvent=0x150) returned 1
	[0202.295] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0202.295] WriteFile (in: hFile=0x16c, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0202.445] CloseHandle (hObject=0x16c) returned 1
	[0202.445] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7bee9604, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7bee9604, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0202.445] CreateFileW (lpFileName="C:\\Boot\\hr-HR\\" (normalized: "c:\\boot\\hr-hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0202.446] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f21f0
	[0202.446] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0202.446] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0202.446] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0202.446] FindClose (in: hFindFile=0x7f21f0 | out: hFindFile=0x7f21f0) returned 1
	[0202.446] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0202.447] SetEvent (hEvent=0x1c4) returned 1
	[0202.447] CreateFileW (lpFileName="C:\\Boot\\hr-HR\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\hr-hr\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0202.738] SetEvent (hEvent=0x150) returned 1
	[0202.738] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0202.738] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0202.740] CloseHandle (hObject=0x16c) returned 1
	[0202.741] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hr-HR" (normalized: "c:\\boot\\hr-hr"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7c2fb8fa, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7c2fb8fa, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0202.741] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0202.741] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f23f0
	[0202.741] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0202.742] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0202.742] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0202.742] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0202.742] FindClose (in: hFindFile=0x7f23f0 | out: hFindFile=0x7f23f0) returned 1
	[0202.742] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360)) returned 1
	[0202.853] SetEvent (hEvent=0x1c4) returned 1
	[0202.853] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398)) returned 1
	[0202.853] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\hu-hu\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0202.857] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0202.857] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0202.860] CloseHandle (hObject=0x16c) returned 1
	[0202.861] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7c604f77, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7c604f77, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0202.861] CreateFileW (lpFileName="C:\\Boot\\it-IT\\" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0202.861] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1e70
	[0202.862] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0202.862] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0202.862] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0202.862] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0202.862] FindClose (in: hFindFile=0x7f1e70 | out: hFindFile=0x7f1e70) returned 1
	[0202.863] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58)) returned 1
	[0202.863] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0202.937] CreateFileW (lpFileName="C:\\Boot\\it-IT\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\it-it\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0203.369] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0203.370] WriteFile (in: hFile=0x16c, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0203.373] CloseHandle (hObject=0x16c) returned 1
	[0203.373] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7c84a083, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7c84a083, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0203.373] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0203.374] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1df0
	[0203.374] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.374] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0203.374] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0203.374] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0203.375] FindClose (in: hFindFile=0x7f1df0 | out: hFindFile=0x7f1df0) returned 1
	[0203.375] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760)) returned 1
	[0203.375] SetEvent (hEvent=0x1c4) returned 1
	[0203.375] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798)) returned 1
	[0203.375] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\ja-jp\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0203.380] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0203.380] WriteFile (in: hFile=0x16c, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0203.381] CloseHandle (hObject=0x16c) returned 1
	[0203.381] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7cb01db1, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7cb01db1, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0203.381] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0203.381] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1e30
	[0203.595] FindNextFileW (in: hFindFile=0x7f1e30, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0203.596] FindNextFileW (in: hFindFile=0x7f1e30, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0203.596] FindNextFileW (in: hFindFile=0x7f1e30, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0203.596] FindNextFileW (in: hFindFile=0x7f1e30, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0203.596] FindClose (in: hFindFile=0x7f1e30 | out: hFindFile=0x7f1e30) returned 1
	[0203.596] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560)) returned 1
	[0203.596] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0)) returned 1
	[0203.597] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\ko-kr\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0204.040] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0204.040] WriteFile (in: hFile=0x16c, lpBuffer=0x11350000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x11350000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0204.043] CloseHandle (hObject=0x16c) returned 1
	[0204.044] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7ce20301, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7ce20301, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0204.369] CreateFileW (lpFileName="C:\\Boot\\lt-LT\\" (normalized: "c:\\boot\\lt-lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0204.369] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1d30
	[0204.370] FindNextFileW (in: hFindFile=0x7f1d30, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.370] FindNextFileW (in: hFindFile=0x7f1d30, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0204.370] FindNextFileW (in: hFindFile=0x7f1d30, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0204.370] FindClose (in: hFindFile=0x7f1d30 | out: hFindFile=0x7f1d30) returned 1
	[0204.371] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1
	[0204.575] SetEvent (hEvent=0x1c4) returned 1
	[0204.575] CreateFileW (lpFileName="C:\\Boot\\lt-LT\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\lt-lt\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0204.576] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0204.576] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0204.580] CloseHandle (hObject=0x16c) returned 1
	[0204.581] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lt-LT" (normalized: "c:\\boot\\lt-lt"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7d669e5d, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7d669e5d, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0204.581] CreateFileW (lpFileName="C:\\Boot\\lv-LV\\" (normalized: "c:\\boot\\lv-lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0204.581] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f20b0
	[0204.582] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.582] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0204.582] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0204.582] FindClose (in: hFindFile=0x7f20b0 | out: hFindFile=0x7f20b0) returned 1
	[0204.582] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758)) returned 1
	[0204.583] CreateFileW (lpFileName="C:\\Boot\\lv-LV\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\lv-lv\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0204.583] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0204.583] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0204.587] CloseHandle (hObject=0x16c) returned 1
	[0204.588] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lv-LV" (normalized: "c:\\boot\\lv-lv"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7d67d5b9, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7d67d5b9, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0204.588] GetFileAttributesExW (in: lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0)) returned 1
	[0204.588] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0204.589] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2430
	[0204.722] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0204.722] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0204.722] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0204.722] FindNextFileW (in: hFindFile=0x7f2430, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0204.722] FindClose (in: hFindFile=0x7f2430 | out: hFindFile=0x7f2430) returned 1
	[0204.722] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1
	[0204.723] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0204.723] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\nb-no\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0205.168] SetEvent (hEvent=0x150) returned 1
	[0205.168] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0205.168] WriteFile (in: hFile=0x16c, lpBuffer=0x11350000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x11350000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0205.171] CloseHandle (hObject=0x16c) returned 1
	[0205.171] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7da29370, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7da29370, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0205.171] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0205.172] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1fb0
	[0205.172] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.172] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0205.172] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0205.172] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0205.172] FindClose (in: hFindFile=0x7f1fb0 | out: hFindFile=0x7f1fb0) returned 1
	[0205.172] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160)) returned 1
	[0205.242] SetEvent (hEvent=0x1c4) returned 1
	[0205.242] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0205.242] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\nl-nl\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0205.455] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0205.455] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0205.458] CloseHandle (hObject=0x16c) returned 1
	[0205.458] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7dd65694, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7dd65694, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0205.589] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0205.590] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2470
	[0205.590] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.590] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0205.590] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0205.590] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0205.591] FindClose (in: hFindFile=0x7f2470 | out: hFindFile=0x7f2470) returned 1
	[0205.591] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58)) returned 1
	[0205.591] SetEvent (hEvent=0x1b0) returned 1
	[0205.591] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0205.592] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\pl-pl\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0205.766] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0205.766] WriteFile (in: hFile=0x16c, lpBuffer=0x11350000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x11350000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0205.769] CloseHandle (hObject=0x16c) returned 1
	[0205.769] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7e09ebcf, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7e09ebcf, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0205.955] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0205.955] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f23f0
	[0205.956] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0205.956] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0205.956] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0205.956] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0205.956] FindClose (in: hFindFile=0x7f23f0 | out: hFindFile=0x7f23f0) returned 1
	[0205.956] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0205.957] SetEvent (hEvent=0x1e0) returned 1
	[0205.957] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0205.957] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\pt-br\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0206.232] SetEvent (hEvent=0x150) returned 1
	[0206.232] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0206.232] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0206.234] CloseHandle (hObject=0x16c) returned 1
	[0206.235] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7e4da9be, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7e4da9be, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0206.235] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0206.235] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1df0
	[0206.299] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.299] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0206.299] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0206.299] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0206.299] FindClose (in: hFindFile=0x7f1df0 | out: hFindFile=0x7f1df0) returned 1
	[0206.300] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0206.300] SetEvent (hEvent=0x1e0) returned 1
	[0206.300] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1
	[0206.300] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\pt-pt\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0206.596] SetEvent (hEvent=0x150) returned 1
	[0206.596] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0206.596] WriteFile (in: hFile=0x16c, lpBuffer=0x11350000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x11350000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0206.598] CloseHandle (hObject=0x16c) returned 1
	[0206.598] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7e892a75, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7e892a75, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0206.599] CreateFileW (lpFileName="C:\\Boot\\qps-ploc\\" (normalized: "c:\\boot\\qps-ploc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0206.599] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1df0
	[0206.599] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.599] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0206.599] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0206.599] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0206.600] FindClose (in: hFindFile=0x7f1df0 | out: hFindFile=0x7f1df0) returned 1
	[0206.603] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160)) returned 1
	[0206.658] SetEvent (hEvent=0x12c) returned 1
	[0206.658] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398)) returned 1
	[0206.658] CreateFileW (lpFileName="C:\\Boot\\qps-ploc\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\qps-ploc\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0206.824] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0206.825] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0206.828] CloseHandle (hObject=0x16c) returned 1
	[0206.829] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc" (normalized: "c:\\boot\\qps-ploc"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7eaca986, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7eaca986, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0206.933] CreateFileW (lpFileName="C:\\Boot\\ro-RO\\" (normalized: "c:\\boot\\ro-ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0206.934] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f21f0
	[0206.934] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.934] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0206.934] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0206.935] FindClose (in: hFindFile=0x7f21f0 | out: hFindFile=0x7f21f0) returned 1
	[0206.935] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960)) returned 1
	[0206.935] SetEvent (hEvent=0x1b0) returned 1
	[0206.935] CreateFileW (lpFileName="C:\\Boot\\ro-RO\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\ro-ro\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0206.938] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0206.938] WriteFile (in: hFile=0x16c, lpBuffer=0x111c2000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x111c2000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0206.943] CloseHandle (hObject=0x16c) returned 1
	[0206.944] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ro-RO" (normalized: "c:\\boot\\ro-ro"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7ecf1d0e, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7ecf1d0e, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0206.944] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0206.944] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2030
	[0206.947] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0206.947] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0206.947] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0206.947] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0206.947] FindClose (in: hFindFile=0x7f2030 | out: hFindFile=0x7f2030) returned 1
	[0206.948] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1
	[0206.948] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0)) returned 1
	[0206.948] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\ru-ru\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0207.403] SetEvent (hEvent=0x150) returned 1
	[0207.403] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0207.403] WriteFile (in: hFile=0x16c, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0207.406] CloseHandle (hObject=0x16c) returned 1
	[0207.407] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7efff142, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7efff142, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0207.407] CreateFileW (lpFileName="C:\\Boot\\sk-SK\\" (normalized: "c:\\boot\\sk-sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0207.407] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1eb0
	[0207.407] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.407] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0207.408] FindNextFileW (in: hFindFile=0x7f1eb0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0207.408] FindClose (in: hFindFile=0x7f1eb0 | out: hFindFile=0x7f1eb0) returned 1
	[0207.408] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58)) returned 1
	[0207.498] SetEvent (hEvent=0x12c) returned 1
	[0207.498] CreateFileW (lpFileName="C:\\Boot\\sk-SK\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\sk-sk\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0207.499] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0207.499] WriteFile (in: hFile=0x16c, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0207.502] CloseHandle (hObject=0x16c) returned 1
	[0207.503] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sk-SK" (normalized: "c:\\boot\\sk-sk"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7f24c607, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7f24c607, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0207.503] CreateFileW (lpFileName="C:\\Boot\\sl-SI\\" (normalized: "c:\\boot\\sl-si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0207.503] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f23f0
	[0207.503] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.503] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0207.503] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0207.504] FindClose (in: hFindFile=0x7f23f0 | out: hFindFile=0x7f23f0) returned 1
	[0207.504] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1
	[0207.504] CreateFileW (lpFileName="C:\\Boot\\sl-SI\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\sl-si\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0207.701] SetEvent (hEvent=0x150) returned 1
	[0207.701] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0207.701] WriteFile (in: hFile=0x16c, lpBuffer=0x11350000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x11350000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0207.704] CloseHandle (hObject=0x16c) returned 1
	[0207.704] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sl-SI" (normalized: "c:\\boot\\sl-si"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7f2e89f1, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7f2e89f1, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0207.704] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS\\" (normalized: "c:\\boot\\sr-latn-cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0207.704] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2030
	[0207.705] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0207.705] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0207.705] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0207.705] FindNextFileW (in: hFindFile=0x7f2030, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0207.705] FindClose (in: hFindFile=0x7f2030 | out: hFindFile=0x7f2030) returned 1
	[0207.705] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1
	[0207.796] SetEvent (hEvent=0x12c) returned 1
	[0207.796] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58)) returned 1
	[0207.797] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\sr-latn-cs\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0208.055] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0208.055] WriteFile (in: hFile=0x16c, lpBuffer=0x111c2000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x111c2000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0208.058] CloseHandle (hObject=0x16c) returned 1
	[0208.059] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS" (normalized: "c:\\boot\\sr-latn-cs"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7f5ee76f, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7f5ee76f, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0208.483] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS\\" (normalized: "c:\\boot\\sr-latn-rs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0208.484] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f20b0
	[0208.484] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.484] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0208.484] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0208.484] FindClose (in: hFindFile=0x7f20b0 | out: hFindFile=0x7f20b0) returned 1
	[0208.485] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1
	[0208.485] SetEvent (hEvent=0x1e0) returned 1
	[0208.485] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\sr-latn-rs\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0208.486] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0208.486] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0208.489] CloseHandle (hObject=0x16c) returned 1
	[0208.489] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-RS" (normalized: "c:\\boot\\sr-latn-rs"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7fbb3aa8, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7fbb3aa8, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0208.489] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\" (normalized: "c:\\boot\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0208.489] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22b0
	[0208.561] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0208.561] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0208.561] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0208.561] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0208.562] FindClose (in: hFindFile=0x7f22b0 | out: hFindFile=0x7f22b0) returned 1
	[0208.562] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960)) returned 1
	[0208.562] SetEvent (hEvent=0x1e0) returned 1
	[0208.562] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98)) returned 1
	[0208.563] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\sv-se\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0208.847] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0208.847] WriteFile (in: hFile=0x16c, lpBuffer=0x11350000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x11350000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0208.849] CloseHandle (hObject=0x16c) returned 1
	[0208.850] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x7fd44099, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x7fd44099, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0209.008] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\" (normalized: "c:\\boot\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0209.009] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f23f0
	[0209.009] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0209.009] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0209.009] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0209.009] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0209.009] FindClose (in: hFindFile=0x7f23f0 | out: hFindFile=0x7f23f0) returned 1
	[0209.010] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558)) returned 1
	[0209.094] SetEvent (hEvent=0x1b0) returned 1
	[0209.094] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1
	[0209.094] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\tr-tr\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0209.621] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0209.621] WriteFile (in: hFile=0x16c, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0209.624] CloseHandle (hObject=0x16c) returned 1
	[0209.625] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x8025e391, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x8025e391, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0209.844] CreateFileW (lpFileName="C:\\Boot\\uk-UA\\" (normalized: "c:\\boot\\uk-ua"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0209.845] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2230
	[0209.845] FindNextFileW (in: hFindFile=0x7f2230, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0209.845] FindNextFileW (in: hFindFile=0x7f2230, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0209.845] FindNextFileW (in: hFindFile=0x7f2230, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0209.846] FindClose (in: hFindFile=0x7f2230 | out: hFindFile=0x7f2230) returned 1
	[0209.846] GetFileAttributesExW (in: lpFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1
	[0209.846] SetEvent (hEvent=0x1e0) returned 1
	[0209.846] CreateFileW (lpFileName="C:\\Boot\\uk-UA\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\uk-ua\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0209.847] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0209.847] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0209.850] CloseHandle (hObject=0x16c) returned 1
	[0209.850] GetFileAttributesExW (in: lpFileName="C:\\Boot\\uk-UA" (normalized: "c:\\boot\\uk-ua"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x808ae83d, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x808ae83d, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0209.850] GetFileAttributesExW (in: lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236)) returned 1
	[0209.930] SetEvent (hEvent=0x1e0) returned 1
	[0209.930] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\" (normalized: "c:\\boot\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0209.930] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1fb0
	[0210.012] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0210.012] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0210.013] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0210.013] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0210.013] FindClose (in: hFindFile=0x7f1fb0 | out: hFindFile=0x7f1fb0) returned 1
	[0210.013] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960)) returned 1
	[0210.013] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0)) returned 1
	[0210.014] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\zh-cn\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0210.368] SetEvent (hEvent=0x150) returned 1
	[0210.368] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0210.368] WriteFile (in: hFile=0x16c, lpBuffer=0x111c2000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x111c2000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0210.370] CloseHandle (hObject=0x16c) returned 1
	[0210.371] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x80bf8b4d, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x80bf8b4d, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0210.371] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\" (normalized: "c:\\boot\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0210.371] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22b0
	[0210.372] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0210.372] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0210.372] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0210.372] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0210.372] FindClose (in: hFindFile=0x7f22b0 | out: hFindFile=0x7f22b0) returned 1
	[0210.372] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958)) returned 1
	[0210.577] SetEvent (hEvent=0x1e0) returned 1
	[0210.577] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558)) returned 1
	[0210.578] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\zh-hk\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0210.884] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0210.884] WriteFile (in: hFile=0x16c, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0210.887] CloseHandle (hObject=0x16c) returned 1
	[0210.887] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x810d73f1, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x810d73f1, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0211.055] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\" (normalized: "c:\\boot\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0211.055] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22f0
	[0211.056] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0211.056] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0211.056] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0211.056] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x1102bb4c | out: lpFindFileData=0x1102bb4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0211.057] FindClose (in: hFindFile=0x7f22f0 | out: hFindFile=0x7f22f0) returned 1
	[0211.057] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960)) returned 1
	[0211.057] SetEvent (hEvent=0x1b0) returned 1
	[0211.057] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x1102bba4 | out: lpFileInformation=0x1102bba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598)) returned 1
	[0211.058] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\zh-tw\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0211.381] SetEvent (hEvent=0x150) returned 1
	[0211.381] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102bdb0 | out: lpMode=0x1102bdb0) returned 0
	[0211.382] WriteFile (in: hFile=0x16c, lpBuffer=0x11350000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102bd80, lpOverlapped=0x0 | out: lpBuffer=0x11350000*, lpNumberOfBytesWritten=0x1102bd80*=0x292, lpOverlapped=0x0) returned 1
	[0211.384] CloseHandle (hObject=0x16c) returned 1
	[0211.384] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x81552b0c, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x81552b0c, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0211.384] CreateFileW (lpFileName="C:\\Boot\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\boot\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0211.385] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102be34 | out: lpMode=0x1102be34) returned 0
	[0211.385] WriteFile (in: hFile=0x16c, lpBuffer=0x11350000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102be04, lpOverlapped=0x0 | out: lpBuffer=0x11350000*, lpNumberOfBytesWritten=0x1102be04*=0x292, lpOverlapped=0x0) returned 1
	[0211.387] CloseHandle (hObject=0x16c) returned 1
	[0211.387] GetFileAttributesExW (in: lpFileName="C:\\Boot" (normalized: "c:\\boot"), fInfoLevelId=0x0, lpFileInformation=0x1102bcac | out: lpFileInformation=0x1102bcac*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x817514d9, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x817514d9, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0211.387] GetFileAttributesExW (in: lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), fInfoLevelId=0x0, lpFileInformation=0x1102bcac | out: lpFileInformation=0x1102bcac*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0211.390] CreateFileW (lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x16c
	[0211.390] GetProcAddress (hModule=0x75e90000, lpProcName="GetFileInformationByHandle") returned 0x75efef20
	[0211.391] GetFileInformationByHandle (in: hFile=0x16c, lpFileInformation=0x1102bc3c | out: lpFileInformation=0x1102bc3c) returned 1
	[0211.392] GetProcAddress (hModule=0x75e90000, lpProcName="GetFileInformationByHandleEx") returned 0x75ea43d0
	[0211.392] GetFileInformationByHandleEx (in: hFile=0x16c, FileInformationClass=0x9, lpFileInformation=0x1102bc34, dwBufferSize=0x8 | out: lpFileInformation=0x1102bc34) returned 1
	[0211.392] CloseHandle (hObject=0x16c) returned 1
	[0211.392] CreateFileW (lpFileName="C:\\ESD\\" (normalized: "c:\\esd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0211.392] FindFirstFileW (in: lpFileName="C:\\ESD\\*", lpFindFileData=0x1102bb54 | out: lpFindFileData=0x1102bb54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2070
	[0211.586] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0211.587] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0211.587] FindClose (in: hFindFile=0x7f2070 | out: hFindFile=0x7f2070) returned 1
	[0211.587] CreateFileW (lpFileName="C:\\ESD\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\esd\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0211.713] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1102be34 | out: lpMode=0x1102be34) returned 0
	[0211.713] WriteFile (in: hFile=0x16c, lpBuffer=0x11350000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102be04, lpOverlapped=0x0 | out: lpBuffer=0x11350000*, lpNumberOfBytesWritten=0x1102be04*=0x292, lpOverlapped=0x0) returned 1
	[0211.719] CloseHandle (hObject=0x16c) returned 1
	[0211.719] GetFileAttributesExW (in: lpFileName="C:\\ESD" (normalized: "c:\\esd"), fInfoLevelId=0x0, lpFileInformation=0x1102bcac | out: lpFileInformation=0x1102bcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x81a7aa5e, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x81a7aa5e, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0211.720] CreateFileW (lpFileName="C:\\Logs\\" (normalized: "c:\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0211.720] FindFirstFileW (in: lpFileName="C:\\Logs\\*", lpFindFileData=0x1102bb54 | out: lpFindFileData=0x1102bb54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2470
	[0212.042] SetEvent (hEvent=0x150) returned 1
	[0212.042] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0212.108] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1
	[0212.130] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1
	[0212.130] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1
	[0212.130] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1
	[0212.130] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1
	[0212.130] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1
	[0212.130] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1
	[0212.130] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1
	[0212.130] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1
	[0212.130] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1
	[0212.130] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1
	[0212.131] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1
	[0212.131] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1
	[0212.131] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1
	[0212.131] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1
	[0212.131] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1
	[0212.131] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1
	[0212.131] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1
	[0212.131] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1
	[0212.131] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1
	[0212.131] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1
	[0212.132] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1
	[0212.132] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1
	[0212.132] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1
	[0212.132] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1
	[0212.132] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1
	[0212.132] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1
	[0212.132] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1
	[0212.132] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1
	[0212.133] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1
	[0212.133] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1
	[0212.133] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1
	[0212.133] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1
	[0212.133] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1
	[0212.133] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1
	[0212.133] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1
	[0212.133] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1
	[0212.133] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1
	[0212.133] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1
	[0212.133] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1
	[0212.133] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1
	[0212.134] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1
	[0212.134] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1
	[0212.134] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1
	[0212.134] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1
	[0212.134] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1
	[0212.134] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1
	[0212.134] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1
	[0212.134] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1
	[0212.134] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1
	[0212.134] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1
	[0212.135] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1
	[0212.135] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1
	[0212.135] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1
	[0212.135] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1
	[0212.135] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1
	[0212.135] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1
	[0212.135] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1
	[0212.135] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1
	[0212.136] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1
	[0212.136] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1
	[0212.136] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1
	[0212.136] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1
	[0212.136] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1
	[0212.136] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1
	[0212.137] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1
	[0212.137] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1
	[0212.138] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1
	[0212.138] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1
	[0212.138] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1
	[0212.138] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1
	[0212.138] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1
	[0212.138] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1
	[0212.138] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1
	[0212.138] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1
	[0212.138] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1
	[0212.138] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1
	[0212.139] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1
	[0212.139] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1
	[0212.139] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1
	[0212.139] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1
	[0212.139] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1
	[0212.139] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1
	[0212.139] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1
	[0212.139] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1
	[0212.140] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1
	[0212.140] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1
	[0212.140] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1
	[0212.140] FindNextFileW (in: hFindFile=0x7f2470, lpFindFileData=0x1102bbd0 | out: lpFindFileData=0x1102bbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0212.140] FindClose (in: hFindFile=0x7f2470 | out: hFindFile=0x7f2470) returned 1
	[0212.143] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.150] SetEvent (hEvent=0x1b0) returned 1
	[0212.150] GetFileAttributesExW (in: lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.151] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.151] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.152] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.152] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.153] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.154] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.154] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.155] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.155] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.155] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1
	[0212.161] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.162] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000)) returned 1
	[0212.168] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.171] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.171] VirtualAlloc (lpAddress=0x11554000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x11554000
	[0212.173] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0212.173] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.174] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.175] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.175] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.175] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.175] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.176] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.177] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0212.177] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 0x20
	[0212.177] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0212.233] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0212.234] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0212.235] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1135ce08 | out: lpMode=0x1135ce08) returned 0
	[0212.235] VirtualAlloc (lpAddress=0x115e0000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0x115e0000
	[0212.239] ReadFile (in: hFile=0x16c, lpBuffer=0x115e0000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1135ce18, lpOverlapped=0x0 | out: lpBuffer=0x115e0000*, lpNumberOfBytesRead=0x1135ce18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0212.282] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364470 | out: pbBuffer=0x11364470) returned 1
	[0212.282] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11364468 | out: pbBuffer=0x11364468) returned 1
	[0212.282] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138ee02 | out: pbBuffer=0x1138ee02) returned 1
	[0212.283] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113644a0 | out: pbBuffer=0x113644a0) returned 1
	[0212.284] GetFileType (hFile=0x16c) returned 0x1
	[0212.284] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0212.285] WriteFile (in: hFile=0x16c, lpBuffer=0x11bf2000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f1dfc, lpOverlapped=0x112f1e08 | out: lpBuffer=0x11bf2000*, lpNumberOfBytesWritten=0x112f1dfc*=0x6ccc, lpOverlapped=0x112f1e08) returned 1
	[0212.285] GetFileType (hFile=0x16c) returned 0x1
	[0212.286] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0212.286] GetFileType (hFile=0x16c) returned 0x1
	[0212.286] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0212.286] WriteFile (in: hFile=0x16c, lpBuffer=0x11416a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f1dfc, lpOverlapped=0x112f1e08 | out: lpBuffer=0x11416a80*, lpNumberOfBytesWritten=0x112f1dfc*=0x230, lpOverlapped=0x112f1e08) returned 1
	[0212.287] GetFileType (hFile=0x16c) returned 0x1
	[0212.287] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0212.287] CloseHandle (hObject=0x16c) returned 1
	[0212.292] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.tl30z")) returned 0x20
	[0212.292] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0212.293] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.293] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 0x20
	[0212.293] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0212.294] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.tl30z"), dwFlags=0x1) returned 1
	[0212.295] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0212.296] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1135ce08 | out: lpMode=0x1135ce08) returned 0
	[0212.296] ReadFile (in: hFile=0x16c, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x11fd7, lpNumberOfBytesRead=0x1135ce18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x1135ce18*=0x11fd7, lpOverlapped=0x0) returned 1
	[0212.389] VirtualAlloc (lpAddress=0x110c0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110c0000
	[0212.390] VirtualAlloc (lpAddress=0x110c2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110c2000
	[0212.391] VirtualAlloc (lpAddress=0x110c4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x110c4000
	[0212.392] VirtualAlloc (lpAddress=0x110c6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x110c6000
	[0212.394] VirtualAlloc (lpAddress=0x1127a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1127a000
	[0212.395] VirtualAlloc (lpAddress=0x1127c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1127c000
	[0212.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113645e0 | out: pbBuffer=0x113645e0) returned 1
	[0212.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113645d8 | out: pbBuffer=0x113645d8) returned 1
	[0212.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138f902 | out: pbBuffer=0x1138f902) returned 1
	[0212.525] SwitchToThread () returned 1
	[0212.535] VirtualAlloc (lpAddress=0x11bd2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bd2000
	[0212.536] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 0x20
	[0212.536] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0212.537] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0216.706] SetEvent (hEvent=0x150) returned 1
	[0216.707] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0216.736] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x112f5e08 | out: lpMode=0x112f5e08) returned 0
	[0216.737] ReadFile (in: hFile=0x1c8, lpBuffer=0x11396000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x112f5e18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x112f5e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0216.758] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0216.758] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11354b02 | out: pbBuffer=0x11354b02) returned 1
	[0216.758] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11354b14 | out: pbBuffer=0x11354b14) returned 1
	[0216.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0216.760] GetFileType (hFile=0x1c8) returned 0x1
	[0216.760] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0216.760] WriteFile (in: hFile=0x1c8, lpBuffer=0x112fc000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x112fc000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6ccc, lpOverlapped=0x112f5e08) returned 1
	[0216.761] GetFileType (hFile=0x1c8) returned 0x1
	[0216.761] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0216.761] GetFileType (hFile=0x1c8) returned 0x1
	[0216.761] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0216.761] WriteFile (in: hFile=0x1c8, lpBuffer=0x113aca80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x113aca80*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0216.762] GetFileType (hFile=0x1c8) returned 0x1
	[0216.762] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0216.762] CloseHandle (hObject=0x1c8) returned 1
	[0216.838] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.tl30z")) returned 0x20
	[0216.838] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0216.884] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0216.892] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0217.150] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0217.254] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0300.252] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0300.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf")) returned 0x220
	[0300.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF", dwFileAttributes=0x220) returned 1
	[0300.260] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0300.306] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x111d1e08 | out: lpMode=0x111d1e08) returned 0
	[0300.306] ReadFile (in: hFile=0x1fc, lpBuffer=0x11218000, nNumberOfBytesToRead=0x8424, lpNumberOfBytesRead=0x111d1e18, lpOverlapped=0x0 | out: lpBuffer=0x11218000*, lpNumberOfBytesRead=0x111d1e18*=0x8424, lpOverlapped=0x0) returned 1
	[0301.001] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.027] SetEvent (hEvent=0x26c) returned 1
	[0301.027] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.031] SetEvent (hEvent=0x174) returned 1
	[0301.031] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.067] SetEvent (hEvent=0x1e8) returned 1
	[0301.067] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.074] SetEvent (hEvent=0x118) returned 1
	[0301.074] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.090] SetEvent (hEvent=0x25c) returned 1
	[0301.091] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.096] SetEvent (hEvent=0x24c) returned 1
	[0301.096] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.103] SetEvent (hEvent=0x124) returned 1
	[0301.103] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.117] SetEvent (hEvent=0x218) returned 1
	[0301.117] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0301.120] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.120] SetEvent (hEvent=0x234) returned 1
	[0301.121] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0301.123] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.123] SetEvent (hEvent=0x234) returned 1
	[0301.124] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0301.127] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.127] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0301.130] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.130] SetEvent (hEvent=0x150) returned 1
	[0301.130] SetEvent (hEvent=0x210) returned 1
	[0301.130] SetEvent (hEvent=0x234) returned 1
	[0301.130] SetEvent (hEvent=0x1e8) returned 1
	[0301.130] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0x1) returned 0x102
	[0301.134] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0301.134] SetEvent (hEvent=0x1c4) returned 1
	[0301.134] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0308.632] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0308.639] SetEvent (hEvent=0x1e8) returned 1
	[0308.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf")) returned 0x220
	[0308.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF", dwFileAttributes=0x220) returned 1
	[0308.640] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0308.709] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11097e08 | out: lpMode=0x11097e08) returned 0
	[0308.709] ReadFile (in: hFile=0x1cc, lpBuffer=0x110a2d80, nNumberOfBytesToRead=0xd3c, lpNumberOfBytesRead=0x11097e18, lpOverlapped=0x0 | out: lpBuffer=0x110a2d80*, lpNumberOfBytesRead=0x11097e18*=0xd3c, lpOverlapped=0x0) returned 1
	[0308.811] SetEvent (hEvent=0x150) returned 1
	[0308.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6060 | out: pbBuffer=0x113e6060) returned 1
	[0308.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6058 | out: pbBuffer=0x113e6058) returned 1
	[0308.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d9302 | out: pbBuffer=0x110d9302) returned 1
	[0308.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d9319 | out: pbBuffer=0x110d9319) returned 1
	[0308.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d9366 | out: pbBuffer=0x110d9366) returned 1
	[0308.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6090 | out: pbBuffer=0x113e6090) returned 1
	[0308.813] GetFileType (hFile=0x1cc) returned 0x1
	[0308.813] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.813] WriteFile (in: hFile=0x1cc, lpBuffer=0x11240000*, nNumberOfBytesToWrite=0xd3c, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11240000*, lpNumberOfBytesWritten=0x1133bdfc*=0xd3c, lpOverlapped=0x1133be08) returned 1
	[0308.813] GetFileType (hFile=0x1cc) returned 0x1
	[0308.814] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xd3c, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.814] GetFileType (hFile=0x1cc) returned 0x1
	[0308.814] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.814] WriteFile (in: hFile=0x1cc, lpBuffer=0x11234380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11234380*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0308.814] GetFileType (hFile=0x1cc) returned 0x1
	[0308.814] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xd3c, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.814] CloseHandle (hObject=0x1cc) returned 1
	[0308.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf.tl30z")) returned 0x220
	[0308.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.815] SetEvent (hEvent=0x240) returned 1
	[0308.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1
	[0308.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid")) returned 0x220
	[0308.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID", dwFileAttributes=0x220) returned 1
	[0308.816] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0308.819] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11097e08 | out: lpMode=0x11097e08) returned 0
	[0308.819] ReadFile (in: hFile=0x1cc, lpBuffer=0x11244000, nNumberOfBytesToRead=0x1e58, lpNumberOfBytesRead=0x11097e18, lpOverlapped=0x0 | out: lpBuffer=0x11244000*, lpNumberOfBytesRead=0x11097e18*=0x1e58, lpOverlapped=0x0) returned 1
	[0308.872] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0308.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126250 | out: pbBuffer=0x11126250) returned 1
	[0308.932] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126248 | out: pbBuffer=0x11126248) returned 1
	[0308.932] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11165b02 | out: pbBuffer=0x11165b02) returned 1
	[0308.932] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126280 | out: pbBuffer=0x11126280) returned 1
	[0308.932] GetFileType (hFile=0x1cc) returned 0x1
	[0308.933] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.933] WriteFile (in: hFile=0x1cc, lpBuffer=0x111c8000*, nNumberOfBytesToWrite=0x1e58, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111c8000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1e58, lpOverlapped=0x1133de08) returned 1
	[0308.933] GetFileType (hFile=0x1cc) returned 0x1
	[0308.933] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x1e58, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.933] GetFileType (hFile=0x1cc) returned 0x1
	[0308.933] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.934] WriteFile (in: hFile=0x1cc, lpBuffer=0x111cd880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111cd880*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0308.934] GetFileType (hFile=0x1cc) returned 0x1
	[0308.934] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x1e58, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.934] CloseHandle (hObject=0x1cc) returned 1
	[0308.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid.tl30z")) returned 0x220
	[0308.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0308.935] SetEvent (hEvent=0x118) returned 1
	[0308.935] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0309.275] SetEvent (hEvent=0x1b0) returned 1
	[0309.275] SetEvent (hEvent=0x134) returned 1
	[0309.275] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0309.280] SetEvent (hEvent=0x12c) returned 1
	[0309.280] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0313.703] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0313.717] SetEvent (hEvent=0x134) returned 1
	[0313.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp")) returned 0x220
	[0313.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP", dwFileAttributes=0x220) returned 1
	[0313.718] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0313.771] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0313.771] ReadFile (in: hFile=0x1cc, lpBuffer=0x112c4000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112c4000*, lpNumberOfBytesRead=0x11423e18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0313.799] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0313.799] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f288 | out: pbBuffer=0x1140f288) returned 1
	[0313.799] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b7302 | out: pbBuffer=0x110b7302) returned 1
	[0313.799] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b73b6 | out: pbBuffer=0x110b73b6) returned 1
	[0313.800] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2c0 | out: pbBuffer=0x1140f2c0) returned 1
	[0313.800] GetFileType (hFile=0x1cc) returned 0x1
	[0313.800] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.801] WriteFile (in: hFile=0x1cc, lpBuffer=0x11130000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11130000*, lpNumberOfBytesWritten=0x1133bdfc*=0x7ce0, lpOverlapped=0x1133be08) returned 1
	[0313.801] GetFileType (hFile=0x1cc) returned 0x1
	[0313.801] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.801] GetFileType (hFile=0x1cc) returned 0x1
	[0313.801] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.802] WriteFile (in: hFile=0x1cc, lpBuffer=0x111fd880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111fd880*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0313.802] GetFileType (hFile=0x1cc) returned 0x1
	[0313.802] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.802] CloseHandle (hObject=0x1cc) returned 1
	[0313.830] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0313.837] SetEvent (hEvent=0x27c) returned 1
	[0313.837] SetEvent (hEvent=0x1b0) returned 1
	[0313.837] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0314.062] SetEvent (hEvent=0x22c) returned 1
	[0314.062] SetEvent (hEvent=0x218) returned 1
	[0314.062] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0314.074] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0314.074] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63d8 | out: pbBuffer=0x113e63d8) returned 1
	[0314.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11151d02 | out: pbBuffer=0x11151d02) returned 1
	[0314.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11151d11 | out: pbBuffer=0x11151d11) returned 1
	[0314.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11151d40 | out: pbBuffer=0x11151d40) returned 1
	[0314.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0314.152] GetFileType (hFile=0x290) returned 0x1
	[0314.152] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.152] WriteFile (in: hFile=0x290, lpBuffer=0x11446000*, nNumberOfBytesToWrite=0x6afc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11446000*, lpNumberOfBytesWritten=0x11031dfc*=0x6afc, lpOverlapped=0x11031e08) returned 1
	[0314.153] GetFileType (hFile=0x290) returned 0x1
	[0314.158] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x6afc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.158] GetFileType (hFile=0x290) returned 0x1
	[0314.158] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.158] WriteFile (in: hFile=0x290, lpBuffer=0x112fca80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112fca80*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0314.179] GetFileType (hFile=0x290) returned 0x1
	[0314.179] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x6afc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.179] CloseHandle (hObject=0x290) returned 1
	[0314.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg.tl30z")) returned 0x220
	[0314.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0314.323] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0314.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp.tl30z")) returned 0x220
	[0314.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.425] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0317.616] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0317.619] SetEvent (hEvent=0x27c) returned 1
	[0317.619] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0317.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf")) returned 0x220
	[0317.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF", dwFileAttributes=0x220) returned 1
	[0317.622] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.700] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0317.713] SetEvent (hEvent=0x1e8) returned 1
	[0317.714] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e60f0 | out: pbBuffer=0x113e60f0) returned 1
	[0317.714] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60e8 | out: pbBuffer=0x113e60e8) returned 1
	[0317.714] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b8802 | out: pbBuffer=0x113b8802) returned 1
	[0317.714] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6120 | out: pbBuffer=0x113e6120) returned 1
	[0317.715] GetFileType (hFile=0x1c8) returned 0x1
	[0317.715] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.715] WriteFile (in: hFile=0x1c8, lpBuffer=0x11340000*, nNumberOfBytesToWrite=0xae4, lpNumberOfBytesWritten=0x11375dfc, lpOverlapped=0x11375e08 | out: lpBuffer=0x11340000*, lpNumberOfBytesWritten=0x11375dfc*=0xae4, lpOverlapped=0x11375e08) returned 1
	[0317.715] GetFileType (hFile=0x1c8) returned 0x1
	[0317.715] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xae4, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.715] GetFileType (hFile=0x1c8) returned 0x1
	[0317.716] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.716] WriteFile (in: hFile=0x1c8, lpBuffer=0x11c21500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11375dfc, lpOverlapped=0x11375e08 | out: lpBuffer=0x11c21500*, lpNumberOfBytesWritten=0x11375dfc*=0x22a, lpOverlapped=0x11375e08) returned 1
	[0317.716] GetFileType (hFile=0x1c8) returned 0x1
	[0317.716] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xae4, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.716] CloseHandle (hObject=0x1c8) returned 1
	[0317.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf.tl30z")) returned 0x220
	[0317.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf")) returned 0x220
	[0317.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF", dwFileAttributes=0x220) returned 1
	[0317.755] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0317.822] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0317.822] ReadFile (in: hFile=0x298, lpBuffer=0x11300000, nNumberOfBytesToRead=0x4754, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11300000*, lpNumberOfBytesRead=0x11319e18*=0x4754, lpOverlapped=0x0) returned 1
	[0317.846] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6530 | out: pbBuffer=0x113e6530) returned 1
	[0317.846] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11216802 | out: pbBuffer=0x11216802) returned 1
	[0317.846] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112168e8 | out: pbBuffer=0x112168e8) returned 1
	[0317.846] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0317.847] GetFileType (hFile=0x298) returned 0x1
	[0317.847] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11213de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.847] WriteFile (in: hFile=0x298, lpBuffer=0x11292000*, nNumberOfBytesToWrite=0x4754, lpNumberOfBytesWritten=0x11213dfc, lpOverlapped=0x11213e08 | out: lpBuffer=0x11292000*, lpNumberOfBytesWritten=0x11213dfc*=0x4754, lpOverlapped=0x11213e08) returned 1
	[0317.847] GetFileType (hFile=0x298) returned 0x1
	[0317.848] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x4754, lpNewFilePointer=0x0, dwMoveMethod=0x11213de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.848] GetFileType (hFile=0x298) returned 0x1
	[0317.848] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11213de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.848] WriteFile (in: hFile=0x298, lpBuffer=0x1129a000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11213dfc, lpOverlapped=0x11213e08 | out: lpBuffer=0x1129a000*, lpNumberOfBytesWritten=0x11213dfc*=0x22d, lpOverlapped=0x11213e08) returned 1
	[0317.848] GetFileType (hFile=0x298) returned 0x1
	[0317.848] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x4754, lpNewFilePointer=0x0, dwMoveMethod=0x11213de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.848] CloseHandle (hObject=0x298) returned 1
	[0317.862] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0317.884] SetEvent (hEvent=0x164) returned 1
	[0317.884] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0317.887] SetEvent (hEvent=0x164) returned 1
	[0317.887] SetEvent (hEvent=0x284) returned 1
	[0317.887] SetEvent (hEvent=0x2a8) returned 1
	[0317.887] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) returned 0x0
	[0318.787] WaitForSingleObject (hHandle=0x1bc, dwMilliseconds=0xffffffff) 

Thread:
	id = 31
	os_tid = 0xe64

	[0145.468] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3233ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3233ff30*=0x1c0) returned 1
	[0145.468] VirtualQuery (in: lpAddress=0x3233ff40, lpBuffer=0x3233ff40, dwLength=0x1c | out: lpBuffer=0x3233ff40*(BaseAddress=0x3233f000, AllocationBase=0x32240000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0145.468] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1c4
	[0145.468] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0147.061] SetEvent (hEvent=0x12c) returned 1
	[0147.061] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0162.076] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0162.240] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0162.582] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0162.983] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.765] SetEvent (hEvent=0x160) returned 1
	[0163.766] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80
	[0163.766] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0163.767] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0165.196] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0165.563] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0165.563] ReadFile (in: hFile=0x1cc, lpBuffer=0x11270000, nNumberOfBytesToRead=0x7807, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11270000*, lpNumberOfBytesRead=0x1131de18*=0x7807, lpOverlapped=0x0) returned 1
	[0165.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e120 | out: pbBuffer=0x1142e120) returned 1
	[0165.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1110c902 | out: pbBuffer=0x1110c902) returned 1
	[0165.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1110c958 | out: pbBuffer=0x1110c958) returned 1
	[0165.650] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e150 | out: pbBuffer=0x1142e150) returned 1
	[0165.652] GetFileType (hFile=0x1cc) returned 0x1
	[0165.652] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0165.653] WriteFile (in: hFile=0x1cc, lpBuffer=0x110f2000*, nNumberOfBytesToWrite=0x7807, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x110f2000*, lpNumberOfBytesWritten=0x11255dfc*=0x7807, lpOverlapped=0x11255e08) returned 1
	[0165.653] GetFileType (hFile=0x1cc) returned 0x1
	[0165.653] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x7807, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0165.654] GetFileType (hFile=0x1cc) returned 0x1
	[0165.654] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0165.654] WriteFile (in: hFile=0x1cc, lpBuffer=0x11446e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x11446e00*, lpNumberOfBytesWritten=0x11255dfc*=0x22d, lpOverlapped=0x11255e08) returned 1
	[0165.654] GetFileType (hFile=0x1cc) returned 0x1
	[0165.654] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x7807, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0165.655] CloseHandle (hObject=0x1cc) returned 1
	[0165.661] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.tl30z")) returned 0x20
	[0165.661] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0165.662] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0166.095] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0166.637] SetEvent (hEvent=0x160) returned 1
	[0166.638] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80
	[0166.638] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0166.641] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0167.271] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0167.436] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0167.436] ReadFile (in: hFile=0x184, lpBuffer=0x11178000, nNumberOfBytesToRead=0x7d65, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11178000*, lpNumberOfBytesRead=0x11022e18*=0x7d65, lpOverlapped=0x0) returned 1
	[0167.497] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332a30 | out: pbBuffer=0x11332a30) returned 1
	[0167.497] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332a28 | out: pbBuffer=0x11332a28) returned 1
	[0167.497] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ff302 | out: pbBuffer=0x113ff302) returned 1
	[0167.497] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332a60 | out: pbBuffer=0x11332a60) returned 1
	[0167.499] GetFileType (hFile=0x184) returned 0x1
	[0167.500] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0167.500] WriteFile (in: hFile=0x184, lpBuffer=0x112aa000*, nNumberOfBytesToWrite=0x7d65, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112aa000*, lpNumberOfBytesWritten=0x11031dfc*=0x7d65, lpOverlapped=0x11031e08) returned 1
	[0167.500] GetFileType (hFile=0x184) returned 0x1
	[0167.500] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x7d65, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0167.501] GetFileType (hFile=0x184) returned 0x1
	[0167.501] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0167.501] WriteFile (in: hFile=0x184, lpBuffer=0x110c2380*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110c2380*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0167.501] GetFileType (hFile=0x184) returned 0x1
	[0167.501] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x7d65, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0167.501] CloseHandle (hObject=0x184) returned 1
	[0167.507] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.tl30z")) returned 0x20
	[0167.508] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0167.508] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0167.613] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0167.997] SetEvent (hEvent=0x1b0) returned 1
	[0167.997] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 0x80
	[0167.997] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0167.997] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.tl30z"), dwFlags=0x1) returned 1
	[0168.940] SetEvent (hEvent=0x150) returned 1
	[0168.941] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0169.247] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0169.247] ReadFile (in: hFile=0x1c8, lpBuffer=0x112d8000, nNumberOfBytesToRead=0x7cfe, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x112d8000*, lpNumberOfBytesRead=0x1131be18*=0x7cfe, lpOverlapped=0x0) returned 1
	[0169.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0169.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113640f8 | out: pbBuffer=0x113640f8) returned 1
	[0169.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11390802 | out: pbBuffer=0x11390802) returned 1
	[0169.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113908a3 | out: pbBuffer=0x113908a3) returned 1
	[0169.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0169.254] GetFileType (hFile=0x1c8) returned 0x1
	[0169.254] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0169.254] WriteFile (in: hFile=0x1c8, lpBuffer=0x110f2000*, nNumberOfBytesToWrite=0x7cfe, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110f2000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7cfe, lpOverlapped=0x1102de08) returned 1
	[0169.254] GetFileType (hFile=0x1c8) returned 0x1
	[0169.255] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x7cfe, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0169.255] GetFileType (hFile=0x1c8) returned 0x1
	[0169.256] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0169.256] WriteFile (in: hFile=0x1c8, lpBuffer=0x11320a80*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11320a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x23c, lpOverlapped=0x1102de08) returned 1
	[0169.256] GetFileType (hFile=0x1c8) returned 0x1
	[0169.256] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x7cfe, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0169.256] CloseHandle (hObject=0x1c8) returned 1
	[0169.386] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.tl30z")) returned 0x20
	[0169.386] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0169.531] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0169.689] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0169.747] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 0x80
	[0169.747] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", dwFileAttributes=0x80) returned 1
	[0169.748] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.tl30z"), dwFlags=0x1) returned 1
	[0171.062] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0171.063] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0171.063] ReadFile (in: hFile=0x1c8, lpBuffer=0x11240000, nNumberOfBytesToRead=0x9882, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11240000*, lpNumberOfBytesRead=0x1131ae18*=0x9882, lpOverlapped=0x0) returned 1
	[0171.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113642d0 | out: pbBuffer=0x113642d0) returned 1
	[0171.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11391202 | out: pbBuffer=0x11391202) returned 1
	[0171.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364300 | out: pbBuffer=0x11364300) returned 1
	[0171.155] GetFileType (hFile=0x1c8) returned 0x1
	[0171.156] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0171.156] WriteFile (in: hFile=0x1c8, lpBuffer=0x1143a000*, nNumberOfBytesToWrite=0x9882, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1143a000*, lpNumberOfBytesWritten=0x1133ddfc*=0x9882, lpOverlapped=0x1133de08) returned 1
	[0171.157] GetFileType (hFile=0x1c8) returned 0x1
	[0171.157] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x9882, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0171.157] GetFileType (hFile=0x1c8) returned 0x1
	[0171.157] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0171.157] WriteFile (in: hFile=0x1c8, lpBuffer=0x11321880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11321880*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0171.158] GetFileType (hFile=0x1c8) returned 0x1
	[0171.158] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x9882, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0171.158] CloseHandle (hObject=0x1c8) returned 1
	[0171.162] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.tl30z")) returned 0x20
	[0171.162] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0171.172] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0171.223] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 0x80
	[0171.223] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico", dwFileAttributes=0x80) returned 1
	[0171.224] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), lpNewFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.tl30z"), dwFlags=0x1) returned 1
	[0172.775] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0172.775] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0172.775] ReadFile (in: hFile=0x1c8, lpBuffer=0x1144a000, nNumberOfBytesToRead=0x8a55, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1144a000*, lpNumberOfBytesRead=0x1131ae18*=0x8a55, lpOverlapped=0x0) returned 1
	[0172.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0172.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0172.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11331302 | out: pbBuffer=0x11331302) returned 1
	[0172.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0172.852] GetFileType (hFile=0x1c8) returned 0x1
	[0172.852] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0172.852] WriteFile (in: hFile=0x1c8, lpBuffer=0x113e8000*, nNumberOfBytesToWrite=0x8a55, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x113e8000*, lpNumberOfBytesWritten=0x11255dfc*=0x8a55, lpOverlapped=0x11255e08) returned 1
	[0172.853] GetFileType (hFile=0x1c8) returned 0x1
	[0172.853] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8a55, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0172.853] GetFileType (hFile=0x1c8) returned 0x1
	[0172.854] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0172.854] WriteFile (in: hFile=0x1c8, lpBuffer=0x112d5c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x112d5c00*, lpNumberOfBytesWritten=0x11255dfc*=0x230, lpOverlapped=0x11255e08) returned 1
	[0172.854] GetFileType (hFile=0x1c8) returned 0x1
	[0172.854] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8a55, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0172.854] CloseHandle (hObject=0x1c8) returned 1
	[0172.860] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.tl30z")) returned 0x20
	[0172.861] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0172.861] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.787] SetEvent (hEvent=0x118) returned 1
	[0174.787] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.905] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0175.143] SetEvent (hEvent=0x164) returned 1
	[0175.143] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 0x80
	[0175.144] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", dwFileAttributes=0x80) returned 1
	[0175.144] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.tl30z"), dwFlags=0x1) returned 1
	[0183.137] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0183.762] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1133fe08 | out: lpMode=0x1133fe08) returned 0
	[0183.762] ReadFile (in: hFile=0x1d0, lpBuffer=0x110ed180, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x1133fe18, lpOverlapped=0x0 | out: lpBuffer=0x110ed180*, lpNumberOfBytesRead=0x1133fe18*=0x37e, lpOverlapped=0x0) returned 1
	[0183.888] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332850 | out: pbBuffer=0x11332850) returned 1
	[0183.889] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332848 | out: pbBuffer=0x11332848) returned 1
	[0183.889] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c2802 | out: pbBuffer=0x113c2802) returned 1
	[0183.889] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332880 | out: pbBuffer=0x11332880) returned 1
	[0183.889] GetFileType (hFile=0x1d0) returned 0x1
	[0183.889] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0183.890] WriteFile (in: hFile=0x1d0, lpBuffer=0x113cb000*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113cb000*, lpNumberOfBytesWritten=0x1133fdfc*=0x37e, lpOverlapped=0x1133fe08) returned 1
	[0183.890] GetFileType (hFile=0x1d0) returned 0x1
	[0183.890] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0183.890] GetFileType (hFile=0x1d0) returned 0x1
	[0183.891] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0183.891] WriteFile (in: hFile=0x1d0, lpBuffer=0x112f4000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112f4000*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0183.891] GetFileType (hFile=0x1d0) returned 0x1
	[0183.892] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0183.892] CloseHandle (hObject=0x1d0) returned 1
	[0184.487] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.tl30z")) returned 0x20
	[0184.487] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0184.849] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0198.219] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20
	[0198.219] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf", dwFileAttributes=0x20) returned 0
	[0198.220] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\msjh_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0198.302] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0198.539] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0199.104] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0199.346] SetEvent (hEvent=0x1e0) returned 1
	[0199.346] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20
	[0199.346] SetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0199.347] MoveFileExW (lpExistingFileName="C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\da-DK\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0199.590] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0199.645] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0199.735] SetEvent (hEvent=0x1e0) returned 1
	[0199.735] GetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20
	[0199.735] SetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0199.736] MoveFileExW (lpExistingFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0199.781] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0201.887] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.106] SetEvent (hEvent=0x12c) returned 1
	[0202.107] GetFileAttributesW (lpFileName="C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui")) returned 0x20
	[0202.107] SetFileAttributesW (lpFileName="C:\\Boot\\fr-FR\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0202.108] MoveFileExW (lpExistingFileName="C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\fr-FR\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0202.278] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.535] SetEvent (hEvent=0x12c) returned 1
	[0202.535] GetFileAttributesW (lpFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui")) returned 0x20
	[0202.536] SetFileAttributesW (lpFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0202.536] MoveFileExW (lpExistingFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0202.637] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0202.934] SetEvent (hEvent=0x12c) returned 1
	[0202.934] GetFileAttributesW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20
	[0202.934] SetFileAttributesW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0202.934] MoveFileExW (lpExistingFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0202.935] GetFileAttributesW (lpFileName="C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui")) returned 0x20
	[0202.935] SetFileAttributesW (lpFileName="C:\\Boot\\hu-HU\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0202.935] MoveFileExW (lpExistingFileName="C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\hu-HU\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0202.935] GetFileAttributesW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20
	[0202.936] SetFileAttributesW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0202.936] MoveFileExW (lpExistingFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0202.936] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.170] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.369] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.593] SetEvent (hEvent=0x12c) returned 1
	[0203.593] GetFileAttributesW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20
	[0203.593] SetFileAttributesW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0203.594] MoveFileExW (lpExistingFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0203.594] GetFileAttributesW (lpFileName="C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui")) returned 0x20
	[0203.594] SetFileAttributesW (lpFileName="C:\\Boot\\ja-JP\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0203.594] MoveFileExW (lpExistingFileName="C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\ja-JP\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0203.595] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0203.766] SetEvent (hEvent=0x1b0) returned 1
	[0203.767] GetFileAttributesW (lpFileName="C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui")) returned 0x20
	[0203.767] SetFileAttributesW (lpFileName="C:\\Boot\\ko-KR\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0203.767] MoveFileExW (lpExistingFileName="C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\ko-KR\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0204.242] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0204.372] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0204.719] SetEvent (hEvent=0x1b0) returned 1
	[0204.719] GetFileAttributesW (lpFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui")) returned 0x20
	[0204.719] SetFileAttributesW (lpFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0204.720] MoveFileExW (lpExistingFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0204.720] GetFileAttributesW (lpFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui")) returned 0x20
	[0204.720] SetFileAttributesW (lpFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0204.720] MoveFileExW (lpExistingFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0204.721] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0204.965] SetEvent (hEvent=0x12c) returned 1
	[0204.965] GetFileAttributesW (lpFileName="C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui")) returned 0x20
	[0204.965] SetFileAttributesW (lpFileName="C:\\Boot\\nb-NO\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0204.965] MoveFileExW (lpExistingFileName="C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\nb-NO\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0205.102] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0205.304] SetEvent (hEvent=0x1b0) returned 1
	[0205.304] GetFileAttributesW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20
	[0205.304] SetFileAttributesW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0205.305] MoveFileExW (lpExistingFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0205.353] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0205.718] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.157] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0206.547] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0208.846] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0209.331] SetEvent (hEvent=0x1e0) returned 1
	[0209.332] GetFileAttributesW (lpFileName="C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui")) returned 0x20
	[0209.332] SetFileAttributesW (lpFileName="C:\\Boot\\tr-TR\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0209.333] MoveFileExW (lpExistingFileName="C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\tr-TR\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0209.709] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0209.852] GetFileAttributesW (lpFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui")) returned 0x20
	[0209.852] SetFileAttributesW (lpFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0209.852] MoveFileExW (lpExistingFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0209.852] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.102] SetEvent (hEvent=0x1e0) returned 1
	[0210.102] GetFileAttributesW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20
	[0210.103] SetFileAttributesW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0210.103] MoveFileExW (lpExistingFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0210.282] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0210.814] SetEvent (hEvent=0x1b0) returned 1
	[0210.814] GetFileAttributesW (lpFileName="C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui")) returned 0x20
	[0210.815] SetFileAttributesW (lpFileName="C:\\Boot\\zh-HK\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0210.816] MoveFileExW (lpExistingFileName="C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\zh-HK\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0210.978] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0211.060] GetFileAttributesW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20
	[0211.060] SetFileAttributesW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0211.060] MoveFileExW (lpExistingFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0211.270] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0212.258] SetEvent (hEvent=0x1e0) returned 1
	[0212.258] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 0x20
	[0212.258] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0212.259] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0212.260] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0212.260] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1155ae08 | out: lpMode=0x1155ae08) returned 0
	[0212.260] ReadFile (in: hFile=0x1d0, lpBuffer=0x1105a000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1155ae18, lpOverlapped=0x0 | out: lpBuffer=0x1105a000*, lpNumberOfBytesRead=0x1155ae18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0212.315] VirtualAlloc (lpAddress=0x11296000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x11296000
	[0212.317] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113328b0 | out: pbBuffer=0x113328b0) returned 1
	[0212.317] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113328a8 | out: pbBuffer=0x113328a8) returned 1
	[0212.317] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ccb02 | out: pbBuffer=0x113ccb02) returned 1
	[0212.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113328e0 | out: pbBuffer=0x113328e0) returned 1
	[0212.318] VirtualAlloc (lpAddress=0x1129e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1129e000
	[0212.320] VirtualAlloc (lpAddress=0x112a2000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0x112a2000
	[0212.323] VirtualAlloc (lpAddress=0x112b4000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0x112b4000
	[0212.326] VirtualAlloc (lpAddress=0x112c0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x112c0000
	[0212.327] VirtualAlloc (lpAddress=0x112c2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x112c2000
	[0212.328] VirtualAlloc (lpAddress=0x112c4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x112c4000
	[0212.328] VirtualAlloc (lpAddress=0x112c6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x112c6000
	[0212.329] GetFileType (hFile=0x1d0) returned 0x1
	[0212.329] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0212.329] WriteFile (in: hFile=0x1d0, lpBuffer=0x110d0000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x110d0000*, lpNumberOfBytesWritten=0x1129ddfc*=0x6ccc, lpOverlapped=0x1129de08) returned 1
	[0212.330] GetFileType (hFile=0x1d0) returned 0x1
	[0212.330] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0212.330] VirtualAlloc (lpAddress=0x112c8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x112c8000
	[0212.330] GetFileType (hFile=0x1d0) returned 0x1
	[0212.333] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0212.334] WriteFile (in: hFile=0x1d0, lpBuffer=0x111b0a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x111b0a80*, lpNumberOfBytesWritten=0x1129ddfc*=0x230, lpOverlapped=0x1129de08) returned 1
	[0212.334] GetFileType (hFile=0x1d0) returned 0x1
	[0212.335] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0212.335] CloseHandle (hObject=0x1d0) returned 1
	[0212.340] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.tl30z")) returned 0x20
	[0212.340] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0212.521] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0212.522] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 0x20
	[0212.522] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0212.523] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.tl30z"), dwFlags=0x1) returned 1
	[0213.646] SetEvent (hEvent=0x150) returned 1
	[0213.646] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0213.819] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1155ae08 | out: lpMode=0x1155ae08) returned 0
	[0213.819] ReadFile (in: hFile=0x1d0, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1155ae18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x1155ae18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0213.886] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0213.886] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0213.886] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ec902 | out: pbBuffer=0x113ec902) returned 1
	[0213.886] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0213.887] GetFileType (hFile=0x1d0) returned 0x1
	[0213.887] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0213.887] WriteFile (in: hFile=0x1d0, lpBuffer=0x1132a000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1132a000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0213.888] GetFileType (hFile=0x1d0) returned 0x1
	[0213.888] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0213.888] GetFileType (hFile=0x1d0) returned 0x1
	[0213.888] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0213.888] WriteFile (in: hFile=0x1d0, lpBuffer=0x11b8ee00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11b8ee00*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0213.889] GetFileType (hFile=0x1d0) returned 0x1
	[0213.889] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0213.889] CloseHandle (hObject=0x1d0) returned 1
	[0214.066] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.tl30z")) returned 0x20
	[0214.067] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0214.342] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.086] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.371] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0216.846] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0300.266] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0300.270] SetEvent (hEvent=0x160) returned 1
	[0300.270] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0300.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf")) returned 0x220
	[0300.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF", dwFileAttributes=0x220) returned 1
	[0300.273] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0300.302] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x111d2e08 | out: lpMode=0x111d2e08) returned 0
	[0300.302] ReadFile (in: hFile=0x290, lpBuffer=0x11203500, nNumberOfBytesToRead=0x1314, lpNumberOfBytesRead=0x111d2e18, lpOverlapped=0x0 | out: lpBuffer=0x11203500*, lpNumberOfBytesRead=0x111d2e18*=0x1314, lpOverlapped=0x0) returned 1
	[0300.992] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332370 | out: pbBuffer=0x11332370) returned 1
	[0300.992] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112d9302 | out: pbBuffer=0x112d9302) returned 1
	[0300.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0300.993] GetFileType (hFile=0x290) returned 0x1
	[0300.994] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.994] WriteFile (in: hFile=0x290, lpBuffer=0x1113e000*, nNumberOfBytesToWrite=0x1314, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1113e000*, lpNumberOfBytesWritten=0x11339dfc*=0x1314, lpOverlapped=0x11339e08) returned 1
	[0300.994] GetFileType (hFile=0x290) returned 0x1
	[0300.994] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x1314, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.994] GetFileType (hFile=0x290) returned 0x1
	[0300.995] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.995] WriteFile (in: hFile=0x290, lpBuffer=0x11cad880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11cad880*, lpNumberOfBytesWritten=0x11339dfc*=0x227, lpOverlapped=0x11339e08) returned 1
	[0300.995] GetFileType (hFile=0x290) returned 0x1
	[0300.995] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x1314, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.995] CloseHandle (hObject=0x290) returned 1
	[0301.019] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0301.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf.tl30z")) returned 0x220
	[0301.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.176] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0308.609] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0308.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf")) returned 0x220
	[0308.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF", dwFileAttributes=0x220) returned 1
	[0308.619] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0308.670] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11095e08 | out: lpMode=0x11095e08) returned 0
	[0308.670] ReadFile (in: hFile=0x250, lpBuffer=0x1109c000, nNumberOfBytesToRead=0xc28, lpNumberOfBytesRead=0x11095e18, lpOverlapped=0x0 | out: lpBuffer=0x1109c000*, lpNumberOfBytesRead=0x11095e18*=0xc28, lpOverlapped=0x0) returned 1
	[0308.877] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0309.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126530 | out: pbBuffer=0x11126530) returned 1
	[0309.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125b102 | out: pbBuffer=0x1125b102) returned 1
	[0309.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125b123 | out: pbBuffer=0x1125b123) returned 1
	[0309.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125b199 | out: pbBuffer=0x1125b199) returned 1
	[0309.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125b1ab | out: pbBuffer=0x1125b1ab) returned 1
	[0309.010] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126560 | out: pbBuffer=0x11126560) returned 1
	[0309.010] GetFileType (hFile=0x250) returned 0x1
	[0309.010] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.010] WriteFile (in: hFile=0x250, lpBuffer=0x11290000*, nNumberOfBytesToWrite=0xc28, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11290000*, lpNumberOfBytesWritten=0x1133ddfc*=0xc28, lpOverlapped=0x1133de08) returned 1
	[0309.011] GetFileType (hFile=0x250) returned 0x1
	[0309.011] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xc28, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.011] GetFileType (hFile=0x250) returned 0x1
	[0309.011] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.011] WriteFile (in: hFile=0x250, lpBuffer=0x11be1c00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11be1c00*, lpNumberOfBytesWritten=0x1133ddfc*=0x224, lpOverlapped=0x1133de08) returned 1
	[0309.011] GetFileType (hFile=0x250) returned 0x1
	[0309.011] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xc28, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.012] CloseHandle (hObject=0x250) returned 1
	[0309.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf.tl30z")) returned 0x220
	[0309.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.013] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140c)) returned 1
	[0309.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10170232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26b0)) returned 1
	[0309.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5670)) returned 1
	[0309.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf")) returned 0x220
	[0309.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF", dwFileAttributes=0x220) returned 1
	[0309.037] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0309.040] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11097e08 | out: lpMode=0x11097e08) returned 0
	[0309.040] ReadFile (in: hFile=0x1b4, lpBuffer=0x1117c000, nNumberOfBytesToRead=0x26b0, lpNumberOfBytesRead=0x11097e18, lpOverlapped=0x0 | out: lpBuffer=0x1117c000*, lpNumberOfBytesRead=0x11097e18*=0x26b0, lpOverlapped=0x0) returned 1
	[0309.060] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0309.230] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323f0 | out: pbBuffer=0x113323f0) returned 1
	[0309.230] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11467202 | out: pbBuffer=0x11467202) returned 1
	[0309.231] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332420 | out: pbBuffer=0x11332420) returned 1
	[0309.231] GetFileType (hFile=0x1b4) returned 0x1
	[0309.231] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.231] WriteFile (in: hFile=0x1b4, lpBuffer=0x11226000*, nNumberOfBytesToWrite=0x26b0, lpNumberOfBytesWritten=0x1145ddfc, lpOverlapped=0x1145de08 | out: lpBuffer=0x11226000*, lpNumberOfBytesWritten=0x1145ddfc*=0x26b0, lpOverlapped=0x1145de08) returned 1
	[0309.232] GetFileType (hFile=0x1b4) returned 0x1
	[0309.232] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x26b0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.232] GetFileType (hFile=0x1b4) returned 0x1
	[0309.232] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.232] WriteFile (in: hFile=0x1b4, lpBuffer=0x111d2700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1145ddfc, lpOverlapped=0x1145de08 | out: lpBuffer=0x111d2700*, lpNumberOfBytesWritten=0x1145ddfc*=0x22a, lpOverlapped=0x1145de08) returned 1
	[0309.233] GetFileType (hFile=0x1b4) returned 0x1
	[0309.233] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x26b0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.233] CloseHandle (hObject=0x1b4) returned 1
	[0309.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf.tl30z")) returned 0x220
	[0309.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.249] SetEvent (hEvent=0x134) returned 1
	[0309.249] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0309.261] SetEvent (hEvent=0x12c) returned 1
	[0309.261] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0309.273] SetEvent (hEvent=0x1e0) returned 1
	[0309.273] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0313.725] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0313.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp")) returned 0x220
	[0313.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP", dwFileAttributes=0x220) returned 1
	[0313.735] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0314.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0314.372] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11093e08 | out: lpMode=0x11093e08) returned 0
	[0314.372] ReadFile (in: hFile=0x184, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x11093e18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x11093e18*=0x7db8, lpOverlapped=0x0) returned 1
	[0314.503] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0314.512] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0314.853] SetEvent (hEvent=0x218) returned 1
	[0314.853] SetEvent (hEvent=0x134) returned 1
	[0314.853] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0316.247] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0316.278] SetEvent (hEvent=0x160) returned 1
	[0316.278] SetEvent (hEvent=0x1e8) returned 1
	[0316.278] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0316.562] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0316.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg")) returned 0x220
	[0316.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG", dwFileAttributes=0x220) returned 1
	[0316.602] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg.tl30z"), dwFlags=0x1) returned 1
	[0316.975] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0316.978] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0316.980] SetEvent (hEvent=0x24c) returned 1
	[0316.980] SetEvent (hEvent=0x1e0) returned 1
	[0316.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0316.985] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11031e08 | out: lpMode=0x11031e08) returned 0
	[0316.985] ReadFile (in: hFile=0x290, lpBuffer=0x11bc6000, nNumberOfBytesToRead=0xbdae, lpNumberOfBytesRead=0x11031e18, lpOverlapped=0x0 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesRead=0x11031e18*=0xbdae, lpOverlapped=0x0) returned 1
	[0316.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0316.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137c802 | out: pbBuffer=0x1137c802) returned 1
	[0316.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137c81c | out: pbBuffer=0x1137c81c) returned 1
	[0316.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137c8c2 | out: pbBuffer=0x1137c8c2) returned 1
	[0316.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0316.997] GetFileType (hFile=0x290) returned 0x1
	[0317.028] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.028] WriteFile (in: hFile=0x290, lpBuffer=0x113ec000*, nNumberOfBytesToWrite=0xbdae, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113ec000*, lpNumberOfBytesWritten=0x11031dfc*=0xbdae, lpOverlapped=0x11031e08) returned 1
	[0317.046] GetFileType (hFile=0x290) returned 0x1
	[0317.046] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0xbdae, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.046] GetFileType (hFile=0x290) returned 0x1
	[0317.046] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.046] WriteFile (in: hFile=0x290, lpBuffer=0x113b0a80*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113b0a80*, lpNumberOfBytesWritten=0x11031dfc*=0x23c, lpOverlapped=0x11031e08) returned 1
	[0317.046] GetFileType (hFile=0x290) returned 0x1
	[0317.047] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0xbdae, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.047] CloseHandle (hObject=0x290) returned 1
	[0317.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg.tl30z")) returned 0x220
	[0317.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0317.054] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0317.092] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0317.145] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0317.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf")) returned 0x220
	[0317.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF", dwFileAttributes=0x220) returned 1
	[0317.168] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0317.237] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0317.238] ReadFile (in: hFile=0x184, lpBuffer=0x110cc000, nNumberOfBytesToRead=0xd16, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11287e18*=0xd16, lpOverlapped=0x0) returned 1
	[0317.269] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126280 | out: pbBuffer=0x11126280) returned 1
	[0317.269] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113d7302 | out: pbBuffer=0x113d7302) returned 1
	[0317.322] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111262b0 | out: pbBuffer=0x111262b0) returned 1
	[0317.323] GetFileType (hFile=0x184) returned 0x1
	[0317.323] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.323] WriteFile (in: hFile=0x184, lpBuffer=0x111b8000*, nNumberOfBytesToWrite=0xd16, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x111b8000*, lpNumberOfBytesWritten=0x112bbdfc*=0xd16, lpOverlapped=0x112bbe08) returned 1
	[0317.327] GetFileType (hFile=0x184) returned 0x1
	[0317.327] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xd16, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.327] GetFileType (hFile=0x184) returned 0x1
	[0317.327] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.327] WriteFile (in: hFile=0x184, lpBuffer=0x11295880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x11295880*, lpNumberOfBytesWritten=0x112bbdfc*=0x22a, lpOverlapped=0x112bbe08) returned 1
	[0317.328] GetFileType (hFile=0x184) returned 0x1
	[0317.328] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xd16, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.328] CloseHandle (hObject=0x184) returned 1
	[0317.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf.tl30z")) returned 0x220
	[0317.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.446] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0317.459] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0317.477] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0317.555] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0317.559] SetEvent (hEvent=0x134) returned 1
	[0317.560] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) returned 0x0
	[0317.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf")) returned 0x220
	[0317.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF", dwFileAttributes=0x220) returned 1
	[0317.562] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0317.607] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0317.607] ReadFile (in: hFile=0x1c8, lpBuffer=0x112b0400, nNumberOfBytesToRead=0xae4, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x112b0400*, lpNumberOfBytesRead=0x1131de18*=0xae4, lpOverlapped=0x0) returned 1
	[0317.687] SetEvent (hEvent=0x234) returned 1
	[0317.687] WaitForSingleObject (hHandle=0x1c4, dwMilliseconds=0xffffffff) 

Thread:
	id = 32
	os_tid = 0xee8

	[0175.796] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3247ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3247ff30*=0x1dc) returned 1
	[0175.796] VirtualQuery (in: lpAddress=0x3247ff40, lpBuffer=0x3247ff40, dwLength=0x1c | out: lpBuffer=0x3247ff40*(BaseAddress=0x3247f000, AllocationBase=0x32380000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0175.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x110288c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0
	[0175.799] CloseHandle (hObject=0x1e0) returned 1
	[0175.799] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 0x80
	[0175.799] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", dwFileAttributes=0x80) returned 1
	[0175.800] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.tl30z"), dwFlags=0x1) returned 1
	[0184.998] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0
	[0185.209] GetConsoleMode (in: hConsoleHandle=0x1e0, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0185.209] ReadFile (in: hFile=0x1e0, lpBuffer=0x11256700, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11256700*, lpNumberOfBytesRead=0x1131ce18*=0x37e, lpOverlapped=0x0) returned 1
	[0185.219] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e480 | out: pbBuffer=0x1104e480) returned 1
	[0185.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e478 | out: pbBuffer=0x1104e478) returned 1
	[0185.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11321e02 | out: pbBuffer=0x11321e02) returned 1
	[0185.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11321e2f | out: pbBuffer=0x11321e2f) returned 1
	[0185.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11321ea9 | out: pbBuffer=0x11321ea9) returned 1
	[0185.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0185.221] GetFileType (hFile=0x1e0) returned 0x1
	[0185.221] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0185.221] WriteFile (in: hFile=0x1e0, lpBuffer=0x1126c000*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1126c000*, lpNumberOfBytesWritten=0x1133bdfc*=0x37e, lpOverlapped=0x1133be08) returned 1
	[0185.222] GetFileType (hFile=0x1e0) returned 0x1
	[0185.222] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0185.222] GetFileType (hFile=0x1e0) returned 0x1
	[0185.222] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0185.222] WriteFile (in: hFile=0x1e0, lpBuffer=0x11257500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11257500*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0185.222] GetFileType (hFile=0x1e0) returned 0x1
	[0185.222] SetFilePointerEx (in: hFile=0x1e0, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0185.223] CloseHandle (hObject=0x1e0) returned 1
	[0185.475] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.tl30z")) returned 0x20
	[0185.475] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0185.643] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1e0
	[0185.643] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0185.968] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0186.146] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0186.462] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0186.737] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0186.943] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0187.059] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0187.544] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0189.499] SetEvent (hEvent=0x1f0) returned 1
	[0189.499] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0190.097] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0190.098] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0190.098] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0190.098] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0190.098] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0190.098] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0190.098] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0190.098] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1
	[0190.098] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0190.098] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0190.098] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0190.098] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0190.098] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0190.099] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0190.099] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0190.099] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0190.099] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0190.099] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0190.099] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0190.099] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0190.099] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0190.099] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0190.099] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0190.099] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0190.099] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0190.100] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0190.100] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0190.100] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0190.100] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0190.100] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0190.100] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0190.100] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0190.100] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0190.100] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0190.100] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1
	[0190.101] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0190.101] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0190.101] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0190.101] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0190.101] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0190.101] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0190.101] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1
	[0190.101] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0190.101] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0190.101] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0190.101] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1
	[0190.102] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0190.102] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0190.102] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0190.102] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x11286bd0 | out: lpFindFileData=0x11286bd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.102] FindClose (in: hFindFile=0x7f21f0 | out: hFindFile=0x7f21f0) returned 1
	[0190.103] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1
	[0190.104] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0190.104] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.104] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.105] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x1102bc28 | out: lpFileInformation=0x1102bc28*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0190.111] CreateFileW (lpFileName="C:\\Boot\\Fonts\\" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.111] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x1102bad0 | out: lpFindFileData=0x1102bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22f0
	[0190.715] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0190.764] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0190.849] SetEvent (hEvent=0x1bc) returned 1
	[0190.849] SetEvent (hEvent=0x1f0) returned 1
	[0190.849] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 0x80
	[0190.849] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml", dwFileAttributes=0x80) returned 1
	[0190.850] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Strings.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\strings.xml.tl30z"), dwFlags=0x1) returned 1
	[0190.851] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\strings.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0190.851] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0190.851] SwitchToThread () returned 1
	[0191.014] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0191.293] SwitchToThread () returned 1
	[0191.424] VirtualAlloc (lpAddress=0x11b00000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b00000
	[0191.425] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0191.654] VirtualAlloc (lpAddress=0x1139c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1139c000
	[0191.657] VirtualAlloc (lpAddress=0x11b0e000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b0e000
	[0191.670] VirtualAlloc (lpAddress=0x110de000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x110de000
	[0191.675] VirtualAlloc (lpAddress=0x1137e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1137e000
	[0191.680] VirtualAlloc (lpAddress=0x11382000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11382000
	[0191.684] VirtualAlloc (lpAddress=0x1138a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1138a000
	[0191.689] VirtualAlloc (lpAddress=0x110e2000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x110e2000
	[0191.698] VirtualAlloc (lpAddress=0x11354000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x11354000
	[0191.702] VirtualAlloc (lpAddress=0x112ee000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x112ee000
	[0191.709] GetFileType (hFile=0x1cc) returned 0x1
	[0191.709] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0191.709] WriteFile (in: hFile=0x1cc, lpBuffer=0x112ee000*, nNumberOfBytesToWrite=0x154cc, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x112ee000*, lpNumberOfBytesWritten=0x11373dfc*=0x154cc, lpOverlapped=0x11373e08) returned 1
	[0191.711] GetFileType (hFile=0x1cc) returned 0x1
	[0191.711] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x154cc, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0191.711] GetFileType (hFile=0x1cc) returned 0x1
	[0191.711] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0191.712] WriteFile (in: hFile=0x1cc, lpBuffer=0x112eb880*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x112eb880*, lpNumberOfBytesWritten=0x11373dfc*=0x239, lpOverlapped=0x11373e08) returned 1
	[0191.715] GetFileType (hFile=0x1cc) returned 0x1
	[0191.715] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x154cc, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0191.715] CloseHandle (hObject=0x1cc) returned 1
	[0191.860] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.tl30z")) returned 0x20
	[0191.860] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.tl30z", dwFileAttributes=0x21) returned 1
	[0191.861] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 0x80
	[0191.861] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd", dwFileAttributes=0x80) returned 1
	[0191.862] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), lpNewFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.tl30z" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.tl30z"), dwFlags=0x1) returned 1
	[0191.863] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.tl30z" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0191.863] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0191.863] ReadFile (in: hFile=0x1cc, lpBuffer=0x11414000, nNumberOfBytesToRead=0x75a8, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11414000*, lpNumberOfBytesRead=0x1131ce18*=0x75a8, lpOverlapped=0x0) returned 1
	[0191.979] VirtualAlloc (lpAddress=0x11322000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11322000
	[0191.980] VirtualAlloc (lpAddress=0x1133a000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x1133a000
	[0191.982] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0191.982] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113640f8 | out: pbBuffer=0x113640f8) returned 1
	[0191.982] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110dc802 | out: pbBuffer=0x110dc802) returned 1
	[0191.982] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110dc82b | out: pbBuffer=0x110dc82b) returned 1
	[0191.983] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0191.984] GetFileType (hFile=0x1cc) returned 0x1
	[0191.984] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11341de0 | out: lpNewFilePointer=0x0) returned 1
	[0191.984] WriteFile (in: hFile=0x1cc, lpBuffer=0x1127c000*, nNumberOfBytesToWrite=0x75a8, lpNumberOfBytesWritten=0x11341dfc, lpOverlapped=0x11341e08 | out: lpBuffer=0x1127c000*, lpNumberOfBytesWritten=0x11341dfc*=0x75a8, lpOverlapped=0x11341e08) returned 1
	[0191.985] GetFileType (hFile=0x1cc) returned 0x1
	[0191.985] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x75a8, lpNewFilePointer=0x0, dwMoveMethod=0x11341de0 | out: lpNewFilePointer=0x0) returned 1
	[0191.985] GetFileType (hFile=0x1cc) returned 0x1
	[0191.985] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11341de0 | out: lpNewFilePointer=0x0) returned 1
	[0191.985] WriteFile (in: hFile=0x1cc, lpBuffer=0x1124ea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11341dfc, lpOverlapped=0x11341e08 | out: lpBuffer=0x1124ea80*, lpNumberOfBytesWritten=0x11341dfc*=0x230, lpOverlapped=0x11341e08) returned 1
	[0191.986] GetFileType (hFile=0x1cc) returned 0x1
	[0191.986] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x75a8, lpNewFilePointer=0x0, dwMoveMethod=0x11341de0 | out: lpNewFilePointer=0x0) returned 1
	[0191.986] CloseHandle (hObject=0x1cc) returned 1
	[0191.992] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.tl30z" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.tl30z")) returned 0x20
	[0191.993] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.tl30z", dwFileAttributes=0x21) returned 1
	[0191.993] SwitchToThread () returned 1
	[0192.119] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 0x80
	[0192.119] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", dwFileAttributes=0x80) returned 1
	[0192.120] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\UiInfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.tl30z"), dwFlags=0x1) returned 1
	[0192.121] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0192.121] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0192.122] SwitchToThread () returned 1
	[0192.372] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0192.549] SetEvent (hEvent=0x164) returned 1
	[0192.549] SwitchToThread () returned 1
	[0192.697] SetEvent (hEvent=0x164) returned 1
	[0192.697] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0193.051] SwitchToThread () returned 1
	[0193.199] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz")) returned 0x20
	[0193.199] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz", dwFileAttributes=0x20) returned 1
	[0193.200] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.tl30z"), dwFlags=0x1) returned 1
	[0193.213] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0193.213] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0193.213] VirtualAlloc (lpAddress=0x11430000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x11430000
	[0193.222] VirtualFree (lpAddress=0x11800000, dwSize=0x300000, dwFreeType=0x4000) returned 1
	[0193.604] VirtualFree (lpAddress=0x11734000, dwSize=0x3cc000, dwFreeType=0x4000) returned 1
	[0193.887] SetEvent (hEvent=0x1f0) returned 1
	[0193.887] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0194.104] SetEvent (hEvent=0x1bc) returned 1
	[0194.104] SetEvent (hEvent=0x118) returned 1
	[0194.104] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0194.250] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0194.250] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0194.426] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0194.426] SetEvent (hEvent=0x1bc) returned 1
	[0194.426] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0194.549] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0194.549] SwitchToThread () returned 1
	[0194.700] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.tl30z"), dwFlags=0x1) returned 1
	[0194.701] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0194.701] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0194.702] ReadFile (in: hFile=0x184, lpBuffer=0x111b0000, nNumberOfBytesToRead=0xd899, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x111b0000*, lpNumberOfBytesRead=0x1131de18*=0xd899, lpOverlapped=0x0) returned 1
	[0194.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e120 | out: pbBuffer=0x1142e120) returned 1
	[0194.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e118 | out: pbBuffer=0x1142e118) returned 1
	[0194.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138e802 | out: pbBuffer=0x1138e802) returned 1
	[0194.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138e8ae | out: pbBuffer=0x1138e8ae) returned 1
	[0194.808] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e150 | out: pbBuffer=0x1142e150) returned 1
	[0194.809] SetEvent (hEvent=0x1f0) returned 1
	[0194.810] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0194.828] SetEvent (hEvent=0x1f0) returned 1
	[0194.829] GetFileType (hFile=0x184) returned 0x1
	[0194.829] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0194.829] WriteFile (in: hFile=0x184, lpBuffer=0x112d4000*, nNumberOfBytesToWrite=0xd899, lpNumberOfBytesWritten=0x110e7dfc, lpOverlapped=0x110e7e08 | out: lpBuffer=0x112d4000*, lpNumberOfBytesWritten=0x110e7dfc*=0xd899, lpOverlapped=0x110e7e08) returned 1
	[0194.830] GetFileType (hFile=0x184) returned 0x1
	[0194.830] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xd899, lpNewFilePointer=0x0, dwMoveMethod=0x110e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0194.831] GetFileType (hFile=0x184) returned 0x1
	[0194.832] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0194.832] WriteFile (in: hFile=0x184, lpBuffer=0x11066a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x110e7dfc, lpOverlapped=0x110e7e08 | out: lpBuffer=0x11066a80*, lpNumberOfBytesWritten=0x110e7dfc*=0x233, lpOverlapped=0x110e7e08) returned 1
	[0194.857] GetFileType (hFile=0x184) returned 0x1
	[0194.857] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xd899, lpNewFilePointer=0x0, dwMoveMethod=0x110e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0194.858] CloseHandle (hObject=0x184) returned 1
	[0194.876] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.tl30z")) returned 0x20
	[0194.876] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.tl30z", dwFileAttributes=0x21) returned 1
	[0194.877] SwitchToThread () returned 1
	[0194.922] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.tl30z" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.tl30z")) returned 0x20
	[0194.923] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.tl30z", dwFileAttributes=0x21) returned 1
	[0194.923] SwitchToThread () returned 1
	[0194.956] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0195.120] SetEvent (hEvent=0x1f0) returned 1
	[0195.120] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0195.226] SetEvent (hEvent=0x1bc) returned 1
	[0195.226] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0195.444] SetEvent (hEvent=0x164) returned 1
	[0195.444] SetEvent (hEvent=0x1bc) returned 1
	[0195.444] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0195.961] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0196.177] SetEvent (hEvent=0x1f0) returned 1
	[0196.177] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0196.291] SetEvent (hEvent=0x1f0) returned 1
	[0196.291] SetEvent (hEvent=0x1e8) returned 1
	[0196.307] VirtualAlloc (lpAddress=0x11836000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x11836000
	[0196.315] VirtualFree (lpAddress=0x11680000, dwSize=0xb4000, dwFreeType=0x4000) returned 1
	[0196.327] VirtualFree (lpAddress=0x11b3e000, dwSize=0xac000, dwFreeType=0x4000) returned 1
	[0196.767] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0196.899] SetEvent (hEvent=0x1e8) returned 1
	[0196.899] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0197.362] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0197.561] SetEvent (hEvent=0x118) returned 1
	[0197.561] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20
	[0197.561] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf", dwFileAttributes=0x20) returned 0
	[0197.562] VirtualAlloc (lpAddress=0x112ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x112ea000
	[0197.562] VirtualAlloc (lpAddress=0x11330000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11330000
	[0197.563] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0197.564] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20
	[0197.564] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf", dwFileAttributes=0x20) returned 0
	[0197.564] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\kor_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0197.565] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0197.886] SetEvent (hEvent=0x118) returned 1
	[0197.886] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20
	[0197.886] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf", dwFileAttributes=0x20) returned 0
	[0197.886] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0198.005] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0x20
	[0198.005] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf", dwFileAttributes=0x20) returned 0
	[0198.005] VirtualAlloc (lpAddress=0x113e8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x113e8000
	[0198.006] MoveFileExW (lpExistingFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf.tl30z" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf.tl30z"), dwFlags=0x1) returned 0
	[0198.215] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0198.344] SetEvent (hEvent=0x174) returned 1
	[0198.344] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0198.388] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0199.542] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0199.779] SetEvent (hEvent=0x1b0) returned 1
	[0199.779] GetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20
	[0199.779] SetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0199.780] MoveFileExW (lpExistingFileName="C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\de-DE\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\de-de\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0199.874] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0200.073] GetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20
	[0200.073] SetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0200.074] MoveFileExW (lpExistingFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0200.074] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0200.306] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0200.697] SetEvent (hEvent=0x1b0) returned 1
	[0200.697] GetFileAttributesW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20
	[0200.698] SetFileAttributesW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0200.698] MoveFileExW (lpExistingFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\en-US\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0200.830] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0201.887] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0203.768] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.048] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0205.765] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0206.086] SetEvent (hEvent=0x1c4) returned 1
	[0206.086] GetFileAttributesW (lpFileName="C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui")) returned 0x20
	[0206.086] SetFileAttributesW (lpFileName="C:\\Boot\\pt-BR\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0206.087] MoveFileExW (lpExistingFileName="C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\pt-BR\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0206.158] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0206.375] SetEvent (hEvent=0x12c) returned 1
	[0206.375] GetFileAttributesW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20
	[0206.375] SetFileAttributesW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0206.376] MoveFileExW (lpExistingFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0206.548] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0206.776] SetEvent (hEvent=0x1b0) returned 1
	[0206.777] GetFileAttributesW (lpFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui")) returned 0x20
	[0206.777] SetFileAttributesW (lpFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0206.777] MoveFileExW (lpExistingFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0206.872] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0206.950] GetFileAttributesW (lpFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui")) returned 0x20
	[0206.950] SetFileAttributesW (lpFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0206.950] MoveFileExW (lpExistingFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0206.950] GetFileAttributesW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20
	[0206.951] SetFileAttributesW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0206.951] MoveFileExW (lpExistingFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0207.335] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.055] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.560] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0208.645] SetEvent (hEvent=0x1b0) returned 1
	[0208.645] GetFileAttributesW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20
	[0208.646] SetFileAttributesW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0208.646] MoveFileExW (lpExistingFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0208.734] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.620] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0209.929] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.011] SetEvent (hEvent=0x1c4) returned 1
	[0210.011] GetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20
	[0210.011] SetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b", dwFileAttributes=0x20) returned 0
	[0210.011] MoveFileExW (lpExistingFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), lpNewFileName="C:\\Boot\\updaterevokesipolicy.p7b.tl30z" (normalized: "c:\\boot\\updaterevokesipolicy.p7b.tl30z"), dwFlags=0x1) returned 0
	[0210.012] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.188] SetEvent (hEvent=0x1b0) returned 1
	[0210.188] GetFileAttributesW (lpFileName="C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui")) returned 0x20
	[0210.189] SetFileAttributesW (lpFileName="C:\\Boot\\zh-CN\\memtest.exe.mui", dwFileAttributes=0x20) returned 0
	[0210.189] MoveFileExW (lpExistingFileName="C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), lpNewFileName="C:\\Boot\\zh-CN\\memtest.exe.mui.tl30z" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0210.283] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0210.698] SetEvent (hEvent=0x1c4) returned 1
	[0210.698] GetFileAttributesW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20
	[0210.699] SetFileAttributesW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui", dwFileAttributes=0x20) returned 0
	[0210.699] MoveFileExW (lpExistingFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), lpNewFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui.tl30z" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui.tl30z"), dwFlags=0x1) returned 0
	[0210.817] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0211.269] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0212.306] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 0x20
	[0212.306] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", dwFileAttributes=0x20) returned 1
	[0212.307] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.tl30z"), dwFlags=0x1) returned 1
	[0212.308] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0212.308] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11371e08 | out: lpMode=0x11371e08) returned 0
	[0212.309] ReadFile (in: hFile=0x1cc, lpBuffer=0x11b10000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11371e18, lpOverlapped=0x0 | out: lpBuffer=0x11b10000*, lpNumberOfBytesRead=0x11371e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0212.488] VirtualAlloc (lpAddress=0x1127e000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1127e000
	[0212.489] VirtualAlloc (lpAddress=0x11282000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11282000
	[0212.490] VirtualAlloc (lpAddress=0x11284000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11284000
	[0212.490] VirtualAlloc (lpAddress=0x11b7e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b7e000
	[0212.491] VirtualAlloc (lpAddress=0x11b80000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b80000
	[0212.492] VirtualAlloc (lpAddress=0x11b82000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b82000
	[0212.493] VirtualAlloc (lpAddress=0x11b84000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b84000
	[0212.494] VirtualAlloc (lpAddress=0x11b86000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b86000
	[0212.494] VirtualAlloc (lpAddress=0x11b88000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b88000
	[0212.495] VirtualAlloc (lpAddress=0x11b8a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b8a000
	[0212.496] VirtualAlloc (lpAddress=0x11b8c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b8c000
	[0212.497] VirtualAlloc (lpAddress=0x11b8e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b8e000
	[0212.498] VirtualAlloc (lpAddress=0x11b90000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b90000
	[0212.499] VirtualAlloc (lpAddress=0x11b92000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b92000
	[0212.500] VirtualAlloc (lpAddress=0x11b94000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b94000
	[0212.503] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e600 | out: pbBuffer=0x1104e600) returned 1
	[0212.503] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bfca02 | out: pbBuffer=0x11bfca02) returned 1
	[0212.503] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bfcaa6 | out: pbBuffer=0x11bfcaa6) returned 1
	[0212.504] VirtualAlloc (lpAddress=0x11b96000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b96000
	[0212.504] VirtualAlloc (lpAddress=0x11b98000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b98000
	[0212.505] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0212.505] VirtualAlloc (lpAddress=0x11b9a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b9a000
	[0212.508] VirtualAlloc (lpAddress=0x11b9e000, dwSize=0x12000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b9e000
	[0212.512] VirtualAlloc (lpAddress=0x11bb0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bb0000
	[0212.513] VirtualAlloc (lpAddress=0x11bb2000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bb2000
	[0212.517] VirtualAlloc (lpAddress=0x11bbe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bbe000
	[0212.517] VirtualAlloc (lpAddress=0x11bc0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bc0000
	[0212.518] VirtualAlloc (lpAddress=0x11bc2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bc2000
	[0212.519] VirtualAlloc (lpAddress=0x11bc4000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bc4000
	[0212.520] VirtualAlloc (lpAddress=0x11bc6000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bc6000
	[0212.531] VirtualAlloc (lpAddress=0x11bca000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bca000
	[0212.533] GetFileType (hFile=0x1cc) returned 0x1
	[0212.533] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0212.533] WriteFile (in: hFile=0x1cc, lpBuffer=0x11bca000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11bca000*, lpNumberOfBytesWritten=0x1102ddfc*=0x6ccc, lpOverlapped=0x1102de08) returned 1
	[0212.592] GetFileType (hFile=0x1cc) returned 0x1
	[0212.592] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0212.593] VirtualAlloc (lpAddress=0x11bd6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bd6000
	[0212.593] GetFileType (hFile=0x1cc) returned 0x1
	[0212.593] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0212.594] WriteFile (in: hFile=0x1cc, lpBuffer=0x11b8ea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11b8ea80*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0212.623] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0213.023] SetEvent (hEvent=0x22c) returned 1
	[0213.023] GetFileType (hFile=0x1cc) returned 0x1
	[0213.023] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0213.023] CloseHandle (hObject=0x1cc) returned 1
	[0213.059] SwitchToThread () returned 1
	[0213.067] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.tl30z")) returned 0x20
	[0213.068] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0213.126] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 0x20
	[0213.126] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0213.127] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.tl30z"), dwFlags=0x1) returned 1
	[0222.134] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0222.236] SetEvent (hEvent=0x210) returned 1
	[0222.236] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x264
	[0222.273] GetConsoleMode (in: hConsoleHandle=0x264, lpMode=0x11299e08 | out: lpMode=0x11299e08) returned 0
	[0222.273] ReadFile (in: hFile=0x264, lpBuffer=0x115dc000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11299e18, lpOverlapped=0x0 | out: lpBuffer=0x115dc000*, lpNumberOfBytesRead=0x11299e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0222.282] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0222.282] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107a902 | out: pbBuffer=0x1107a902) returned 1
	[0222.282] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107a97d | out: pbBuffer=0x1107a97d) returned 1
	[0222.282] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107a9b8 | out: pbBuffer=0x1107a9b8) returned 1
	[0222.282] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107a9d7 | out: pbBuffer=0x1107a9d7) returned 1
	[0222.283] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0222.284] VirtualAlloc (lpAddress=0x116c0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x116c0000
	[0222.287] GetFileType (hFile=0x264) returned 0x1
	[0222.287] SetFilePointerEx (in: hFile=0x264, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11299de0 | out: lpNewFilePointer=0x0) returned 1
	[0222.287] WriteFile (in: hFile=0x264, lpBuffer=0x116c0000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x11299dfc, lpOverlapped=0x11299e08 | out: lpBuffer=0x116c0000*, lpNumberOfBytesWritten=0x11299dfc*=0x6ccc, lpOverlapped=0x11299e08) returned 1
	[0222.288] GetFileType (hFile=0x264) returned 0x1
	[0222.288] SetFilePointerEx (in: hFile=0x264, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11299de0 | out: lpNewFilePointer=0x0) returned 1
	[0222.288] GetFileType (hFile=0x264) returned 0x1
	[0222.288] SetFilePointerEx (in: hFile=0x264, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11299de0 | out: lpNewFilePointer=0x0) returned 1
	[0222.288] WriteFile (in: hFile=0x264, lpBuffer=0x11328a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11299dfc, lpOverlapped=0x11299e08 | out: lpBuffer=0x11328a80*, lpNumberOfBytesWritten=0x11299dfc*=0x230, lpOverlapped=0x11299e08) returned 1
	[0222.289] GetFileType (hFile=0x264) returned 0x1
	[0222.289] SetFilePointerEx (in: hFile=0x264, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11299de0 | out: lpNewFilePointer=0x0) returned 1
	[0222.289] CloseHandle (hObject=0x264) returned 1
	[0222.375] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.tl30z")) returned 0x20
	[0222.375] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0222.418] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0225.449] SetEvent (hEvent=0x23c) returned 1
	[0225.449] SetEvent (hEvent=0x12c) returned 1
	[0225.449] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0229.254] SetEvent (hEvent=0x12c) returned 1
	[0229.254] SetEvent (hEvent=0x23c) returned 1
	[0229.254] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.269] SetEvent (hEvent=0x12c) returned 1
	[0238.269] SetEvent (hEvent=0x1e8) returned 1
	[0238.269] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0238.586] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.761] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.776] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.843] SetEvent (hEvent=0x12c) returned 1
	[0239.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 0x20
	[0239.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties", dwFileAttributes=0x20) returned 1
	[0239.844] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.tl30z"), dwFlags=0x1) returned 1
	[0240.652] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0240.660] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0240.660] ReadFile (in: hFile=0x250, lpBuffer=0x11436d80, nNumberOfBytesToRead=0xc97, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11436d80*, lpNumberOfBytesRead=0x1131be18*=0xc97, lpOverlapped=0x0) returned 1
	[0240.666] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e830 | out: pbBuffer=0x1104e830) returned 1
	[0240.666] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e828 | out: pbBuffer=0x1104e828) returned 1
	[0240.667] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144eb02 | out: pbBuffer=0x1144eb02) returned 1
	[0240.667] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144eb4d | out: pbBuffer=0x1144eb4d) returned 1
	[0240.667] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e860 | out: pbBuffer=0x1104e860) returned 1
	[0240.667] GetFileType (hFile=0x250) returned 0x1
	[0240.668] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.668] WriteFile (in: hFile=0x250, lpBuffer=0x11108000*, nNumberOfBytesToWrite=0xc97, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11108000*, lpNumberOfBytesWritten=0x1102bdfc*=0xc97, lpOverlapped=0x1102be08) returned 1
	[0240.669] GetFileType (hFile=0x250) returned 0x1
	[0240.669] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xc97, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.669] GetFileType (hFile=0x250) returned 0x1
	[0240.669] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.669] WriteFile (in: hFile=0x250, lpBuffer=0x1144d500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1144d500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0240.680] GetFileType (hFile=0x250) returned 0x1
	[0240.680] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xc97, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.680] CloseHandle (hObject=0x250) returned 1
	[0240.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.tl30z")) returned 0x20
	[0240.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0240.759] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.768] SetEvent (hEvent=0x23c) returned 1
	[0240.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20
	[0240.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties", dwFileAttributes=0x20) returned 1
	[0240.769] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.tl30z"), dwFlags=0x1) returned 1
	[0241.161] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0241.173] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0241.173] ReadFile (in: hFile=0x250, lpBuffer=0x1134c000, nNumberOfBytesToRead=0xfe8, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1134c000*, lpNumberOfBytesRead=0x1131be18*=0xfe8, lpOverlapped=0x0) returned 1
	[0241.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0241.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11382802 | out: pbBuffer=0x11382802) returned 1
	[0241.178] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11382867 | out: pbBuffer=0x11382867) returned 1
	[0241.178] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138289a | out: pbBuffer=0x1138289a) returned 1
	[0241.179] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0241.179] GetFileType (hFile=0x250) returned 0x1
	[0241.179] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.179] WriteFile (in: hFile=0x250, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0xfe8, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x112f3dfc*=0xfe8, lpOverlapped=0x112f3e08) returned 1
	[0241.180] GetFileType (hFile=0x250) returned 0x1
	[0241.180] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xfe8, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.180] GetFileType (hFile=0x250) returned 0x1
	[0241.180] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.180] WriteFile (in: hFile=0x250, lpBuffer=0x111c0a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x111c0a80*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0241.181] GetFileType (hFile=0x250) returned 0x1
	[0241.181] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xfe8, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.181] CloseHandle (hObject=0x250) returned 1
	[0241.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.tl30z")) returned 0x20
	[0241.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0241.425] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.444] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.677] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.705] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.711] SetEvent (hEvent=0x26c) returned 1
	[0241.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 0x20
	[0241.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", dwFileAttributes=0x20) returned 1
	[0241.712] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.tl30z"), dwFlags=0x1) returned 1
	[0242.001] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0242.001] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0242.001] ReadFile (in: hFile=0x1d0, lpBuffer=0x113fc000, nNumberOfBytesToRead=0x2fda, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x113fc000*, lpNumberOfBytesRead=0x11288e18*=0x2fda, lpOverlapped=0x0) returned 1
	[0242.163] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0242.163] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332668 | out: pbBuffer=0x11332668) returned 1
	[0242.163] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a2a02 | out: pbBuffer=0x113a2a02) returned 1
	[0242.163] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a2a4b | out: pbBuffer=0x113a2a4b) returned 1
	[0242.163] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a2ab2 | out: pbBuffer=0x113a2ab2) returned 1
	[0242.164] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0242.165] GetFileType (hFile=0x1d0) returned 0x1
	[0242.165] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0242.165] WriteFile (in: hFile=0x1d0, lpBuffer=0x113ca000*, nNumberOfBytesToWrite=0x2fda, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x113ca000*, lpNumberOfBytesWritten=0x112f3dfc*=0x2fda, lpOverlapped=0x112f3e08) returned 1
	[0242.165] GetFileType (hFile=0x1d0) returned 0x1
	[0242.165] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x2fda, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0242.166] GetFileType (hFile=0x1d0) returned 0x1
	[0242.166] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0242.166] WriteFile (in: hFile=0x1d0, lpBuffer=0x1139d500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1139d500*, lpNumberOfBytesWritten=0x112f3dfc*=0x236, lpOverlapped=0x112f3e08) returned 1
	[0242.166] GetFileType (hFile=0x1d0) returned 0x1
	[0242.166] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x2fda, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0242.167] CloseHandle (hObject=0x1d0) returned 1
	[0242.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.tl30z")) returned 0x20
	[0242.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.tl30z", dwFileAttributes=0x21) returned 1
	[0242.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 0x20
	[0242.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index", dwFileAttributes=0x20) returned 1
	[0242.170] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.tl30z"), dwFlags=0x1) returned 1
	[0242.264] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0242.276] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0242.276] ReadFile (in: hFile=0x288, lpBuffer=0x113a5200, nNumberOfBytesToRead=0x5b5, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x113a5200*, lpNumberOfBytesRead=0x11286e18*=0x5b5, lpOverlapped=0x0) returned 1
	[0242.286] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327f0 | out: pbBuffer=0x113327f0) returned 1
	[0242.286] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327e8 | out: pbBuffer=0x113327e8) returned 1
	[0242.286] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a3802 | out: pbBuffer=0x113a3802) returned 1
	[0242.286] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332820 | out: pbBuffer=0x11332820) returned 1
	[0242.287] GetFileType (hFile=0x288) returned 0x1
	[0242.287] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0242.287] WriteFile (in: hFile=0x288, lpBuffer=0x11271000*, nNumberOfBytesToWrite=0x5b5, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11271000*, lpNumberOfBytesWritten=0x112f3dfc*=0x5b5, lpOverlapped=0x112f3e08) returned 1
	[0242.288] GetFileType (hFile=0x288) returned 0x1
	[0242.288] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5b5, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0242.288] GetFileType (hFile=0x288) returned 0x1
	[0242.288] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0242.288] WriteFile (in: hFile=0x288, lpBuffer=0x1126e380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1126e380*, lpNumberOfBytesWritten=0x112f3dfc*=0x22d, lpOverlapped=0x112f3e08) returned 1
	[0242.288] GetFileType (hFile=0x288) returned 0x1
	[0242.288] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5b5, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0242.289] CloseHandle (hObject=0x288) returned 1
	[0242.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.tl30z")) returned 0x20
	[0242.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.tl30z", dwFileAttributes=0x21) returned 1
	[0242.449] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.668] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0243.338] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0243.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20
	[0243.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf", dwFileAttributes=0x20) returned 1
	[0243.406] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.tl30z"), dwFlags=0x1) returned 1
	[0244.361] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0244.427] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x113abe08 | out: lpMode=0x113abe08) returned 0
	[0244.427] ReadFile (in: hFile=0x200, lpBuffer=0x11396000, nNumberOfBytesToRead=0xca18, lpNumberOfBytesRead=0x113abe18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x113abe18*=0xca18, lpOverlapped=0x0) returned 1
	[0244.441] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0244.441] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125ab02 | out: pbBuffer=0x1125ab02) returned 1
	[0244.441] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125ab79 | out: pbBuffer=0x1125ab79) returned 1
	[0244.442] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0244.443] GetFileType (hFile=0x200) returned 0x1
	[0244.443] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0244.443] WriteFile (in: hFile=0x200, lpBuffer=0x110ce000*, nNumberOfBytesToWrite=0xca18, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110ce000*, lpNumberOfBytesWritten=0x1102ddfc*=0xca18, lpOverlapped=0x1102de08) returned 1
	[0244.445] GetFileType (hFile=0x200) returned 0x1
	[0244.445] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0xca18, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0244.445] GetFileType (hFile=0x200) returned 0x1
	[0244.445] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0244.445] WriteFile (in: hFile=0x200, lpBuffer=0x110e9500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110e9500*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0244.479] GetFileType (hFile=0x200) returned 0x1
	[0244.479] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0xca18, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0244.479] CloseHandle (hObject=0x200) returned 1
	[0244.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.tl30z")) returned 0x20
	[0244.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.tl30z", dwFileAttributes=0x21) returned 1
	[0244.709] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0300.172] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0300.181] SetEvent (hEvent=0x264) returned 1
	[0300.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf")) returned 0x220
	[0300.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF", dwFileAttributes=0x220) returned 1
	[0300.182] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0300.229] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11448e08 | out: lpMode=0x11448e08) returned 0
	[0300.229] ReadFile (in: hFile=0x1b4, lpBuffer=0x1146e000, nNumberOfBytesToRead=0x1334, lpNumberOfBytesRead=0x11448e18, lpOverlapped=0x0 | out: lpBuffer=0x1146e000*, lpNumberOfBytesRead=0x11448e18*=0x1334, lpOverlapped=0x0) returned 1
	[0300.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324e0 | out: pbBuffer=0x113324e0) returned 1
	[0300.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11376402 | out: pbBuffer=0x11376402) returned 1
	[0300.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0300.538] GetFileType (hFile=0x1b4) returned 0x1
	[0300.538] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.538] WriteFile (in: hFile=0x1b4, lpBuffer=0x11362000*, nNumberOfBytesToWrite=0x1334, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11362000*, lpNumberOfBytesWritten=0x11339dfc*=0x1334, lpOverlapped=0x11339e08) returned 1
	[0300.539] GetFileType (hFile=0x1b4) returned 0x1
	[0300.539] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1334, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.539] GetFileType (hFile=0x1b4) returned 0x1
	[0300.539] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.539] WriteFile (in: hFile=0x1b4, lpBuffer=0x1135c700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1135c700*, lpNumberOfBytesWritten=0x11339dfc*=0x22a, lpOverlapped=0x11339e08) returned 1
	[0300.540] GetFileType (hFile=0x1b4) returned 0x1
	[0300.540] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1334, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.540] CloseHandle (hObject=0x1b4) returned 1
	[0300.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf.tl30z")) returned 0x220
	[0300.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.560] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0300.565] SetEvent (hEvent=0x23c) returned 1
	[0300.565] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0300.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf")) returned 0x220
	[0300.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF", dwFileAttributes=0x220) returned 1
	[0300.604] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x28c
	[0300.652] GetConsoleMode (in: hConsoleHandle=0x28c, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0300.652] ReadFile (in: hFile=0x28c, lpBuffer=0x11260000, nNumberOfBytesToRead=0xdc4, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11260000*, lpNumberOfBytesRead=0x11286e18*=0xdc4, lpOverlapped=0x0) returned 1
	[0301.006] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.020] SetEvent (hEvent=0x12c) returned 1
	[0301.020] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.109] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0301.111] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.111] SetEvent (hEvent=0x1bc) returned 1
	[0301.111] SetEvent (hEvent=0x22c) returned 1
	[0301.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327f0 | out: pbBuffer=0x113327f0) returned 1
	[0301.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c4902 | out: pbBuffer=0x112c4902) returned 1
	[0301.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332820 | out: pbBuffer=0x11332820) returned 1
	[0301.114] GetFileType (hFile=0x1d8) returned 0x1
	[0301.114] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.114] WriteFile (in: hFile=0x1d8, lpBuffer=0x1114e000*, nNumberOfBytesToWrite=0x1418, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1114e000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1418, lpOverlapped=0x1133fe08) returned 1
	[0301.130] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.148] GetFileType (hFile=0x1d8) returned 0x1
	[0301.148] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1418, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.148] GetFileType (hFile=0x1d8) returned 0x1
	[0301.148] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.148] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c2700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113c2700*, lpNumberOfBytesWritten=0x1133fdfc*=0x224, lpOverlapped=0x1133fe08) returned 1
	[0301.158] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.162] GetFileType (hFile=0x1d8) returned 0x1
	[0301.162] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1418, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.162] CloseHandle (hObject=0x1d8) returned 1
	[0301.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf.tl30z")) returned 0x220
	[0301.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.199] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.220] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf")) returned 0x220
	[0301.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF", dwFileAttributes=0x220) returned 1
	[0301.234] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0301.314] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0301.315] ReadFile (in: hFile=0x1d8, lpBuffer=0x11234000, nNumberOfBytesToRead=0x6958, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11234000*, lpNumberOfBytesRead=0x1131ae18*=0x6958, lpOverlapped=0x0) returned 1
	[0301.324] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.339] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158270 | out: pbBuffer=0x11158270) returned 1
	[0301.339] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c5c02 | out: pbBuffer=0x112c5c02) returned 1
	[0301.340] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c5c29 | out: pbBuffer=0x112c5c29) returned 1
	[0301.340] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c5c36 | out: pbBuffer=0x112c5c36) returned 1
	[0301.340] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582a0 | out: pbBuffer=0x111582a0) returned 1
	[0301.341] GetFileType (hFile=0x1d8) returned 0x1
	[0301.341] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.342] WriteFile (in: hFile=0x1d8, lpBuffer=0x11116000*, nNumberOfBytesToWrite=0x6958, lpNumberOfBytesWritten=0x1135bdfc, lpOverlapped=0x1135be08 | out: lpBuffer=0x11116000*, lpNumberOfBytesWritten=0x1135bdfc*=0x6958, lpOverlapped=0x1135be08) returned 1
	[0301.342] GetFileType (hFile=0x1d8) returned 0x1
	[0301.342] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6958, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.342] GetFileType (hFile=0x1d8) returned 0x1
	[0301.342] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.343] WriteFile (in: hFile=0x1d8, lpBuffer=0x112e6a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1135bdfc, lpOverlapped=0x1135be08 | out: lpBuffer=0x112e6a80*, lpNumberOfBytesWritten=0x1135bdfc*=0x22d, lpOverlapped=0x1135be08) returned 1
	[0301.343] GetFileType (hFile=0x1d8) returned 0x1
	[0301.343] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6958, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.343] CloseHandle (hObject=0x1d8) returned 1
	[0301.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf.tl30z")) returned 0x220
	[0301.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.348] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.352] SetEvent (hEvent=0x24c) returned 1
	[0301.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf")) returned 0x220
	[0301.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF", dwFileAttributes=0x220) returned 1
	[0301.353] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0301.447] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0301.447] ReadFile (in: hFile=0x1d4, lpBuffer=0x11440000, nNumberOfBytesToRead=0x725f, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11440000*, lpNumberOfBytesRead=0x1131ae18*=0x725f, lpOverlapped=0x0) returned 1
	[0301.455] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0301.455] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11448802 | out: pbBuffer=0x11448802) returned 1
	[0301.456] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0301.457] GetFileType (hFile=0x1d4) returned 0x1
	[0301.457] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.457] WriteFile (in: hFile=0x1d4, lpBuffer=0x11c18000*, nNumberOfBytesToWrite=0x725f, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11c18000*, lpNumberOfBytesWritten=0x113b3dfc*=0x725f, lpOverlapped=0x113b3e08) returned 1
	[0301.457] GetFileType (hFile=0x1d4) returned 0x1
	[0301.458] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x725f, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.458] GetFileType (hFile=0x1d4) returned 0x1
	[0301.458] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.458] WriteFile (in: hFile=0x1d4, lpBuffer=0x11454700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11454700*, lpNumberOfBytesWritten=0x113b3dfc*=0x236, lpOverlapped=0x113b3e08) returned 1
	[0301.459] GetFileType (hFile=0x1d4) returned 0x1
	[0301.459] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x725f, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.459] CloseHandle (hObject=0x1d4) returned 1
	[0301.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf.tl30z")) returned 0x220
	[0301.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.463] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.466] SetEvent (hEvent=0x24c) returned 1
	[0301.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf")) returned 0x220
	[0301.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF", dwFileAttributes=0x220) returned 1
	[0301.467] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0301.591] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0301.591] ReadFile (in: hFile=0x1b4, lpBuffer=0x11328000, nNumberOfBytesToRead=0x2e88, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11328000*, lpNumberOfBytesRead=0x1131ae18*=0x2e88, lpOverlapped=0x0) returned 1
	[0301.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158570 | out: pbBuffer=0x11158570) returned 1
	[0301.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158568 | out: pbBuffer=0x11158568) returned 1
	[0301.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c58802 | out: pbBuffer=0x11c58802) returned 1
	[0301.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c58834 | out: pbBuffer=0x11c58834) returned 1
	[0301.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111585a0 | out: pbBuffer=0x111585a0) returned 1
	[0301.598] GetFileType (hFile=0x1b4) returned 0x1
	[0301.598] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.598] WriteFile (in: hFile=0x1b4, lpBuffer=0x11060000*, nNumberOfBytesToWrite=0x2e88, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11060000*, lpNumberOfBytesWritten=0x11339dfc*=0x2e88, lpOverlapped=0x11339e08) returned 1
	[0301.599] GetFileType (hFile=0x1b4) returned 0x1
	[0301.599] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2e88, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.599] GetFileType (hFile=0x1b4) returned 0x1
	[0301.599] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.599] WriteFile (in: hFile=0x1b4, lpBuffer=0x113fb880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x113fb880*, lpNumberOfBytesWritten=0x11339dfc*=0x22a, lpOverlapped=0x11339e08) returned 1
	[0301.600] GetFileType (hFile=0x1b4) returned 0x1
	[0301.600] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2e88, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.600] CloseHandle (hObject=0x1b4) returned 1
	[0301.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf.tl30z")) returned 0x220
	[0301.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.603] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.606] SetEvent (hEvent=0x284) returned 1
	[0301.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf")) returned 0x220
	[0301.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF", dwFileAttributes=0x220) returned 1
	[0301.607] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0301.687] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0301.687] ReadFile (in: hFile=0x250, lpBuffer=0x112c0000, nNumberOfBytesToRead=0x388a, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x112c0000*, lpNumberOfBytesRead=0x1131ae18*=0x388a, lpOverlapped=0x0) returned 1
	[0301.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0301.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f9302 | out: pbBuffer=0x112f9302) returned 1
	[0301.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f93cd | out: pbBuffer=0x112f93cd) returned 1
	[0301.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0301.695] GetFileType (hFile=0x250) returned 0x1
	[0301.695] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.695] WriteFile (in: hFile=0x250, lpBuffer=0x11bfe000*, nNumberOfBytesToWrite=0x388a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bfe000*, lpNumberOfBytesWritten=0x11031dfc*=0x388a, lpOverlapped=0x11031e08) returned 1
	[0301.695] GetFileType (hFile=0x250) returned 0x1
	[0301.696] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x388a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.696] GetFileType (hFile=0x250) returned 0x1
	[0301.696] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.696] WriteFile (in: hFile=0x250, lpBuffer=0x1130b880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1130b880*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0301.696] GetFileType (hFile=0x250) returned 0x1
	[0301.696] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x388a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.696] CloseHandle (hObject=0x250) returned 1
	[0301.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf.tl30z")) returned 0x220
	[0301.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf")) returned 0x220
	[0301.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF", dwFileAttributes=0x220) returned 1
	[0301.701] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0301.781] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0301.782] ReadFile (in: hFile=0x1d4, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x3550, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x1131ae18*=0x3550, lpOverlapped=0x0) returned 1
	[0301.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0301.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0301.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11476802 | out: pbBuffer=0x11476802) returned 1
	[0301.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0301.793] GetFileType (hFile=0x1d4) returned 0x1
	[0301.794] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.794] WriteFile (in: hFile=0x1d4, lpBuffer=0x1138e000*, nNumberOfBytesToWrite=0x3550, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1138e000*, lpNumberOfBytesWritten=0x11339dfc*=0x3550, lpOverlapped=0x11339e08) returned 1
	[0301.794] GetFileType (hFile=0x1d4) returned 0x1
	[0301.794] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3550, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.794] GetFileType (hFile=0x1d4) returned 0x1
	[0301.795] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.795] WriteFile (in: hFile=0x1d4, lpBuffer=0x1137ea80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1137ea80*, lpNumberOfBytesWritten=0x11339dfc*=0x22a, lpOverlapped=0x11339e08) returned 1
	[0301.795] GetFileType (hFile=0x1d4) returned 0x1
	[0301.795] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3550, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.795] CloseHandle (hObject=0x1d4) returned 1
	[0301.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf.tl30z")) returned 0x220
	[0301.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.800] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.804] SetEvent (hEvent=0x124) returned 1
	[0301.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf")) returned 0x220
	[0301.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF", dwFileAttributes=0x220) returned 1
	[0301.805] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0301.902] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0301.902] ReadFile (in: hFile=0x1fc, lpBuffer=0x11bc6000, nNumberOfBytesToRead=0x931a, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesRead=0x1131ae18*=0x931a, lpOverlapped=0x0) returned 1
	[0301.908] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0301.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11477e02 | out: pbBuffer=0x11477e02) returned 1
	[0301.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0301.910] GetFileType (hFile=0x1fc) returned 0x1
	[0301.910] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.910] WriteFile (in: hFile=0x1fc, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x931a, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x11339dfc*=0x931a, lpOverlapped=0x11339e08) returned 1
	[0301.911] GetFileType (hFile=0x1fc) returned 0x1
	[0301.911] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x931a, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.911] GetFileType (hFile=0x1fc) returned 0x1
	[0301.911] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.911] WriteFile (in: hFile=0x1fc, lpBuffer=0x11bdc700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11bdc700*, lpNumberOfBytesWritten=0x11339dfc*=0x230, lpOverlapped=0x11339e08) returned 1
	[0301.911] GetFileType (hFile=0x1fc) returned 0x1
	[0301.911] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x931a, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.912] CloseHandle (hObject=0x1fc) returned 1
	[0301.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf.tl30z")) returned 0x220
	[0301.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.915] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf")) returned 0x220
	[0301.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF", dwFileAttributes=0x220) returned 1
	[0301.917] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0302.096] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0302.096] ReadFile (in: hFile=0x1fc, lpBuffer=0x11bc6000, nNumberOfBytesToRead=0xd6bc, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesRead=0x1131ae18*=0xd6bc, lpOverlapped=0x0) returned 1
	[0302.102] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0302.103] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137c802 | out: pbBuffer=0x1137c802) returned 1
	[0302.103] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0302.105] GetFileType (hFile=0x1fc) returned 0x1
	[0302.105] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.105] WriteFile (in: hFile=0x1fc, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0xd6bc, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x1102bdfc*=0xd6bc, lpOverlapped=0x1102be08) returned 1
	[0302.106] GetFileType (hFile=0x1fc) returned 0x1
	[0302.106] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd6bc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.106] GetFileType (hFile=0x1fc) returned 0x1
	[0302.106] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.107] WriteFile (in: hFile=0x1fc, lpBuffer=0x11200a80*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11200a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x239, lpOverlapped=0x1102be08) returned 1
	[0302.107] GetFileType (hFile=0x1fc) returned 0x1
	[0302.107] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd6bc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.107] CloseHandle (hObject=0x1fc) returned 1
	[0302.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf.tl30z")) returned 0x220
	[0302.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg")) returned 0x220
	[0302.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG", dwFileAttributes=0x220) returned 1
	[0302.111] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg.tl30z"), dwFlags=0x1) returned 1
	[0302.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.193] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0302.193] ReadFile (in: hFile=0x1d8, lpBuffer=0x1129e000, nNumberOfBytesToRead=0x8d86, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1129e000*, lpNumberOfBytesRead=0x11316e18*=0x8d86, lpOverlapped=0x0) returned 1
	[0302.199] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0302.199] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137dc02 | out: pbBuffer=0x1137dc02) returned 1
	[0302.199] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0302.200] GetFileType (hFile=0x1d8) returned 0x1
	[0302.201] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.201] WriteFile (in: hFile=0x1d8, lpBuffer=0x11446000*, nNumberOfBytesToWrite=0x8d86, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11446000*, lpNumberOfBytesWritten=0x1102bdfc*=0x8d86, lpOverlapped=0x1102be08) returned 1
	[0302.202] GetFileType (hFile=0x1d8) returned 0x1
	[0302.202] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8d86, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.202] GetFileType (hFile=0x1d8) returned 0x1
	[0302.202] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.202] WriteFile (in: hFile=0x1d8, lpBuffer=0x112b8700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112b8700*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0302.203] GetFileType (hFile=0x1d8) returned 0x1
	[0302.203] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8d86, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.203] CloseHandle (hObject=0x1d8) returned 1
	[0302.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg.tl30z")) returned 0x220
	[0302.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0302.206] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.209] SetEvent (hEvent=0x248) returned 1
	[0302.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf")) returned 0x220
	[0302.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF", dwFileAttributes=0x220) returned 1
	[0302.210] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0302.309] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0302.309] ReadFile (in: hFile=0x1d4, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x7aa6, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x11316e18*=0x7aa6, lpOverlapped=0x0) returned 1
	[0302.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111583e0 | out: pbBuffer=0x111583e0) returned 1
	[0302.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11413d02 | out: pbBuffer=0x11413d02) returned 1
	[0302.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11413d74 | out: pbBuffer=0x11413d74) returned 1
	[0302.317] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158410 | out: pbBuffer=0x11158410) returned 1
	[0302.317] GetFileType (hFile=0x1d4) returned 0x1
	[0302.318] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.318] WriteFile (in: hFile=0x1d4, lpBuffer=0x113d2000*, nNumberOfBytesToWrite=0x7aa6, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113d2000*, lpNumberOfBytesWritten=0x1133fdfc*=0x7aa6, lpOverlapped=0x1133fe08) returned 1
	[0302.318] GetFileType (hFile=0x1d4) returned 0x1
	[0302.318] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7aa6, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.319] GetFileType (hFile=0x1d4) returned 0x1
	[0302.319] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.319] WriteFile (in: hFile=0x1d4, lpBuffer=0x11150700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11150700*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0302.319] GetFileType (hFile=0x1d4) returned 0x1
	[0302.319] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7aa6, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.319] CloseHandle (hObject=0x1d4) returned 1
	[0302.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf.tl30z")) returned 0x220
	[0302.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf")) returned 0x220
	[0302.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF", dwFileAttributes=0x220) returned 1
	[0302.323] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.464] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0302.464] ReadFile (in: hFile=0x1d8, lpBuffer=0x112fe000, nNumberOfBytesToRead=0x17be, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x112fe000*, lpNumberOfBytesRead=0x11316e18*=0x17be, lpOverlapped=0x0) returned 1
	[0302.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0302.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112aa902 | out: pbBuffer=0x112aa902) returned 1
	[0302.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0302.471] GetFileType (hFile=0x1d8) returned 0x1
	[0302.472] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.472] WriteFile (in: hFile=0x1d8, lpBuffer=0x1109a000*, nNumberOfBytesToWrite=0x17be, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1109a000*, lpNumberOfBytesWritten=0x1133bdfc*=0x17be, lpOverlapped=0x1133be08) returned 1
	[0302.472] GetFileType (hFile=0x1d8) returned 0x1
	[0302.472] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x17be, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.472] GetFileType (hFile=0x1d8) returned 0x1
	[0302.473] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.473] WriteFile (in: hFile=0x1d8, lpBuffer=0x1128f880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1128f880*, lpNumberOfBytesWritten=0x1133bdfc*=0x236, lpOverlapped=0x1133be08) returned 1
	[0302.473] GetFileType (hFile=0x1d8) returned 0x1
	[0302.473] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x17be, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.473] CloseHandle (hObject=0x1d8) returned 1
	[0302.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf.tl30z")) returned 0x220
	[0302.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.476] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.480] SetEvent (hEvent=0x248) returned 1
	[0302.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf")) returned 0x220
	[0302.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF", dwFileAttributes=0x220) returned 1
	[0302.481] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.576] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0302.576] ReadFile (in: hFile=0x1d8, lpBuffer=0x1112a000, nNumberOfBytesToRead=0x69d2, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1112a000*, lpNumberOfBytesRead=0x11316e18*=0x69d2, lpOverlapped=0x0) returned 1
	[0302.582] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0302.582] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11260802 | out: pbBuffer=0x11260802) returned 1
	[0302.583] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0302.583] GetFileType (hFile=0x1d8) returned 0x1
	[0302.584] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.584] WriteFile (in: hFile=0x1d8, lpBuffer=0x1135c000*, nNumberOfBytesToWrite=0x69d2, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1135c000*, lpNumberOfBytesWritten=0x1133fdfc*=0x69d2, lpOverlapped=0x1133fe08) returned 1
	[0302.584] GetFileType (hFile=0x1d8) returned 0x1
	[0302.584] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x69d2, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.585] GetFileType (hFile=0x1d8) returned 0x1
	[0302.585] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.585] WriteFile (in: hFile=0x1d8, lpBuffer=0x111a2a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111a2a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0302.585] GetFileType (hFile=0x1d8) returned 0x1
	[0302.585] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x69d2, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.585] CloseHandle (hObject=0x1d8) returned 1
	[0302.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf.tl30z")) returned 0x220
	[0302.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.588] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.591] SetEvent (hEvent=0x160) returned 1
	[0302.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf")) returned 0x220
	[0302.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF", dwFileAttributes=0x220) returned 1
	[0302.592] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.684] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0302.685] ReadFile (in: hFile=0x1d8, lpBuffer=0x1132e000, nNumberOfBytesToRead=0x3c9c, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1132e000*, lpNumberOfBytesRead=0x11316e18*=0x3c9c, lpOverlapped=0x0) returned 1
	[0302.692] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0302.692] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113de802 | out: pbBuffer=0x113de802) returned 1
	[0302.692] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0302.693] GetFileType (hFile=0x1d8) returned 0x1
	[0302.693] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.693] WriteFile (in: hFile=0x1d8, lpBuffer=0x113b2000*, nNumberOfBytesToWrite=0x3c9c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113b2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3c9c, lpOverlapped=0x1102be08) returned 1
	[0302.694] GetFileType (hFile=0x1d8) returned 0x1
	[0302.694] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3c9c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.694] GetFileType (hFile=0x1d8) returned 0x1
	[0302.694] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.694] WriteFile (in: hFile=0x1d8, lpBuffer=0x1114ea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1114ea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0302.694] GetFileType (hFile=0x1d8) returned 0x1
	[0302.695] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3c9c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.695] CloseHandle (hObject=0x1d8) returned 1
	[0302.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf.tl30z")) returned 0x220
	[0302.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.697] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.700] SetEvent (hEvent=0x160) returned 1
	[0302.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf")) returned 0x220
	[0302.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF", dwFileAttributes=0x220) returned 1
	[0302.701] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0302.775] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0302.775] ReadFile (in: hFile=0x250, lpBuffer=0x1116e000, nNumberOfBytesToRead=0x2ae8, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1116e000*, lpNumberOfBytesRead=0x11316e18*=0x2ae8, lpOverlapped=0x0) returned 1
	[0302.780] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158850 | out: pbBuffer=0x11158850) returned 1
	[0302.780] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158848 | out: pbBuffer=0x11158848) returned 1
	[0302.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11227e02 | out: pbBuffer=0x11227e02) returned 1
	[0302.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11227e21 | out: pbBuffer=0x11227e21) returned 1
	[0302.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158880 | out: pbBuffer=0x11158880) returned 1
	[0302.781] GetFileType (hFile=0x250) returned 0x1
	[0302.782] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.782] WriteFile (in: hFile=0x250, lpBuffer=0x11196000*, nNumberOfBytesToWrite=0x2ae8, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11196000*, lpNumberOfBytesWritten=0x1133fdfc*=0x2ae8, lpOverlapped=0x1133fe08) returned 1
	[0302.782] GetFileType (hFile=0x250) returned 0x1
	[0302.782] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2ae8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.782] GetFileType (hFile=0x250) returned 0x1
	[0302.783] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.783] WriteFile (in: hFile=0x250, lpBuffer=0x113fb500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113fb500*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0302.783] GetFileType (hFile=0x250) returned 0x1
	[0302.783] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2ae8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.783] CloseHandle (hObject=0x250) returned 1
	[0302.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf.tl30z")) returned 0x220
	[0302.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.785] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.788] SetEvent (hEvent=0x160) returned 1
	[0302.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf")) returned 0x220
	[0302.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF", dwFileAttributes=0x220) returned 1
	[0302.789] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0302.910] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0302.910] ReadFile (in: hFile=0x250, lpBuffer=0x11298000, nNumberOfBytesToRead=0x4a0e, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11298000*, lpNumberOfBytesRead=0x11316e18*=0x4a0e, lpOverlapped=0x0) returned 1
	[0302.916] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111583e0 | out: pbBuffer=0x111583e0) returned 1
	[0302.916] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111583d8 | out: pbBuffer=0x111583d8) returned 1
	[0302.916] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11372702 | out: pbBuffer=0x11372702) returned 1
	[0302.916] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11372792 | out: pbBuffer=0x11372792) returned 1
	[0302.917] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158410 | out: pbBuffer=0x11158410) returned 1
	[0302.918] GetFileType (hFile=0x250) returned 0x1
	[0302.918] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.918] WriteFile (in: hFile=0x250, lpBuffer=0x11434000*, nNumberOfBytesToWrite=0x4a0e, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11434000*, lpNumberOfBytesWritten=0x1133fdfc*=0x4a0e, lpOverlapped=0x1133fe08) returned 1
	[0302.918] GetFileType (hFile=0x250) returned 0x1
	[0302.918] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4a0e, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.919] GetFileType (hFile=0x250) returned 0x1
	[0302.919] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.919] WriteFile (in: hFile=0x250, lpBuffer=0x111dd500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111dd500*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0302.919] GetFileType (hFile=0x250) returned 0x1
	[0302.919] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4a0e, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.919] CloseHandle (hObject=0x250) returned 1
	[0302.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf.tl30z")) returned 0x220
	[0302.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.944] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0302.946] SetEvent (hEvent=0x160) returned 1
	[0302.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg")) returned 0x220
	[0302.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG", dwFileAttributes=0x220) returned 1
	[0302.947] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0303.028] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0303.028] ReadFile (in: hFile=0x1fc, lpBuffer=0x11162000, nNumberOfBytesToRead=0x9a8b, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11162000*, lpNumberOfBytesRead=0x11316e18*=0x9a8b, lpOverlapped=0x0) returned 1
	[0303.035] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158830 | out: pbBuffer=0x11158830) returned 1
	[0303.035] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158828 | out: pbBuffer=0x11158828) returned 1
	[0303.035] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116c602 | out: pbBuffer=0x1116c602) returned 1
	[0303.036] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158860 | out: pbBuffer=0x11158860) returned 1
	[0303.037] GetFileType (hFile=0x1fc) returned 0x1
	[0303.037] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.037] WriteFile (in: hFile=0x1fc, lpBuffer=0x11456000*, nNumberOfBytesToWrite=0x9a8b, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11456000*, lpNumberOfBytesWritten=0x1133fdfc*=0x9a8b, lpOverlapped=0x1133fe08) returned 1
	[0303.038] GetFileType (hFile=0x1fc) returned 0x1
	[0303.038] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x9a8b, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.038] GetFileType (hFile=0x1fc) returned 0x1
	[0303.038] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.038] WriteFile (in: hFile=0x1fc, lpBuffer=0x11314000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11314000*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0303.038] GetFileType (hFile=0x1fc) returned 0x1
	[0303.038] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x9a8b, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.038] CloseHandle (hObject=0x1fc) returned 1
	[0303.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg.tl30z")) returned 0x220
	[0303.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.044] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.047] SetEvent (hEvent=0x160) returned 1
	[0303.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf")) returned 0x220
	[0303.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF", dwFileAttributes=0x220) returned 1
	[0303.048] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf.tl30z"), dwFlags=0x1) returned 1
	[0303.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.359] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0303.359] ReadFile (in: hFile=0x1d8, lpBuffer=0x11058000, nNumberOfBytesToRead=0x20e4, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11316e18*=0x20e4, lpOverlapped=0x0) returned 1
	[0303.364] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e170 | out: pbBuffer=0x1104e170) returned 1
	[0303.364] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116c802 | out: pbBuffer=0x1116c802) returned 1
	[0303.365] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e1a0 | out: pbBuffer=0x1104e1a0) returned 1
	[0303.366] GetFileType (hFile=0x1d8) returned 0x1
	[0303.366] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.366] WriteFile (in: hFile=0x1d8, lpBuffer=0x11368000*, nNumberOfBytesToWrite=0x20e4, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11368000*, lpNumberOfBytesWritten=0x1133fdfc*=0x20e4, lpOverlapped=0x1133fe08) returned 1
	[0303.366] GetFileType (hFile=0x1d8) returned 0x1
	[0303.366] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x20e4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.367] GetFileType (hFile=0x1d8) returned 0x1
	[0303.367] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.367] WriteFile (in: hFile=0x1d8, lpBuffer=0x11314a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11314a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0303.367] GetFileType (hFile=0x1d8) returned 0x1
	[0303.367] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x20e4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.368] CloseHandle (hObject=0x1d8) returned 1
	[0303.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf.tl30z")) returned 0x220
	[0303.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0303.371] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.387] SetEvent (hEvent=0x1b0) returned 1
	[0303.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg")) returned 0x220
	[0303.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG", dwFileAttributes=0x220) returned 1
	[0303.388] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0303.480] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0303.480] ReadFile (in: hFile=0x1fc, lpBuffer=0x112fe000, nNumberOfBytesToRead=0xb9d1, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x112fe000*, lpNumberOfBytesRead=0x11316e18*=0xb9d1, lpOverlapped=0x0) returned 1
	[0303.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0303.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111580f8 | out: pbBuffer=0x111580f8) returned 1
	[0303.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130e802 | out: pbBuffer=0x1130e802) returned 1
	[0303.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130e8ba | out: pbBuffer=0x1130e8ba) returned 1
	[0303.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0303.487] GetFileType (hFile=0x1fc) returned 0x1
	[0303.488] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.488] WriteFile (in: hFile=0x1fc, lpBuffer=0x1118e000*, nNumberOfBytesToWrite=0xb9d1, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1118e000*, lpNumberOfBytesWritten=0x1102ddfc*=0xb9d1, lpOverlapped=0x1102de08) returned 1
	[0303.488] GetFileType (hFile=0x1fc) returned 0x1
	[0303.489] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xb9d1, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.489] GetFileType (hFile=0x1fc) returned 0x1
	[0303.489] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.489] WriteFile (in: hFile=0x1fc, lpBuffer=0x111d4a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111d4a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x236, lpOverlapped=0x1102de08) returned 1
	[0303.489] GetFileType (hFile=0x1fc) returned 0x1
	[0303.489] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xb9d1, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.490] CloseHandle (hObject=0x1fc) returned 1
	[0303.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg.tl30z")) returned 0x220
	[0303.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.492] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.496] SetEvent (hEvent=0x248) returned 1
	[0303.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf")) returned 0x220
	[0303.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF", dwFileAttributes=0x220) returned 1
	[0303.496] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf.tl30z"), dwFlags=0x1) returned 1
	[0303.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0303.590] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0303.590] ReadFile (in: hFile=0x1d4, lpBuffer=0x1111a000, nNumberOfBytesToRead=0x2dfa, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1111a000*, lpNumberOfBytesRead=0x11316e18*=0x2dfa, lpOverlapped=0x0) returned 1
	[0303.595] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111586c0 | out: pbBuffer=0x111586c0) returned 1
	[0303.595] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111586b8 | out: pbBuffer=0x111586b8) returned 1
	[0303.596] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c3202 | out: pbBuffer=0x112c3202) returned 1
	[0303.596] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c3222 | out: pbBuffer=0x112c3222) returned 1
	[0303.596] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c3239 | out: pbBuffer=0x112c3239) returned 1
	[0303.596] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c32a7 | out: pbBuffer=0x112c32a7) returned 1
	[0303.596] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111586f0 | out: pbBuffer=0x111586f0) returned 1
	[0303.596] SetEvent (hEvent=0x1b0) returned 1
	[0303.597] GetFileType (hFile=0x1d4) returned 0x1
	[0303.597] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0303.597] WriteFile (in: hFile=0x1d4, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x2dfa, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x11031dfc*=0x2dfa, lpOverlapped=0x11031e08) returned 1
	[0303.597] GetFileType (hFile=0x1d4) returned 0x1
	[0303.598] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2dfa, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0303.598] GetFileType (hFile=0x1d4) returned 0x1
	[0303.598] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0303.598] WriteFile (in: hFile=0x1d4, lpBuffer=0x1112e380*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1112e380*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0303.598] GetFileType (hFile=0x1d4) returned 0x1
	[0303.598] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2dfa, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0303.599] CloseHandle (hObject=0x1d4) returned 1
	[0303.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf.tl30z")) returned 0x220
	[0303.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0303.603] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.605] SetEvent (hEvent=0x1b0) returned 1
	[0303.605] SetEvent (hEvent=0x160) returned 1
	[0303.606] SwitchToThread () returned 1
	[0303.628] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.664] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.712] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.797] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.834] SetEvent (hEvent=0x248) returned 1
	[0303.834] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.844] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.867] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.868] SetEvent (hEvent=0x1b0) returned 1
	[0303.868] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0303.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg")) returned 0x220
	[0303.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG", dwFileAttributes=0x220) returned 1
	[0303.888] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.993] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0303.993] ReadFile (in: hFile=0x1d8, lpBuffer=0x11164000, nNumberOfBytesToRead=0x6873, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11164000*, lpNumberOfBytesRead=0x1131ce18*=0x6873, lpOverlapped=0x0) returned 1
	[0303.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111583d0 | out: pbBuffer=0x111583d0) returned 1
	[0303.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111583c8 | out: pbBuffer=0x111583c8) returned 1
	[0303.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267e02 | out: pbBuffer=0x11267e02) returned 1
	[0303.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267e94 | out: pbBuffer=0x11267e94) returned 1
	[0303.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267eaa | out: pbBuffer=0x11267eaa) returned 1
	[0303.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158400 | out: pbBuffer=0x11158400) returned 1
	[0304.000] GetFileType (hFile=0x1d8) returned 0x1
	[0304.000] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.000] WriteFile (in: hFile=0x1d8, lpBuffer=0x112a4000*, nNumberOfBytesToWrite=0x6873, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112a4000*, lpNumberOfBytesWritten=0x1102ddfc*=0x6873, lpOverlapped=0x1102de08) returned 1
	[0304.001] GetFileType (hFile=0x1d8) returned 0x1
	[0304.001] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6873, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.001] GetFileType (hFile=0x1d8) returned 0x1
	[0304.001] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.001] WriteFile (in: hFile=0x1d8, lpBuffer=0x1117ca80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1117ca80*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0304.002] GetFileType (hFile=0x1d8) returned 0x1
	[0304.002] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6873, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.002] CloseHandle (hObject=0x1d8) returned 1
	[0304.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg.tl30z")) returned 0x220
	[0304.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.005] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.009] SetEvent (hEvent=0x1b0) returned 1
	[0304.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg")) returned 0x220
	[0304.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG", dwFileAttributes=0x220) returned 1
	[0304.009] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0304.102] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.119] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0304.119] ReadFile (in: hFile=0x1b4, lpBuffer=0x1113e000, nNumberOfBytesToRead=0x3df7, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1113e000*, lpNumberOfBytesRead=0x1131ce18*=0x3df7, lpOverlapped=0x0) returned 1
	[0304.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0304.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11361202 | out: pbBuffer=0x11361202) returned 1
	[0304.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0304.126] GetFileType (hFile=0x1b4) returned 0x1
	[0304.126] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.126] WriteFile (in: hFile=0x1b4, lpBuffer=0x111e6000*, nNumberOfBytesToWrite=0x3df7, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111e6000*, lpNumberOfBytesWritten=0x1133bdfc*=0x3df7, lpOverlapped=0x1133be08) returned 1
	[0304.127] GetFileType (hFile=0x1b4) returned 0x1
	[0304.127] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3df7, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.127] GetFileType (hFile=0x1b4) returned 0x1
	[0304.127] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.127] WriteFile (in: hFile=0x1b4, lpBuffer=0x113c9880*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113c9880*, lpNumberOfBytesWritten=0x1133bdfc*=0x23c, lpOverlapped=0x1133be08) returned 1
	[0304.128] GetFileType (hFile=0x1b4) returned 0x1
	[0304.128] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3df7, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.128] CloseHandle (hObject=0x1b4) returned 1
	[0304.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg.tl30z")) returned 0x220
	[0304.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg")) returned 0x220
	[0304.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG", dwFileAttributes=0x220) returned 1
	[0304.137] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0304.333] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0304.333] ReadFile (in: hFile=0x1d8, lpBuffer=0x1130c000, nNumberOfBytesToRead=0x8ab4, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1130c000*, lpNumberOfBytesRead=0x1128ae18*=0x8ab4, lpOverlapped=0x0) returned 1
	[0304.341] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158270 | out: pbBuffer=0x11158270) returned 1
	[0304.343] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261202 | out: pbBuffer=0x11261202) returned 1
	[0304.343] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582a0 | out: pbBuffer=0x111582a0) returned 1
	[0304.344] GetFileType (hFile=0x1d8) returned 0x1
	[0304.344] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.344] WriteFile (in: hFile=0x1d8, lpBuffer=0x112a4000*, nNumberOfBytesToWrite=0x8ab4, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x112a4000*, lpNumberOfBytesWritten=0x11339dfc*=0x8ab4, lpOverlapped=0x11339e08) returned 1
	[0304.345] GetFileType (hFile=0x1d8) returned 0x1
	[0304.345] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8ab4, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.345] GetFileType (hFile=0x1d8) returned 0x1
	[0304.345] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.345] WriteFile (in: hFile=0x1d8, lpBuffer=0x1144bc00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1144bc00*, lpNumberOfBytesWritten=0x11339dfc*=0x230, lpOverlapped=0x11339e08) returned 1
	[0304.346] GetFileType (hFile=0x1d8) returned 0x1
	[0304.346] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8ab4, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.346] CloseHandle (hObject=0x1d8) returned 1
	[0304.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg.tl30z")) returned 0x220
	[0304.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.372] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.378] SetEvent (hEvent=0x248) returned 1
	[0304.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg")) returned 0x220
	[0304.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG", dwFileAttributes=0x220) returned 1
	[0304.379] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0304.618] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0304.618] ReadFile (in: hFile=0x1d8, lpBuffer=0x11100000, nNumberOfBytesToRead=0x9b87, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11100000*, lpNumberOfBytesRead=0x1128ae18*=0x9b87, lpOverlapped=0x0) returned 1
	[0304.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0304.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1139fe02 | out: pbBuffer=0x1139fe02) returned 1
	[0304.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139fea3 | out: pbBuffer=0x1139fea3) returned 1
	[0304.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139feab | out: pbBuffer=0x1139feab) returned 1
	[0304.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139fec9 | out: pbBuffer=0x1139fec9) returned 1
	[0304.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139fee8 | out: pbBuffer=0x1139fee8) returned 1
	[0304.626] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0304.627] GetFileType (hFile=0x1d8) returned 0x1
	[0304.627] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.627] WriteFile (in: hFile=0x1d8, lpBuffer=0x11144000*, nNumberOfBytesToWrite=0x9b87, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11144000*, lpNumberOfBytesWritten=0x11031dfc*=0x9b87, lpOverlapped=0x11031e08) returned 1
	[0304.628] GetFileType (hFile=0x1d8) returned 0x1
	[0304.628] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9b87, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.628] GetFileType (hFile=0x1d8) returned 0x1
	[0304.628] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.628] WriteFile (in: hFile=0x1d8, lpBuffer=0x11114700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11114700*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0304.629] GetFileType (hFile=0x1d8) returned 0x1
	[0304.629] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9b87, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.629] CloseHandle (hObject=0x1d8) returned 1
	[0304.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg.tl30z")) returned 0x220
	[0304.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.633] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.638] SetEvent (hEvent=0x284) returned 1
	[0304.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg")) returned 0x220
	[0304.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG", dwFileAttributes=0x220) returned 1
	[0304.639] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0304.739] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0304.740] ReadFile (in: hFile=0x1fc, lpBuffer=0x112a4000, nNumberOfBytesToRead=0x80c3, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x112a4000*, lpNumberOfBytesRead=0x1128ae18*=0x80c3, lpOverlapped=0x0) returned 1
	[0304.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0304.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e338 | out: pbBuffer=0x1104e338) returned 1
	[0304.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a5302 | out: pbBuffer=0x113a5302) returned 1
	[0304.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0304.750] GetFileType (hFile=0x1fc) returned 0x1
	[0304.750] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.750] WriteFile (in: hFile=0x1fc, lpBuffer=0x112b6000*, nNumberOfBytesToWrite=0x80c3, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x112b6000*, lpNumberOfBytesWritten=0x1139fdfc*=0x80c3, lpOverlapped=0x1139fe08) returned 1
	[0304.751] GetFileType (hFile=0x1fc) returned 0x1
	[0304.751] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x80c3, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.751] GetFileType (hFile=0x1fc) returned 0x1
	[0304.751] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.751] WriteFile (in: hFile=0x1fc, lpBuffer=0x113fd880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x113fd880*, lpNumberOfBytesWritten=0x1139fdfc*=0x22a, lpOverlapped=0x1139fe08) returned 1
	[0304.752] GetFileType (hFile=0x1fc) returned 0x1
	[0304.752] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x80c3, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.752] CloseHandle (hObject=0x1fc) returned 1
	[0304.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg.tl30z")) returned 0x220
	[0304.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.754] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.755] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.757] SetEvent (hEvent=0x160) returned 1
	[0304.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg")) returned 0x220
	[0304.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG", dwFileAttributes=0x220) returned 1
	[0304.758] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.822] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.830] SetEvent (hEvent=0x174) returned 1
	[0304.830] SetEvent (hEvent=0x124) returned 1
	[0304.830] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x0
	[0304.833] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x0
	[0304.834] SetEvent (hEvent=0x174) returned 1
	[0304.834] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x0
	[0304.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0304.841] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1102de08 | out: lpMode=0x1102de08) returned 0
	[0304.841] ReadFile (in: hFile=0x1fc, lpBuffer=0x111ee000, nNumberOfBytesToRead=0x7fc7, lpNumberOfBytesRead=0x1102de18, lpOverlapped=0x0 | out: lpBuffer=0x111ee000*, lpNumberOfBytesRead=0x1102de18*=0x7fc7, lpOverlapped=0x0) returned 1
	[0304.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0304.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0304.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11368802 | out: pbBuffer=0x11368802) returned 1
	[0304.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113688c8 | out: pbBuffer=0x113688c8) returned 1
	[0304.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0304.859] GetFileType (hFile=0x1fc) returned 0x1
	[0304.859] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.860] WriteFile (in: hFile=0x1fc, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0x7fc7, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7fc7, lpOverlapped=0x1102de08) returned 1
	[0304.860] GetFileType (hFile=0x1fc) returned 0x1
	[0304.860] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x7fc7, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.861] GetFileType (hFile=0x1fc) returned 0x1
	[0304.861] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.861] WriteFile (in: hFile=0x1fc, lpBuffer=0x11154a80*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11154a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x23c, lpOverlapped=0x1102de08) returned 1
	[0304.861] GetFileType (hFile=0x1fc) returned 0x1
	[0304.861] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x7fc7, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.861] CloseHandle (hObject=0x1fc) returned 1
	[0304.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg.tl30z")) returned 0x220
	[0304.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.865] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0304.869] SetEvent (hEvent=0x160) returned 1
	[0304.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg")) returned 0x220
	[0304.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG", dwFileAttributes=0x220) returned 1
	[0304.870] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0305.001] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0305.001] ReadFile (in: hFile=0x250, lpBuffer=0x110a0000, nNumberOfBytesToRead=0x98c5, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x110a0000*, lpNumberOfBytesRead=0x11425e18*=0x98c5, lpOverlapped=0x0) returned 1
	[0305.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0305.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3f8 | out: pbBuffer=0x1140f3f8) returned 1
	[0305.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f7d02 | out: pbBuffer=0x111f7d02) returned 1
	[0305.010] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f430 | out: pbBuffer=0x1140f430) returned 1
	[0305.010] GetFileType (hFile=0x250) returned 0x1
	[0305.011] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.011] WriteFile (in: hFile=0x250, lpBuffer=0x11106000*, nNumberOfBytesToWrite=0x98c5, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11106000*, lpNumberOfBytesWritten=0x1133fdfc*=0x98c5, lpOverlapped=0x1133fe08) returned 1
	[0305.012] GetFileType (hFile=0x250) returned 0x1
	[0305.012] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x98c5, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.012] GetFileType (hFile=0x250) returned 0x1
	[0305.013] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.013] WriteFile (in: hFile=0x250, lpBuffer=0x110aea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110aea80*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0305.013] GetFileType (hFile=0x250) returned 0x1
	[0305.013] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x98c5, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.014] CloseHandle (hObject=0x250) returned 1
	[0305.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg.tl30z")) returned 0x220
	[0305.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.017] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.019] SetEvent (hEvent=0x284) returned 1
	[0305.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg")) returned 0x220
	[0305.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG", dwFileAttributes=0x220) returned 1
	[0305.020] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0305.177] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0305.177] ReadFile (in: hFile=0x1d8, lpBuffer=0x11304000, nNumberOfBytesToRead=0x963f, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11304000*, lpNumberOfBytesRead=0x11425e18*=0x963f, lpOverlapped=0x0) returned 1
	[0305.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158260 | out: pbBuffer=0x11158260) returned 1
	[0305.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11369202 | out: pbBuffer=0x11369202) returned 1
	[0305.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11369261 | out: pbBuffer=0x11369261) returned 1
	[0305.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136927a | out: pbBuffer=0x1136927a) returned 1
	[0305.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158290 | out: pbBuffer=0x11158290) returned 1
	[0305.188] GetFileType (hFile=0x1d8) returned 0x1
	[0305.188] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.188] WriteFile (in: hFile=0x1d8, lpBuffer=0x1117c000*, nNumberOfBytesToWrite=0x963f, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1117c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x963f, lpOverlapped=0x1102be08) returned 1
	[0305.189] GetFileType (hFile=0x1d8) returned 0x1
	[0305.189] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x963f, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.189] GetFileType (hFile=0x1d8) returned 0x1
	[0305.189] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.189] WriteFile (in: hFile=0x1d8, lpBuffer=0x11155880*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11155880*, lpNumberOfBytesWritten=0x1102bdfc*=0x239, lpOverlapped=0x1102be08) returned 1
	[0305.190] GetFileType (hFile=0x1d8) returned 0x1
	[0305.190] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x963f, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.190] CloseHandle (hObject=0x1d8) returned 1
	[0305.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg.tl30z")) returned 0x220
	[0305.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.202] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.237] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.250] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.281] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.307] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.316] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.329] SetEvent (hEvent=0x284) returned 1
	[0305.330] SetEvent (hEvent=0x124) returned 1
	[0305.330] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x0
	[0305.333] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x0
	[0305.334] SetEvent (hEvent=0x174) returned 1
	[0305.334] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0305.336] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.336] SetEvent (hEvent=0x164) returned 1
	[0305.336] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0305.560] SetEvent (hEvent=0x124) returned 1
	[0305.561] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x0
	[0305.562] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x0
	[0305.562] SetEvent (hEvent=0x248) returned 1
	[0305.562] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x0
	[0305.563] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.555] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf")) returned 0x220
	[0308.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF", dwFileAttributes=0x220) returned 1
	[0308.561] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.605] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x28c
	[0308.610] GetConsoleMode (in: hConsoleHandle=0x28c, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0308.610] ReadFile (in: hFile=0x28c, lpBuffer=0x112c0000, nNumberOfBytesToRead=0x3218, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x112c0000*, lpNumberOfBytesRead=0x11022e18*=0x3218, lpOverlapped=0x0) returned 1
	[0308.863] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6350 | out: pbBuffer=0x113e6350) returned 1
	[0308.863] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125a902 | out: pbBuffer=0x1125a902) returned 1
	[0308.863] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125a97d | out: pbBuffer=0x1125a97d) returned 1
	[0308.863] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0308.881] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.881] SetEvent (hEvent=0x240) returned 1
	[0308.882] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6380 | out: pbBuffer=0x113e6380) returned 1
	[0308.883] GetFileType (hFile=0x28c) returned 0x1
	[0308.883] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.883] WriteFile (in: hFile=0x28c, lpBuffer=0x11bdc000*, nNumberOfBytesToWrite=0x3218, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11bdc000*, lpNumberOfBytesWritten=0x1133bdfc*=0x3218, lpOverlapped=0x1133be08) returned 1
	[0308.883] GetFileType (hFile=0x28c) returned 0x1
	[0308.884] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x3218, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.884] GetFileType (hFile=0x28c) returned 0x1
	[0308.884] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.884] WriteFile (in: hFile=0x28c, lpBuffer=0x11be0000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11be0000*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0308.884] GetFileType (hFile=0x28c) returned 0x1
	[0308.884] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x3218, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.884] CloseHandle (hObject=0x28c) returned 1
	[0308.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf.tl30z")) returned 0x220
	[0308.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.886] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x0
	[0308.887] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x0
	[0308.898] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0308.903] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.903] SetEvent (hEvent=0x248) returned 1
	[0308.903] SetEvent (hEvent=0x1f0) returned 1
	[0308.903] SetEvent (hEvent=0x240) returned 1
	[0308.903] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0308.905] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.905] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411a)) returned 1
	[0308.922] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c)) returned 1
	[0308.922] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1003f0d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1003f0d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0308.923] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d18)) returned 1
	[0308.924] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ec)) returned 1
	[0308.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4)) returned 1
	[0308.940] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf4)) returned 1
	[0308.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5aa4)) returned 1
	[0308.942] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10149fbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10149fbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8)) returned 1
	[0308.959] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1
	[0308.959] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1402c)) returned 1
	[0308.959] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee4)) returned 1
	[0308.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf")) returned 0x220
	[0308.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF", dwFileAttributes=0x220) returned 1
	[0308.960] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0308.964] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0308.964] ReadFile (in: hFile=0x200, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x8011, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x11428e18*=0x8011, lpOverlapped=0x0) returned 1
	[0309.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6120 | out: pbBuffer=0x113e6120) returned 1
	[0309.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11466802 | out: pbBuffer=0x11466802) returned 1
	[0309.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11466893 | out: pbBuffer=0x11466893) returned 1
	[0309.023] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114668a3 | out: pbBuffer=0x114668a3) returned 1
	[0309.023] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6150 | out: pbBuffer=0x113e6150) returned 1
	[0309.024] GetFileType (hFile=0x200) returned 0x1
	[0309.024] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.024] WriteFile (in: hFile=0x200, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0x8011, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x1102ddfc*=0x8011, lpOverlapped=0x1102de08) returned 1
	[0309.025] GetFileType (hFile=0x200) returned 0x1
	[0309.025] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x8011, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.025] GetFileType (hFile=0x200) returned 0x1
	[0309.025] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.025] WriteFile (in: hFile=0x200, lpBuffer=0x1124ea80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1124ea80*, lpNumberOfBytesWritten=0x1102ddfc*=0x224, lpOverlapped=0x1102de08) returned 1
	[0309.045] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.169] GetFileType (hFile=0x200) returned 0x1
	[0309.205] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x8011, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.205] CloseHandle (hObject=0x200) returned 1
	[0309.221] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf.tl30z")) returned 0x220
	[0309.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.279] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.282] SetEvent (hEvent=0x1b0) returned 1
	[0309.282] SetEvent (hEvent=0x218) returned 1
	[0309.282] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.301] SetEvent (hEvent=0x218) returned 1
	[0309.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid.tl30z")) returned 0x220
	[0309.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0309.306] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0309.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf")) returned 0x220
	[0309.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF", dwFileAttributes=0x220) returned 1
	[0309.313] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0309.483] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11095e08 | out: lpMode=0x11095e08) returned 0
	[0309.483] ReadFile (in: hFile=0x290, lpBuffer=0x110fa000, nNumberOfBytesToRead=0xb12c, lpNumberOfBytesRead=0x11095e18, lpOverlapped=0x0 | out: lpBuffer=0x110fa000*, lpNumberOfBytesRead=0x11095e18*=0xb12c, lpOverlapped=0x0) returned 1
	[0309.489] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0309.489] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11179d02 | out: pbBuffer=0x11179d02) returned 1
	[0309.490] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11179d4a | out: pbBuffer=0x11179d4a) returned 1
	[0309.490] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0309.491] GetFileType (hFile=0x290) returned 0x1
	[0309.491] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.492] WriteFile (in: hFile=0x290, lpBuffer=0x111a8000*, nNumberOfBytesToWrite=0xb12c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111a8000*, lpNumberOfBytesWritten=0x1133fdfc*=0xb12c, lpOverlapped=0x1133fe08) returned 1
	[0309.492] GetFileType (hFile=0x290) returned 0x1
	[0309.492] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0xb12c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.492] GetFileType (hFile=0x290) returned 0x1
	[0309.493] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.493] WriteFile (in: hFile=0x290, lpBuffer=0x11110700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11110700*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0309.493] GetFileType (hFile=0x290) returned 0x1
	[0309.493] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0xb12c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.493] CloseHandle (hObject=0x290) returned 1
	[0309.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf.tl30z")) returned 0x220
	[0309.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf")) returned 0x220
	[0309.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF", dwFileAttributes=0x220) returned 1
	[0309.497] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0309.587] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x110ace08 | out: lpMode=0x110ace08) returned 0
	[0309.587] ReadFile (in: hFile=0x290, lpBuffer=0x11368000, nNumberOfBytesToRead=0x3926, lpNumberOfBytesRead=0x110ace18, lpOverlapped=0x0 | out: lpBuffer=0x11368000*, lpNumberOfBytesRead=0x110ace18*=0x3926, lpOverlapped=0x0) returned 1
	[0309.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0309.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11308802 | out: pbBuffer=0x11308802) returned 1
	[0309.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0309.594] GetFileType (hFile=0x290) returned 0x1
	[0309.594] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.595] WriteFile (in: hFile=0x290, lpBuffer=0x11bcc000*, nNumberOfBytesToWrite=0x3926, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11bcc000*, lpNumberOfBytesWritten=0x1133ddfc*=0x3926, lpOverlapped=0x1133de08) returned 1
	[0309.595] GetFileType (hFile=0x290) returned 0x1
	[0309.595] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x3926, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.595] GetFileType (hFile=0x290) returned 0x1
	[0309.595] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.596] WriteFile (in: hFile=0x290, lpBuffer=0x11c17880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11c17880*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0309.596] GetFileType (hFile=0x290) returned 0x1
	[0309.596] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x3926, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.596] CloseHandle (hObject=0x290) returned 1
	[0309.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf.tl30z")) returned 0x220
	[0309.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf")) returned 0x220
	[0309.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF", dwFileAttributes=0x220) returned 1
	[0309.601] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0309.686] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x110ace08 | out: lpMode=0x110ace08) returned 0
	[0309.686] ReadFile (in: hFile=0x290, lpBuffer=0x112b0000, nNumberOfBytesToRead=0x1908, lpNumberOfBytesRead=0x110ace18, lpOverlapped=0x0 | out: lpBuffer=0x112b0000*, lpNumberOfBytesRead=0x110ace18*=0x1908, lpOverlapped=0x0) returned 1
	[0309.691] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0309.692] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324f8 | out: pbBuffer=0x113324f8) returned 1
	[0309.692] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c40802 | out: pbBuffer=0x11c40802) returned 1
	[0309.692] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0309.692] GetFileType (hFile=0x290) returned 0x1
	[0309.693] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.693] WriteFile (in: hFile=0x290, lpBuffer=0x11be6000*, nNumberOfBytesToWrite=0x1908, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11be6000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1908, lpOverlapped=0x1133de08) returned 1
	[0309.693] GetFileType (hFile=0x290) returned 0x1
	[0309.693] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x1908, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.693] GetFileType (hFile=0x290) returned 0x1
	[0309.693] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.694] WriteFile (in: hFile=0x290, lpBuffer=0x110a1500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110a1500*, lpNumberOfBytesWritten=0x1133ddfc*=0x224, lpOverlapped=0x1133de08) returned 1
	[0309.694] GetFileType (hFile=0x290) returned 0x1
	[0309.694] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x1908, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.694] CloseHandle (hObject=0x290) returned 1
	[0309.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf.tl30z")) returned 0x220
	[0309.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf")) returned 0x220
	[0309.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF", dwFileAttributes=0x220) returned 1
	[0309.698] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0310.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0310.914] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x110ace08 | out: lpMode=0x110ace08) returned 0
	[0310.914] ReadFile (in: hFile=0x290, lpBuffer=0x11468000, nNumberOfBytesToRead=0x3f9c, lpNumberOfBytesRead=0x110ace18, lpOverlapped=0x0 | out: lpBuffer=0x11468000*, lpNumberOfBytesRead=0x110ace18*=0x3f9c, lpOverlapped=0x0) returned 1
	[0310.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0310.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332668 | out: pbBuffer=0x11332668) returned 1
	[0310.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c41302 | out: pbBuffer=0x11c41302) returned 1
	[0310.921] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0310.921] GetFileType (hFile=0x290) returned 0x1
	[0310.921] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0310.921] WriteFile (in: hFile=0x290, lpBuffer=0x111dc000*, nNumberOfBytesToWrite=0x3f9c, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111dc000*, lpNumberOfBytesWritten=0x1133ddfc*=0x3f9c, lpOverlapped=0x1133de08) returned 1
	[0310.922] GetFileType (hFile=0x290) returned 0x1
	[0310.922] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x3f9c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0310.922] GetFileType (hFile=0x290) returned 0x1
	[0310.922] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0310.922] WriteFile (in: hFile=0x290, lpBuffer=0x111ca380*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111ca380*, lpNumberOfBytesWritten=0x1133ddfc*=0x236, lpOverlapped=0x1133de08) returned 1
	[0310.923] GetFileType (hFile=0x290) returned 0x1
	[0310.923] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x3f9c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0310.923] CloseHandle (hObject=0x290) returned 1
	[0310.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf.tl30z")) returned 0x220
	[0310.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0310.930] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0310.945] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0310.962] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0311.021] SetEvent (hEvent=0x118) returned 1
	[0311.022] SetEvent (hEvent=0x1b0) returned 1
	[0311.022] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0311.025] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0311.025] SetEvent (hEvent=0x1b0) returned 1
	[0311.025] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0311.029] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0311.029] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0311.032] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0311.033] SetEvent (hEvent=0x22c) returned 1
	[0311.033] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x0
	[0311.034] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0311.721] SetEvent (hEvent=0x234) returned 1
	[0311.722] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0313.658] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0313.661] SetEvent (hEvent=0x160) returned 1
	[0313.662] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0313.663] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0313.663] SetEvent (hEvent=0x160) returned 1
	[0313.663] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x1) returned 0x102
	[0313.666] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0313.667] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0313.683] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0313.687] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg")) returned 0x220
	[0313.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG", dwFileAttributes=0x220) returned 1
	[0313.687] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg.tl30z"), dwFlags=0x1) returned 1
	[0313.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0313.732] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0313.732] ReadFile (in: hFile=0x1f4, lpBuffer=0x113ec000, nNumberOfBytesToRead=0x7297, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x113ec000*, lpNumberOfBytesRead=0x11287e18*=0x7297, lpOverlapped=0x0) returned 1
	[0313.828] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0313.836] SetEvent (hEvent=0x22c) returned 1
	[0313.836] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.413] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp")) returned 0x220
	[0314.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP", dwFileAttributes=0x220) returned 1
	[0314.419] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0314.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0314.535] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0314.536] ReadFile (in: hFile=0x21c, lpBuffer=0x11bc6000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesRead=0x11287e18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0314.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0314.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b6802 | out: pbBuffer=0x111b6802) returned 1
	[0314.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b6818 | out: pbBuffer=0x111b6818) returned 1
	[0314.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b68c4 | out: pbBuffer=0x111b68c4) returned 1
	[0314.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b68e6 | out: pbBuffer=0x111b68e6) returned 1
	[0314.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0314.571] GetFileType (hFile=0x21c) returned 0x1
	[0314.571] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.571] WriteFile (in: hFile=0x21c, lpBuffer=0x11152000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11152000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7ce0, lpOverlapped=0x1102be08) returned 1
	[0314.572] GetFileType (hFile=0x21c) returned 0x1
	[0314.572] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.572] GetFileType (hFile=0x21c) returned 0x1
	[0314.572] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.572] WriteFile (in: hFile=0x21c, lpBuffer=0x11c34a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c34a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0314.572] GetFileType (hFile=0x21c) returned 0x1
	[0314.573] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.573] CloseHandle (hObject=0x21c) returned 1
	[0314.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp.tl30z")) returned 0x220
	[0314.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.652] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.654] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.740] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.778] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif")) returned 0x220
	[0314.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF", dwFileAttributes=0x220) returned 1
	[0314.784] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif.tl30z"), dwFlags=0x1) returned 1
	[0314.896] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0314.912] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0314.913] ReadFile (in: hFile=0x1b4, lpBuffer=0x1134c000, nNumberOfBytesToRead=0x5f2b, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x1134c000*, lpNumberOfBytesRead=0x11286e18*=0x5f2b, lpOverlapped=0x0) returned 1
	[0314.922] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0314.922] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0314.923] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11340802 | out: pbBuffer=0x11340802) returned 1
	[0314.923] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134085c | out: pbBuffer=0x1134085c) returned 1
	[0314.923] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113408a4 | out: pbBuffer=0x113408a4) returned 1
	[0314.923] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0314.924] GetFileType (hFile=0x1b4) returned 0x1
	[0314.924] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.925] WriteFile (in: hFile=0x1b4, lpBuffer=0x1146c000*, nNumberOfBytesToWrite=0x5f2b, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1146c000*, lpNumberOfBytesWritten=0x1102ddfc*=0x5f2b, lpOverlapped=0x1102de08) returned 1
	[0314.925] GetFileType (hFile=0x1b4) returned 0x1
	[0314.925] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x5f2b, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.925] GetFileType (hFile=0x1b4) returned 0x1
	[0314.926] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.926] WriteFile (in: hFile=0x1b4, lpBuffer=0x1120aa80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1120aa80*, lpNumberOfBytesWritten=0x1102ddfc*=0x236, lpOverlapped=0x1102de08) returned 1
	[0314.926] GetFileType (hFile=0x1b4) returned 0x1
	[0314.926] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x5f2b, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.926] CloseHandle (hObject=0x1b4) returned 1
	[0314.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif.tl30z")) returned 0x220
	[0314.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0314.933] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.954] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.970] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0314.974] SetEvent (hEvent=0x134) returned 1
	[0314.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif")) returned 0x220
	[0314.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF", dwFileAttributes=0x220) returned 1
	[0314.975] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif.tl30z"), dwFlags=0x1) returned 1
	[0315.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0315.087] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0315.087] ReadFile (in: hFile=0x200, lpBuffer=0x11128000, nNumberOfBytesToRead=0x6090, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11128000*, lpNumberOfBytesRead=0x1128ce18*=0x6090, lpOverlapped=0x0) returned 1
	[0315.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111266c0 | out: pbBuffer=0x111266c0) returned 1
	[0315.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110eb102 | out: pbBuffer=0x110eb102) returned 1
	[0315.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110eb170 | out: pbBuffer=0x110eb170) returned 1
	[0315.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110eb1b4 | out: pbBuffer=0x110eb1b4) returned 1
	[0315.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111266f0 | out: pbBuffer=0x111266f0) returned 1
	[0315.094] GetFileType (hFile=0x200) returned 0x1
	[0315.094] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0315.094] WriteFile (in: hFile=0x200, lpBuffer=0x110f8000*, nNumberOfBytesToWrite=0x6090, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110f8000*, lpNumberOfBytesWritten=0x11031dfc*=0x6090, lpOverlapped=0x11031e08) returned 1
	[0315.095] GetFileType (hFile=0x200) returned 0x1
	[0315.095] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x6090, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0315.095] GetFileType (hFile=0x200) returned 0x1
	[0315.095] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0315.096] WriteFile (in: hFile=0x200, lpBuffer=0x1113e380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1113e380*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0315.096] GetFileType (hFile=0x200) returned 0x1
	[0315.096] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x6090, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0315.096] CloseHandle (hObject=0x200) returned 1
	[0315.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif.tl30z")) returned 0x220
	[0315.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0315.147] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0315.148] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0315.153] SetEvent (hEvent=0x134) returned 1
	[0315.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp")) returned 0x220
	[0315.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP", dwFileAttributes=0x220) returned 1
	[0315.154] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0315.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0315.397] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0315.398] ReadFile (in: hFile=0x290, lpBuffer=0x1136e000, nNumberOfBytesToRead=0x92e6, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x1128ce18*=0x92e6, lpOverlapped=0x0) returned 1
	[0315.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6110 | out: pbBuffer=0x113e6110) returned 1
	[0315.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6108 | out: pbBuffer=0x113e6108) returned 1
	[0315.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11360802 | out: pbBuffer=0x11360802) returned 1
	[0315.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113608e3 | out: pbBuffer=0x113608e3) returned 1
	[0315.419] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6140 | out: pbBuffer=0x113e6140) returned 1
	[0315.420] GetFileType (hFile=0x290) returned 0x1
	[0315.420] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.420] WriteFile (in: hFile=0x290, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0x92e6, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x1133bdfc*=0x92e6, lpOverlapped=0x1133be08) returned 1
	[0315.421] GetFileType (hFile=0x290) returned 0x1
	[0315.421] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x92e6, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.421] GetFileType (hFile=0x290) returned 0x1
	[0315.421] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.421] WriteFile (in: hFile=0x290, lpBuffer=0x11064a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11064a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x233, lpOverlapped=0x1133be08) returned 1
	[0315.461] GetFileType (hFile=0x290) returned 0x1
	[0315.461] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x92e6, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.461] CloseHandle (hObject=0x290) returned 1
	[0315.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp.tl30z")) returned 0x220
	[0315.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0315.469] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0315.471] SetEvent (hEvent=0x1e8) returned 1
	[0315.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp")) returned 0x220
	[0315.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP", dwFileAttributes=0x220) returned 1
	[0315.472] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0315.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0315.870] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0315.885] ReadFile (in: hFile=0x290, lpBuffer=0x1136e000, nNumberOfBytesToRead=0x7f27, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x11316e18*=0x7f27, lpOverlapped=0x0) returned 1
	[0315.987] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0315.987] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11274802 | out: pbBuffer=0x11274802) returned 1
	[0315.987] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0315.989] GetFileType (hFile=0x290) returned 0x1
	[0315.989] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.989] WriteFile (in: hFile=0x290, lpBuffer=0x11456000*, nNumberOfBytesToWrite=0x7f27, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11456000*, lpNumberOfBytesWritten=0x1133bdfc*=0x7f27, lpOverlapped=0x1133be08) returned 1
	[0315.990] GetFileType (hFile=0x290) returned 0x1
	[0315.990] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x7f27, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.990] GetFileType (hFile=0x290) returned 0x1
	[0315.990] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.990] WriteFile (in: hFile=0x290, lpBuffer=0x110d4a80*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110d4a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x239, lpOverlapped=0x1133be08) returned 1
	[0316.138] GetFileType (hFile=0x290) returned 0x1
	[0316.138] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x7f27, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.139] CloseHandle (hObject=0x290) returned 1
	[0316.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp.tl30z")) returned 0x220
	[0316.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0316.147] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0316.169] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0316.180] SetEvent (hEvent=0x234) returned 1
	[0316.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif")) returned 0x220
	[0316.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF", dwFileAttributes=0x220) returned 1
	[0316.180] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif.tl30z"), dwFlags=0x1) returned 1
	[0316.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0316.281] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0316.282] ReadFile (in: hFile=0x1b4, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x30f2, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x11425e18*=0x30f2, lpOverlapped=0x0) returned 1
	[0316.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0316.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11274802 | out: pbBuffer=0x11274802) returned 1
	[0316.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11274831 | out: pbBuffer=0x11274831) returned 1
	[0316.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0316.471] GetFileType (hFile=0x1b4) returned 0x1
	[0316.471] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.471] WriteFile (in: hFile=0x1b4, lpBuffer=0x110c2000*, nNumberOfBytesToWrite=0x30f2, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110c2000*, lpNumberOfBytesWritten=0x1133fdfc*=0x30f2, lpOverlapped=0x1133fe08) returned 1
	[0316.472] GetFileType (hFile=0x1b4) returned 0x1
	[0316.472] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x30f2, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.472] GetFileType (hFile=0x1b4) returned 0x1
	[0316.472] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.472] WriteFile (in: hFile=0x1b4, lpBuffer=0x110f4e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110f4e00*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0316.473] GetFileType (hFile=0x1b4) returned 0x1
	[0316.473] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x30f2, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.473] CloseHandle (hObject=0x1b4) returned 1
	[0316.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif.tl30z")) returned 0x220
	[0316.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0316.477] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0316.479] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0316.486] SetEvent (hEvent=0x1e8) returned 1
	[0316.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg")) returned 0x220
	[0316.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG", dwFileAttributes=0x220) returned 1
	[0316.487] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg.tl30z"), dwFlags=0x1) returned 1
	[0316.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0316.551] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0316.551] ReadFile (in: hFile=0x1c8, lpBuffer=0x1105a000, nNumberOfBytesToRead=0x78af, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1105a000*, lpNumberOfBytesRead=0x11425e18*=0x78af, lpOverlapped=0x0) returned 1
	[0316.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126280 | out: pbBuffer=0x11126280) returned 1
	[0316.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1139d202 | out: pbBuffer=0x1139d202) returned 1
	[0316.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139d241 | out: pbBuffer=0x1139d241) returned 1
	[0316.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111262b0 | out: pbBuffer=0x111262b0) returned 1
	[0316.594] GetFileType (hFile=0x1c8) returned 0x1
	[0316.594] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0316.595] WriteFile (in: hFile=0x1c8, lpBuffer=0x1130e000*, nNumberOfBytesToWrite=0x78af, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1130e000*, lpNumberOfBytesWritten=0x11031dfc*=0x78af, lpOverlapped=0x11031e08) returned 1
	[0316.595] GetFileType (hFile=0x1c8) returned 0x1
	[0316.595] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x78af, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0316.595] GetFileType (hFile=0x1c8) returned 0x1
	[0316.595] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0316.596] WriteFile (in: hFile=0x1c8, lpBuffer=0x111af880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111af880*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0316.596] GetFileType (hFile=0x1c8) returned 0x1
	[0316.596] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x78af, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0316.596] CloseHandle (hObject=0x1c8) returned 1
	[0316.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg.tl30z")) returned 0x220
	[0316.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0316.613] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0316.976] SetEvent (hEvent=0x24c) returned 1
	[0316.977] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0316.983] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0317.050] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0317.170] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0317.191] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0317.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid")) returned 0x220
	[0317.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID", dwFileAttributes=0x220) returned 1
	[0317.198] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0317.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0317.436] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0317.436] ReadFile (in: hFile=0x290, lpBuffer=0x11090000, nNumberOfBytesToRead=0x278a, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x1128be18*=0x278a, lpOverlapped=0x0) returned 1
	[0317.522] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6860 | out: pbBuffer=0x113e6860) returned 1
	[0317.522] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6858 | out: pbBuffer=0x113e6858) returned 1
	[0317.522] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b9b02 | out: pbBuffer=0x113b9b02) returned 1
	[0317.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6890 | out: pbBuffer=0x113e6890) returned 1
	[0317.523] GetFileType (hFile=0x290) returned 0x1
	[0317.523] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.523] WriteFile (in: hFile=0x290, lpBuffer=0x1110e000*, nNumberOfBytesToWrite=0x278a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1110e000*, lpNumberOfBytesWritten=0x1133ddfc*=0x278a, lpOverlapped=0x1133de08) returned 1
	[0317.524] GetFileType (hFile=0x290) returned 0x1
	[0317.524] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x278a, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.524] GetFileType (hFile=0x290) returned 0x1
	[0317.524] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.525] WriteFile (in: hFile=0x290, lpBuffer=0x110f0a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110f0a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0317.525] GetFileType (hFile=0x290) returned 0x1
	[0317.525] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x278a, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.525] CloseHandle (hObject=0x290) returned 1
	[0317.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid.tl30z")) returned 0x220
	[0317.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0317.535] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0317.542] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) returned 0x0
	[0317.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf")) returned 0x220
	[0317.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF", dwFileAttributes=0x220) returned 1
	[0317.549] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254
	[0317.595] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0317.596] ReadFile (in: hFile=0x254, lpBuffer=0x11240000, nNumberOfBytesToRead=0x20e0, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11240000*, lpNumberOfBytesRead=0x11287e18*=0x20e0, lpOverlapped=0x0) returned 1
	[0317.685] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0xffffffff) 

Thread:
	id = 33
	os_tid = 0x4bc

	[0175.889] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x325bff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x325bff30*=0x1e4) returned 1
	[0175.889] VirtualQuery (in: lpAddress=0x325bff40, lpBuffer=0x325bff40, dwLength=0x1c | out: lpBuffer=0x325bff40*(BaseAddress=0x325bf000, AllocationBase=0x324c0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0175.889] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1e8
	[0175.890] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0176.022] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0176.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11036700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b4
	[0176.893] CloseHandle (hObject=0x1b4) returned 1
	[0176.893] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 0x80
	[0176.893] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico", dwFileAttributes=0x80) returned 1
	[0176.893] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.tl30z"), dwFlags=0x1) returned 1
	[0186.145] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0186.456] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0186.456] ReadFile (in: hFile=0x1d8, lpBuffer=0x1126e000, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1126e000*, lpNumberOfBytesRead=0x11022e18*=0x47e, lpOverlapped=0x0) returned 1
	[0186.550] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e620 | out: pbBuffer=0x1104e620) returned 1
	[0186.551] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11268902 | out: pbBuffer=0x11268902) returned 1
	[0186.551] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0186.552] GetFileType (hFile=0x1d8) returned 0x1
	[0186.552] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0186.552] WriteFile (in: hFile=0x1d8, lpBuffer=0x11277000*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11277000*, lpNumberOfBytesWritten=0x1133bdfc*=0x47e, lpOverlapped=0x1133be08) returned 1
	[0186.552] GetFileType (hFile=0x1d8) returned 0x1
	[0186.552] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0186.553] GetFileType (hFile=0x1d8) returned 0x1
	[0186.553] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0186.554] WriteFile (in: hFile=0x1d8, lpBuffer=0x11282380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11282380*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0186.554] GetFileType (hFile=0x1d8) returned 0x1
	[0186.554] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0186.554] CloseHandle (hObject=0x1d8) returned 1
	[0186.736] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.tl30z")) returned 0x20
	[0186.737] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0186.941] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 0x80
	[0186.942] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico", dwFileAttributes=0x80) returned 1
	[0186.942] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.tl30z"), dwFlags=0x1) returned 1
	[0188.667] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0188.667] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0188.668] ReadFile (in: hFile=0x1d8, lpBuffer=0x111ca000, nNumberOfBytesToRead=0x2796, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x111ca000*, lpNumberOfBytesRead=0x11022e18*=0x2796, lpOverlapped=0x0) returned 1
	[0188.793] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0188.973] SetEvent (hEvent=0x118) returned 1
	[0188.973] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0189.066] SetEvent (hEvent=0x1f0) returned 1
	[0189.067] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz")) returned 0x80
	[0189.067] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz", dwFileAttributes=0x80) returned 1
	[0189.068] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.tl30z"), dwFlags=0x1) returned 1
	[0189.069] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0189.069] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0189.088] ReadFile (in: hFile=0x1d0, lpBuffer=0x11430000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11286e18*=0x100000, lpOverlapped=0x0) returned 1
	[0189.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0189.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113640f8 | out: pbBuffer=0x113640f8) returned 1
	[0189.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11418802 | out: pbBuffer=0x11418802) returned 1
	[0189.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0189.251] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x102
	[0189.295] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0189.295] SetEvent (hEvent=0x150) returned 1
	[0189.295] SetEvent (hEvent=0x1bc) returned 1
	[0189.295] SetEvent (hEvent=0x134) returned 1
	[0189.481] SetEvent (hEvent=0x118) returned 1
	[0189.481] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0190.256] GetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26
	[0190.256] SetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT", dwFileAttributes=0x26) returned 1
	[0190.256] MoveFileExW (lpExistingFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), lpNewFileName="C:\\Boot\\BOOTSTAT.DAT.tl30z" (normalized: "c:\\boot\\bootstat.dat.tl30z"), dwFlags=0x1) returned 1
	[0190.257] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.tl30z" (normalized: "c:\\boot\\bootstat.dat.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0190.258] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0190.258] ReadFile (in: hFile=0x16c, lpBuffer=0x113f4000, nNumberOfBytesToRead=0x6666, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113f4000*, lpNumberOfBytesRead=0x1128ae18*=0x6666, lpOverlapped=0x0) returned 1
	[0190.267] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332490 | out: pbBuffer=0x11332490) returned 1
	[0190.268] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a4802 | out: pbBuffer=0x113a4802) returned 1
	[0190.268] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324c0 | out: pbBuffer=0x113324c0) returned 1
	[0190.270] GetFileType (hFile=0x16c) returned 0x1
	[0190.270] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0190.270] WriteFile (in: hFile=0x16c, lpBuffer=0x11414000*, nNumberOfBytesToWrite=0x6666, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11414000*, lpNumberOfBytesWritten=0x1102ddfc*=0x6666, lpOverlapped=0x1102de08) returned 1
	[0190.271] GetFileType (hFile=0x16c) returned 0x1
	[0190.271] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x6666, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0190.271] GetFileType (hFile=0x16c) returned 0x1
	[0190.271] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0190.271] WriteFile (in: hFile=0x16c, lpBuffer=0x1132ca80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1132ca80*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0190.272] GetFileType (hFile=0x16c) returned 0x1
	[0190.272] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x6666, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0190.272] CloseHandle (hObject=0x16c) returned 1
	[0190.277] GetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.tl30z" (normalized: "c:\\boot\\bootstat.dat.tl30z")) returned 0x26
	[0190.277] SetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.tl30z", dwFileAttributes=0x27) returned 1
	[0190.277] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 0x80
	[0190.278] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", dwFileAttributes=0x80) returned 1
	[0190.278] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\watermark.bmp.tl30z" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.tl30z"), dwFlags=0x1) returned 1
	[0190.279] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.tl30z" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
	[0190.280] GetConsoleMode (in: hConsoleHandle=0x16c, lpMode=0x11289e08 | out: lpMode=0x11289e08) returned 0
	[0190.280] ReadFile (in: hFile=0x16c, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x79f5, lpNumberOfBytesRead=0x11289e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11289e18*=0x79f5, lpOverlapped=0x0) returned 1
	[0190.720] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0190.767] SetEvent (hEvent=0x1bc) returned 1
	[0190.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e130 | out: pbBuffer=0x1142e130) returned 1
	[0190.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11240802 | out: pbBuffer=0x11240802) returned 1
	[0190.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11240895 | out: pbBuffer=0x11240895) returned 1
	[0190.768] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e160 | out: pbBuffer=0x1142e160) returned 1
	[0190.770] GetFileType (hFile=0x16c) returned 0x1
	[0190.770] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0190.770] WriteFile (in: hFile=0x16c, lpBuffer=0x11552000*, nNumberOfBytesToWrite=0x79f5, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x11552000*, lpNumberOfBytesWritten=0x11255dfc*=0x79f5, lpOverlapped=0x11255e08) returned 1
	[0190.771] GetFileType (hFile=0x16c) returned 0x1
	[0190.771] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x79f5, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0190.771] GetFileType (hFile=0x16c) returned 0x1
	[0190.771] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0190.771] WriteFile (in: hFile=0x16c, lpBuffer=0x112eae00*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11255dfc, lpOverlapped=0x11255e08 | out: lpBuffer=0x112eae00*, lpNumberOfBytesWritten=0x11255dfc*=0x239, lpOverlapped=0x11255e08) returned 1
	[0190.772] GetFileType (hFile=0x16c) returned 0x1
	[0190.772] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x79f5, lpNewFilePointer=0x0, dwMoveMethod=0x11255de0 | out: lpNewFilePointer=0x0) returned 1
	[0190.773] CloseHandle (hObject=0x16c) returned 1
	[0190.813] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.tl30z" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.tl30z")) returned 0x20
	[0190.813] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.tl30z", dwFileAttributes=0x21) returned 1
	[0190.814] VirtualAlloc (lpAddress=0x11800000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0x11800000
	[0190.975] VirtualAlloc (lpAddress=0xe22000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0xe22000
	[0190.978] VirtualFree (lpAddress=0x11562000, dwSize=0xd0000, dwFreeType=0x4000) returned 1
	[0190.992] VirtualFree (lpAddress=0x11734000, dwSize=0xcc000, dwFreeType=0x4000) returned 1
	[0190.999] VirtualFree (lpAddress=0x11090000, dwSize=0x3a000, dwFreeType=0x4000) returned 1
	[0191.002] VirtualFree (lpAddress=0x112ee000, dwSize=0x28000, dwFreeType=0x4000) returned 1
	[0191.003] VirtualFree (lpAddress=0x110f2000, dwSize=0x28000, dwFreeType=0x4000) returned 1
	[0191.006] VirtualFree (lpAddress=0x113d2000, dwSize=0x14000, dwFreeType=0x4000) returned 1
	[0191.007] VirtualFree (lpAddress=0x11354000, dwSize=0x10000, dwFreeType=0x4000) returned 1
	[0191.007] VirtualFree (lpAddress=0x110de000, dwSize=0x10000, dwFreeType=0x4000) returned 1
	[0191.008] VirtualFree (lpAddress=0x1139c000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0191.009] VirtualFree (lpAddress=0x1136e000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0191.009] VirtualFree (lpAddress=0x1133a000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0191.009] VirtualFree (lpAddress=0x1131e000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0191.009] VirtualFree (lpAddress=0x111ea000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0191.010] VirtualFree (lpAddress=0x111c0000, dwSize=0x8000, dwFreeType=0x4000) returned 1
	[0191.011] VirtualFree (lpAddress=0x113f0000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0191.011] VirtualFree (lpAddress=0x11396000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0191.012] VirtualFree (lpAddress=0x1138a000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0191.012] VirtualFree (lpAddress=0x11382000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0191.012] VirtualFree (lpAddress=0x1137c000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0191.012] VirtualFree (lpAddress=0x1134c000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0191.091] VirtualFree (lpAddress=0x11328000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0191.092] VirtualFree (lpAddress=0x1126a000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0191.092] VirtualFree (lpAddress=0x1105a000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0191.092] VirtualFree (lpAddress=0x11344000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0191.093] VirtualFree (lpAddress=0x11330000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0191.093] VirtualFree (lpAddress=0x1107a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0191.093] VirtualFree (lpAddress=0x1106a000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0191.094] SetEvent (hEvent=0x1bc) returned 1
	[0191.276] VirtualAlloc (lpAddress=0x11900000, dwSize=0x200000, flAllocationType=0x1000, flProtect=0x4) returned 0x11900000
	[0191.423] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x102
	[0191.518] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0191.519] SetEvent (hEvent=0x150) returned 1
	[0191.519] SetEvent (hEvent=0x1bc) returned 1
	[0191.519] SetEvent (hEvent=0x1f0) returned 1
	[0191.587] GetFileType (hFile=0x1d0) returned 0x1
	[0191.588] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11424de0 | out: lpNewFilePointer=0x0) returned 1
	[0191.588] WriteFile (in: hFile=0x1d0, lpBuffer=0x11900000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x11424dfc, lpOverlapped=0x11424e08 | out: lpBuffer=0x11900000*, lpNumberOfBytesWritten=0x11424dfc*=0x100000, lpOverlapped=0x11424e08) returned 1
	[0191.599] GetFileType (hFile=0x1d0) returned 0x1
	[0191.599] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x100000, lpNewFilePointer=0x0, dwMoveMethod=0x11424de0 | out: lpNewFilePointer=0x0) returned 1
	[0191.600] VirtualAlloc (lpAddress=0x1136e000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x1136e000
	[0191.602] VirtualAlloc (lpAddress=0x1134e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1134e000
	[0191.602] VirtualAlloc (lpAddress=0x1137c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1137c000
	[0191.603] GetFileType (hFile=0x1d0) returned 0x1
	[0191.603] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11424de0 | out: lpNewFilePointer=0x0) returned 1
	[0191.603] WriteFile (in: hFile=0x1d0, lpBuffer=0x1137c000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0x11424dfc, lpOverlapped=0x11424e08 | out: lpBuffer=0x1137c000*, lpNumberOfBytesWritten=0x11424dfc*=0x2d8, lpOverlapped=0x11424e08) returned 1
	[0191.718] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0191.836] GetFileType (hFile=0x1d0) returned 0x1
	[0191.836] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x100000, lpNewFilePointer=0x0, dwMoveMethod=0x11424de0 | out: lpNewFilePointer=0x0) returned 1
	[0191.836] CloseHandle (hObject=0x1d0) returned 1
	[0194.716] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.tl30z")) returned 0x20
	[0194.717] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.tl30z", dwFileAttributes=0x21) returned 1
	[0194.717] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 0x80
	[0194.717] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", dwFileAttributes=0x80) returned 1
	[0194.718] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.tl30z"), dwFlags=0x1) returned 1
	[0194.719] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0194.719] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0194.719] ReadFile (in: hFile=0x1d0, lpBuffer=0x11338000, nNumberOfBytesToRead=0x9400, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11338000*, lpNumberOfBytesRead=0x1131be18*=0x9400, lpOverlapped=0x0) returned 1
	[0194.816] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0x20
	[0194.816] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf", dwFileAttributes=0x20) returned 0
	[0194.817] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.tl30z")) returned 0x20
	[0194.818] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.tl30z", dwFileAttributes=0x21) returned 1
	[0194.818] SetEvent (hEvent=0x1e0) returned 1
	[0194.819] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0195.962] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0196.073] SetEvent (hEvent=0x1f0) returned 1
	[0196.073] SwitchToThread () returned 1
	[0196.119] SetEvent (hEvent=0x1e0) returned 1
	[0196.120] SetEvent (hEvent=0x1f0) returned 1
	[0196.120] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0196.670] SetEvent (hEvent=0x1bc) returned 1
	[0196.670] SwitchToThread () returned 1
	[0196.734] VirtualAlloc (lpAddress=0x11b3e000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b3e000
	[0196.749] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x102
	[0196.788] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0196.788] SetEvent (hEvent=0x150) returned 1
	[0196.788] SetEvent (hEvent=0x118) returned 1
	[0196.788] VirtualAlloc (lpAddress=0x11936000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x11936000
	[0196.792] VirtualFree (lpAddress=0x1124a000, dwSize=0x3c000, dwFreeType=0x4000) returned 1
	[0196.792] VirtualFree (lpAddress=0x11090000, dwSize=0x3a000, dwFreeType=0x4000) returned 1
	[0196.829] GetFileType (hFile=0x16c) returned 0x1
	[0196.829] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1131ade0 | out: lpNewFilePointer=0x0) returned 1
	[0196.830] WriteFile (in: hFile=0x16c, lpBuffer=0x11936000*, nNumberOfBytesToWrite=0x57049, lpNumberOfBytesWritten=0x1131adfc, lpOverlapped=0x1131ae08 | out: lpBuffer=0x11936000*, lpNumberOfBytesWritten=0x1131adfc*=0x57049, lpOverlapped=0x1131ae08) returned 1
	[0196.833] GetFileType (hFile=0x16c) returned 0x1
	[0196.834] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x57049, lpNewFilePointer=0x0, dwMoveMethod=0x1131ade0 | out: lpNewFilePointer=0x0) returned 1
	[0196.834] GetFileType (hFile=0x16c) returned 0x1
	[0196.834] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1131ade0 | out: lpNewFilePointer=0x0) returned 1
	[0196.834] WriteFile (in: hFile=0x16c, lpBuffer=0x11082800*, nNumberOfBytesToWrite=0x266, lpNumberOfBytesWritten=0x1131adfc, lpOverlapped=0x1131ae08 | out: lpBuffer=0x11082800*, lpNumberOfBytesWritten=0x1131adfc*=0x266, lpOverlapped=0x1131ae08) returned 1
	[0196.894] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0196.959] GetFileType (hFile=0x16c) returned 0x1
	[0196.959] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x57049, lpNewFilePointer=0x0, dwMoveMethod=0x1131ade0 | out: lpNewFilePointer=0x0) returned 1
	[0196.959] CloseHandle (hObject=0x16c) returned 1
	[0198.258] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.tl30z" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.tl30z")) returned 0x20
	[0198.259] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.tl30z", dwFileAttributes=0x21) returned 1
	[0198.259] SetEvent (hEvent=0x118) returned 1
	[0198.259] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0198.303] SetEvent (hEvent=0x164) returned 1
	[0198.303] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0212.624] VirtualAlloc (lpAddress=0x11bd8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bd8000
	[0212.625] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 0x20
	[0212.625] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0212.625] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0218.318] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0218.341] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1136fe08 | out: lpMode=0x1136fe08) returned 0
	[0218.341] ReadFile (in: hFile=0x1d8, lpBuffer=0x1139d000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1136fe18, lpOverlapped=0x0 | out: lpBuffer=0x1139d000*, lpNumberOfBytesRead=0x1136fe18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0218.381] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0218.382] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11355602 | out: pbBuffer=0x11355602) returned 1
	[0218.382] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0218.383] GetFileType (hFile=0x1d8) returned 0x1
	[0218.383] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0218.384] WriteFile (in: hFile=0x1d8, lpBuffer=0x11b22000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11b22000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6ccc, lpOverlapped=0x112f5e08) returned 1
	[0218.384] GetFileType (hFile=0x1d8) returned 0x1
	[0218.385] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0218.385] GetFileType (hFile=0x1d8) returned 0x1
	[0218.385] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0218.386] WriteFile (in: hFile=0x1d8, lpBuffer=0x113ad880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x113ad880*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0218.386] GetFileType (hFile=0x1d8) returned 0x1
	[0218.386] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0218.386] CloseHandle (hObject=0x1d8) returned 1
	[0218.444] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.tl30z")) returned 0x20
	[0218.445] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0219.241] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0219.653] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0219.713] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0219.799] SetEvent (hEvent=0x118) returned 1
	[0219.799] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 0x20
	[0219.799] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0219.800] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0224.321] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0224.345] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11554e08 | out: lpMode=0x11554e08) returned 0
	[0224.345] ReadFile (in: hFile=0x1c8, lpBuffer=0x11717000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11554e18, lpOverlapped=0x0 | out: lpBuffer=0x11717000*, lpNumberOfBytesRead=0x11554e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0224.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e5c0 | out: pbBuffer=0x1104e5c0) returned 1
	[0224.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e5b8 | out: pbBuffer=0x1104e5b8) returned 1
	[0224.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1172ec02 | out: pbBuffer=0x1172ec02) returned 1
	[0224.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1172ec1e | out: pbBuffer=0x1172ec1e) returned 1
	[0224.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1172ecb1 | out: pbBuffer=0x1172ecb1) returned 1
	[0224.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e5f0 | out: pbBuffer=0x1104e5f0) returned 1
	[0224.359] GetFileType (hFile=0x1c8) returned 0x1
	[0224.359] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0224.359] WriteFile (in: hFile=0x1c8, lpBuffer=0x115aa000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x115aa000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0224.360] GetFileType (hFile=0x1c8) returned 0x1
	[0224.360] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0224.361] GetFileType (hFile=0x1c8) returned 0x1
	[0224.361] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0224.361] WriteFile (in: hFile=0x1c8, lpBuffer=0x1172d500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1172d500*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0224.363] GetFileType (hFile=0x1c8) returned 0x1
	[0224.363] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0224.363] CloseHandle (hObject=0x1c8) returned 1
	[0224.395] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.tl30z")) returned 0x20
	[0224.395] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0224.413] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0224.701] SetEvent (hEvent=0x23c) returned 1
	[0224.701] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 0x20
	[0224.701] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0224.702] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0225.644] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0225.654] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11554e08 | out: lpMode=0x11554e08) returned 0
	[0225.655] ReadFile (in: hFile=0x1cc, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11554e18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x11554e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0225.665] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0225.665] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0225.666] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134e902 | out: pbBuffer=0x1134e902) returned 1
	[0225.666] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0225.667] GetFileType (hFile=0x1cc) returned 0x1
	[0225.667] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0225.667] WriteFile (in: hFile=0x1cc, lpBuffer=0x11300000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11300000*, lpNumberOfBytesWritten=0x11031dfc*=0x6ccc, lpOverlapped=0x11031e08) returned 1
	[0225.668] GetFileType (hFile=0x1cc) returned 0x1
	[0225.668] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0225.668] GetFileType (hFile=0x1cc) returned 0x1
	[0225.668] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0225.668] WriteFile (in: hFile=0x1cc, lpBuffer=0x1133ea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1133ea80*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0225.669] GetFileType (hFile=0x1cc) returned 0x1
	[0225.669] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0225.669] CloseHandle (hObject=0x1cc) returned 1
	[0225.703] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.tl30z")) returned 0x20
	[0225.704] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0225.713] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0225.757] SetEvent (hEvent=0x12c) returned 1
	[0225.757] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 0x20
	[0225.758] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0225.758] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0226.711] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0226.724] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0226.724] ReadFile (in: hFile=0x1cc, lpBuffer=0x11563000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11563000*, lpNumberOfBytesRead=0x11316e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0226.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364270 | out: pbBuffer=0x11364270) returned 1
	[0226.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107b502 | out: pbBuffer=0x1107b502) returned 1
	[0226.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113642a0 | out: pbBuffer=0x113642a0) returned 1
	[0226.814] GetFileType (hFile=0x1cc) returned 0x1
	[0226.814] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.814] WriteFile (in: hFile=0x1cc, lpBuffer=0x11132000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11132000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6ccc, lpOverlapped=0x112f5e08) returned 1
	[0226.815] GetFileType (hFile=0x1cc) returned 0x1
	[0226.815] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.815] GetFileType (hFile=0x1cc) returned 0x1
	[0226.815] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.815] WriteFile (in: hFile=0x1cc, lpBuffer=0x116b9c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x116b9c00*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0226.816] GetFileType (hFile=0x1cc) returned 0x1
	[0226.816] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.816] CloseHandle (hObject=0x1cc) returned 1
	[0226.834] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.tl30z")) returned 0x20
	[0226.834] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0226.850] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0226.867] SetEvent (hEvent=0x25c) returned 1
	[0226.867] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 0x20
	[0226.867] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0226.868] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.tl30z"), dwFlags=0x1) returned 1
	[0227.688] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0227.703] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0227.703] ReadFile (in: hFile=0x1b4, lpBuffer=0x11467000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11467000*, lpNumberOfBytesRead=0x11316e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0227.715] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0227.715] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11252802 | out: pbBuffer=0x11252802) returned 1
	[0227.715] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0227.716] GetFileType (hFile=0x1b4) returned 0x1
	[0227.717] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.717] WriteFile (in: hFile=0x1b4, lpBuffer=0x1132a000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1132a000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0227.717] GetFileType (hFile=0x1b4) returned 0x1
	[0227.718] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.718] GetFileType (hFile=0x1b4) returned 0x1
	[0227.718] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.718] WriteFile (in: hFile=0x1b4, lpBuffer=0x11250a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11250a80*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0227.719] GetFileType (hFile=0x1b4) returned 0x1
	[0227.719] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.719] CloseHandle (hObject=0x1b4) returned 1
	[0227.731] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.tl30z")) returned 0x20
	[0227.731] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0227.739] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0227.750] SetEvent (hEvent=0x26c) returned 1
	[0227.750] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 0x20
	[0227.751] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx", dwFileAttributes=0x20) returned 1
	[0227.751] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.tl30z"), dwFlags=0x1) returned 1
	[0228.212] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0228.230] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0228.230] ReadFile (in: hFile=0x1b4, lpBuffer=0x11407000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11407000*, lpNumberOfBytesRead=0x11316e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0228.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364270 | out: pbBuffer=0x11364270) returned 1
	[0228.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c9202 | out: pbBuffer=0x113c9202) returned 1
	[0228.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113642a0 | out: pbBuffer=0x113642a0) returned 1
	[0228.240] GetFileType (hFile=0x1b4) returned 0x1
	[0228.241] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0228.241] WriteFile (in: hFile=0x1b4, lpBuffer=0x114be000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x113e3dfc, lpOverlapped=0x113e3e08 | out: lpBuffer=0x114be000*, lpNumberOfBytesWritten=0x113e3dfc*=0x6ccc, lpOverlapped=0x113e3e08) returned 1
	[0228.242] GetFileType (hFile=0x1b4) returned 0x1
	[0228.242] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x113e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0228.242] GetFileType (hFile=0x1b4) returned 0x1
	[0228.242] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0228.242] WriteFile (in: hFile=0x1b4, lpBuffer=0x110d5880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113e3dfc, lpOverlapped=0x113e3e08 | out: lpBuffer=0x110d5880*, lpNumberOfBytesWritten=0x113e3dfc*=0x230, lpOverlapped=0x113e3e08) returned 1
	[0228.243] GetFileType (hFile=0x1b4) returned 0x1
	[0228.243] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x113e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0228.243] CloseHandle (hObject=0x1b4) returned 1
	[0228.251] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.tl30z")) returned 0x20
	[0228.251] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0228.258] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0228.272] SetEvent (hEvent=0x26c) returned 1
	[0228.272] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 0x20
	[0228.272] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx", dwFileAttributes=0x20) returned 1
	[0228.273] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.tl30z"), dwFlags=0x1) returned 1
	[0229.336] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0229.370] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0229.370] ReadFile (in: hFile=0x1b4, lpBuffer=0x11290000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11290000*, lpNumberOfBytesRead=0x11316e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0229.378] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0229.379] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113640f8 | out: pbBuffer=0x113640f8) returned 1
	[0229.379] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11376802 | out: pbBuffer=0x11376802) returned 1
	[0229.379] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11376887 | out: pbBuffer=0x11376887) returned 1
	[0229.379] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113768ad | out: pbBuffer=0x113768ad) returned 1
	[0229.380] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0229.380] GetFileType (hFile=0x1b4) returned 0x1
	[0229.381] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0229.381] WriteFile (in: hFile=0x1b4, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x1102bdfc*=0x6ccc, lpOverlapped=0x1102be08) returned 1
	[0229.381] GetFileType (hFile=0x1b4) returned 0x1
	[0229.382] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0229.382] GetFileType (hFile=0x1b4) returned 0x1
	[0229.382] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0229.382] WriteFile (in: hFile=0x1b4, lpBuffer=0x11212a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11212a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0229.383] GetFileType (hFile=0x1b4) returned 0x1
	[0229.383] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0229.383] CloseHandle (hObject=0x1b4) returned 1
	[0229.394] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.tl30z")) returned 0x20
	[0229.394] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0229.399] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0229.406] SetEvent (hEvent=0x264) returned 1
	[0229.406] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 0x20
	[0229.406] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0229.407] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0230.340] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0230.347] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0230.347] ReadFile (in: hFile=0x1c8, lpBuffer=0x111a6000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x111a6000*, lpNumberOfBytesRead=0x11316e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0230.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e2f0 | out: pbBuffer=0x1104e2f0) returned 1
	[0230.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11325602 | out: pbBuffer=0x11325602) returned 1
	[0230.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e320 | out: pbBuffer=0x1104e320) returned 1
	[0230.358] GetFileType (hFile=0x1c8) returned 0x1
	[0230.359] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111cbde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.359] WriteFile (in: hFile=0x1c8, lpBuffer=0x11568000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x111cbdfc, lpOverlapped=0x111cbe08 | out: lpBuffer=0x11568000*, lpNumberOfBytesWritten=0x111cbdfc*=0x6ccc, lpOverlapped=0x111cbe08) returned 1
	[0230.360] GetFileType (hFile=0x1c8) returned 0x1
	[0230.360] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x111cbde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.360] GetFileType (hFile=0x1c8) returned 0x1
	[0230.360] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111cbde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.361] WriteFile (in: hFile=0x1c8, lpBuffer=0x110d7880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x111cbdfc, lpOverlapped=0x111cbe08 | out: lpBuffer=0x110d7880*, lpNumberOfBytesWritten=0x111cbdfc*=0x230, lpOverlapped=0x111cbe08) returned 1
	[0230.361] GetFileType (hFile=0x1c8) returned 0x1
	[0230.361] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x111cbde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.361] CloseHandle (hObject=0x1c8) returned 1
	[0230.378] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.tl30z")) returned 0x20
	[0230.378] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0230.465] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0230.481] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0230.592] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0230.699] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0230.943] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0230.965] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0230.971] SetEvent (hEvent=0x284) returned 1
	[0230.971] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0230.980] SetEvent (hEvent=0x25c) returned 1
	[0230.981] SetEvent (hEvent=0x23c) returned 1
	[0230.981] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0230.984] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0230.997] SetEvent (hEvent=0x23c) returned 1
	[0230.997] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0231.096] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0232.820] SetEvent (hEvent=0x1f0) returned 1
	[0232.820] SetEvent (hEvent=0x12c) returned 1
	[0232.820] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0235.171] SetEvent (hEvent=0x12c) returned 1
	[0235.171] SetEvent (hEvent=0x23c) returned 1
	[0235.171] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0235.363] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0238.002] SetEvent (hEvent=0x284) returned 1
	[0238.002] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0238.050] SetEvent (hEvent=0x12c) returned 1
	[0238.050] SetEvent (hEvent=0x25c) returned 1
	[0238.051] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0238.268] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0238.351] SetEvent (hEvent=0x12c) returned 1
	[0238.351] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0238.430] SetEvent (hEvent=0x12c) returned 1
	[0238.431] SetEvent (hEvent=0x1e0) returned 1
	[0238.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x91655f4f, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x91655f4f, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0239.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac)) returned 1
	[0239.509] SetEvent (hEvent=0x264) returned 1
	[0239.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a)) returned 1
	[0239.510] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0239.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22f0
	[0239.514] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0239.514] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1
	[0239.514] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1
	[0239.514] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1
	[0239.514] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1
	[0239.514] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1
	[0239.514] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1
	[0239.514] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1
	[0239.514] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1
	[0239.514] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1
	[0239.515] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1
	[0239.515] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1
	[0239.515] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1
	[0239.515] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1
	[0239.515] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1
	[0239.515] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1
	[0239.515] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1
	[0239.515] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1
	[0239.515] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0239.515] FindClose (in: hFindFile=0x7f22f0 | out: hFindFile=0x7f22f0) returned 1
	[0239.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1
	[0239.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1
	[0239.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea)) returned 1
	[0239.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1
	[0239.730] SetEvent (hEvent=0x150) returned 1
	[0239.730] SetEvent (hEvent=0x1f0) returned 1
	[0239.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1
	[0239.756] SetEvent (hEvent=0x264) returned 1
	[0239.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97)) returned 1
	[0239.824] SetEvent (hEvent=0x150) returned 1
	[0239.824] SetEvent (hEvent=0x1e0) returned 1
	[0239.824] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd)) returned 1
	[0240.140] SetEvent (hEvent=0x23c) returned 1
	[0240.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650)) returned 1
	[0240.173] SetEvent (hEvent=0x150) returned 1
	[0240.173] SetEvent (hEvent=0x284) returned 1
	[0240.173] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5)) returned 1
	[0240.601] SetEvent (hEvent=0x150) returned 1
	[0240.601] SetEvent (hEvent=0x1f0) returned 1
	[0240.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51)) returned 1
	[0240.650] SetEvent (hEvent=0x150) returned 1
	[0240.650] SetEvent (hEvent=0x264) returned 1
	[0240.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8)) returned 1
	[0240.765] SetEvent (hEvent=0x150) returned 1
	[0240.765] SetEvent (hEvent=0x1e0) returned 1
	[0240.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1
	[0240.801] SetEvent (hEvent=0x150) returned 1
	[0240.801] SetEvent (hEvent=0x26c) returned 1
	[0240.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1
	[0240.937] SetEvent (hEvent=0x150) returned 1
	[0240.937] SetEvent (hEvent=0x284) returned 1
	[0240.937] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1
	[0241.084] SetEvent (hEvent=0x12c) returned 1
	[0241.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1
	[0241.158] SetEvent (hEvent=0x150) returned 1
	[0241.158] SetEvent (hEvent=0x264) returned 1
	[0241.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1
	[0241.432] SetEvent (hEvent=0x150) returned 1
	[0241.432] SetEvent (hEvent=0x1f0) returned 1
	[0241.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1
	[0241.708] SetEvent (hEvent=0x150) returned 1
	[0241.708] SetEvent (hEvent=0x1e0) returned 1
	[0241.708] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0241.798] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x112f1c24 | out: lpMode=0x112f1c24) returned 0
	[0241.799] WriteFile (in: hFile=0x250, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1bf4, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x112f1bf4*=0x292, lpOverlapped=0x0) returned 1
	[0241.801] CloseHandle (hObject=0x250) returned 1
	[0241.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x93983184, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x93983184, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0241.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de)) returned 1
	[0242.006] SetEvent (hEvent=0x1f0) returned 1
	[0242.006] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0242.006] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2070
	[0242.015] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.019] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1
	[0242.019] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1
	[0242.019] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1
	[0242.019] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1
	[0242.019] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1
	[0242.019] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1
	[0242.020] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1
	[0242.020] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1
	[0242.020] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1
	[0242.020] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1
	[0242.020] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1
	[0242.020] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1
	[0242.020] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1
	[0242.020] FindNextFileW (in: hFindFile=0x7f2070, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.020] FindClose (in: hFindFile=0x7f2070 | out: hFindFile=0x7f2070) returned 1
	[0242.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1
	[0242.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816)) returned 1
	[0242.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1
	[0242.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1
	[0242.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99)) returned 1
	[0242.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d)) returned 1
	[0242.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5)) returned 1
	[0242.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1
	[0242.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1
	[0242.075] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661)) returned 1
	[0242.075] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1
	[0242.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1
	[0242.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1
	[0242.076] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0242.078] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x112f1c24 | out: lpMode=0x112f1c24) returned 0
	[0242.078] WriteFile (in: hFile=0x204, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1bf4, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x112f1bf4*=0x292, lpOverlapped=0x0) returned 1
	[0242.081] CloseHandle (hObject=0x204) returned 1
	[0242.082] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x93c119f6, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x93c119f6, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0242.082] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58)) returned 1
	[0242.082] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba)) returned 1
	[0242.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948)) returned 1
	[0242.083] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0242.083] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22f0
	[0242.200] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0242.228] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0242.228] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1
	[0242.228] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1
	[0242.228] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1
	[0242.228] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1
	[0242.228] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1
	[0242.228] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1
	[0242.228] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1
	[0242.228] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1
	[0242.229] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0242.229] FindClose (in: hFindFile=0x7f22f0 | out: hFindFile=0x7f22f0) returned 1
	[0242.231] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588)) returned 1
	[0242.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574)) returned 1
	[0242.359] SetEvent (hEvent=0x160) returned 1
	[0242.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8)) returned 1
	[0242.532] SetEvent (hEvent=0x150) returned 1
	[0242.532] SetEvent (hEvent=0x12c) returned 1
	[0242.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c)) returned 1
	[0243.334] ReadFile (in: hFile=0x200, lpBuffer=0x110c8000, nNumberOfBytesToRead=0xf58, lpNumberOfBytesRead=0x113abe18, lpOverlapped=0x0 | out: lpBuffer=0x110c8000*, lpNumberOfBytesRead=0x113abe18*=0xf58, lpOverlapped=0x0) returned 1
	[0243.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0243.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0243.348] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1149a802 | out: pbBuffer=0x1149a802) returned 1
	[0243.348] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0243.348] GetFileType (hFile=0x200) returned 0x1
	[0243.349] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0243.349] WriteFile (in: hFile=0x200, lpBuffer=0x11364000*, nNumberOfBytesToWrite=0xf58, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11364000*, lpNumberOfBytesWritten=0x112f3dfc*=0xf58, lpOverlapped=0x112f3e08) returned 1
	[0243.349] GetFileType (hFile=0x200) returned 0x1
	[0243.349] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0xf58, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0243.349] GetFileType (hFile=0x200) returned 0x1
	[0243.350] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0243.350] WriteFile (in: hFile=0x200, lpBuffer=0x11498a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11498a80*, lpNumberOfBytesWritten=0x112f3dfc*=0x22d, lpOverlapped=0x112f3e08) returned 1
	[0243.350] GetFileType (hFile=0x200) returned 0x1
	[0243.350] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0xf58, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0243.350] CloseHandle (hObject=0x200) returned 1
	[0243.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.tl30z")) returned 0x20
	[0243.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0243.354] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8)) returned 1
	[0243.851] SetEvent (hEvent=0x26c) returned 1
	[0243.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c)) returned 1
	[0244.035] SetEvent (hEvent=0x134) returned 1
	[0244.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254)) returned 1
	[0244.186] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c)) returned 1
	[0244.478] SetEvent (hEvent=0x118) returned 1
	[0244.478] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0244.806] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x112f1c24 | out: lpMode=0x112f1c24) returned 0
	[0244.806] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0244.815] SetEvent (hEvent=0x22c) returned 1
	[0244.815] SwitchToThread () returned 1
	[0244.825] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0244.831] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0244.878] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0244.931] SetEvent (hEvent=0x134) returned 1
	[0244.931] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0244.986] SetEvent (hEvent=0x134) returned 1
	[0244.986] SetEvent (hEvent=0x24c) returned 1
	[0244.986] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0245.280] SetEvent (hEvent=0x134) returned 1
	[0245.281] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0247.267] SetEvent (hEvent=0x218) returned 1
	[0247.267] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0247.277] SetEvent (hEvent=0x218) returned 1
	[0247.277] SetEvent (hEvent=0x210) returned 1
	[0247.277] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x112f1994 | out: lpFileInformation=0x112f1994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1
	[0248.035] SetEvent (hEvent=0x248) returned 1
	[0248.035] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0248.533] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x112f1ba0 | out: lpMode=0x112f1ba0) returned 0
	[0248.533] WriteFile (in: hFile=0x1d8, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1b70, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x112f1b70*=0x292, lpOverlapped=0x0) returned 1
	[0248.535] CloseHandle (hObject=0x1d8) returned 1
	[0248.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x979b69c0, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x979b69c0, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0248.810] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0248.811] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x112f1c24 | out: lpMode=0x112f1c24) returned 0
	[0248.811] WriteFile (in: hFile=0x250, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1bf4, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x112f1bf4*=0x292, lpOverlapped=0x0) returned 1
	[0248.814] CloseHandle (hObject=0x250) returned 1
	[0248.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x97c45c08, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x97c45c08, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0248.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1
	[0248.815] SetEvent (hEvent=0x26c) returned 1
	[0248.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827)) returned 1
	[0248.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1
	[0248.819] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0248.820] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22f0
	[0249.001] SetEvent (hEvent=0x150) returned 1
	[0249.001] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0249.002] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1
	[0249.002] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1
	[0249.002] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0249.002] FindClose (in: hFindFile=0x7f22f0 | out: hFindFile=0x7f22f0) returned 1
	[0249.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d)) returned 1
	[0249.176] SetEvent (hEvent=0x150) returned 1
	[0249.176] SetEvent (hEvent=0x26c) returned 1
	[0249.176] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61)) returned 1
	[0249.191] SetEvent (hEvent=0x1f0) returned 1
	[0249.191] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0249.219] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x112f1c24 | out: lpMode=0x112f1c24) returned 0
	[0249.219] WriteFile (in: hFile=0x204, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1bf4, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x112f1bf4*=0x292, lpOverlapped=0x0) returned 1
	[0249.222] CloseHandle (hObject=0x204) returned 1
	[0249.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x980f06a1, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x980f06a1, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0249.591] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5)) returned 1
	[0249.592] SetEvent (hEvent=0x248) returned 1
	[0249.592] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1
	[0249.630] SetEvent (hEvent=0x248) returned 1
	[0249.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1
	[0249.694] SetEvent (hEvent=0x150) returned 1
	[0249.694] SetEvent (hEvent=0x248) returned 1
	[0249.694] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1
	[0249.798] SetEvent (hEvent=0x150) returned 1
	[0249.798] SetEvent (hEvent=0x234) returned 1
	[0249.798] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997)) returned 1
	[0249.979] SetEvent (hEvent=0x210) returned 1
	[0249.980] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0250.024] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1df0
	[0250.077] SetEvent (hEvent=0x150) returned 1
	[0250.077] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0250.077] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1
	[0250.077] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1
	[0250.077] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1
	[0250.077] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1
	[0250.078] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0250.078] FindClose (in: hFindFile=0x7f1df0 | out: hFindFile=0x7f1df0) returned 1
	[0250.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1
	[0250.104] SetEvent (hEvent=0x1f0) returned 1
	[0250.104] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1
	[0250.310] SetEvent (hEvent=0x26c) returned 1
	[0250.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926)) returned 1
	[0250.419] SetEvent (hEvent=0x150) returned 1
	[0250.419] SetEvent (hEvent=0x210) returned 1
	[0250.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1
	[0250.501] SetEvent (hEvent=0x26c) returned 1
	[0250.501] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0250.595] SetEvent (hEvent=0x150) returned 1
	[0250.595] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x112f1c24 | out: lpMode=0x112f1c24) returned 0
	[0250.595] WriteFile (in: hFile=0x250, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1bf4, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x112f1bf4*=0x292, lpOverlapped=0x0) returned 1
	[0250.598] CloseHandle (hObject=0x250) returned 1
	[0250.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x98d48188, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x98d48188, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0250.758] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x0
	[0250.764] SetEvent (hEvent=0x210) returned 1
	[0250.764] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x0
	[0250.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1
	[0250.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e)) returned 1
	[0250.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170)) returned 1
	[0250.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b)) returned 1
	[0250.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1
	[0250.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899)) returned 1
	[0250.903] SetEvent (hEvent=0x150) returned 1
	[0250.903] SetEvent (hEvent=0x118) returned 1
	[0250.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add)) returned 1
	[0250.920] SetEvent (hEvent=0x218) returned 1
	[0250.920] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b)) returned 1
	[0250.957] SetEvent (hEvent=0x218) returned 1
	[0250.957] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0251.300] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1e70
	[0251.424] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0251.424] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1
	[0251.424] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1
	[0251.424] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1
	[0251.424] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1
	[0251.424] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1
	[0251.424] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1
	[0251.424] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1
	[0251.425] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1
	[0251.425] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1
	[0251.425] FindNextFileW (in: hFindFile=0x7f1e70, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0251.425] FindClose (in: hFindFile=0x7f1e70 | out: hFindFile=0x7f1e70) returned 1
	[0251.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1
	[0251.630] SetEvent (hEvent=0x248) returned 1
	[0251.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6)) returned 1
	[0251.651] SetEvent (hEvent=0x248) returned 1
	[0251.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1
	[0251.845] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0251.887] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0252.510] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0252.539] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0252.572] SwitchToThread () returned 1
	[0252.575] SetEvent (hEvent=0x118) returned 1
	[0252.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 0x20
	[0252.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar", dwFileAttributes=0x20) returned 1
	[0252.576] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.tl30z"), dwFlags=0x1) returned 1
	[0252.873] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0252.959] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0252.959] ReadFile (in: hFile=0x288, lpBuffer=0x11418000, nNumberOfBytesToRead=0xdc7, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11418000*, lpNumberOfBytesRead=0x1128be18*=0xdc7, lpOverlapped=0x0) returned 1
	[0252.967] VirtualAlloc (lpAddress=0x11e62000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11e62000
	[0252.968] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e540 | out: pbBuffer=0x1104e540) returned 1
	[0252.968] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e538 | out: pbBuffer=0x1104e538) returned 1
	[0252.969] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e3e02 | out: pbBuffer=0x113e3e02) returned 1
	[0252.969] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e3e2c | out: pbBuffer=0x113e3e2c) returned 1
	[0252.969] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e570 | out: pbBuffer=0x1104e570) returned 1
	[0252.969] GetFileType (hFile=0x288) returned 0x1
	[0252.970] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.970] WriteFile (in: hFile=0x288, lpBuffer=0x110e8000*, nNumberOfBytesToWrite=0xdc7, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x110e8000*, lpNumberOfBytesWritten=0x113efdfc*=0xdc7, lpOverlapped=0x113efe08) returned 1
	[0252.970] GetFileType (hFile=0x288) returned 0x1
	[0252.970] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xdc7, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.970] GetFileType (hFile=0x288) returned 0x1
	[0252.971] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.971] WriteFile (in: hFile=0x288, lpBuffer=0x110d0700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x110d0700*, lpNumberOfBytesWritten=0x113efdfc*=0x230, lpOverlapped=0x113efe08) returned 1
	[0252.971] GetFileType (hFile=0x288) returned 0x1
	[0252.971] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xdc7, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.971] CloseHandle (hObject=0x288) returned 1
	[0252.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.tl30z")) returned 0x20
	[0252.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0252.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 0x20
	[0252.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties", dwFileAttributes=0x20) returned 1
	[0252.982] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.tl30z"), dwFlags=0x1) returned 1
	[0253.116] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0253.205] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0253.263] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0253.263] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x102
	[0253.291] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0253.291] SetEvent (hEvent=0x150) returned 1
	[0253.291] SetEvent (hEvent=0x234) returned 1
	[0253.291] SetEvent (hEvent=0x218) returned 1
	[0253.291] SetEvent (hEvent=0x1f0) returned 1
	[0253.291] ReadFile (in: hFile=0x1f4, lpBuffer=0x11472000, nNumberOfBytesToRead=0x4ba, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11472000*, lpNumberOfBytesRead=0x11287e18*=0x4ba, lpOverlapped=0x0) returned 1
	[0253.304] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0253.479] SetEvent (hEvent=0x234) returned 1
	[0253.479] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0253.490] SetEvent (hEvent=0x234) returned 1
	[0253.490] SetEvent (hEvent=0x134) returned 1
	[0253.490] SetEvent (hEvent=0x218) returned 1
	[0253.490] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0253.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0253.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0253.574] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0253.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208
	[0253.973] GetConsoleMode (in: hConsoleHandle=0x208, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0253.973] VirtualAlloc (lpAddress=0x11fe6000, dwSize=0x14000, flAllocationType=0x1000, flProtect=0x4) returned 0x11fe6000
	[0253.977] ReadFile (in: hFile=0x208, lpBuffer=0x11fe6000, nNumberOfBytesToRead=0x138d6, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11fe6000*, lpNumberOfBytesRead=0x11286e18*=0x138d6, lpOverlapped=0x0) returned 1
	[0253.990] VirtualAlloc (lpAddress=0x11ffa000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11ffa000
	[0253.992] VirtualAlloc (lpAddress=0x11ffe000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11ffe000
	[0253.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0253.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11322802 | out: pbBuffer=0x11322802) returned 1
	[0253.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113228a8 | out: pbBuffer=0x113228a8) returned 1
	[0253.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113228eb | out: pbBuffer=0x113228eb) returned 1
	[0253.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0253.996] GetFileType (hFile=0x208) returned 0x1
	[0253.996] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f97de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.997] WriteFile (in: hFile=0x208, lpBuffer=0x11f04000*, nNumberOfBytesToWrite=0x138d6, lpNumberOfBytesWritten=0x11f97dfc, lpOverlapped=0x11f97e08 | out: lpBuffer=0x11f04000*, lpNumberOfBytesWritten=0x11f97dfc*=0x138d6, lpOverlapped=0x11f97e08) returned 1
	[0253.998] GetFileType (hFile=0x208) returned 0x1
	[0253.998] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x138d6, lpNewFilePointer=0x0, dwMoveMethod=0x11f97de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.998] GetFileType (hFile=0x208) returned 0x1
	[0253.998] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f97de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.998] WriteFile (in: hFile=0x208, lpBuffer=0x11396a80*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x11f97dfc, lpOverlapped=0x11f97e08 | out: lpBuffer=0x11396a80*, lpNumberOfBytesWritten=0x11f97dfc*=0x23c, lpOverlapped=0x11f97e08) returned 1
	[0254.068] GetFileType (hFile=0x208) returned 0x1
	[0254.068] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x138d6, lpNewFilePointer=0x0, dwMoveMethod=0x11f97de0 | out: lpNewFilePointer=0x0) returned 1
	[0254.068] CloseHandle (hObject=0x208) returned 1
	[0254.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0254.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0254.090] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0254.104] SetEvent (hEvent=0x218) returned 1
	[0254.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0254.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0254.105] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0255.056] SetEvent (hEvent=0x150) returned 1
	[0255.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0255.064] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0255.064] ReadFile (in: hFile=0x1fc, lpBuffer=0x1138c500, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1138c500*, lpNumberOfBytesRead=0x1131ae18*=0x4ed, lpOverlapped=0x0) returned 1
	[0255.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0255.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e648 | out: pbBuffer=0x1104e648) returned 1
	[0255.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11450702 | out: pbBuffer=0x11450702) returned 1
	[0255.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114507da | out: pbBuffer=0x114507da) returned 1
	[0255.071] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e680 | out: pbBuffer=0x1104e680) returned 1
	[0255.071] GetFileType (hFile=0x1fc) returned 0x1
	[0255.071] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.071] WriteFile (in: hFile=0x1fc, lpBuffer=0x11457000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x110afdfc, lpOverlapped=0x110afe08 | out: lpBuffer=0x11457000*, lpNumberOfBytesWritten=0x110afdfc*=0x4ed, lpOverlapped=0x110afe08) returned 1
	[0255.072] GetFileType (hFile=0x1fc) returned 0x1
	[0255.072] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.072] GetFileType (hFile=0x1fc) returned 0x1
	[0255.072] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.072] WriteFile (in: hFile=0x1fc, lpBuffer=0x11313500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x110afdfc, lpOverlapped=0x110afe08 | out: lpBuffer=0x11313500*, lpNumberOfBytesWritten=0x110afdfc*=0x22d, lpOverlapped=0x110afe08) returned 1
	[0255.073] GetFileType (hFile=0x1fc) returned 0x1
	[0255.073] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.073] CloseHandle (hObject=0x1fc) returned 1
	[0255.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0255.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0255.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0255.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0255.175] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0255.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0255.771] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0255.771] ReadFile (in: hFile=0x224, lpBuffer=0x1138cf00, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x1138cf00*, lpNumberOfBytesRead=0x11286e18*=0x4ed, lpOverlapped=0x0) returned 1
	[0255.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104ec00 | out: pbBuffer=0x1104ec00) returned 1
	[0255.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123af02 | out: pbBuffer=0x1123af02) returned 1
	[0255.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1123af53 | out: pbBuffer=0x1123af53) returned 1
	[0255.781] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1123af87 | out: pbBuffer=0x1123af87) returned 1
	[0255.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104ec30 | out: pbBuffer=0x1104ec30) returned 1
	[0255.782] GetFileType (hFile=0x224) returned 0x1
	[0255.782] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.782] WriteFile (in: hFile=0x224, lpBuffer=0x11101000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x11f6bdfc, lpOverlapped=0x11f6be08 | out: lpBuffer=0x11101000*, lpNumberOfBytesWritten=0x11f6bdfc*=0x4ed, lpOverlapped=0x11f6be08) returned 1
	[0255.783] GetFileType (hFile=0x224) returned 0x1
	[0255.783] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.783] GetFileType (hFile=0x224) returned 0x1
	[0255.783] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.783] WriteFile (in: hFile=0x224, lpBuffer=0x110f2e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11f6bdfc, lpOverlapped=0x11f6be08 | out: lpBuffer=0x110f2e00*, lpNumberOfBytesWritten=0x11f6bdfc*=0x22d, lpOverlapped=0x11f6be08) returned 1
	[0255.784] GetFileType (hFile=0x224) returned 0x1
	[0255.784] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.784] CloseHandle (hObject=0x224) returned 1
	[0255.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0255.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0255.874] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0255.882] SetEvent (hEvent=0x218) returned 1
	[0255.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0255.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0255.883] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0256.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0256.252] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0256.252] ReadFile (in: hFile=0x1d8, lpBuffer=0x11f86000, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11f86000*, lpNumberOfBytesRead=0x11023e18*=0x4ed, lpOverlapped=0x0) returned 1
	[0256.260] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0256.260] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11f92802 | out: pbBuffer=0x11f92802) returned 1
	[0256.261] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11f92868 | out: pbBuffer=0x11f92868) returned 1
	[0256.261] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0256.261] GetFileType (hFile=0x1d8) returned 0x1
	[0256.261] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f67de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.261] WriteFile (in: hFile=0x1d8, lpBuffer=0x1132e000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x11f67dfc, lpOverlapped=0x11f67e08 | out: lpBuffer=0x1132e000*, lpNumberOfBytesWritten=0x11f67dfc*=0x4ed, lpOverlapped=0x11f67e08) returned 1
	[0256.262] GetFileType (hFile=0x1d8) returned 0x1
	[0256.262] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11f67de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.262] GetFileType (hFile=0x1d8) returned 0x1
	[0256.262] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f67de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.262] WriteFile (in: hFile=0x1d8, lpBuffer=0x11320a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11f67dfc, lpOverlapped=0x11f67e08 | out: lpBuffer=0x11320a80*, lpNumberOfBytesWritten=0x11f67dfc*=0x22d, lpOverlapped=0x11f67e08) returned 1
	[0256.263] GetFileType (hFile=0x1d8) returned 0x1
	[0256.263] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11f67de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.263] CloseHandle (hObject=0x1d8) returned 1
	[0256.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0256.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0256.378] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0256.414] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0256.550] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0256.561] SetEvent (hEvent=0x210) returned 1
	[0256.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0256.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0256.562] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0257.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0257.143] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0257.143] ReadFile (in: hFile=0x1d8, lpBuffer=0x11fc0000, nNumberOfBytesToRead=0xea19, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11fc0000*, lpNumberOfBytesRead=0x1128be18*=0xea19, lpOverlapped=0x0) returned 1
	[0257.163] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e620 | out: pbBuffer=0x1104e620) returned 1
	[0257.164] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11fd4602 | out: pbBuffer=0x11fd4602) returned 1
	[0257.164] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11fd46b5 | out: pbBuffer=0x11fd46b5) returned 1
	[0257.165] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0257.167] GetFileType (hFile=0x1d8) returned 0x1
	[0257.167] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.167] WriteFile (in: hFile=0x1d8, lpBuffer=0x1116a000*, nNumberOfBytesToWrite=0xea19, lpNumberOfBytesWritten=0x11f69dfc, lpOverlapped=0x11f69e08 | out: lpBuffer=0x1116a000*, lpNumberOfBytesWritten=0x11f69dfc*=0xea19, lpOverlapped=0x11f69e08) returned 1
	[0257.168] GetFileType (hFile=0x1d8) returned 0x1
	[0257.168] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xea19, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.169] GetFileType (hFile=0x1d8) returned 0x1
	[0257.169] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.169] WriteFile (in: hFile=0x1d8, lpBuffer=0x112c3500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11f69dfc, lpOverlapped=0x11f69e08 | out: lpBuffer=0x112c3500*, lpNumberOfBytesWritten=0x11f69dfc*=0x233, lpOverlapped=0x11f69e08) returned 1
	[0257.178] GetFileType (hFile=0x1d8) returned 0x1
	[0257.178] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xea19, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.178] CloseHandle (hObject=0x1d8) returned 1
	[0257.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0257.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0257.193] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0257.206] SetEvent (hEvent=0x234) returned 1
	[0257.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0257.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0257.208] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0257.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0257.612] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0257.612] ReadFile (in: hFile=0x1fc, lpBuffer=0x110c1400, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x110c1400*, lpNumberOfBytesRead=0x1128be18*=0x4ed, lpOverlapped=0x0) returned 1
	[0257.617] SetEvent (hEvent=0x234) returned 1
	[0257.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332f30 | out: pbBuffer=0x11332f30) returned 1
	[0257.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332f28 | out: pbBuffer=0x11332f28) returned 1
	[0257.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f8602 | out: pbBuffer=0x111f8602) returned 1
	[0257.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332f60 | out: pbBuffer=0x11332f60) returned 1
	[0257.618] GetFileType (hFile=0x1fc) returned 0x1
	[0257.618] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.618] WriteFile (in: hFile=0x1fc, lpBuffer=0x1120e000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x11fb3dfc, lpOverlapped=0x11fb3e08 | out: lpBuffer=0x1120e000*, lpNumberOfBytesWritten=0x11fb3dfc*=0x4ed, lpOverlapped=0x11fb3e08) returned 1
	[0257.619] GetFileType (hFile=0x1fc) returned 0x1
	[0257.619] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.619] GetFileType (hFile=0x1fc) returned 0x1
	[0257.619] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.619] WriteFile (in: hFile=0x1fc, lpBuffer=0x111c4e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11fb3dfc, lpOverlapped=0x11fb3e08 | out: lpBuffer=0x111c4e00*, lpNumberOfBytesWritten=0x11fb3dfc*=0x22d, lpOverlapped=0x11fb3e08) returned 1
	[0257.619] GetFileType (hFile=0x1fc) returned 0x1
	[0257.620] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.620] CloseHandle (hObject=0x1fc) returned 1
	[0257.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0257.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0257.639] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0257.641] SetEvent (hEvent=0x234) returned 1
	[0257.642] SetEvent (hEvent=0x218) returned 1
	[0257.642] SwitchToThread () returned 1
	[0257.644] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0257.762] SetEvent (hEvent=0x218) returned 1
	[0257.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0257.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0257.763] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0258.345] SetEvent (hEvent=0x150) returned 1
	[0258.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0258.349] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0258.349] ReadFile (in: hFile=0x288, lpBuffer=0x11090000, nNumberOfBytesToRead=0xd2f, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x1128be18*=0xd2f, lpOverlapped=0x0) returned 1
	[0258.409] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0258.409] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1131e202 | out: pbBuffer=0x1131e202) returned 1
	[0258.409] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1131e258 | out: pbBuffer=0x1131e258) returned 1
	[0258.409] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0258.410] GetFileType (hFile=0x288) returned 0x1
	[0258.410] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.410] WriteFile (in: hFile=0x288, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0xd2f, lpNumberOfBytesWritten=0x113d7dfc, lpOverlapped=0x113d7e08 | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x113d7dfc*=0xd2f, lpOverlapped=0x113d7e08) returned 1
	[0258.462] GetFileType (hFile=0x288) returned 0x1
	[0258.462] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xd2f, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.462] GetFileType (hFile=0x288) returned 0x1
	[0258.462] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.462] WriteFile (in: hFile=0x288, lpBuffer=0x11066700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113d7dfc, lpOverlapped=0x113d7e08 | out: lpBuffer=0x11066700*, lpNumberOfBytesWritten=0x113d7dfc*=0x230, lpOverlapped=0x113d7e08) returned 1
	[0258.504] GetFileType (hFile=0x288) returned 0x1
	[0258.504] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xd2f, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.504] CloseHandle (hObject=0x288) returned 1
	[0258.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0258.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0258.544] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0258.670] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0258.837] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0258.853] SetEvent (hEvent=0x218) returned 1
	[0258.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 0x220
	[0258.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", dwFileAttributes=0x220) returned 1
	[0258.854] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.tl30z"), dwFlags=0x1) returned 1
	[0259.289] SetEvent (hEvent=0x150) returned 1
	[0259.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0259.451] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0259.451] ReadFile (in: hFile=0x1d4, lpBuffer=0x1135e000, nNumberOfBytesToRead=0x3a19, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1135e000*, lpNumberOfBytesRead=0x11023e18*=0x3a19, lpOverlapped=0x0) returned 1
	[0259.460] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296270 | out: pbBuffer=0x11296270) returned 1
	[0259.460] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11296268 | out: pbBuffer=0x11296268) returned 1
	[0259.460] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1135a802 | out: pbBuffer=0x1135a802) returned 1
	[0259.461] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112962a0 | out: pbBuffer=0x112962a0) returned 1
	[0259.462] GetFileType (hFile=0x1d4) returned 0x1
	[0259.462] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.462] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ae000*, nNumberOfBytesToWrite=0x3a19, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x112ae000*, lpNumberOfBytesWritten=0x112bbdfc*=0x3a19, lpOverlapped=0x112bbe08) returned 1
	[0259.462] GetFileType (hFile=0x1d4) returned 0x1
	[0259.463] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3a19, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.463] GetFileType (hFile=0x1d4) returned 0x1
	[0259.463] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.463] WriteFile (in: hFile=0x1d4, lpBuffer=0x11364a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x11364a80*, lpNumberOfBytesWritten=0x112bbdfc*=0x22d, lpOverlapped=0x112bbe08) returned 1
	[0259.463] GetFileType (hFile=0x1d4) returned 0x1
	[0259.463] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3a19, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.463] CloseHandle (hObject=0x1d4) returned 1
	[0259.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.tl30z")) returned 0x220
	[0259.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0259.483] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0259.509] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0259.611] SetEvent (hEvent=0x26c) returned 1
	[0259.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 0x220
	[0259.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", dwFileAttributes=0x220) returned 1
	[0259.612] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.tl30z"), dwFlags=0x1) returned 1
	[0259.956] SetEvent (hEvent=0x150) returned 1
	[0259.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0259.959] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0259.960] ReadFile (in: hFile=0x1d4, lpBuffer=0x11bd2000, nNumberOfBytesToRead=0x2e73, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11bd2000*, lpNumberOfBytesRead=0x11023e18*=0x2e73, lpOverlapped=0x0) returned 1
	[0259.967] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296830 | out: pbBuffer=0x11296830) returned 1
	[0259.967] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11296828 | out: pbBuffer=0x11296828) returned 1
	[0259.967] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113df102 | out: pbBuffer=0x113df102) returned 1
	[0259.968] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296860 | out: pbBuffer=0x11296860) returned 1
	[0259.968] GetFileType (hFile=0x1d4) returned 0x1
	[0259.969] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.969] WriteFile (in: hFile=0x1d4, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x2e73, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x112bfdfc*=0x2e73, lpOverlapped=0x112bfe08) returned 1
	[0259.969] GetFileType (hFile=0x1d4) returned 0x1
	[0259.969] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2e73, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.970] GetFileType (hFile=0x1d4) returned 0x1
	[0259.970] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.970] WriteFile (in: hFile=0x1d4, lpBuffer=0x113c0380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x113c0380*, lpNumberOfBytesWritten=0x112bfdfc*=0x233, lpOverlapped=0x112bfe08) returned 1
	[0259.970] GetFileType (hFile=0x1d4) returned 0x1
	[0259.970] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2e73, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.971] CloseHandle (hObject=0x1d4) returned 1
	[0259.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.tl30z")) returned 0x220
	[0259.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0259.988] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0260.013] SetEvent (hEvent=0x118) returned 1
	[0260.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 0x220
	[0260.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", dwFileAttributes=0x220) returned 1
	[0260.014] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.tl30z"), dwFlags=0x1) returned 1
	[0260.448] SetEvent (hEvent=0x150) returned 1
	[0260.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0260.452] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0260.452] ReadFile (in: hFile=0x1d8, lpBuffer=0x110ba000, nNumberOfBytesToRead=0xc44, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110ba000*, lpNumberOfBytesRead=0x11423e18*=0xc44, lpOverlapped=0x0) returned 1
	[0260.458] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0260.458] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332688 | out: pbBuffer=0x11332688) returned 1
	[0260.458] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e5202 | out: pbBuffer=0x110e5202) returned 1
	[0260.459] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326c0 | out: pbBuffer=0x113326c0) returned 1
	[0260.459] GetFileType (hFile=0x1d8) returned 0x1
	[0260.459] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.459] WriteFile (in: hFile=0x1d8, lpBuffer=0x1143e000*, nNumberOfBytesToWrite=0xc44, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1143e000*, lpNumberOfBytesWritten=0x1102bdfc*=0xc44, lpOverlapped=0x1102be08) returned 1
	[0260.460] GetFileType (hFile=0x1d8) returned 0x1
	[0260.460] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc44, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.460] GetFileType (hFile=0x1d8) returned 0x1
	[0260.460] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.460] WriteFile (in: hFile=0x1d8, lpBuffer=0x11436380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11436380*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0260.461] GetFileType (hFile=0x1d8) returned 0x1
	[0260.461] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc44, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.461] CloseHandle (hObject=0x1d8) returned 1
	[0260.466] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.tl30z")) returned 0x220
	[0260.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0260.477] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0260.535] SetEvent (hEvent=0x118) returned 1
	[0260.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 0x220
	[0260.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", dwFileAttributes=0x220) returned 1
	[0260.536] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.tl30z"), dwFlags=0x1) returned 1
	[0260.930] SetEvent (hEvent=0x150) returned 1
	[0260.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0260.941] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0260.941] ReadFile (in: hFile=0x1fc, lpBuffer=0x1117e000, nNumberOfBytesToRead=0x3bcc, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1117e000*, lpNumberOfBytesRead=0x11319e18*=0x3bcc, lpOverlapped=0x0) returned 1
	[0260.947] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0260.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0260.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c8802 | out: pbBuffer=0x111c8802) returned 1
	[0260.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c8848 | out: pbBuffer=0x111c8848) returned 1
	[0260.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c88d2 | out: pbBuffer=0x111c88d2) returned 1
	[0260.949] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0260.949] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x102
	[0261.013] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0261.013] SetEvent (hEvent=0x150) returned 1
	[0261.013] SetEvent (hEvent=0x26c) returned 1
	[0261.013] SetEvent (hEvent=0x118) returned 1
	[0261.013] GetFileType (hFile=0x1fc) returned 0x1
	[0261.013] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.013] WriteFile (in: hFile=0x1fc, lpBuffer=0x11210000*, nNumberOfBytesToWrite=0x3bcc, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11210000*, lpNumberOfBytesWritten=0x112bddfc*=0x3bcc, lpOverlapped=0x112bde08) returned 1
	[0261.014] GetFileType (hFile=0x1fc) returned 0x1
	[0261.014] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3bcc, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.014] GetFileType (hFile=0x1fc) returned 0x1
	[0261.014] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.014] WriteFile (in: hFile=0x1fc, lpBuffer=0x111daa80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x111daa80*, lpNumberOfBytesWritten=0x112bddfc*=0x233, lpOverlapped=0x112bde08) returned 1
	[0261.014] GetFileType (hFile=0x1fc) returned 0x1
	[0261.014] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3bcc, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.015] CloseHandle (hObject=0x1fc) returned 1
	[0261.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.tl30z")) returned 0x220
	[0261.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0261.045] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0262.745] SetEvent (hEvent=0x26c) returned 1
	[0262.745] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0300.094] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0300.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf")) returned 0x220
	[0300.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF", dwFileAttributes=0x220) returned 1
	[0300.099] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0300.151] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0300.151] ReadFile (in: hFile=0x200, lpBuffer=0x1145a000, nNumberOfBytesToRead=0x4b40, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1145a000*, lpNumberOfBytesRead=0x1131de18*=0x4b40, lpOverlapped=0x0) returned 1
	[0300.918] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158280 | out: pbBuffer=0x11158280) returned 1
	[0300.918] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c5f202 | out: pbBuffer=0x11c5f202) returned 1
	[0300.918] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c5f267 | out: pbBuffer=0x11c5f267) returned 1
	[0300.918] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c5f2d7 | out: pbBuffer=0x11c5f2d7) returned 1
	[0300.918] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582b0 | out: pbBuffer=0x111582b0) returned 1
	[0300.947] GetFileType (hFile=0x200) returned 0x1
	[0300.947] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.948] WriteFile (in: hFile=0x200, lpBuffer=0x111d6000*, nNumberOfBytesToWrite=0x4b40, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111d6000*, lpNumberOfBytesWritten=0x11031dfc*=0x4b40, lpOverlapped=0x11031e08) returned 1
	[0300.948] GetFileType (hFile=0x200) returned 0x1
	[0300.948] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x4b40, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.949] GetFileType (hFile=0x200) returned 0x1
	[0300.949] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.949] WriteFile (in: hFile=0x200, lpBuffer=0x11c73880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c73880*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0300.949] GetFileType (hFile=0x200) returned 0x1
	[0300.949] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x4b40, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.949] CloseHandle (hObject=0x200) returned 1
	[0301.017] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0301.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf.tl30z")) returned 0x220
	[0301.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.100] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0301.124] SetEvent (hEvent=0x12c) returned 1
	[0301.124] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0301.132] SetEvent (hEvent=0x1bc) returned 1
	[0301.132] SetEvent (hEvent=0x284) returned 1
	[0301.132] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0308.649] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0308.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid")) returned 0x220
	[0308.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID", dwFileAttributes=0x220) returned 1
	[0308.657] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0308.720] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0308.720] ReadFile (in: hFile=0x224, lpBuffer=0x110b0000, nNumberOfBytesToRead=0x1750, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110b0000*, lpNumberOfBytesRead=0x11287e18*=0x1750, lpOverlapped=0x0) returned 1
	[0308.877] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0309.015] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f7b0 | out: pbBuffer=0x1140f7b0) returned 1
	[0309.015] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1140af02 | out: pbBuffer=0x1140af02) returned 1
	[0309.016] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f7e0 | out: pbBuffer=0x1140f7e0) returned 1
	[0309.016] GetFileType (hFile=0x224) returned 0x1
	[0309.016] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.016] WriteFile (in: hFile=0x224, lpBuffer=0x11320000*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x11320000*, lpNumberOfBytesWritten=0x1145bdfc*=0x1750, lpOverlapped=0x1145be08) returned 1
	[0309.017] GetFileType (hFile=0x224) returned 0x1
	[0309.017] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1750, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.017] GetFileType (hFile=0x224) returned 0x1
	[0309.017] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.017] WriteFile (in: hFile=0x224, lpBuffer=0x112d8a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x112d8a80*, lpNumberOfBytesWritten=0x1145bdfc*=0x22a, lpOverlapped=0x1145be08) returned 1
	[0309.017] GetFileType (hFile=0x224) returned 0x1
	[0309.018] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1750, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.018] CloseHandle (hObject=0x224) returned 1
	[0309.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid.tl30z")) returned 0x220
	[0309.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0309.020] SetEvent (hEvent=0x26c) returned 1
	[0309.020] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0309.043] SetEvent (hEvent=0x27c) returned 1
	[0309.043] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0309.058] SetEvent (hEvent=0x27c) returned 1
	[0309.058] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0309.074] SetEvent (hEvent=0x284) returned 1
	[0309.074] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0309.224] SetEvent (hEvent=0x22c) returned 1
	[0309.224] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0309.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf")) returned 0x220
	[0309.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF", dwFileAttributes=0x220) returned 1
	[0309.245] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0309.386] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0309.386] ReadFile (in: hFile=0x2a0, lpBuffer=0x11098c00, nNumberOfBytesToRead=0xaf4, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11098c00*, lpNumberOfBytesRead=0x1131ae18*=0xaf4, lpOverlapped=0x0) returned 1
	[0309.397] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263f0 | out: pbBuffer=0x111263f0) returned 1
	[0309.397] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11413c02 | out: pbBuffer=0x11413c02) returned 1
	[0309.397] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126420 | out: pbBuffer=0x11126420) returned 1
	[0309.398] GetFileType (hFile=0x2a0) returned 0x1
	[0309.398] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.398] WriteFile (in: hFile=0x2a0, lpBuffer=0x110c4000*, nNumberOfBytesToWrite=0xaf4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110c4000*, lpNumberOfBytesWritten=0x11031dfc*=0xaf4, lpOverlapped=0x11031e08) returned 1
	[0309.398] GetFileType (hFile=0x2a0) returned 0x1
	[0309.398] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xaf4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.398] GetFileType (hFile=0x2a0) returned 0x1
	[0309.399] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.399] WriteFile (in: hFile=0x2a0, lpBuffer=0x110bc700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110bc700*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0309.399] GetFileType (hFile=0x2a0) returned 0x1
	[0309.399] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xaf4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.399] CloseHandle (hObject=0x2a0) returned 1
	[0309.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf.tl30z")) returned 0x220
	[0309.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.428] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0309.437] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0309.576] SetEvent (hEvent=0x1b0) returned 1
	[0309.576] SetEvent (hEvent=0x164) returned 1
	[0309.576] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0309.580] SetEvent (hEvent=0x1b0) returned 1
	[0309.581] SetEvent (hEvent=0x218) returned 1
	[0309.581] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.029] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.035] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.072] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.088] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.628] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.661] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.693] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.702] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.720] SetEvent (hEvent=0x1e0) returned 1
	[0311.720] SetEvent (hEvent=0x1b0) returned 1
	[0311.720] SetEvent (hEvent=0x284) returned 1
	[0311.720] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x102
	[0311.724] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.724] SetEvent (hEvent=0x284) returned 1
	[0311.724] SetEvent (hEvent=0x1b0) returned 1
	[0311.724] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x102
	[0311.728] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.728] SetEvent (hEvent=0x22c) returned 1
	[0311.728] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x102
	[0311.731] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.732] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.747] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.762] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.778] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0311.818] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0312.044] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0312.046] SetEvent (hEvent=0x22c) returned 1
	[0312.047] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0312.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf")) returned 0x220
	[0312.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF", dwFileAttributes=0x220) returned 1
	[0312.053] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0312.125] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11092e08 | out: lpMode=0x11092e08) returned 0
	[0312.125] ReadFile (in: hFile=0x1b4, lpBuffer=0x113f3000, nNumberOfBytesToRead=0x78a, lpNumberOfBytesRead=0x11092e18, lpOverlapped=0x0 | out: lpBuffer=0x113f3000*, lpNumberOfBytesRead=0x11092e18*=0x78a, lpOverlapped=0x0) returned 1
	[0312.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0312.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0312.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113abd02 | out: pbBuffer=0x113abd02) returned 1
	[0312.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113abd56 | out: pbBuffer=0x113abd56) returned 1
	[0312.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113abd89 | out: pbBuffer=0x113abd89) returned 1
	[0312.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0312.131] GetFileType (hFile=0x1b4) returned 0x1
	[0312.131] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.131] WriteFile (in: hFile=0x1b4, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x78a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1133bdfc*=0x78a, lpOverlapped=0x1133be08) returned 1
	[0312.131] GetFileType (hFile=0x1b4) returned 0x1
	[0312.131] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x78a, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.132] GetFileType (hFile=0x1b4) returned 0x1
	[0312.132] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.132] WriteFile (in: hFile=0x1b4, lpBuffer=0x113c0700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113c0700*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0312.132] GetFileType (hFile=0x1b4) returned 0x1
	[0312.132] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x78a, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.132] CloseHandle (hObject=0x1b4) returned 1
	[0312.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf.tl30z")) returned 0x220
	[0312.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.135] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0312.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf")) returned 0x220
	[0312.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF", dwFileAttributes=0x220) returned 1
	[0312.138] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0312.207] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11092e08 | out: lpMode=0x11092e08) returned 0
	[0312.208] ReadFile (in: hFile=0x200, lpBuffer=0x110aea00, nNumberOfBytesToRead=0x634, lpNumberOfBytesRead=0x11092e18, lpOverlapped=0x0 | out: lpBuffer=0x110aea00*, lpNumberOfBytesRead=0x11092e18*=0x634, lpOverlapped=0x0) returned 1
	[0312.213] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0312.213] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332668 | out: pbBuffer=0x11332668) returned 1
	[0312.213] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11434802 | out: pbBuffer=0x11434802) returned 1
	[0312.213] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11434807 | out: pbBuffer=0x11434807) returned 1
	[0312.213] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114348da | out: pbBuffer=0x114348da) returned 1
	[0312.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0312.214] GetFileType (hFile=0x200) returned 0x1
	[0312.214] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.214] WriteFile (in: hFile=0x200, lpBuffer=0x11446000*, nNumberOfBytesToWrite=0x634, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11446000*, lpNumberOfBytesWritten=0x1102ddfc*=0x634, lpOverlapped=0x1102de08) returned 1
	[0312.214] GetFileType (hFile=0x200) returned 0x1
	[0312.215] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x634, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.215] GetFileType (hFile=0x200) returned 0x1
	[0312.215] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.215] WriteFile (in: hFile=0x200, lpBuffer=0x110b1880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110b1880*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0312.215] GetFileType (hFile=0x200) returned 0x1
	[0312.215] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x634, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.215] CloseHandle (hObject=0x200) returned 1
	[0312.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf.tl30z")) returned 0x220
	[0312.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.219] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0312.221] SetEvent (hEvent=0x118) returned 1
	[0312.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp")) returned 0x220
	[0312.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP", dwFileAttributes=0x220) returned 1
	[0312.222] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0312.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0312.313] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11092e08 | out: lpMode=0x11092e08) returned 0
	[0312.313] ReadFile (in: hFile=0x200, lpBuffer=0x1122a000, nNumberOfBytesToRead=0x8628, lpNumberOfBytesRead=0x11092e18, lpOverlapped=0x0 | out: lpBuffer=0x1122a000*, lpNumberOfBytesRead=0x11092e18*=0x8628, lpOverlapped=0x0) returned 1
	[0312.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6990 | out: pbBuffer=0x113e6990) returned 1
	[0312.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6988 | out: pbBuffer=0x113e6988) returned 1
	[0312.319] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123c602 | out: pbBuffer=0x1123c602) returned 1
	[0312.319] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69c0 | out: pbBuffer=0x113e69c0) returned 1
	[0312.320] GetFileType (hFile=0x200) returned 0x1
	[0312.320] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.320] WriteFile (in: hFile=0x200, lpBuffer=0x11144000*, nNumberOfBytesToWrite=0x8628, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11144000*, lpNumberOfBytesWritten=0x1133bdfc*=0x8628, lpOverlapped=0x1133be08) returned 1
	[0312.321] GetFileType (hFile=0x200) returned 0x1
	[0312.321] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x8628, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.321] GetFileType (hFile=0x200) returned 0x1
	[0312.321] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.321] WriteFile (in: hFile=0x200, lpBuffer=0x11154000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11154000*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0312.321] GetFileType (hFile=0x200) returned 0x1
	[0312.321] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x8628, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.322] CloseHandle (hObject=0x200) returned 1
	[0312.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp.tl30z")) returned 0x220
	[0312.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0312.324] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0312.328] SetEvent (hEvent=0x218) returned 1
	[0312.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg")) returned 0x220
	[0312.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG", dwFileAttributes=0x220) returned 1
	[0312.328] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg.tl30z"), dwFlags=0x1) returned 1
	[0312.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0312.448] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11092e08 | out: lpMode=0x11092e08) returned 0
	[0312.448] ReadFile (in: hFile=0x1b4, lpBuffer=0x113d6000, nNumberOfBytesToRead=0x1c94, lpNumberOfBytesRead=0x11092e18, lpOverlapped=0x0 | out: lpBuffer=0x113d6000*, lpNumberOfBytesRead=0x11092e18*=0x1c94, lpOverlapped=0x0) returned 1
	[0312.454] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0312.454] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1135fc02 | out: pbBuffer=0x1135fc02) returned 1
	[0312.455] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0312.455] GetFileType (hFile=0x1b4) returned 0x1
	[0312.455] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.455] WriteFile (in: hFile=0x1b4, lpBuffer=0x113c4000*, nNumberOfBytesToWrite=0x1c94, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113c4000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1c94, lpOverlapped=0x1102be08) returned 1
	[0312.455] GetFileType (hFile=0x1b4) returned 0x1
	[0312.455] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1c94, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.456] GetFileType (hFile=0x1b4) returned 0x1
	[0312.456] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.456] WriteFile (in: hFile=0x1b4, lpBuffer=0x113b8700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113b8700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0312.456] GetFileType (hFile=0x1b4) returned 0x1
	[0312.456] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1c94, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.456] CloseHandle (hObject=0x1b4) returned 1
	[0312.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg.tl30z")) returned 0x220
	[0312.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0312.460] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0312.461] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif")) returned 0x220
	[0312.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF", dwFileAttributes=0x220) returned 1
	[0312.462] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif.tl30z"), dwFlags=0x1) returned 1
	[0313.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0313.592] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11092e08 | out: lpMode=0x11092e08) returned 0
	[0313.592] ReadFile (in: hFile=0x200, lpBuffer=0x11156000, nNumberOfBytesToRead=0x1e55, lpNumberOfBytesRead=0x11092e18, lpOverlapped=0x0 | out: lpBuffer=0x11156000*, lpNumberOfBytesRead=0x11092e18*=0x1e55, lpOverlapped=0x0) returned 1
	[0313.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327e0 | out: pbBuffer=0x113327e0) returned 1
	[0313.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327d8 | out: pbBuffer=0x113327d8) returned 1
	[0313.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11449202 | out: pbBuffer=0x11449202) returned 1
	[0313.598] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0313.598] GetFileType (hFile=0x200) returned 0x1
	[0313.598] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.599] WriteFile (in: hFile=0x200, lpBuffer=0x11172000*, nNumberOfBytesToWrite=0x1e55, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11172000*, lpNumberOfBytesWritten=0x1102ddfc*=0x1e55, lpOverlapped=0x1102de08) returned 1
	[0313.599] GetFileType (hFile=0x200) returned 0x1
	[0313.599] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x1e55, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.599] GetFileType (hFile=0x200) returned 0x1
	[0313.599] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.599] WriteFile (in: hFile=0x200, lpBuffer=0x11166380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11166380*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0313.600] GetFileType (hFile=0x200) returned 0x1
	[0313.600] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x1e55, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.600] CloseHandle (hObject=0x200) returned 1
	[0313.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif.tl30z")) returned 0x220
	[0313.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0313.603] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0313.605] SetEvent (hEvent=0x164) returned 1
	[0313.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp")) returned 0x220
	[0313.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP", dwFileAttributes=0x220) returned 1
	[0313.606] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254
	[0313.650] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x11092e08 | out: lpMode=0x11092e08) returned 0
	[0313.650] ReadFile (in: hFile=0x254, lpBuffer=0x11246000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x11092e18, lpOverlapped=0x0 | out: lpBuffer=0x11246000*, lpNumberOfBytesRead=0x11092e18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0313.753] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0313.753] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11335302 | out: pbBuffer=0x11335302) returned 1
	[0313.753] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11335307 | out: pbBuffer=0x11335307) returned 1
	[0313.753] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1133531e | out: pbBuffer=0x1133531e) returned 1
	[0313.753] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323d0 | out: pbBuffer=0x113323d0) returned 1
	[0313.754] GetFileType (hFile=0x254) returned 0x1
	[0313.755] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.755] WriteFile (in: hFile=0x254, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x11031dfc*=0x7ce0, lpOverlapped=0x11031e08) returned 1
	[0313.755] GetFileType (hFile=0x254) returned 0x1
	[0313.755] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.756] GetFileType (hFile=0x254) returned 0x1
	[0313.756] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.756] WriteFile (in: hFile=0x254, lpBuffer=0x1142d880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1142d880*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0313.756] GetFileType (hFile=0x254) returned 0x1
	[0313.756] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.756] CloseHandle (hObject=0x254) returned 1
	[0313.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp.tl30z")) returned 0x220
	[0313.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0313.765] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0313.768] SetEvent (hEvent=0x27c) returned 1
	[0313.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp")) returned 0x220
	[0313.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP", dwFileAttributes=0x220) returned 1
	[0313.768] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0314.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0314.440] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11092e08 | out: lpMode=0x11092e08) returned 0
	[0314.440] ReadFile (in: hFile=0x290, lpBuffer=0x113b8000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x11092e18, lpOverlapped=0x0 | out: lpBuffer=0x113b8000*, lpNumberOfBytesRead=0x11092e18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0314.456] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66e0 | out: pbBuffer=0x113e66e0) returned 1
	[0314.456] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66d8 | out: pbBuffer=0x113e66d8) returned 1
	[0314.456] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d7c02 | out: pbBuffer=0x111d7c02) returned 1
	[0314.457] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6710 | out: pbBuffer=0x113e6710) returned 1
	[0314.458] GetFileType (hFile=0x290) returned 0x1
	[0314.458] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135fde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.458] WriteFile (in: hFile=0x290, lpBuffer=0x110d4000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x1135fdfc, lpOverlapped=0x1135fe08 | out: lpBuffer=0x110d4000*, lpNumberOfBytesWritten=0x1135fdfc*=0x7ce0, lpOverlapped=0x1135fe08) returned 1
	[0314.459] GetFileType (hFile=0x290) returned 0x1
	[0314.459] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1135fde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.459] GetFileType (hFile=0x290) returned 0x1
	[0314.459] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135fde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.460] WriteFile (in: hFile=0x290, lpBuffer=0x1142d500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1135fdfc, lpOverlapped=0x1135fe08 | out: lpBuffer=0x1142d500*, lpNumberOfBytesWritten=0x1135fdfc*=0x230, lpOverlapped=0x1135fe08) returned 1
	[0314.460] GetFileType (hFile=0x290) returned 0x1
	[0314.460] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1135fde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.460] CloseHandle (hObject=0x290) returned 1
	[0314.502] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0314.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp.tl30z")) returned 0x220
	[0314.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.514] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0314.526] SetEvent (hEvent=0x24c) returned 1
	[0314.526] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0314.533] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0314.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif")) returned 0x220
	[0314.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF", dwFileAttributes=0x220) returned 1
	[0314.628] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif.tl30z"), dwFlags=0x1) returned 1
	[0314.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0314.806] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x11096e08 | out: lpMode=0x11096e08) returned 0
	[0314.806] ReadFile (in: hFile=0x21c, lpBuffer=0x11440000, nNumberOfBytesToRead=0x639b, lpNumberOfBytesRead=0x11096e18, lpOverlapped=0x0 | out: lpBuffer=0x11440000*, lpNumberOfBytesRead=0x11096e18*=0x639b, lpOverlapped=0x0) returned 1
	[0314.838] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0314.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0314.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6258 | out: pbBuffer=0x113e6258) returned 1
	[0314.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b7202 | out: pbBuffer=0x111b7202) returned 1
	[0314.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b7274 | out: pbBuffer=0x111b7274) returned 1
	[0314.843] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x0
	[0314.846] SetEvent (hEvent=0x150) returned 1
	[0314.846] SetEvent (hEvent=0x218) returned 1
	[0314.846] SetEvent (hEvent=0x22c) returned 1
	[0314.847] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0314.848] GetFileType (hFile=0x21c) returned 0x1
	[0314.848] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.848] WriteFile (in: hFile=0x21c, lpBuffer=0x11166000*, nNumberOfBytesToWrite=0x639b, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11166000*, lpNumberOfBytesWritten=0x1133bdfc*=0x639b, lpOverlapped=0x1133be08) returned 1
	[0314.848] GetFileType (hFile=0x21c) returned 0x1
	[0314.848] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x639b, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.849] GetFileType (hFile=0x21c) returned 0x1
	[0314.849] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.849] WriteFile (in: hFile=0x21c, lpBuffer=0x11c35880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11c35880*, lpNumberOfBytesWritten=0x1133bdfc*=0x233, lpOverlapped=0x1133be08) returned 1
	[0314.849] GetFileType (hFile=0x21c) returned 0x1
	[0314.849] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x639b, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.849] CloseHandle (hObject=0x21c) returned 1
	[0314.852] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0314.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif.tl30z")) returned 0x220
	[0314.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0314.894] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.166] SetEvent (hEvent=0x134) returned 1
	[0315.166] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.173] SetEvent (hEvent=0x134) returned 1
	[0315.173] SetEvent (hEvent=0x160) returned 1
	[0315.173] SwitchToThread () returned 1
	[0315.202] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.210] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.315] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.394] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.396] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.442] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.462] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.476] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.624] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.713] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.780] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.840] SetEvent (hEvent=0x234) returned 1
	[0315.840] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.859] SetEvent (hEvent=0x160) returned 1
	[0315.860] SetEvent (hEvent=0x134) returned 1
	[0315.860] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x102
	[0315.864] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.864] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x0
	[0315.866] SetEvent (hEvent=0x160) returned 1
	[0315.866] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x0
	[0315.869] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0315.896] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0316.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg")) returned 0x220
	[0316.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG", dwFileAttributes=0x220) returned 1
	[0316.136] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg.tl30z"), dwFlags=0x1) returned 1
	[0316.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0316.199] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0316.200] ReadFile (in: hFile=0x21c, lpBuffer=0x111ee000, nNumberOfBytesToRead=0xc5d7, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x111ee000*, lpNumberOfBytesRead=0x11288e18*=0xc5d7, lpOverlapped=0x0) returned 1
	[0316.236] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0316.236] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11124702 | out: pbBuffer=0x11124702) returned 1
	[0316.236] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11124781 | out: pbBuffer=0x11124781) returned 1
	[0316.237] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0316.238] GetFileType (hFile=0x21c) returned 0x1
	[0316.238] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0316.238] WriteFile (in: hFile=0x21c, lpBuffer=0x1116e000*, nNumberOfBytesToWrite=0xc5d7, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1116e000*, lpNumberOfBytesWritten=0x11031dfc*=0xc5d7, lpOverlapped=0x11031e08) returned 1
	[0316.239] GetFileType (hFile=0x21c) returned 0x1
	[0316.239] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xc5d7, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0316.239] GetFileType (hFile=0x21c) returned 0x1
	[0316.244] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0316.245] WriteFile (in: hFile=0x21c, lpBuffer=0x110f5500*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110f5500*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0316.245] GetFileType (hFile=0x21c) returned 0x1
	[0316.245] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xc5d7, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0316.245] CloseHandle (hObject=0x21c) returned 1
	[0316.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg.tl30z")) returned 0x220
	[0316.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0316.253] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0316.274] SetEvent (hEvent=0x160) returned 1
	[0316.274] SetEvent (hEvent=0x24c) returned 1
	[0316.274] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0316.278] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0316.280] SetEvent (hEvent=0x160) returned 1
	[0316.280] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0316.284] SetEvent (hEvent=0x160) returned 1
	[0316.284] SetEvent (hEvent=0x24c) returned 1
	[0316.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp.tl30z")) returned 0x220
	[0316.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0316.474] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0316.495] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0316.517] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0316.529] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0316.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg")) returned 0x220
	[0316.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG", dwFileAttributes=0x220) returned 1
	[0316.540] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg.tl30z"), dwFlags=0x1) returned 1
	[0316.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0316.641] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0316.641] ReadFile (in: hFile=0x184, lpBuffer=0x1128e000, nNumberOfBytesToRead=0xa445, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x1128ce18*=0xa445, lpOverlapped=0x0) returned 1
	[0316.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6a0 | out: pbBuffer=0x1140f6a0) returned 1
	[0316.687] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f698 | out: pbBuffer=0x1140f698) returned 1
	[0316.687] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11121202 | out: pbBuffer=0x11121202) returned 1
	[0316.687] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1112129d | out: pbBuffer=0x1112129d) returned 1
	[0316.688] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6d0 | out: pbBuffer=0x1140f6d0) returned 1
	[0316.689] GetFileType (hFile=0x184) returned 0x1
	[0316.689] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.689] WriteFile (in: hFile=0x184, lpBuffer=0x11156000*, nNumberOfBytesToWrite=0xa445, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11156000*, lpNumberOfBytesWritten=0x1102bdfc*=0xa445, lpOverlapped=0x1102be08) returned 1
	[0316.690] GetFileType (hFile=0x184) returned 0x1
	[0316.690] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xa445, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.690] GetFileType (hFile=0x184) returned 0x1
	[0316.691] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.691] WriteFile (in: hFile=0x184, lpBuffer=0x11125880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11125880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0316.691] GetFileType (hFile=0x184) returned 0x1
	[0316.691] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xa445, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.691] CloseHandle (hObject=0x184) returned 1
	[0316.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg.tl30z")) returned 0x220
	[0316.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0316.700] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0316.808] SetEvent (hEvent=0x134) returned 1
	[0316.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf")) returned 0x220
	[0316.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF", dwFileAttributes=0x220) returned 1
	[0316.809] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0317.093] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0317.093] ReadFile (in: hFile=0x21c, lpBuffer=0x11178000, nNumberOfBytesToRead=0x7aac, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11178000*, lpNumberOfBytesRead=0x1128ce18*=0x7aac, lpOverlapped=0x0) returned 1
	[0317.099] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0317.099] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111fbb02 | out: pbBuffer=0x111fbb02) returned 1
	[0317.099] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111fbb3a | out: pbBuffer=0x111fbb3a) returned 1
	[0317.099] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111fbbac | out: pbBuffer=0x111fbbac) returned 1
	[0317.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0317.100] GetFileType (hFile=0x21c) returned 0x1
	[0317.100] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.101] WriteFile (in: hFile=0x21c, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0x7aac, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x1133ddfc*=0x7aac, lpOverlapped=0x1133de08) returned 1
	[0317.101] GetFileType (hFile=0x21c) returned 0x1
	[0317.101] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x7aac, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.102] GetFileType (hFile=0x21c) returned 0x1
	[0317.102] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.102] WriteFile (in: hFile=0x21c, lpBuffer=0x11462000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11462000*, lpNumberOfBytesWritten=0x1133ddfc*=0x233, lpOverlapped=0x1133de08) returned 1
	[0317.102] GetFileType (hFile=0x21c) returned 0x1
	[0317.102] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x7aac, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.102] CloseHandle (hObject=0x21c) returned 1
	[0317.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf.tl30z")) returned 0x220
	[0317.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.124] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.142] SetEvent (hEvent=0x1c4) returned 1
	[0317.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf")) returned 0x220
	[0317.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF", dwFileAttributes=0x220) returned 1
	[0317.143] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0317.211] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0317.211] ReadFile (in: hFile=0x1f4, lpBuffer=0x1108d800, nNumberOfBytesToRead=0x6ec, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1108d800*, lpNumberOfBytesRead=0x1128ce18*=0x6ec, lpOverlapped=0x0) returned 1
	[0317.242] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0317.243] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3f8 | out: pbBuffer=0x1140f3f8) returned 1
	[0317.243] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137de02 | out: pbBuffer=0x1137de02) returned 1
	[0317.243] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137deeb | out: pbBuffer=0x1137deeb) returned 1
	[0317.243] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f430 | out: pbBuffer=0x1140f430) returned 1
	[0317.243] GetFileType (hFile=0x1f4) returned 0x1
	[0317.243] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.244] WriteFile (in: hFile=0x1f4, lpBuffer=0x110e3000*, nNumberOfBytesToWrite=0x6ec, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110e3000*, lpNumberOfBytesWritten=0x11031dfc*=0x6ec, lpOverlapped=0x11031e08) returned 1
	[0317.244] GetFileType (hFile=0x1f4) returned 0x1
	[0317.244] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x6ec, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.244] GetFileType (hFile=0x1f4) returned 0x1
	[0317.244] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.244] WriteFile (in: hFile=0x1f4, lpBuffer=0x113b2e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113b2e00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0317.245] GetFileType (hFile=0x1f4) returned 0x1
	[0317.245] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x6ec, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.245] CloseHandle (hObject=0x1f4) returned 1
	[0317.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf.tl30z")) returned 0x220
	[0317.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.252] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.254] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.260] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf")) returned 0x220
	[0317.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF", dwFileAttributes=0x220) returned 1
	[0317.349] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0317.553] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0317.553] ReadFile (in: hFile=0x21c, lpBuffer=0x1122c000, nNumberOfBytesToRead=0x7ca4, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1122c000*, lpNumberOfBytesRead=0x1131ae18*=0x7ca4, lpOverlapped=0x0) returned 1
	[0317.665] SetEvent (hEvent=0x25c) returned 1
	[0317.666] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69f0 | out: pbBuffer=0x113e69f0) returned 1
	[0317.666] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e69e8 | out: pbBuffer=0x113e69e8) returned 1
	[0317.666] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11170602 | out: pbBuffer=0x11170602) returned 1
	[0317.667] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6a20 | out: pbBuffer=0x113e6a20) returned 1
	[0317.668] GetFileType (hFile=0x21c) returned 0x1
	[0317.668] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.668] WriteFile (in: hFile=0x21c, lpBuffer=0x11c04000*, nNumberOfBytesToWrite=0x7ca4, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11c04000*, lpNumberOfBytesWritten=0x1133ddfc*=0x7ca4, lpOverlapped=0x1133de08) returned 1
	[0317.669] GetFileType (hFile=0x21c) returned 0x1
	[0317.669] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x7ca4, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.669] GetFileType (hFile=0x21c) returned 0x1
	[0317.669] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.669] WriteFile (in: hFile=0x21c, lpBuffer=0x110f1880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110f1880*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0317.670] GetFileType (hFile=0x21c) returned 0x1
	[0317.670] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x7ca4, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.670] CloseHandle (hObject=0x21c) returned 1
	[0317.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf.tl30z")) returned 0x220
	[0317.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.696] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.700] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.718] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111260f0 | out: pbBuffer=0x111260f0) returned 1
	[0317.718] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111260e8 | out: pbBuffer=0x111260e8) returned 1
	[0317.718] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11171b02 | out: pbBuffer=0x11171b02) returned 1
	[0317.719] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126120 | out: pbBuffer=0x11126120) returned 1
	[0317.719] GetFileType (hFile=0x250) returned 0x1
	[0317.719] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.719] WriteFile (in: hFile=0x250, lpBuffer=0x1116c000*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x1116c000*, lpNumberOfBytesWritten=0x11371dfc*=0x540, lpOverlapped=0x11371e08) returned 1
	[0317.720] GetFileType (hFile=0x250) returned 0x1
	[0317.720] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x540, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.720] GetFileType (hFile=0x250) returned 0x1
	[0317.720] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.720] WriteFile (in: hFile=0x250, lpBuffer=0x1134ea80*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x1134ea80*, lpNumberOfBytesWritten=0x11371dfc*=0x221, lpOverlapped=0x11371e08) returned 1
	[0317.720] GetFileType (hFile=0x250) returned 0x1
	[0317.720] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x540, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.720] CloseHandle (hObject=0x250) returned 1
	[0317.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf.tl30z")) returned 0x220
	[0317.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126250 | out: pbBuffer=0x11126250) returned 1
	[0317.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11398602 | out: pbBuffer=0x11398602) returned 1
	[0317.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126280 | out: pbBuffer=0x11126280) returned 1
	[0317.760] GetFileType (hFile=0x224) returned 0x1
	[0317.760] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.763] WriteFile (in: hFile=0x224, lpBuffer=0x113d8000*, nNumberOfBytesToWrite=0x1b04, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x113d8000*, lpNumberOfBytesWritten=0x11371dfc*=0x1b04, lpOverlapped=0x11371e08) returned 1
	[0317.765] GetFileType (hFile=0x224) returned 0x1
	[0317.765] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1b04, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.765] GetFileType (hFile=0x224) returned 0x1
	[0317.765] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.765] WriteFile (in: hFile=0x224, lpBuffer=0x1134f880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x1134f880*, lpNumberOfBytesWritten=0x11371dfc*=0x227, lpOverlapped=0x11371e08) returned 1
	[0317.765] GetFileType (hFile=0x224) returned 0x1
	[0317.766] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1b04, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.766] CloseHandle (hObject=0x224) returned 1
	[0317.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf.tl30z")) returned 0x220
	[0317.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.776] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf")) returned 0x220
	[0317.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF", dwFileAttributes=0x220) returned 1
	[0317.780] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0317.894] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0317.894] ReadFile (in: hFile=0x1d8, lpBuffer=0x11240000, nNumberOfBytesToRead=0x2026, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11240000*, lpNumberOfBytesRead=0x1131be18*=0x2026, lpOverlapped=0x0) returned 1
	[0317.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126100 | out: pbBuffer=0x11126100) returned 1
	[0317.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11320802 | out: pbBuffer=0x11320802) returned 1
	[0317.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126130 | out: pbBuffer=0x11126130) returned 1
	[0317.903] GetFileType (hFile=0x1d8) returned 0x1
	[0317.904] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.904] WriteFile (in: hFile=0x1d8, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0x2026, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x11371dfc*=0x2026, lpOverlapped=0x11371e08) returned 1
	[0317.904] GetFileType (hFile=0x1d8) returned 0x1
	[0317.904] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2026, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.904] GetFileType (hFile=0x1d8) returned 0x1
	[0317.904] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.905] WriteFile (in: hFile=0x1d8, lpBuffer=0x1132aa80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x1132aa80*, lpNumberOfBytesWritten=0x11371dfc*=0x224, lpOverlapped=0x11371e08) returned 1
	[0317.905] GetFileType (hFile=0x1d8) returned 0x1
	[0317.905] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2026, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.905] CloseHandle (hObject=0x1d8) returned 1
	[0317.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf.tl30z")) returned 0x220
	[0317.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.907] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.915] SetEvent (hEvent=0x2a8) returned 1
	[0317.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf")) returned 0x220
	[0317.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF", dwFileAttributes=0x220) returned 1
	[0317.915] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0318.076] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0318.076] ReadFile (in: hFile=0x1cc, lpBuffer=0x110d8000, nNumberOfBytesToRead=0x514c, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x110d8000*, lpNumberOfBytesRead=0x11023e18*=0x514c, lpOverlapped=0x0) returned 1
	[0318.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0318.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0318.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119c802 | out: pbBuffer=0x1119c802) returned 1
	[0318.101] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0318.101] GetFileType (hFile=0x1cc) returned 0x1
	[0318.101] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.102] WriteFile (in: hFile=0x1cc, lpBuffer=0x11292000*, nNumberOfBytesToWrite=0x514c, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11292000*, lpNumberOfBytesWritten=0x1133ddfc*=0x514c, lpOverlapped=0x1133de08) returned 1
	[0318.102] GetFileType (hFile=0x1cc) returned 0x1
	[0318.102] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x514c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.102] GetFileType (hFile=0x1cc) returned 0x1
	[0318.102] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.103] WriteFile (in: hFile=0x1cc, lpBuffer=0x111b0a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111b0a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0318.103] GetFileType (hFile=0x1cc) returned 0x1
	[0318.103] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x514c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.103] CloseHandle (hObject=0x1cc) returned 1
	[0318.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf.tl30z")) returned 0x220
	[0318.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.108] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.110] SetEvent (hEvent=0x284) returned 1
	[0318.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf")) returned 0x220
	[0318.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF", dwFileAttributes=0x220) returned 1
	[0318.111] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0318.472] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0318.472] ReadFile (in: hFile=0x1cc, lpBuffer=0x1115a000, nNumberOfBytesToRead=0x15fe, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1115a000*, lpNumberOfBytesRead=0x11023e18*=0x15fe, lpOverlapped=0x0) returned 1
	[0318.487] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111266a0 | out: pbBuffer=0x111266a0) returned 1
	[0318.487] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141bc02 | out: pbBuffer=0x1141bc02) returned 1
	[0318.487] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111266d0 | out: pbBuffer=0x111266d0) returned 1
	[0318.488] SetEvent (hEvent=0x160) returned 1
	[0318.489] GetFileType (hFile=0x1cc) returned 0x1
	[0318.489] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.489] WriteFile (in: hFile=0x1cc, lpBuffer=0x11184000*, nNumberOfBytesToWrite=0x15fe, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x11184000*, lpNumberOfBytesWritten=0x11371dfc*=0x15fe, lpOverlapped=0x11371e08) returned 1
	[0318.490] GetFileType (hFile=0x1cc) returned 0x1
	[0318.490] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x15fe, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.490] GetFileType (hFile=0x1cc) returned 0x1
	[0318.490] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.490] WriteFile (in: hFile=0x1cc, lpBuffer=0x111f5180*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x111f5180*, lpNumberOfBytesWritten=0x11371dfc*=0x236, lpOverlapped=0x11371e08) returned 1
	[0318.490] GetFileType (hFile=0x1cc) returned 0x1
	[0318.490] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x15fe, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.491] CloseHandle (hObject=0x1cc) returned 1
	[0318.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf.tl30z")) returned 0x220
	[0318.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.539] SwitchToThread () returned 1
	[0318.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf")) returned 0x220
	[0318.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF", dwFileAttributes=0x220) returned 1
	[0318.542] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0318.725] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0318.725] ReadFile (in: hFile=0x1d8, lpBuffer=0x113d8000, nNumberOfBytesToRead=0x1e5c, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x113d8000*, lpNumberOfBytesRead=0x11288e18*=0x1e5c, lpOverlapped=0x0) returned 1
	[0318.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0318.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332388 | out: pbBuffer=0x11332388) returned 1
	[0318.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1132b202 | out: pbBuffer=0x1132b202) returned 1
	[0318.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0318.790] GetFileType (hFile=0x1d8) returned 0x1
	[0318.790] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.790] WriteFile (in: hFile=0x1d8, lpBuffer=0x110dc000*, nNumberOfBytesToWrite=0x1e5c, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x110dc000*, lpNumberOfBytesWritten=0x1136fdfc*=0x1e5c, lpOverlapped=0x1136fe08) returned 1
	[0318.791] GetFileType (hFile=0x1d8) returned 0x1
	[0318.791] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1e5c, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.791] GetFileType (hFile=0x1d8) returned 0x1
	[0318.791] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.791] WriteFile (in: hFile=0x1d8, lpBuffer=0x11461880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x11461880*, lpNumberOfBytesWritten=0x1136fdfc*=0x230, lpOverlapped=0x1136fe08) returned 1
	[0318.792] GetFileType (hFile=0x1d8) returned 0x1
	[0318.792] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1e5c, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.792] CloseHandle (hObject=0x1d8) returned 1
	[0318.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf.tl30z")) returned 0x220
	[0318.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.812] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.836] SetEvent (hEvent=0x25c) returned 1
	[0318.836] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.839] SetEvent (hEvent=0x160) returned 1
	[0318.839] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.843] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.880] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.886] SetEvent (hEvent=0x25c) returned 1
	[0318.886] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf")) returned 0x220
	[0318.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF", dwFileAttributes=0x220) returned 1
	[0318.893] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0318.988] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0318.988] ReadFile (in: hFile=0x224, lpBuffer=0x11090000, nNumberOfBytesToRead=0x51ea, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x11316e18*=0x51ea, lpOverlapped=0x0) returned 1
	[0318.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0318.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113dc802 | out: pbBuffer=0x113dc802) returned 1
	[0318.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0318.995] GetFileType (hFile=0x224) returned 0x1
	[0318.995] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.995] WriteFile (in: hFile=0x224, lpBuffer=0x11460000*, nNumberOfBytesToWrite=0x51ea, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11460000*, lpNumberOfBytesWritten=0x11031dfc*=0x51ea, lpOverlapped=0x11031e08) returned 1
	[0318.996] GetFileType (hFile=0x224) returned 0x1
	[0318.996] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x51ea, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.996] GetFileType (hFile=0x224) returned 0x1
	[0318.996] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.996] WriteFile (in: hFile=0x224, lpBuffer=0x11257500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11257500*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0318.997] GetFileType (hFile=0x224) returned 0x1
	[0318.997] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x51ea, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.997] CloseHandle (hObject=0x224) returned 1
	[0319.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf.tl30z")) returned 0x220
	[0319.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.035] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.038] SetEvent (hEvent=0x27c) returned 1
	[0319.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf")) returned 0x220
	[0319.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF", dwFileAttributes=0x220) returned 1
	[0319.038] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0319.109] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0319.109] ReadFile (in: hFile=0x1cc, lpBuffer=0x1120c000, nNumberOfBytesToRead=0x704e, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1120c000*, lpNumberOfBytesRead=0x11316e18*=0x704e, lpOverlapped=0x0) returned 1
	[0319.116] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332370 | out: pbBuffer=0x11332370) returned 1
	[0319.116] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a1202 | out: pbBuffer=0x110a1202) returned 1
	[0319.116] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0319.117] SetEvent (hEvent=0x164) returned 1
	[0319.118] GetFileType (hFile=0x1cc) returned 0x1
	[0319.118] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.118] WriteFile (in: hFile=0x1cc, lpBuffer=0x11154000*, nNumberOfBytesToWrite=0x704e, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11154000*, lpNumberOfBytesWritten=0x1133bdfc*=0x704e, lpOverlapped=0x1133be08) returned 1
	[0319.119] GetFileType (hFile=0x1cc) returned 0x1
	[0319.119] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x704e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.119] GetFileType (hFile=0x1cc) returned 0x1
	[0319.119] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.119] WriteFile (in: hFile=0x1cc, lpBuffer=0x110b3880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110b3880*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0319.120] GetFileType (hFile=0x1cc) returned 0x1
	[0319.120] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x704e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.120] CloseHandle (hObject=0x1cc) returned 1
	[0319.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf.tl30z")) returned 0x220
	[0319.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.126] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.129] SetEvent (hEvent=0x164) returned 1
	[0319.129] SetEvent (hEvent=0x25c) returned 1
	[0319.129] SwitchToThread () returned 1
	[0319.157] SwitchToThread () returned 1
	[0319.159] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.181] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.201] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.220] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.242] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.264] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.284] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.639] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.651] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.655] SetEvent (hEvent=0x284) returned 1
	[0319.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf")) returned 0x220
	[0319.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF", dwFileAttributes=0x220) returned 1
	[0319.656] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0319.736] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0319.736] ReadFile (in: hFile=0x1c8, lpBuffer=0x113ad000, nNumberOfBytesToRead=0x1724, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x113ad000*, lpNumberOfBytesRead=0x11022e18*=0x1724, lpOverlapped=0x0) returned 1
	[0319.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f550 | out: pbBuffer=0x1140f550) returned 1
	[0319.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f548 | out: pbBuffer=0x1140f548) returned 1
	[0319.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b4802 | out: pbBuffer=0x112b4802) returned 1
	[0319.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b48a4 | out: pbBuffer=0x112b48a4) returned 1
	[0319.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f580 | out: pbBuffer=0x1140f580) returned 1
	[0319.742] GetFileType (hFile=0x1c8) returned 0x1
	[0319.743] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.743] WriteFile (in: hFile=0x1c8, lpBuffer=0x1116a000*, nNumberOfBytesToWrite=0x1724, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1116a000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1724, lpOverlapped=0x1133de08) returned 1
	[0319.743] GetFileType (hFile=0x1c8) returned 0x1
	[0319.743] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1724, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.743] GetFileType (hFile=0x1c8) returned 0x1
	[0319.743] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.744] WriteFile (in: hFile=0x1c8, lpBuffer=0x110dd500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110dd500*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0319.744] GetFileType (hFile=0x1c8) returned 0x1
	[0319.744] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1724, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.744] CloseHandle (hObject=0x1c8) returned 1
	[0319.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf.tl30z")) returned 0x220
	[0319.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.746] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.750] SetEvent (hEvent=0x284) returned 1
	[0319.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf")) returned 0x220
	[0319.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF", dwFileAttributes=0x220) returned 1
	[0319.751] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0319.826] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0319.826] SetEvent (hEvent=0x25c) returned 1
	[0319.826] ReadFile (in: hFile=0x1cc, lpBuffer=0x1113a000, nNumberOfBytesToRead=0x5006, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1113a000*, lpNumberOfBytesRead=0x11022e18*=0x5006, lpOverlapped=0x0) returned 1
	[0319.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0319.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11373202 | out: pbBuffer=0x11373202) returned 1
	[0319.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113732b6 | out: pbBuffer=0x113732b6) returned 1
	[0319.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0319.836] GetFileType (hFile=0x1cc) returned 0x1
	[0319.836] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.837] WriteFile (in: hFile=0x1cc, lpBuffer=0x11c02000*, nNumberOfBytesToWrite=0x5006, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c02000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5006, lpOverlapped=0x1102be08) returned 1
	[0319.837] GetFileType (hFile=0x1cc) returned 0x1
	[0319.837] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x5006, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.837] GetFileType (hFile=0x1cc) returned 0x1
	[0319.837] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.838] WriteFile (in: hFile=0x1cc, lpBuffer=0x1135d880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135d880*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0319.838] GetFileType (hFile=0x1cc) returned 0x1
	[0319.838] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x5006, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.838] CloseHandle (hObject=0x1cc) returned 1
	[0319.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf.tl30z")) returned 0x220
	[0319.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.843] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.846] SetEvent (hEvent=0x164) returned 1
	[0319.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf")) returned 0x220
	[0319.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF", dwFileAttributes=0x220) returned 1
	[0319.846] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0319.990] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0319.990] ReadFile (in: hFile=0x1c8, lpBuffer=0x113a0600, nNumberOfBytesToRead=0x5d0, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x113a0600*, lpNumberOfBytesRead=0x1131ce18*=0x5d0, lpOverlapped=0x0) returned 1
	[0319.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0319.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324f8 | out: pbBuffer=0x113324f8) returned 1
	[0319.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ee602 | out: pbBuffer=0x113ee602) returned 1
	[0319.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113ee6c6 | out: pbBuffer=0x113ee6c6) returned 1
	[0319.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0319.996] GetFileType (hFile=0x1c8) returned 0x1
	[0319.996] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.996] WriteFile (in: hFile=0x1c8, lpBuffer=0x113fd000*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113fd000*, lpNumberOfBytesWritten=0x11031dfc*=0x5d0, lpOverlapped=0x11031e08) returned 1
	[0319.996] GetFileType (hFile=0x1c8) returned 0x1
	[0319.996] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x5d0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.997] GetFileType (hFile=0x1c8) returned 0x1
	[0319.997] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.997] WriteFile (in: hFile=0x1c8, lpBuffer=0x11399500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11399500*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0320.027] GetFileType (hFile=0x1c8) returned 0x1
	[0320.027] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x5d0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.028] CloseHandle (hObject=0x1c8) returned 1
	[0320.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf.tl30z")) returned 0x220
	[0320.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.030] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.034] SetEvent (hEvent=0x164) returned 1
	[0320.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00728_.wmf")) returned 0x220
	[0320.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00728_.WMF", dwFileAttributes=0x220) returned 1
	[0320.034] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00728_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00728_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00728_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00728_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00728_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0320.119] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0320.119] ReadFile (in: hFile=0x204, lpBuffer=0x11383800, nNumberOfBytesToRead=0x1758, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11383800*, lpNumberOfBytesRead=0x1131ce18*=0x1758, lpOverlapped=0x0) returned 1
	[0320.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0320.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113efb02 | out: pbBuffer=0x113efb02) returned 1
	[0320.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113efbd9 | out: pbBuffer=0x113efbd9) returned 1
	[0320.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332840 | out: pbBuffer=0x11332840) returned 1
	[0320.126] GetFileType (hFile=0x204) returned 0x1
	[0320.126] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.126] WriteFile (in: hFile=0x204, lpBuffer=0x11446000*, nNumberOfBytesToWrite=0x1758, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11446000*, lpNumberOfBytesWritten=0x11031dfc*=0x1758, lpOverlapped=0x11031e08) returned 1
	[0320.126] GetFileType (hFile=0x204) returned 0x1
	[0320.127] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1758, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.127] GetFileType (hFile=0x204) returned 0x1
	[0320.127] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.127] WriteFile (in: hFile=0x204, lpBuffer=0x113b9180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113b9180*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0320.127] GetFileType (hFile=0x204) returned 0x1
	[0320.127] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1758, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.127] CloseHandle (hObject=0x204) returned 1
	[0320.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00728_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00728_.wmf.tl30z")) returned 0x220
	[0320.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00728_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.131] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.132] SetEvent (hEvent=0x164) returned 1
	[0320.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00768_.wmf")) returned 0x220
	[0320.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00768_.WMF", dwFileAttributes=0x220) returned 1
	[0320.133] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00768_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00768_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00768_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00768_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00768_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.196] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0320.196] ReadFile (in: hFile=0x224, lpBuffer=0x1113f500, nNumberOfBytesToRead=0x543a, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1113f500*, lpNumberOfBytesRead=0x1131ce18*=0x543a, lpOverlapped=0x0) returned 1
	[0320.202] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66b0 | out: pbBuffer=0x113e66b0) returned 1
	[0320.202] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1118c702 | out: pbBuffer=0x1118c702) returned 1
	[0320.202] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118c70c | out: pbBuffer=0x1118c70c) returned 1
	[0320.202] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118c741 | out: pbBuffer=0x1118c741) returned 1
	[0320.202] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66e0 | out: pbBuffer=0x113e66e0) returned 1
	[0320.203] GetFileType (hFile=0x224) returned 0x1
	[0320.203] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.204] WriteFile (in: hFile=0x224, lpBuffer=0x111f8000*, nNumberOfBytesToWrite=0x543a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111f8000*, lpNumberOfBytesWritten=0x1102bdfc*=0x543a, lpOverlapped=0x1102be08) returned 1
	[0320.204] GetFileType (hFile=0x224) returned 0x1
	[0320.204] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x543a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.204] GetFileType (hFile=0x224) returned 0x1
	[0320.204] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.204] WriteFile (in: hFile=0x224, lpBuffer=0x11173500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11173500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0320.205] GetFileType (hFile=0x224) returned 0x1
	[0320.205] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x543a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.205] CloseHandle (hObject=0x224) returned 1
	[0320.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00768_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00768_.wmf.tl30z")) returned 0x220
	[0320.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00768_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.208] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.211] SetEvent (hEvent=0x164) returned 1
	[0320.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00837_.wmf")) returned 0x220
	[0320.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00837_.WMF", dwFileAttributes=0x220) returned 1
	[0320.211] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00837_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00837_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00837_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00837_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00837_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0320.286] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0320.286] ReadFile (in: hFile=0x298, lpBuffer=0x1135e000, nNumberOfBytesToRead=0x3fe8, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1135e000*, lpNumberOfBytesRead=0x1131ce18*=0x3fe8, lpOverlapped=0x0) returned 1
	[0320.301] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0320.301] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134f202 | out: pbBuffer=0x1134f202) returned 1
	[0320.301] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134f23d | out: pbBuffer=0x1134f23d) returned 1
	[0320.301] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134f245 | out: pbBuffer=0x1134f245) returned 1
	[0320.301] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0320.302] GetFileType (hFile=0x298) returned 0x1
	[0320.302] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.302] WriteFile (in: hFile=0x298, lpBuffer=0x113ec000*, nNumberOfBytesToWrite=0x3fe8, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113ec000*, lpNumberOfBytesWritten=0x1133fdfc*=0x3fe8, lpOverlapped=0x1133fe08) returned 1
	[0320.302] GetFileType (hFile=0x298) returned 0x1
	[0320.302] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x3fe8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.303] GetFileType (hFile=0x298) returned 0x1
	[0320.303] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.303] WriteFile (in: hFile=0x298, lpBuffer=0x11371880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11371880*, lpNumberOfBytesWritten=0x1133fdfc*=0x236, lpOverlapped=0x1133fe08) returned 1
	[0320.303] GetFileType (hFile=0x298) returned 0x1
	[0320.303] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x3fe8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.303] CloseHandle (hObject=0x298) returned 1
	[0320.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00837_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00837_.wmf.tl30z")) returned 0x220
	[0320.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00837_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.306] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.309] SetEvent (hEvent=0x25c) returned 1
	[0320.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00915_.wmf")) returned 0x220
	[0320.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00915_.WMF", dwFileAttributes=0x220) returned 1
	[0320.310] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00915_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00915_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00915_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00915_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00915_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0320.388] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0320.388] ReadFile (in: hFile=0x1c8, lpBuffer=0x110e6000, nNumberOfBytesToRead=0x1bf8, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110e6000*, lpNumberOfBytesRead=0x1131ce18*=0x1bf8, lpOverlapped=0x0) returned 1
	[0320.395] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3e0 | out: pbBuffer=0x1140f3e0) returned 1
	[0320.395] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1118de02 | out: pbBuffer=0x1118de02) returned 1
	[0320.396] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0320.396] GetFileType (hFile=0x1c8) returned 0x1
	[0320.396] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.396] WriteFile (in: hFile=0x1c8, lpBuffer=0x111e8000*, nNumberOfBytesToWrite=0x1bf8, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111e8000*, lpNumberOfBytesWritten=0x1102ddfc*=0x1bf8, lpOverlapped=0x1102de08) returned 1
	[0320.396] GetFileType (hFile=0x1c8) returned 0x1
	[0320.397] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1bf8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.397] GetFileType (hFile=0x1c8) returned 0x1
	[0320.397] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.397] WriteFile (in: hFile=0x1c8, lpBuffer=0x11368e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11368e00*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0320.397] GetFileType (hFile=0x1c8) returned 0x1
	[0320.397] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1bf8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.397] CloseHandle (hObject=0x1c8) returned 1
	[0320.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00915_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00915_.wmf.tl30z")) returned 0x220
	[0320.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00915_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.401] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.405] SetEvent (hEvent=0x2a8) returned 1
	[0320.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00938_.wmf")) returned 0x220
	[0320.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00938_.WMF", dwFileAttributes=0x220) returned 1
	[0320.405] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00938_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00938_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00938_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00938_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00938_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0320.492] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0320.492] ReadFile (in: hFile=0x1c8, lpBuffer=0x112c2000, nNumberOfBytesToRead=0x1960, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x112c2000*, lpNumberOfBytesRead=0x1131ce18*=0x1960, lpOverlapped=0x0) returned 1
	[0320.498] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0320.498] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b3302 | out: pbBuffer=0x110b3302) returned 1
	[0320.498] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b3307 | out: pbBuffer=0x110b3307) returned 1
	[0320.499] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0320.499] GetFileType (hFile=0x1c8) returned 0x1
	[0320.499] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.500] WriteFile (in: hFile=0x1c8, lpBuffer=0x1144c000*, nNumberOfBytesToWrite=0x1960, lpNumberOfBytesWritten=0x110a9dfc, lpOverlapped=0x110a9e08 | out: lpBuffer=0x1144c000*, lpNumberOfBytesWritten=0x110a9dfc*=0x1960, lpOverlapped=0x110a9e08) returned 1
	[0320.500] GetFileType (hFile=0x1c8) returned 0x1
	[0320.500] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1960, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.500] GetFileType (hFile=0x1c8) returned 0x1
	[0320.501] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.501] WriteFile (in: hFile=0x1c8, lpBuffer=0x1128f880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x110a9dfc, lpOverlapped=0x110a9e08 | out: lpBuffer=0x1128f880*, lpNumberOfBytesWritten=0x110a9dfc*=0x227, lpOverlapped=0x110a9e08) returned 1
	[0320.501] GetFileType (hFile=0x1c8) returned 0x1
	[0320.501] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1960, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.501] CloseHandle (hObject=0x1c8) returned 1
	[0320.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00938_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00938_.wmf.tl30z")) returned 0x220
	[0320.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00938_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.505] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.509] SetEvent (hEvent=0x284) returned 1
	[0320.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01063_.wmf")) returned 0x220
	[0320.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01063_.WMF", dwFileAttributes=0x220) returned 1
	[0320.510] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01063_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01063_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01063_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01063_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01063_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.642] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0320.642] ReadFile (in: hFile=0x224, lpBuffer=0x113c4000, nNumberOfBytesToRead=0x5b38, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x113c4000*, lpNumberOfBytesRead=0x1131ce18*=0x5b38, lpOverlapped=0x0) returned 1
	[0320.648] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0320.648] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e338 | out: pbBuffer=0x1104e338) returned 1
	[0320.648] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11473402 | out: pbBuffer=0x11473402) returned 1
	[0320.648] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11473464 | out: pbBuffer=0x11473464) returned 1
	[0320.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0320.650] GetFileType (hFile=0x224) returned 0x1
	[0320.650] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.650] WriteFile (in: hFile=0x224, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0x5b38, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x1133bdfc*=0x5b38, lpOverlapped=0x1133be08) returned 1
	[0320.651] GetFileType (hFile=0x224) returned 0x1
	[0320.651] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5b38, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.651] GetFileType (hFile=0x224) returned 0x1
	[0320.652] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.652] WriteFile (in: hFile=0x224, lpBuffer=0x1134d880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1134d880*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0320.652] GetFileType (hFile=0x224) returned 0x1
	[0320.652] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5b38, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.652] CloseHandle (hObject=0x224) returned 1
	[0320.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01063_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01063_.wmf.tl30z")) returned 0x220
	[0320.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01063_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.815] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.822] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.845] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.861] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.878] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.896] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.916] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.935] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.965] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.980] SetEvent (hEvent=0x27c) returned 1
	[0320.981] SetEvent (hEvent=0x134) returned 1
	[0320.981] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x102
	[0320.983] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.983] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x102
	[0320.987] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.987] SetEvent (hEvent=0x2a8) returned 1
	[0320.987] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0x1) returned 0x0
	[0320.992] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0321.416] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0321.419] SetEvent (hEvent=0x27c) returned 1
	[0321.419] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0321.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02253_.wmf")) returned 0x220
	[0321.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02253_.WMF", dwFileAttributes=0x220) returned 1
	[0321.457] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02253_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02253_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02253_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02253_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02253_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.552] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0321.552] ReadFile (in: hFile=0x1c8, lpBuffer=0x1137c000, nNumberOfBytesToRead=0x8e0, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1137c000*, lpNumberOfBytesRead=0x1131de18*=0x8e0, lpOverlapped=0x0) returned 1
	[0321.557] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0321.557] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0321.557] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c4802 | out: pbBuffer=0x110c4802) returned 1
	[0321.558] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0321.558] GetFileType (hFile=0x1c8) returned 0x1
	[0321.558] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.558] WriteFile (in: hFile=0x1c8, lpBuffer=0x11472000*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11472000*, lpNumberOfBytesWritten=0x1102ddfc*=0x8e0, lpOverlapped=0x1102de08) returned 1
	[0321.559] GetFileType (hFile=0x1c8) returned 0x1
	[0321.559] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8e0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.559] GetFileType (hFile=0x1c8) returned 0x1
	[0321.559] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.559] WriteFile (in: hFile=0x1c8, lpBuffer=0x11350a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11350a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x224, lpOverlapped=0x1102de08) returned 1
	[0321.559] GetFileType (hFile=0x1c8) returned 0x1
	[0321.559] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8e0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.560] CloseHandle (hObject=0x1c8) returned 1
	[0321.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02253_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02253_.wmf.tl30z")) returned 0x220
	[0321.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02253_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.563] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0321.567] SetEvent (hEvent=0x27c) returned 1
	[0321.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02269_.wmf")) returned 0x220
	[0321.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02269_.WMF", dwFileAttributes=0x220) returned 1
	[0321.568] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02269_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02269_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02269_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02269_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02269_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.651] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0321.651] ReadFile (in: hFile=0x1c8, lpBuffer=0x11370400, nNumberOfBytesToRead=0xaf0, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11370400*, lpNumberOfBytesRead=0x1131de18*=0xaf0, lpOverlapped=0x0) returned 1
	[0321.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6990 | out: pbBuffer=0x113e6990) returned 1
	[0321.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6988 | out: pbBuffer=0x113e6988) returned 1
	[0321.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f3102 | out: pbBuffer=0x112f3102) returned 1
	[0321.658] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f3145 | out: pbBuffer=0x112f3145) returned 1
	[0321.658] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f31e3 | out: pbBuffer=0x112f31e3) returned 1
	[0321.658] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69c0 | out: pbBuffer=0x113e69c0) returned 1
	[0321.658] GetFileType (hFile=0x1c8) returned 0x1
	[0321.658] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.659] WriteFile (in: hFile=0x1c8, lpBuffer=0x113a2000*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113a2000*, lpNumberOfBytesWritten=0x1133bdfc*=0xaf0, lpOverlapped=0x1133be08) returned 1
	[0321.659] GetFileType (hFile=0x1c8) returned 0x1
	[0321.659] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xaf0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.659] GetFileType (hFile=0x1c8) returned 0x1
	[0321.659] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.659] WriteFile (in: hFile=0x1c8, lpBuffer=0x1135ce00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1135ce00*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0321.660] GetFileType (hFile=0x1c8) returned 0x1
	[0321.660] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xaf0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.660] CloseHandle (hObject=0x1c8) returned 1
	[0321.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02269_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02269_.wmf.tl30z")) returned 0x220
	[0321.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02269_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.664] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0321.666] SetEvent (hEvent=0x27c) returned 1
	[0321.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02437_.wmf")) returned 0x220
	[0321.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02437_.WMF", dwFileAttributes=0x220) returned 1
	[0321.667] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02437_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02437_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02437_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02437_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02437_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.750] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0321.750] ReadFile (in: hFile=0x1c8, lpBuffer=0x111d8600, nNumberOfBytesToRead=0x5b4, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x111d8600*, lpNumberOfBytesRead=0x1131de18*=0x5b4, lpOverlapped=0x0) returned 1
	[0321.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0321.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111de702 | out: pbBuffer=0x111de702) returned 1
	[0321.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111de75b | out: pbBuffer=0x111de75b) returned 1
	[0321.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111de765 | out: pbBuffer=0x111de765) returned 1
	[0321.756] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0321.756] GetFileType (hFile=0x1c8) returned 0x1
	[0321.756] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.756] WriteFile (in: hFile=0x1c8, lpBuffer=0x111f1000*, nNumberOfBytesToWrite=0x5b4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111f1000*, lpNumberOfBytesWritten=0x11031dfc*=0x5b4, lpOverlapped=0x11031e08) returned 1
	[0321.757] GetFileType (hFile=0x1c8) returned 0x1
	[0321.757] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x5b4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.757] GetFileType (hFile=0x1c8) returned 0x1
	[0321.757] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.757] WriteFile (in: hFile=0x1c8, lpBuffer=0x111d3500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111d3500*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0321.758] GetFileType (hFile=0x1c8) returned 0x1
	[0321.758] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x5b4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.758] CloseHandle (hObject=0x1c8) returned 1
	[0321.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02437_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02437_.wmf.tl30z")) returned 0x220
	[0321.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02437_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.761] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xffffffff) returned 0x0
	[0321.765] SetEvent (hEvent=0x27c) returned 1
	[0321.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02617_.wmf")) returned 0x220
	[0321.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02617_.WMF", dwFileAttributes=0x220) returned 1
	[0321.765] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02617_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02617_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02617_.wmf.tl30z"), dwFlags=0x1) 

Thread:
	id = 34
	os_tid = 0xfbc

	[0176.962] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x326fff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x326fff30*=0x1ec) returned 1
	[0176.962] VirtualQuery (in: lpAddress=0x326fff40, lpBuffer=0x326fff40, dwLength=0x1c | out: lpBuffer=0x326fff40*(BaseAddress=0x326ff000, AllocationBase=0x32600000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0176.962] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1f0
	[0176.962] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0177.097] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0177.583] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0177.980] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0178.434] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0179.854] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0180.056] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0180.264] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0181.225] SetEvent (hEvent=0x160) returned 1
	[0181.225] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 0x80
	[0181.226] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", dwFileAttributes=0x80) returned 1
	[0181.226] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.tl30z"), dwFlags=0x1) returned 1
	[0187.731] SetEvent (hEvent=0x150) returned 1
	[0187.731] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0187.837] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0187.838] ReadFile (in: hFile=0x184, lpBuffer=0x1126e480, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1126e480*, lpNumberOfBytesRead=0x11423e18*=0x47e, lpOverlapped=0x0) returned 1
	[0187.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e7b0 | out: pbBuffer=0x1104e7b0) returned 1
	[0187.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e7a8 | out: pbBuffer=0x1104e7a8) returned 1
	[0187.843] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11269302 | out: pbBuffer=0x11269302) returned 1
	[0187.843] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e7e0 | out: pbBuffer=0x1104e7e0) returned 1
	[0187.843] GetFileType (hFile=0x184) returned 0x1
	[0187.843] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0187.844] WriteFile (in: hFile=0x184, lpBuffer=0x112b0000*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112b0000*, lpNumberOfBytesWritten=0x1133bdfc*=0x47e, lpOverlapped=0x1133be08) returned 1
	[0187.844] GetFileType (hFile=0x184) returned 0x1
	[0187.844] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0187.844] GetFileType (hFile=0x184) returned 0x1
	[0187.844] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0187.845] WriteFile (in: hFile=0x184, lpBuffer=0x11283180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11283180*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0187.845] GetFileType (hFile=0x184) returned 0x1
	[0187.845] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x47e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0187.845] CloseHandle (hObject=0x184) returned 1
	[0187.996] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.tl30z")) returned 0x20
	[0187.996] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0188.003] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0188.796] SetEvent (hEvent=0x118) returned 1
	[0188.796] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0188.915] SetEvent (hEvent=0x1bc) returned 1
	[0188.915] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0188.972] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0189.200] SetEvent (hEvent=0x1bc) returned 1
	[0189.200] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 0x80
	[0189.200] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", dwFileAttributes=0x80) returned 1
	[0189.211] MoveFileExW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.tl30z"), dwFlags=0x1) returned 1
	[0189.212] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0189.212] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0189.213] ReadFile (in: hFile=0x1d4, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x13e14, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11288e18*=0x13e14, lpOverlapped=0x0) returned 1
	[0189.295] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0189.695] SwitchToThread () returned 1
	[0189.819] SetEvent (hEvent=0x1bc) returned 1
	[0189.819] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0189.943] SetEvent (hEvent=0x1bc) returned 1
	[0189.943] SetEvent (hEvent=0x1e0) returned 1
	[0190.151] SetEvent (hEvent=0x1e8) returned 1
	[0190.151] SetEvent (hEvent=0x134) returned 1
	[0190.290] SetEvent (hEvent=0x118) returned 1
	[0190.290] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0190.722] SetEvent (hEvent=0x1bc) returned 1
	[0190.722] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0191.013] SwitchToThread () returned 1
	[0191.128] VirtualAlloc (lpAddress=0x1106a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1106a000
	[0191.128] VirtualFree (lpAddress=0x11900000, dwSize=0x300000, dwFreeType=0x4000) returned 1
	[0191.153] SetEvent (hEvent=0x1e0) returned 1
	[0191.154] VirtualAlloc (lpAddress=0x1107a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1107a000
	[0191.155] VirtualAlloc (lpAddress=0x11330000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11330000
	[0191.156] VirtualAlloc (lpAddress=0x113d2000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x113d2000
	[0191.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0191.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113640f8 | out: pbBuffer=0x113640f8) returned 1
	[0191.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11241302 | out: pbBuffer=0x11241302) returned 1
	[0191.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112413e5 | out: pbBuffer=0x112413e5) returned 1
	[0191.158] VirtualAlloc (lpAddress=0x11344000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11344000
	[0191.158] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0191.159] VirtualAlloc (lpAddress=0x1105a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1105a000
	[0191.161] VirtualAlloc (lpAddress=0x1126a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1126a000
	[0191.162] VirtualAlloc (lpAddress=0x11562000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0x11562000
	[0191.294] SwitchToThread () returned 1
	[0191.425] VirtualAlloc (lpAddress=0x11328000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11328000
	[0191.426] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0191.575] SetEvent (hEvent=0x1e0) returned 1
	[0191.575] ReadFile (in: hFile=0x16c, lpBuffer=0x11b00000, nNumberOfBytesToRead=0x3704, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11b00000*, lpNumberOfBytesRead=0x11425e18*=0x3704, lpOverlapped=0x0) returned 1
	[0191.717] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0191.836] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0192.068] SwitchToThread () returned 1
	[0192.309] SwitchToThread () returned 1
	[0192.460] SetEvent (hEvent=0x164) returned 1
	[0192.460] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0192.543] ReadFile (in: hFile=0x1cc, lpBuffer=0x1129e000, nNumberOfBytesToRead=0x97f2, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1129e000*, lpNumberOfBytesRead=0x1131ae18*=0x97f2, lpOverlapped=0x0) returned 1
	[0192.696] SwitchToThread () returned 1
	[0192.759] SetEvent (hEvent=0x164) returned 1
	[0192.759] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0192.917] SetEvent (hEvent=0x164) returned 1
	[0192.918] SetEvent (hEvent=0x1e0) returned 1
	[0192.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113640f0 | out: pbBuffer=0x113640f0) returned 1
	[0192.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11330802 | out: pbBuffer=0x11330802) returned 1
	[0192.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364120 | out: pbBuffer=0x11364120) returned 1
	[0192.920] GetFileType (hFile=0x1d8) returned 0x1
	[0192.920] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0192.920] WriteFile (in: hFile=0x1d8, lpBuffer=0x1141c000*, nNumberOfBytesToWrite=0x2796, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1141c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2796, lpOverlapped=0x1102be08) returned 1
	[0192.921] GetFileType (hFile=0x1d8) returned 0x1
	[0192.921] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2796, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0192.921] GetFileType (hFile=0x1d8) returned 0x1
	[0192.921] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0192.922] WriteFile (in: hFile=0x1d8, lpBuffer=0x110f8e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110f8e00*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0192.922] GetFileType (hFile=0x1d8) returned 0x1
	[0192.922] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2796, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0192.922] CloseHandle (hObject=0x1d8) returned 1
	[0192.924] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.tl30z" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.tl30z")) returned 0x20
	[0192.924] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.tl30z", dwFileAttributes=0x21) returned 1
	[0192.926] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364270 | out: pbBuffer=0x11364270) returned 1
	[0192.926] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11364268 | out: pbBuffer=0x11364268) returned 1
	[0192.926] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11331302 | out: pbBuffer=0x11331302) returned 1
	[0192.926] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11331359 | out: pbBuffer=0x11331359) returned 1
	[0192.926] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113642a0 | out: pbBuffer=0x113642a0) returned 1
	[0192.928] GetFileType (hFile=0x1b4) returned 0x1
	[0192.929] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0192.929] WriteFile (in: hFile=0x1b4, lpBuffer=0x11354000*, nNumberOfBytesToWrite=0xd489, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11354000*, lpNumberOfBytesWritten=0x1102bdfc*=0xd489, lpOverlapped=0x1102be08) returned 1
	[0192.930] GetFileType (hFile=0x1b4) returned 0x1
	[0192.930] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xd489, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0192.931] GetFileType (hFile=0x1b4) returned 0x1
	[0192.931] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0192.931] WriteFile (in: hFile=0x1b4, lpBuffer=0x110f9c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110f9c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0193.053] GetFileType (hFile=0x1b4) returned 0x1
	[0193.053] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xd489, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0193.053] CloseHandle (hObject=0x1b4) returned 1
	[0193.071] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.tl30z" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.tl30z")) returned 0x20
	[0193.071] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.tl30z", dwFileAttributes=0x21) returned 1
	[0193.074] SwitchToThread () returned 1
	[0193.448] SwitchToThread () returned 1
	[0193.652] SetEvent (hEvent=0x1bc) returned 1
	[0193.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113643e0 | out: pbBuffer=0x113643e0) returned 1
	[0193.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113643d8 | out: pbBuffer=0x113643d8) returned 1
	[0193.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11331d02 | out: pbBuffer=0x11331d02) returned 1
	[0193.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11331d63 | out: pbBuffer=0x11331d63) returned 1
	[0193.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364410 | out: pbBuffer=0x11364410) returned 1
	[0193.655] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0193.780] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0193.888] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0193.888] SetEvent (hEvent=0x150) returned 1
	[0193.888] SetEvent (hEvent=0x1e0) returned 1
	[0193.889] VirtualAlloc (lpAddress=0x11530000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11530000
	[0193.890] VirtualAlloc (lpAddress=0x11534000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11534000
	[0193.892] VirtualAlloc (lpAddress=0x11538000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0x11538000
	[0193.899] VirtualAlloc (lpAddress=0x11556000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11556000
	[0193.899] VirtualAlloc (lpAddress=0x11558000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11558000
	[0193.900] VirtualAlloc (lpAddress=0x1155a000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1155a000
	[0193.901] VirtualAlloc (lpAddress=0x11b2c000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x11b2c000
	[0193.906] GetFileType (hFile=0x1c8) returned 0x1
	[0193.907] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0193.907] WriteFile (in: hFile=0x1c8, lpBuffer=0x11b2c000*, nNumberOfBytesToWrite=0x12266, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11b2c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x12266, lpOverlapped=0x1102be08) returned 1
	[0193.908] GetFileType (hFile=0x1c8) returned 0x1
	[0193.908] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x12266, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0193.908] GetFileType (hFile=0x1c8) returned 0x1
	[0193.908] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0193.908] WriteFile (in: hFile=0x1c8, lpBuffer=0x1127ea80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1127ea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0193.910] GetFileType (hFile=0x1c8) returned 0x1
	[0193.911] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x12266, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0193.911] CloseHandle (hObject=0x1c8) returned 1
	[0194.124] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.tl30z")) returned 0x20
	[0194.124] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.tl30z", dwFileAttributes=0x21) returned 1
	[0194.125] SetEvent (hEvent=0x164) returned 1
	[0194.125] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0194.824] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0194.856] SetEvent (hEvent=0x1bc) returned 1
	[0194.856] SetEvent (hEvent=0x164) returned 1
	[0194.856] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0194.921] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0194.921] SwitchToThread () returned 1
	[0194.956] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0194.962] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0194.963] SetEvent (hEvent=0x1bc) returned 1
	[0194.963] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0195.037] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0195.038] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0195.038] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113323a8 | out: pbBuffer=0x113323a8) returned 1
	[0195.038] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11366702 | out: pbBuffer=0x11366702) returned 1
	[0195.039] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323e0 | out: pbBuffer=0x113323e0) returned 1
	[0195.040] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0195.139] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0195.139] SetEvent (hEvent=0x150) returned 1
	[0195.139] SetEvent (hEvent=0x1e0) returned 1
	[0195.139] SetEvent (hEvent=0x164) returned 1
	[0195.140] VirtualAlloc (lpAddress=0x11bcc000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bcc000
	[0195.142] VirtualAlloc (lpAddress=0x11bda000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bda000
	[0195.144] GetFileType (hFile=0x1d0) returned 0x1
	[0195.144] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113c1de0 | out: lpNewFilePointer=0x0) returned 1
	[0195.144] WriteFile (in: hFile=0x1d0, lpBuffer=0x11bda000*, nNumberOfBytesToWrite=0x9400, lpNumberOfBytesWritten=0x113c1dfc, lpOverlapped=0x113c1e08 | out: lpBuffer=0x11bda000*, lpNumberOfBytesWritten=0x113c1dfc*=0x9400, lpOverlapped=0x113c1e08) returned 1
	[0195.145] GetFileType (hFile=0x1d0) returned 0x1
	[0195.145] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x9400, lpNewFilePointer=0x0, dwMoveMethod=0x113c1de0 | out: lpNewFilePointer=0x0) returned 1
	[0195.145] GetFileType (hFile=0x1d0) returned 0x1
	[0195.145] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113c1de0 | out: lpNewFilePointer=0x0) returned 1
	[0195.145] WriteFile (in: hFile=0x1d0, lpBuffer=0x11066e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x113c1dfc, lpOverlapped=0x113c1e08 | out: lpBuffer=0x11066e00*, lpNumberOfBytesWritten=0x113c1dfc*=0x224, lpOverlapped=0x113c1e08) returned 1
	[0195.146] GetFileType (hFile=0x1d0) returned 0x1
	[0195.146] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x9400, lpNewFilePointer=0x0, dwMoveMethod=0x113c1de0 | out: lpNewFilePointer=0x0) returned 1
	[0195.146] CloseHandle (hObject=0x1d0) returned 1
	[0195.152] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.tl30z" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.tl30z")) returned 0x20
	[0195.152] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.tl30z", dwFileAttributes=0x21) returned 1
	[0195.153] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0195.253] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0195.253] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0195.262] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0195.262] SetEvent (hEvent=0x1bc) returned 1
	[0195.262] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0195.294] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0195.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0195.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113323a8 | out: pbBuffer=0x113323a8) returned 1
	[0195.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11314702 | out: pbBuffer=0x11314702) returned 1
	[0195.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11314745 | out: pbBuffer=0x11314745) returned 1
	[0195.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113147c6 | out: pbBuffer=0x113147c6) returned 1
	[0195.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323e0 | out: pbBuffer=0x113323e0) returned 1
	[0195.297] VirtualAlloc (lpAddress=0x11bea000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bea000
	[0195.299] VirtualAlloc (lpAddress=0x11bee000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bee000
	[0195.303] VirtualAlloc (lpAddress=0x11bfc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bfc000
	[0195.350] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0195.418] SetEvent (hEvent=0x118) returned 1
	[0195.418] SwitchToThread () returned 1
	[0195.445] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0195.686] SwitchToThread () returned 1
	[0195.813] SetEvent (hEvent=0x1e0) returned 1
	[0195.813] SetEvent (hEvent=0x1e8) returned 1
	[0195.813] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0196.012] SetEvent (hEvent=0x150) returned 1
	[0196.012] SetEvent (hEvent=0x1e8) returned 1
	[0196.013] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113640f0 | out: pbBuffer=0x113640f0) returned 1
	[0196.013] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11066802 | out: pbBuffer=0x11066802) returned 1
	[0196.013] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364120 | out: pbBuffer=0x11364120) returned 1
	[0196.020] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0196.073] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0196.073] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0196.120] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0196.120] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0196.178] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0196.179] SetEvent (hEvent=0x150) returned 1
	[0196.179] SetEvent (hEvent=0x1e0) returned 1
	[0196.179] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0196.350] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0196.350] SwitchToThread () returned 1
	[0196.726] SwitchToThread () returned 1
	[0196.785] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0196.856] SetEvent (hEvent=0x1e0) returned 1
	[0196.857] VirtualAlloc (lpAddress=0x11c00000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0x11c00000
	[0196.888] VirtualAlloc (lpAddress=0xe62000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0xe62000
	[0196.890] VirtualFree (lpAddress=0x11296000, dwSize=0x34000, dwFreeType=0x4000) returned 1
	[0196.890] VirtualFree (lpAddress=0x115e0000, dwSize=0x18000, dwFreeType=0x4000) returned 1
	[0196.892] VirtualFree (lpAddress=0x112fe000, dwSize=0x18000, dwFreeType=0x4000) returned 1
	[0196.899] VirtualFree (lpAddress=0x11b00000, dwSize=0x10000, dwFreeType=0x4000) returned 1
	[0196.900] VirtualFree (lpAddress=0x119b6000, dwSize=0x15a000, dwFreeType=0x4000) returned 1
	[0196.908] VirtualFree (lpAddress=0x11554000, dwSize=0xa000, dwFreeType=0x4000) returned 1
	[0196.909] VirtualFree (lpAddress=0x113c6000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0196.909] VirtualFree (lpAddress=0x11354000, dwSize=0x4000, dwFreeType=0x4000) returned 1
	[0196.909] VirtualFree (lpAddress=0x1142c000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0196.910] VirtualFree (lpAddress=0x113e8000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0196.910] VirtualFree (lpAddress=0x11376000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0196.910] VirtualFree (lpAddress=0x11344000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0196.911] VirtualFree (lpAddress=0x11340000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0196.911] VirtualFree (lpAddress=0x11334000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0196.911] VirtualFree (lpAddress=0x11330000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0196.911] VirtualFree (lpAddress=0x112ea000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0196.912] VirtualFree (lpAddress=0x110ec000, dwSize=0x2000, dwFreeType=0x4000) returned 1
	[0197.012] SetEvent (hEvent=0x118) returned 1
	[0197.012] GetFileType (hFile=0x1b4) returned 0x1
	[0197.013] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1131cde0 | out: lpNewFilePointer=0x0) returned 1
	[0197.013] WriteFile (in: hFile=0x1b4, lpBuffer=0x11c00000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x1131cdfc, lpOverlapped=0x1131ce08 | out: lpBuffer=0x11c00000*, lpNumberOfBytesWritten=0x1131cdfc*=0x100000, lpOverlapped=0x1131ce08) returned 1
	[0197.147] GetFileType (hFile=0x1b4) returned 0x1
	[0197.147] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x100000, lpNewFilePointer=0x0, dwMoveMethod=0x1131cde0 | out: lpNewFilePointer=0x0) returned 1
	[0197.147] GetFileType (hFile=0x1b4) returned 0x1
	[0197.148] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1131cde0 | out: lpNewFilePointer=0x0) returned 1
	[0197.148] WriteFile (in: hFile=0x1b4, lpBuffer=0x112ca000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0x1131cdfc, lpOverlapped=0x1131ce08 | out: lpBuffer=0x112ca000*, lpNumberOfBytesWritten=0x1131cdfc*=0x2d8, lpOverlapped=0x1131ce08) returned 1
	[0213.206] SetEvent (hEvent=0x150) returned 1
	[0213.206] GetFileType (hFile=0x1b4) returned 0x1
	[0213.206] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x100000, lpNewFilePointer=0x0, dwMoveMethod=0x1131cde0 | out: lpNewFilePointer=0x0) returned 1
	[0213.206] CloseHandle (hObject=0x1b4) returned 1
	[0214.751] SetEvent (hEvent=0x150) returned 1
	[0214.751] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.tl30z" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.tl30z")) returned 0x20
	[0214.752] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.tl30z", dwFileAttributes=0x21) returned 1
	[0214.752] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0214.802] SetEvent (hEvent=0x284) returned 1
	[0214.802] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 0x20
	[0214.803] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0214.803] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.tl30z"), dwFlags=0x1) returned 1
	[0222.820] SetEvent (hEvent=0x150) returned 1
	[0222.820] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0222.876] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0222.876] ReadFile (in: hFile=0x1b4, lpBuffer=0x110df000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110df000*, lpNumberOfBytesRead=0x1131ce18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0222.912] SetEvent (hEvent=0x150) returned 1
	[0222.913] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113645a0 | out: pbBuffer=0x113645a0) returned 1
	[0222.914] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11364598 | out: pbBuffer=0x11364598) returned 1
	[0222.914] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c8802 | out: pbBuffer=0x110c8802) returned 1
	[0222.915] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113645d0 | out: pbBuffer=0x113645d0) returned 1
	[0222.915] VirtualAlloc (lpAddress=0x116d4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x116d4000
	[0222.917] VirtualAlloc (lpAddress=0x116d8000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x116d8000
	[0222.918] GetFileType (hFile=0x1b4) returned 0x1
	[0222.919] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.919] WriteFile (in: hFile=0x1b4, lpBuffer=0x116d8000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x115dbdfc, lpOverlapped=0x115dbe08 | out: lpBuffer=0x116d8000*, lpNumberOfBytesWritten=0x115dbdfc*=0x6ccc, lpOverlapped=0x115dbe08) returned 1
	[0222.919] GetFileType (hFile=0x1b4) returned 0x1
	[0222.919] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.920] GetFileType (hFile=0x1b4) returned 0x1
	[0222.920] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.920] WriteFile (in: hFile=0x1b4, lpBuffer=0x110ad500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x115dbdfc, lpOverlapped=0x115dbe08 | out: lpBuffer=0x110ad500*, lpNumberOfBytesWritten=0x115dbdfc*=0x230, lpOverlapped=0x115dbe08) returned 1
	[0222.920] GetFileType (hFile=0x1b4) returned 0x1
	[0222.920] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.921] CloseHandle (hObject=0x1b4) returned 1
	[0222.981] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.tl30z")) returned 0x20
	[0222.981] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0223.035] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0223.350] SetEvent (hEvent=0x264) returned 1
	[0223.350] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 0x20
	[0223.351] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0223.351] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0225.327] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0225.332] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0225.332] ReadFile (in: hFile=0x1d0, lpBuffer=0x115bd000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x115bd000*, lpNumberOfBytesRead=0x1131ce18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0225.338] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364880 | out: pbBuffer=0x11364880) returned 1
	[0225.338] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11364878 | out: pbBuffer=0x11364878) returned 1
	[0225.338] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c9e02 | out: pbBuffer=0x110c9e02) returned 1
	[0225.339] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c9e8b | out: pbBuffer=0x110c9e8b) returned 1
	[0225.339] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113648b0 | out: pbBuffer=0x113648b0) returned 1
	[0225.340] GetFileType (hFile=0x1d0) returned 0x1
	[0225.340] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129bde0 | out: lpNewFilePointer=0x0) returned 1
	[0225.340] WriteFile (in: hFile=0x1d0, lpBuffer=0x11692000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1129bdfc, lpOverlapped=0x1129be08 | out: lpBuffer=0x11692000*, lpNumberOfBytesWritten=0x1129bdfc*=0x6ccc, lpOverlapped=0x1129be08) returned 1
	[0225.341] GetFileType (hFile=0x1d0) returned 0x1
	[0225.341] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1129bde0 | out: lpNewFilePointer=0x0) returned 1
	[0225.341] GetFileType (hFile=0x1d0) returned 0x1
	[0225.341] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129bde0 | out: lpNewFilePointer=0x0) returned 1
	[0225.341] WriteFile (in: hFile=0x1d0, lpBuffer=0x115d3180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1129bdfc, lpOverlapped=0x1129be08 | out: lpBuffer=0x115d3180*, lpNumberOfBytesWritten=0x1129bdfc*=0x230, lpOverlapped=0x1129be08) returned 1
	[0225.342] GetFileType (hFile=0x1d0) returned 0x1
	[0225.342] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1129bde0 | out: lpNewFilePointer=0x0) returned 1
	[0225.342] CloseHandle (hObject=0x1d0) returned 1
	[0225.355] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.tl30z")) returned 0x20
	[0225.355] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0225.364] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0225.369] SetEvent (hEvent=0x23c) returned 1
	[0225.370] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 0x20
	[0225.370] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx", dwFileAttributes=0x20) returned 1
	[0225.370] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.tl30z"), dwFlags=0x1) returned 1
	[0226.229] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0226.236] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0226.237] ReadFile (in: hFile=0x1cc, lpBuffer=0x11204000, nNumberOfBytesToRead=0x11fd7, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11204000*, lpNumberOfBytesRead=0x1131ce18*=0x11fd7, lpOverlapped=0x0) returned 1
	[0226.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e2d0 | out: pbBuffer=0x1104e2d0) returned 1
	[0226.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134f502 | out: pbBuffer=0x1134f502) returned 1
	[0226.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134f57a | out: pbBuffer=0x1134f57a) returned 1
	[0226.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e300 | out: pbBuffer=0x1104e300) returned 1
	[0226.250] GetFileType (hFile=0x1cc) returned 0x1
	[0226.250] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.250] WriteFile (in: hFile=0x1cc, lpBuffer=0x112a0000*, nNumberOfBytesToWrite=0x11fd7, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x112a0000*, lpNumberOfBytesWritten=0x112f3dfc*=0x11fd7, lpOverlapped=0x112f3e08) returned 1
	[0226.251] GetFileType (hFile=0x1cc) returned 0x1
	[0226.251] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x11fd7, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.251] GetFileType (hFile=0x1cc) returned 0x1
	[0226.251] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.252] WriteFile (in: hFile=0x1cc, lpBuffer=0x1133f880*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1133f880*, lpNumberOfBytesWritten=0x112f3dfc*=0x245, lpOverlapped=0x112f3e08) returned 1
	[0226.264] GetFileType (hFile=0x1cc) returned 0x1
	[0226.264] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x11fd7, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.264] CloseHandle (hObject=0x1cc) returned 1
	[0226.354] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.tl30z")) returned 0x20
	[0226.354] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0226.362] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0226.369] SetEvent (hEvent=0x25c) returned 1
	[0226.369] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 0x20
	[0226.369] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0226.370] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0226.910] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0226.925] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1155be08 | out: lpMode=0x1155be08) returned 0
	[0226.926] ReadFile (in: hFile=0x1cc, lpBuffer=0x1116e000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1155be18, lpOverlapped=0x0 | out: lpBuffer=0x1116e000*, lpNumberOfBytesRead=0x1155be18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0226.990] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364420 | out: pbBuffer=0x11364420) returned 1
	[0226.991] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11364418 | out: pbBuffer=0x11364418) returned 1
	[0226.991] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11190002 | out: pbBuffer=0x11190002) returned 1
	[0226.991] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119008e | out: pbBuffer=0x1119008e) returned 1
	[0226.991] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364450 | out: pbBuffer=0x11364450) returned 1
	[0226.992] GetFileType (hFile=0x1cc) returned 0x1
	[0226.992] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.992] WriteFile (in: hFile=0x1cc, lpBuffer=0x111ac000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x111ac000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6ccc, lpOverlapped=0x112f5e08) returned 1
	[0226.993] GetFileType (hFile=0x1cc) returned 0x1
	[0226.993] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.993] GetFileType (hFile=0x1cc) returned 0x1
	[0226.993] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.993] WriteFile (in: hFile=0x1cc, lpBuffer=0x11182a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11182a80*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0226.995] GetFileType (hFile=0x1cc) returned 0x1
	[0226.995] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.995] CloseHandle (hObject=0x1cc) returned 1
	[0227.093] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.tl30z")) returned 0x20
	[0227.097] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0227.101] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0227.116] SetEvent (hEvent=0x25c) returned 1
	[0227.116] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 0x20
	[0227.116] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0227.117] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0227.859] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0227.866] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0227.866] ReadFile (in: hFile=0x1b4, lpBuffer=0x11058000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x1131ce18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0227.881] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0227.881] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0227.881] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11280802 | out: pbBuffer=0x11280802) returned 1
	[0227.882] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0227.882] GetFileType (hFile=0x1b4) returned 0x1
	[0227.882] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0227.883] WriteFile (in: hFile=0x1b4, lpBuffer=0x1139a000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x1139a000*, lpNumberOfBytesWritten=0x112efdfc*=0x6ccc, lpOverlapped=0x112efe08) returned 1
	[0227.883] GetFileType (hFile=0x1b4) returned 0x1
	[0227.883] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0227.884] GetFileType (hFile=0x1b4) returned 0x1
	[0227.884] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0227.884] WriteFile (in: hFile=0x1b4, lpBuffer=0x1133ea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x1133ea80*, lpNumberOfBytesWritten=0x112efdfc*=0x230, lpOverlapped=0x112efe08) returned 1
	[0227.885] GetFileType (hFile=0x1b4) returned 0x1
	[0227.885] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0227.885] CloseHandle (hObject=0x1b4) returned 1
	[0227.894] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.tl30z")) returned 0x20
	[0227.894] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0227.899] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0227.910] SetEvent (hEvent=0x26c) returned 1
	[0227.910] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 0x20
	[0227.911] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0227.912] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0229.047] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0229.059] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0229.059] ReadFile (in: hFile=0x1b4, lpBuffer=0x114c6000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x114c6000*, lpNumberOfBytesRead=0x1131ce18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0229.068] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0229.068] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332658 | out: pbBuffer=0x11332658) returned 1
	[0229.068] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11093202 | out: pbBuffer=0x11093202) returned 1
	[0229.068] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110932c9 | out: pbBuffer=0x110932c9) returned 1
	[0229.069] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0229.070] GetFileType (hFile=0x1b4) returned 0x1
	[0229.070] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.070] WriteFile (in: hFile=0x1b4, lpBuffer=0x11242000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11242000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0229.071] GetFileType (hFile=0x1b4) returned 0x1
	[0229.071] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.071] GetFileType (hFile=0x1b4) returned 0x1
	[0229.071] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.071] WriteFile (in: hFile=0x1b4, lpBuffer=0x11212380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11212380*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0229.072] GetFileType (hFile=0x1b4) returned 0x1
	[0229.072] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.072] CloseHandle (hObject=0x1b4) returned 1
	[0229.080] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.tl30z")) returned 0x20
	[0229.081] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0229.086] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0229.099] SetEvent (hEvent=0x12c) returned 1
	[0229.099] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 0x20
	[0229.099] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0229.100] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0229.608] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0229.632] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0229.632] ReadFile (in: hFile=0x1b4, lpBuffer=0x113fe000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x113fe000*, lpNumberOfBytesRead=0x1131ce18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0229.650] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0229.650] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0229.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11430802 | out: pbBuffer=0x11430802) returned 1
	[0229.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114308b1 | out: pbBuffer=0x114308b1) returned 1
	[0229.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0229.652] GetFileType (hFile=0x1b4) returned 0x1
	[0229.652] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0229.652] WriteFile (in: hFile=0x1b4, lpBuffer=0x112d4000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x112d4000*, lpNumberOfBytesWritten=0x112efdfc*=0x6ccc, lpOverlapped=0x112efe08) returned 1
	[0229.653] GetFileType (hFile=0x1b4) returned 0x1
	[0229.653] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0229.653] GetFileType (hFile=0x1b4) returned 0x1
	[0229.653] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0229.654] WriteFile (in: hFile=0x1b4, lpBuffer=0x1135ea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x1135ea80*, lpNumberOfBytesWritten=0x112efdfc*=0x230, lpOverlapped=0x112efe08) returned 1
	[0229.654] GetFileType (hFile=0x1b4) returned 0x1
	[0229.654] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0229.654] CloseHandle (hObject=0x1b4) returned 1
	[0229.698] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.tl30z")) returned 0x20
	[0229.698] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0229.764] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0229.791] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0229.853] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0230.029] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0230.344] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0230.467] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0230.473] SetEvent (hEvent=0x1e8) returned 1
	[0230.474] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 0x20
	[0230.474] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0230.474] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0230.998] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0231.051] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0231.051] ReadFile (in: hFile=0x1b4, lpBuffer=0x11354000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11354000*, lpNumberOfBytesRead=0x11316e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0231.066] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0231.066] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1132c802 | out: pbBuffer=0x1132c802) returned 1
	[0231.066] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132c895 | out: pbBuffer=0x1132c895) returned 1
	[0231.067] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0231.068] GetFileType (hFile=0x1b4) returned 0x1
	[0231.068] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.068] WriteFile (in: hFile=0x1b4, lpBuffer=0x110d4000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x110d4000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6ccc, lpOverlapped=0x112f5e08) returned 1
	[0231.069] GetFileType (hFile=0x1b4) returned 0x1
	[0231.069] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.069] GetFileType (hFile=0x1b4) returned 0x1
	[0231.069] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.069] WriteFile (in: hFile=0x1b4, lpBuffer=0x11436a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11436a80*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0231.070] GetFileType (hFile=0x1b4) returned 0x1
	[0231.070] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.070] CloseHandle (hObject=0x1b4) returned 1
	[0231.099] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.tl30z")) returned 0x20
	[0231.099] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0231.110] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0231.165] SetEvent (hEvent=0x12c) returned 1
	[0231.165] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 0x20
	[0231.165] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0231.166] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.tl30z"), dwFlags=0x1) returned 1
	[0232.163] SetEvent (hEvent=0x150) returned 1
	[0232.163] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0232.171] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11559e08 | out: lpMode=0x11559e08) returned 0
	[0232.171] ReadFile (in: hFile=0x204, lpBuffer=0x11228000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11559e18, lpOverlapped=0x0 | out: lpBuffer=0x11228000*, lpNumberOfBytesRead=0x11559e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0232.180] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0232.180] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324f8 | out: pbBuffer=0x113324f8) returned 1
	[0232.180] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1132dc02 | out: pbBuffer=0x1132dc02) returned 1
	[0232.180] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132dc34 | out: pbBuffer=0x1132dc34) returned 1
	[0232.180] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132dcc6 | out: pbBuffer=0x1132dcc6) returned 1
	[0232.181] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0232.182] GetFileType (hFile=0x204) returned 0x1
	[0232.182] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.182] WriteFile (in: hFile=0x204, lpBuffer=0x11264000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11264000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6ccc, lpOverlapped=0x112f5e08) returned 1
	[0232.182] GetFileType (hFile=0x204) returned 0x1
	[0232.183] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.183] GetFileType (hFile=0x204) returned 0x1
	[0232.183] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.183] WriteFile (in: hFile=0x204, lpBuffer=0x11244700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11244700*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0232.184] GetFileType (hFile=0x204) returned 0x1
	[0232.184] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.184] CloseHandle (hObject=0x204) returned 1
	[0232.206] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.tl30z")) returned 0x20
	[0232.206] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0232.261] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0232.424] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0232.488] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0232.652] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0232.771] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0232.776] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0232.800] SetEvent (hEvent=0x23c) returned 1
	[0232.800] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0232.810] SetEvent (hEvent=0x12c) returned 1
	[0232.811] SetEvent (hEvent=0x1e8) returned 1
	[0232.811] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0232.822] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0232.822] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0232.825] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0232.826] SetEvent (hEvent=0x23c) returned 1
	[0232.826] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0232.834] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0232.834] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 0x20
	[0232.834] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0232.835] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0233.950] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0233.961] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11031e08 | out: lpMode=0x11031e08) returned 0
	[0233.961] ReadFile (in: hFile=0x1cc, lpBuffer=0x11308000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11031e18, lpOverlapped=0x0 | out: lpBuffer=0x11308000*, lpNumberOfBytesRead=0x11031e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0233.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0233.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b4802 | out: pbBuffer=0x113b4802) returned 1
	[0233.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b4853 | out: pbBuffer=0x113b4853) returned 1
	[0233.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0233.976] GetFileType (hFile=0x1cc) returned 0x1
	[0233.976] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0233.976] WriteFile (in: hFile=0x1cc, lpBuffer=0x11298000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11298000*, lpNumberOfBytesWritten=0x11031dfc*=0x6ccc, lpOverlapped=0x11031e08) returned 1
	[0233.977] GetFileType (hFile=0x1cc) returned 0x1
	[0233.977] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0233.977] GetFileType (hFile=0x1cc) returned 0x1
	[0233.977] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0233.978] WriteFile (in: hFile=0x1cc, lpBuffer=0x113c6a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113c6a80*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0233.978] GetFileType (hFile=0x1cc) returned 0x1
	[0233.978] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0233.979] CloseHandle (hObject=0x1cc) returned 1
	[0234.087] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.tl30z")) returned 0x20
	[0234.087] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0234.132] GetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 0x20
	[0234.132] SetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx", dwFileAttributes=0x20) returned 1
	[0234.133] MoveFileExW (lpExistingFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), lpNewFileName="C:\\Logs\\Security.evtx.tl30z" (normalized: "c:\\logs\\security.evtx.tl30z"), dwFlags=0x1) returned 1
	[0235.109] SetEvent (hEvent=0x150) returned 1
	[0235.109] CreateFileW (lpFileName="C:\\Logs\\Security.evtx.tl30z" (normalized: "c:\\logs\\security.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0235.117] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1155ae08 | out: lpMode=0x1155ae08) returned 0
	[0235.117] SetEvent (hEvent=0x12c) returned 1
	[0235.118] ReadFile (in: hFile=0x1cc, lpBuffer=0x1125a000, nNumberOfBytesToRead=0x131c2, lpNumberOfBytesRead=0x1155ae18, lpOverlapped=0x0 | out: lpBuffer=0x1125a000*, lpNumberOfBytesRead=0x1155ae18*=0x131c2, lpOverlapped=0x0) returned 1
	[0235.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e750 | out: pbBuffer=0x1104e750) returned 1
	[0235.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11173402 | out: pbBuffer=0x11173402) returned 1
	[0235.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11173408 | out: pbBuffer=0x11173408) returned 1
	[0235.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e780 | out: pbBuffer=0x1104e780) returned 1
	[0235.144] GetFileType (hFile=0x1cc) returned 0x1
	[0235.144] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0235.144] WriteFile (in: hFile=0x1cc, lpBuffer=0x1151c000*, nNumberOfBytesToWrite=0x131c2, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1151c000*, lpNumberOfBytesWritten=0x1102ddfc*=0x131c2, lpOverlapped=0x1102de08) returned 1
	[0235.146] GetFileType (hFile=0x1cc) returned 0x1
	[0235.146] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x131c2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0235.146] GetFileType (hFile=0x1cc) returned 0x1
	[0235.146] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0235.146] WriteFile (in: hFile=0x1cc, lpBuffer=0x114a4700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x114a4700*, lpNumberOfBytesWritten=0x1102ddfc*=0x236, lpOverlapped=0x1102de08) returned 1
	[0235.155] GetFileType (hFile=0x1cc) returned 0x1
	[0235.156] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x131c2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0235.156] CloseHandle (hObject=0x1cc) returned 1
	[0235.418] GetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx.tl30z" (normalized: "c:\\logs\\security.evtx.tl30z")) returned 0x20
	[0235.418] SetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0235.433] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0235.683] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0235.927] SetEvent (hEvent=0x25c) returned 1
	[0235.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 0x20
	[0235.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", dwFileAttributes=0x20) returned 1
	[0235.928] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.tl30z"), dwFlags=0x1) returned 1
	[0235.929] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0235.929] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0235.929] ReadFile (in: hFile=0x1cc, lpBuffer=0x11056150, nNumberOfBytesToRead=0x2e, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11056150*, lpNumberOfBytesRead=0x11428e18*=0x2e, lpOverlapped=0x0) returned 1
	[0235.933] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0235.933] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11242802 | out: pbBuffer=0x11242802) returned 1
	[0235.933] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112428ae | out: pbBuffer=0x112428ae) returned 1
	[0235.933] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0235.933] GetFileType (hFile=0x1cc) returned 0x1
	[0235.933] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0235.934] WriteFile (in: hFile=0x1cc, lpBuffer=0x11248600*, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11248600*, lpNumberOfBytesWritten=0x1102ddfc*=0x2e, lpOverlapped=0x1102de08) returned 1
	[0235.934] GetFileType (hFile=0x1cc) returned 0x1
	[0235.934] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x2e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0235.935] GetFileType (hFile=0x1cc) returned 0x1
	[0235.935] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0235.935] WriteFile (in: hFile=0x1cc, lpBuffer=0x11060e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11060e00*, lpNumberOfBytesWritten=0x1102ddfc*=0x224, lpOverlapped=0x1102de08) returned 1
	[0236.031] GetFileType (hFile=0x1cc) returned 0x1
	[0236.031] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x2e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.031] CloseHandle (hObject=0x1cc) returned 1
	[0236.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.tl30z")) returned 0x20
	[0236.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.tl30z", dwFileAttributes=0x21) returned 1
	[0236.034] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0236.111] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0236.114] SetEvent (hEvent=0x264) returned 1
	[0236.114] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0236.118] SetEvent (hEvent=0x264) returned 1
	[0236.118] SetEvent (hEvent=0x25c) returned 1
	[0236.118] WriteFile (in: hFile=0x1d0, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1bf4, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x112f1bf4*=0x292, lpOverlapped=0x0) returned 1
	[0236.121] CloseHandle (hObject=0x1d0) returned 1
	[0236.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x90300e6d, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x90300e6d, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0236.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440)) returned 1
	[0236.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040)) returned 1
	[0236.126] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40)) returned 1
	[0236.127] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40)) returned 1
	[0236.128] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440)) returned 1
	[0236.128] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440)) returned 1
	[0236.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40)) returned 1
	[0236.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240)) returned 1
	[0236.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1
	[0236.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840)) returned 1
	[0236.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240)) returned 1
	[0236.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1
	[0236.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1
	[0236.135] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1
	[0236.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1
	[0236.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1
	[0236.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00)) returned 1
	[0236.137] SetEvent (hEvent=0x25c) returned 1
	[0236.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1
	[0236.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40)) returned 1
	[0236.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640)) returned 1
	[0236.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440)) returned 1
	[0236.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1
	[0236.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1
	[0236.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840)) returned 1
	[0236.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440)) returned 1
	[0236.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840)) returned 1
	[0236.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240)) returned 1
	[0236.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40)) returned 1
	[0236.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1
	[0236.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40)) returned 1
	[0236.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440)) returned 1
	[0236.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1
	[0236.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40)) returned 1
	[0236.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840)) returned 1
	[0236.313] SetEvent (hEvent=0x150) returned 1
	[0236.313] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640)) returned 1
	[0236.411] SetEvent (hEvent=0x150) returned 1
	[0236.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840)) returned 1
	[0236.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40)) returned 1
	[0236.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40)) returned 1
	[0236.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40)) returned 1
	[0236.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0236.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0236.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0236.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0236.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040)) returned 1
	[0236.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040)) returned 1
	[0236.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40)) returned 1
	[0236.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0)) returned 1
	[0236.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1
	[0236.430] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0)) returned 1
	[0236.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40)) returned 1
	[0236.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40)) returned 1
	[0236.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1
	[0236.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0236.435] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0236.435] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0236.435] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f20b0
	[0236.436] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.436] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0236.436] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1
	[0236.436] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.436] FindClose (in: hFindFile=0x7f20b0 | out: hFindFile=0x7f20b0) returned 1
	[0236.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750)) returned 1
	[0236.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440)) returned 1
	[0236.462] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0236.466] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x112f1c24 | out: lpMode=0x112f1c24) returned 0
	[0236.466] WriteFile (in: hFile=0x1d0, lpBuffer=0x11372000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1bf4, lpOverlapped=0x0 | out: lpBuffer=0x11372000*, lpNumberOfBytesWritten=0x112f1bf4*=0x292, lpOverlapped=0x0) returned 1
	[0236.469] CloseHandle (hObject=0x1d0) returned 1
	[0236.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x9068b48a, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x9068b48a, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0236.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040)) returned 1
	[0236.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40)) returned 1
	[0236.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40)) returned 1
	[0236.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1
	[0236.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1
	[0236.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0236.473] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0236.473] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1fb0
	[0236.476] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.476] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1
	[0236.476] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1
	[0236.476] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1
	[0236.476] FindNextFileW (in: hFindFile=0x7f1fb0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.476] FindClose (in: hFindFile=0x7f1fb0 | out: hFindFile=0x7f1fb0) returned 1
	[0236.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1
	[0236.477] SetEvent (hEvent=0x25c) returned 1
	[0236.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000)) returned 1
	[0236.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40)) returned 1
	[0236.478] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0236.478] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x112f1c24 | out: lpMode=0x112f1c24) returned 0
	[0236.479] WriteFile (in: hFile=0x1d0, lpBuffer=0x11372000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1bf4, lpOverlapped=0x0 | out: lpBuffer=0x11372000*, lpNumberOfBytesWritten=0x112f1bf4*=0x292, lpOverlapped=0x0) returned 1
	[0236.481] CloseHandle (hObject=0x1d0) returned 1
	[0236.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x906a8968, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x906a8968, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0236.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040)) returned 1
	[0236.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40)) returned 1
	[0236.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1
	[0236.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240)) returned 1
	[0236.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40)) returned 1
	[0236.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440)) returned 1
	[0236.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1
	[0236.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840)) returned 1
	[0236.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1
	[0236.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1
	[0236.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40)) returned 1
	[0236.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040)) returned 1
	[0236.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040)) returned 1
	[0236.558] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0236.559] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x112f1ca8 | out: lpMode=0x112f1ca8) returned 0
	[0236.559] WriteFile (in: hFile=0x1cc, lpBuffer=0x113cc000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1c78, lpOverlapped=0x0 | out: lpBuffer=0x113cc000*, lpNumberOfBytesWritten=0x112f1c78*=0x292, lpOverlapped=0x0) returned 1
	[0236.562] CloseHandle (hObject=0x1cc) returned 1
	[0236.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin"), fInfoLevelId=0x0, lpFileInformation=0x112f1b20 | out: lpFileInformation=0x112f1b20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x9076bdf5, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x9076bdf5, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0236.562] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0236.563] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x112f19c8 | out: lpFindFileData=0x112f19c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22f0
	[0236.571] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.574] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1
	[0236.574] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1
	[0236.574] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1
	[0236.574] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1
	[0236.574] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1
	[0236.574] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1
	[0236.574] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1
	[0236.574] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1
	[0236.574] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1
	[0236.574] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1
	[0236.574] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1
	[0236.575] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1
	[0236.575] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1
	[0236.575] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1
	[0236.575] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1
	[0236.575] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1
	[0236.575] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1
	[0236.575] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0236.575] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1
	[0236.575] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1
	[0236.575] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1
	[0236.575] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1
	[0236.575] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1
	[0236.576] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1
	[0236.577] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1
	[0236.577] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1
	[0236.577] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1
	[0236.577] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1
	[0236.577] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1
	[0236.577] FindNextFileW (in: hFindFile=0x7f22f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.577] FindClose (in: hFindFile=0x7f22f0 | out: hFindFile=0x7f22f0) returned 1
	[0236.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1
	[0236.592] SetEvent (hEvent=0x26c) returned 1
	[0236.592] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0236.592] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2330
	[0236.593] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.593] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1
	[0236.593] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.593] FindClose (in: hFindFile=0x7f2330 | out: hFindFile=0x7f2330) returned 1
	[0236.593] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1
	[0236.594] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0236.595] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x112f1c24 | out: lpMode=0x112f1c24) returned 0
	[0236.595] WriteFile (in: hFile=0x1cc, lpBuffer=0x113cc000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1bf4, lpOverlapped=0x0 | out: lpBuffer=0x113cc000*, lpNumberOfBytesWritten=0x112f1bf4*=0x292, lpOverlapped=0x0) returned 1
	[0236.598] CloseHandle (hObject=0x1cc) returned 1
	[0236.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x907c3db6, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x907c3db6, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.598] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\applet"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0236.599] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22b0
	[0236.622] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.622] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.623] FindClose (in: hFindFile=0x7f22b0 | out: hFindFile=0x7f22b0) returned 1
	[0236.623] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\applet\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0236.721] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x112f1c24 | out: lpMode=0x112f1c24) returned 0
	[0236.721] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0236.814] SetEvent (hEvent=0x264) returned 1
	[0236.815] SetEvent (hEvent=0x25c) returned 1
	[0236.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 0x20
	[0236.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", dwFileAttributes=0x20) returned 1
	[0236.815] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.tl30z"), dwFlags=0x1) returned 1
	[0237.211] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0237.212] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x112efe08 | out: lpMode=0x112efe08) returned 0
	[0237.213] ReadFile (in: hFile=0x1d0, lpBuffer=0x11104000, nNumberOfBytesToRead=0xc824, lpNumberOfBytesRead=0x112efe18, lpOverlapped=0x0 | out: lpBuffer=0x11104000*, lpNumberOfBytesRead=0x112efe18*=0xc824, lpOverlapped=0x0) returned 1
	[0237.331] SwitchToThread () returned 1
	[0237.382] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0237.430] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0237.431] SetEvent (hEvent=0x264) returned 1
	[0237.431] SetEvent (hEvent=0x26c) returned 1
	[0237.432] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0237.432] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11334802 | out: pbBuffer=0x11334802) returned 1
	[0237.432] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1133488f | out: pbBuffer=0x1133488f) returned 1
	[0237.433] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0237.434] GetFileType (hFile=0x1d0) returned 0x1
	[0237.434] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0237.435] WriteFile (in: hFile=0x1d0, lpBuffer=0x110f2000*, nNumberOfBytesToWrite=0xc824, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x110f2000*, lpNumberOfBytesWritten=0x112efdfc*=0xc824, lpOverlapped=0x112efe08) returned 1
	[0237.436] GetFileType (hFile=0x1d0) returned 0x1
	[0237.436] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xc824, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0237.436] GetFileType (hFile=0x1d0) returned 0x1
	[0237.436] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0237.436] WriteFile (in: hFile=0x1d0, lpBuffer=0x11358a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11358a80*, lpNumberOfBytesWritten=0x112efdfc*=0x22a, lpOverlapped=0x112efe08) returned 1
	[0237.436] GetFileType (hFile=0x1d0) returned 0x1
	[0237.437] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xc824, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0237.437] CloseHandle (hObject=0x1d0) returned 1
	[0237.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.tl30z")) returned 0x20
	[0237.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.tl30z", dwFileAttributes=0x21) returned 1
	[0237.446] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0237.451] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0237.452] SetEvent (hEvent=0x26c) returned 1
	[0237.452] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0237.473] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0237.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 0x20
	[0237.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf", dwFileAttributes=0x20) returned 1
	[0237.474] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.tl30z"), dwFlags=0x1) returned 1
	[0237.475] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0237.476] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0237.476] ReadFile (in: hFile=0x204, lpBuffer=0x11076480, nNumberOfBytesToRead=0x414, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11076480*, lpNumberOfBytesRead=0x11288e18*=0x414, lpOverlapped=0x0) returned 1
	[0237.481] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e530 | out: pbBuffer=0x1104e530) returned 1
	[0237.481] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11335402 | out: pbBuffer=0x11335402) returned 1
	[0237.481] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1133546b | out: pbBuffer=0x1133546b) returned 1
	[0237.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e560 | out: pbBuffer=0x1104e560) returned 1
	[0237.482] GetFileType (hFile=0x204) returned 0x1
	[0237.482] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0237.482] WriteFile (in: hFile=0x204, lpBuffer=0x11373000*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11373000*, lpNumberOfBytesWritten=0x112f5dfc*=0x414, lpOverlapped=0x112f5e08) returned 1
	[0237.483] GetFileType (hFile=0x204) returned 0x1
	[0237.483] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x414, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0237.483] GetFileType (hFile=0x204) returned 0x1
	[0237.483] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0237.483] WriteFile (in: hFile=0x204, lpBuffer=0x11359880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11359880*, lpNumberOfBytesWritten=0x112f5dfc*=0x221, lpOverlapped=0x112f5e08) returned 1
	[0237.484] GetFileType (hFile=0x204) returned 0x1
	[0237.484] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x414, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0237.484] CloseHandle (hObject=0x204) returned 1
	[0237.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.tl30z")) returned 0x20
	[0237.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.tl30z", dwFileAttributes=0x21) returned 1
	[0237.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 0x20
	[0237.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf", dwFileAttributes=0x20) returned 1
	[0237.487] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.tl30z"), dwFlags=0x1) returned 1
	[0238.968] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0239.054] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0239.054] ReadFile (in: hFile=0x1cc, lpBuffer=0x1134e000, nNumberOfBytesToRead=0x278, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1134e000*, lpNumberOfBytesRead=0x11319e18*=0x278, lpOverlapped=0x0) returned 1
	[0239.190] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0239.191] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0239.285] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141a802 | out: pbBuffer=0x1141a802) returned 1
	[0239.286] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0239.286] GetFileType (hFile=0x1cc) returned 0x1
	[0239.286] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0239.286] WriteFile (in: hFile=0x1cc, lpBuffer=0x11064600*, nNumberOfBytesToWrite=0x278, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11064600*, lpNumberOfBytesWritten=0x11031dfc*=0x278, lpOverlapped=0x11031e08) returned 1
	[0239.286] GetFileType (hFile=0x1cc) returned 0x1
	[0239.287] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0239.287] GetFileType (hFile=0x1cc) returned 0x1
	[0239.287] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0239.287] WriteFile (in: hFile=0x1cc, lpBuffer=0x1127ea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1127ea80*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0239.287] GetFileType (hFile=0x1cc) returned 0x1
	[0239.287] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0239.287] CloseHandle (hObject=0x1cc) returned 1
	[0239.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.tl30z")) returned 0x20
	[0239.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.tl30z", dwFileAttributes=0x21) returned 1
	[0239.484] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.712] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.723] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0239.733] SetEvent (hEvent=0x264) returned 1
	[0239.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 0x20
	[0239.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties", dwFileAttributes=0x20) returned 1
	[0239.734] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.tl30z"), dwFlags=0x1) returned 1
	[0240.176] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0240.194] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0240.194] ReadFile (in: hFile=0x1b4, lpBuffer=0x11311000, nNumberOfBytesToRead=0xe10, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11311000*, lpNumberOfBytesRead=0x1128ae18*=0xe10, lpOverlapped=0x0) returned 1
	[0240.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6440 | out: pbBuffer=0x113e6440) returned 1
	[0240.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6438 | out: pbBuffer=0x113e6438) returned 1
	[0240.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141be02 | out: pbBuffer=0x1141be02) returned 1
	[0240.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1141be50 | out: pbBuffer=0x1141be50) returned 1
	[0240.201] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6470 | out: pbBuffer=0x113e6470) returned 1
	[0240.201] GetFileType (hFile=0x1b4) returned 0x1
	[0240.201] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.201] WriteFile (in: hFile=0x1b4, lpBuffer=0x11434000*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11434000*, lpNumberOfBytesWritten=0x1102ddfc*=0xe10, lpOverlapped=0x1102de08) returned 1
	[0240.202] GetFileType (hFile=0x1b4) returned 0x1
	[0240.202] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xe10, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.202] GetFileType (hFile=0x1b4) returned 0x1
	[0240.202] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.202] WriteFile (in: hFile=0x1b4, lpBuffer=0x11248700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11248700*, lpNumberOfBytesWritten=0x1102ddfc*=0x224, lpOverlapped=0x1102de08) returned 1
	[0240.203] GetFileType (hFile=0x1b4) returned 0x1
	[0240.204] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xe10, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.205] CloseHandle (hObject=0x1b4) returned 1
	[0240.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.tl30z")) returned 0x20
	[0240.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0240.591] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0240.610] SetEvent (hEvent=0x23c) returned 1
	[0240.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 0x20
	[0240.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties", dwFileAttributes=0x20) returned 1
	[0240.611] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.tl30z"), dwFlags=0x1) returned 1
	[0240.940] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0240.984] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0240.984] ReadFile (in: hFile=0x250, lpBuffer=0x11160000, nNumberOfBytesToRead=0xcd5, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11160000*, lpNumberOfBytesRead=0x1131ce18*=0xcd5, lpOverlapped=0x0) returned 1
	[0241.004] SetEvent (hEvent=0x23c) returned 1
	[0241.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e560 | out: pbBuffer=0x1142e560) returned 1
	[0241.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e558 | out: pbBuffer=0x1142e558) returned 1
	[0241.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1149aa02 | out: pbBuffer=0x1149aa02) returned 1
	[0241.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1149aa75 | out: pbBuffer=0x1149aa75) returned 1
	[0241.006] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e590 | out: pbBuffer=0x1142e590) returned 1
	[0241.006] GetFileType (hFile=0x250) returned 0x1
	[0241.006] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.007] WriteFile (in: hFile=0x250, lpBuffer=0x11190000*, nNumberOfBytesToWrite=0xcd5, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11190000*, lpNumberOfBytesWritten=0x11031dfc*=0xcd5, lpOverlapped=0x11031e08) returned 1
	[0241.007] GetFileType (hFile=0x250) returned 0x1
	[0241.007] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xcd5, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.008] GetFileType (hFile=0x250) returned 0x1
	[0241.008] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.008] WriteFile (in: hFile=0x250, lpBuffer=0x11499500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11499500*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0241.008] GetFileType (hFile=0x250) returned 0x1
	[0241.008] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xcd5, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.008] CloseHandle (hObject=0x250) returned 1
	[0241.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.tl30z")) returned 0x20
	[0241.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0241.075] SwitchToThread () returned 1
	[0241.078] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.090] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.170] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.427] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0241.434] SetEvent (hEvent=0x1e0) returned 1
	[0241.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 0x20
	[0241.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", dwFileAttributes=0x20) returned 1
	[0241.435] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.tl30z"), dwFlags=0x1) returned 1
	[0241.955] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0241.959] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0241.959] ReadFile (in: hFile=0x1d0, lpBuffer=0x110e0000, nNumberOfBytesToRead=0x1e7d, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x110e0000*, lpNumberOfBytesRead=0x1131be18*=0x1e7d, lpOverlapped=0x0) returned 1
	[0241.966] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e530 | out: pbBuffer=0x1104e530) returned 1
	[0241.966] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1149be02 | out: pbBuffer=0x1149be02) returned 1
	[0241.966] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1149beb1 | out: pbBuffer=0x1149beb1) returned 1
	[0241.967] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e560 | out: pbBuffer=0x1104e560) returned 1
	[0241.967] GetFileType (hFile=0x1d0) returned 0x1
	[0241.967] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.968] WriteFile (in: hFile=0x1d0, lpBuffer=0x113f8000*, nNumberOfBytesToWrite=0x1e7d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113f8000*, lpNumberOfBytesWritten=0x11031dfc*=0x1e7d, lpOverlapped=0x11031e08) returned 1
	[0241.968] GetFileType (hFile=0x1d0) returned 0x1
	[0241.968] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x1e7d, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.968] GetFileType (hFile=0x1d0) returned 0x1
	[0241.968] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.969] WriteFile (in: hFile=0x1d0, lpBuffer=0x11323880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11323880*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0241.969] GetFileType (hFile=0x1d0) returned 0x1
	[0241.969] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x1e7d, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.969] CloseHandle (hObject=0x1d0) returned 1
	[0241.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.tl30z")) returned 0x20
	[0241.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.tl30z", dwFileAttributes=0x21) returned 1
	[0242.005] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0242.171] SetEvent (hEvent=0x264) returned 1
	[0242.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0x20
	[0242.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", dwFileAttributes=0x20) returned 1
	[0242.172] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.tl30z"), dwFlags=0x1) returned 1
	[0243.933] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0244.032] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x113b0e08 | out: lpMode=0x113b0e08) returned 0
	[0244.032] ReadFile (in: hFile=0x204, lpBuffer=0x110ce000, nNumberOfBytesToRead=0x7fbb, lpNumberOfBytesRead=0x113b0e18, lpOverlapped=0x0 | out: lpBuffer=0x110ce000*, lpNumberOfBytesRead=0x113b0e18*=0x7fbb, lpOverlapped=0x0) returned 1
	[0244.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e530 | out: pbBuffer=0x1104e530) returned 1
	[0244.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133d402 | out: pbBuffer=0x1133d402) returned 1
	[0244.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e560 | out: pbBuffer=0x1104e560) returned 1
	[0244.126] GetFileType (hFile=0x204) returned 0x1
	[0244.126] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f9de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.126] WriteFile (in: hFile=0x204, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x7fbb, lpNumberOfBytesWritten=0x110f9dfc, lpOverlapped=0x110f9e08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x110f9dfc*=0x7fbb, lpOverlapped=0x110f9e08) returned 1
	[0244.127] GetFileType (hFile=0x204) returned 0x1
	[0244.127] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x7fbb, lpNewFilePointer=0x0, dwMoveMethod=0x110f9de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.127] GetFileType (hFile=0x204) returned 0x1
	[0244.127] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f9de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.127] WriteFile (in: hFile=0x204, lpBuffer=0x11059880*, nNumberOfBytesToWrite=0x23f, lpNumberOfBytesWritten=0x110f9dfc, lpOverlapped=0x110f9e08 | out: lpBuffer=0x11059880*, lpNumberOfBytesWritten=0x110f9dfc*=0x23f, lpOverlapped=0x110f9e08) returned 1
	[0244.128] GetFileType (hFile=0x204) returned 0x1
	[0244.128] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x7fbb, lpNewFilePointer=0x0, dwMoveMethod=0x110f9de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.128] CloseHandle (hObject=0x204) returned 1
	[0244.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.tl30z")) returned 0x20
	[0244.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0244.162] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0244.171] SetEvent (hEvent=0x118) returned 1
	[0244.172] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0244.184] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0244.184] SetEvent (hEvent=0x118) returned 1
	[0244.184] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x1) returned 0x102
	[0244.192] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0244.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20
	[0244.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf", dwFileAttributes=0x20) returned 1
	[0244.193] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.tl30z"), dwFlags=0x1) returned 1
	[0245.557] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0245.803] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x113b0e08 | out: lpMode=0x113b0e08) returned 0
	[0245.803] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0245.933] SetEvent (hEvent=0x248) returned 1
	[0245.934] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0246.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 0x20
	[0246.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties", dwFileAttributes=0x20) returned 1
	[0246.708] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.tl30z"), dwFlags=0x1) returned 1
	[0248.524] SetEvent (hEvent=0x150) returned 1
	[0248.524] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0248.527] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0248.527] ReadFile (in: hFile=0x1fc, lpBuffer=0x11334500, nNumberOfBytesToRead=0x500, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11334500*, lpNumberOfBytesRead=0x11428e18*=0x500, lpOverlapped=0x0) returned 1
	[0248.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e6a0 | out: pbBuffer=0x1104e6a0) returned 1
	[0248.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137dc02 | out: pbBuffer=0x1137dc02) returned 1
	[0248.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e6d0 | out: pbBuffer=0x1104e6d0) returned 1
	[0248.538] GetFileType (hFile=0x1fc) returned 0x1
	[0248.538] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0248.538] WriteFile (in: hFile=0x1fc, lpBuffer=0x11320000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11320000*, lpNumberOfBytesWritten=0x112f3dfc*=0x500, lpOverlapped=0x112f3e08) returned 1
	[0248.539] GetFileType (hFile=0x1fc) returned 0x1
	[0248.539] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x500, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0248.539] GetFileType (hFile=0x1fc) returned 0x1
	[0248.539] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0248.539] WriteFile (in: hFile=0x1fc, lpBuffer=0x112d8e00*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x112d8e00*, lpNumberOfBytesWritten=0x112f3dfc*=0x21e, lpOverlapped=0x112f3e08) returned 1
	[0248.539] GetFileType (hFile=0x1fc) returned 0x1
	[0248.539] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x500, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0248.540] CloseHandle (hObject=0x1fc) returned 1
	[0248.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.tl30z")) returned 0x20
	[0248.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0248.560] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0248.571] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0249.187] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0249.194] SetEvent (hEvent=0x118) returned 1
	[0249.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 0x20
	[0249.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc", dwFileAttributes=0x20) returned 1
	[0249.195] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.tl30z"), dwFlags=0x1) returned 1
	[0249.604] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0249.604] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0249.604] ReadFile (in: hFile=0x1d0, lpBuffer=0x11358000, nNumberOfBytesToRead=0x4e61, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11358000*, lpNumberOfBytesRead=0x11023e18*=0x4e61, lpOverlapped=0x0) returned 1
	[0249.621] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0249.621] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e3b8 | out: pbBuffer=0x1104e3b8) returned 1
	[0249.621] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137e902 | out: pbBuffer=0x1137e902) returned 1
	[0249.621] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0249.622] GetFileType (hFile=0x1d0) returned 0x1
	[0249.622] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0249.623] WriteFile (in: hFile=0x1d0, lpBuffer=0x112da000*, nNumberOfBytesToWrite=0x4e61, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x112da000*, lpNumberOfBytesWritten=0x112f5dfc*=0x4e61, lpOverlapped=0x112f5e08) returned 1
	[0249.623] GetFileType (hFile=0x1d0) returned 0x1
	[0249.623] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x4e61, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0249.623] GetFileType (hFile=0x1d0) returned 0x1
	[0249.624] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0249.624] WriteFile (in: hFile=0x1d0, lpBuffer=0x11058a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11058a80*, lpNumberOfBytesWritten=0x112f5dfc*=0x22d, lpOverlapped=0x112f5e08) returned 1
	[0249.624] GetFileType (hFile=0x1d0) returned 0x1
	[0249.624] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x4e61, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0249.624] CloseHandle (hObject=0x1d0) returned 1
	[0249.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.tl30z")) returned 0x20
	[0249.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.tl30z", dwFileAttributes=0x21) returned 1
	[0249.627] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0249.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 0x20
	[0249.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", dwFileAttributes=0x20) returned 1
	[0249.634] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.tl30z"), dwFlags=0x1) returned 1
	[0250.030] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0250.040] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0250.040] ReadFile (in: hFile=0x250, lpBuffer=0x11488000, nNumberOfBytesToRead=0x848c, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11488000*, lpNumberOfBytesRead=0x11023e18*=0x848c, lpOverlapped=0x0) returned 1
	[0250.048] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e290 | out: pbBuffer=0x1142e290) returned 1
	[0250.048] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e288 | out: pbBuffer=0x1142e288) returned 1
	[0250.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1106b502 | out: pbBuffer=0x1106b502) returned 1
	[0250.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2c0 | out: pbBuffer=0x1142e2c0) returned 1
	[0250.050] GetFileType (hFile=0x250) returned 0x1
	[0250.050] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.051] WriteFile (in: hFile=0x250, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x848c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x11031dfc*=0x848c, lpOverlapped=0x11031e08) returned 1
	[0250.051] GetFileType (hFile=0x250) returned 0x1
	[0250.052] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x848c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.052] GetFileType (hFile=0x250) returned 0x1
	[0250.052] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.052] WriteFile (in: hFile=0x250, lpBuffer=0x11285c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11285c00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0250.052] GetFileType (hFile=0x250) returned 0x1
	[0250.052] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x848c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.052] CloseHandle (hObject=0x250) returned 1
	[0250.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.tl30z")) returned 0x20
	[0250.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0250.068] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0250.143] SetEvent (hEvent=0x26c) returned 1
	[0250.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 0x20
	[0250.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access", dwFileAttributes=0x20) returned 1
	[0250.145] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.tl30z"), dwFlags=0x1) returned 1
	[0250.500] SetEvent (hEvent=0x150) returned 1
	[0250.500] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0250.509] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0250.509] ReadFile (in: hFile=0x250, lpBuffer=0x11240000, nNumberOfBytesToRead=0xf9e, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11240000*, lpNumberOfBytesRead=0x11023e18*=0xf9e, lpOverlapped=0x0) returned 1
	[0250.516] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0250.516] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0250.517] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1124c802 | out: pbBuffer=0x1124c802) returned 1
	[0250.517] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0250.517] GetFileType (hFile=0x250) returned 0x1
	[0250.517] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.517] WriteFile (in: hFile=0x250, lpBuffer=0x11278000*, nNumberOfBytesToWrite=0xf9e, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11278000*, lpNumberOfBytesWritten=0x112f3dfc*=0xf9e, lpOverlapped=0x112f3e08) returned 1
	[0250.518] GetFileType (hFile=0x250) returned 0x1
	[0250.518] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xf9e, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.518] GetFileType (hFile=0x250) returned 0x1
	[0250.519] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.519] WriteFile (in: hFile=0x250, lpBuffer=0x11260a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11260a80*, lpNumberOfBytesWritten=0x112f3dfc*=0x233, lpOverlapped=0x112f3e08) returned 1
	[0250.519] GetFileType (hFile=0x250) returned 0x1
	[0250.519] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xf9e, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.519] CloseHandle (hObject=0x250) returned 1
	[0250.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.tl30z")) returned 0x20
	[0250.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.tl30z", dwFileAttributes=0x21) returned 1
	[0250.574] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0250.730] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0250.758] SetEvent (hEvent=0x1e8) returned 1
	[0250.758] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0250.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 0x20
	[0250.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties", dwFileAttributes=0x20) returned 1
	[0250.799] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.tl30z"), dwFlags=0x1) returned 1
	[0251.329] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0251.364] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0251.364] ReadFile (in: hFile=0x1d4, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x1170, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x1128ae18*=0x1170, lpOverlapped=0x0) returned 1
	[0251.370] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0251.370] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11478802 | out: pbBuffer=0x11478802) returned 1
	[0251.370] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114788d8 | out: pbBuffer=0x114788d8) returned 1
	[0251.370] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0251.371] GetFileType (hFile=0x1d4) returned 0x1
	[0251.371] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0251.371] WriteFile (in: hFile=0x1d4, lpBuffer=0x112e6000*, nNumberOfBytesToWrite=0x1170, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x112e6000*, lpNumberOfBytesWritten=0x112f5dfc*=0x1170, lpOverlapped=0x112f5e08) returned 1
	[0251.372] GetFileType (hFile=0x1d4) returned 0x1
	[0251.372] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1170, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0251.372] GetFileType (hFile=0x1d4) returned 0x1
	[0251.372] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0251.372] WriteFile (in: hFile=0x1d4, lpBuffer=0x112d6a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x112d6a80*, lpNumberOfBytesWritten=0x112f5dfc*=0x227, lpOverlapped=0x112f5e08) returned 1
	[0251.373] GetFileType (hFile=0x1d4) returned 0x1
	[0251.373] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1170, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0251.373] CloseHandle (hObject=0x1d4) returned 1
	[0251.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.tl30z")) returned 0x20
	[0251.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0251.414] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0251.599] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0251.664] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0251.728] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0251.844] SetEvent (hEvent=0x134) returned 1
	[0251.844] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0251.866] SetEvent (hEvent=0x24c) returned 1
	[0251.866] SetEvent (hEvent=0x1e8) returned 1
	[0251.866] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0252.541] SetEvent (hEvent=0x24c) returned 1
	[0252.541] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0252.545] SetEvent (hEvent=0x24c) returned 1
	[0252.545] SetEvent (hEvent=0x1e8) returned 1
	[0252.545] SwitchToThread () returned 1
	[0252.572] SwitchToThread () returned 1
	[0252.577] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0253.303] SetEvent (hEvent=0x248) returned 1
	[0253.303] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0253.891] SetEvent (hEvent=0x26c) returned 1
	[0253.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0253.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0253.892] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0254.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0254.855] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0254.855] ReadFile (in: hFile=0x224, lpBuffer=0x111c0000, nNumberOfBytesToRead=0xe2f7, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x1128ce18*=0xe2f7, lpOverlapped=0x0) returned 1
	[0254.869] SetEvent (hEvent=0x150) returned 1
	[0254.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0254.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0254.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11363c02 | out: pbBuffer=0x11363c02) returned 1
	[0254.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11363c61 | out: pbBuffer=0x11363c61) returned 1
	[0254.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11363c92 | out: pbBuffer=0x11363c92) returned 1
	[0254.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11363caf | out: pbBuffer=0x11363caf) returned 1
	[0254.871] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0254.872] GetFileType (hFile=0x224) returned 0x1
	[0254.872] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.872] WriteFile (in: hFile=0x224, lpBuffer=0x11f7a000*, nNumberOfBytesToWrite=0xe2f7, lpNumberOfBytesWritten=0x110abdfc, lpOverlapped=0x110abe08 | out: lpBuffer=0x11f7a000*, lpNumberOfBytesWritten=0x110abdfc*=0xe2f7, lpOverlapped=0x110abe08) returned 1
	[0254.873] GetFileType (hFile=0x224) returned 0x1
	[0254.873] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe2f7, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.873] GetFileType (hFile=0x224) returned 0x1
	[0254.873] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.874] WriteFile (in: hFile=0x224, lpBuffer=0x111d4700*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x110abdfc, lpOverlapped=0x110abe08 | out: lpBuffer=0x111d4700*, lpNumberOfBytesWritten=0x110abdfc*=0x23c, lpOverlapped=0x110abe08) returned 1
	[0254.882] GetFileType (hFile=0x224) returned 0x1
	[0254.882] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe2f7, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.882] CloseHandle (hObject=0x224) returned 1
	[0254.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0254.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0254.910] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0255.958] SetEvent (hEvent=0x218) returned 1
	[0255.958] SetEvent (hEvent=0x210) returned 1
	[0255.958] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0257.628] SetEvent (hEvent=0x234) returned 1
	[0257.628] SetEvent (hEvent=0x218) returned 1
	[0257.628] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0261.027] SetEvent (hEvent=0x1b0) returned 1
	[0261.027] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0262.745] SetEvent (hEvent=0x210) returned 1
	[0262.745] SetEvent (hEvent=0x118) returned 1
	[0262.745] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0264.588] SetEvent (hEvent=0x248) returned 1
	[0264.588] SetEvent (hEvent=0x210) returned 1
	[0264.588] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0266.836] SetEvent (hEvent=0x1b0) returned 1
	[0266.836] SetEvent (hEvent=0x118) returned 1
	[0266.836] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0267.892] SetEvent (hEvent=0x26c) returned 1
	[0267.893] SetEvent (hEvent=0x1b0) returned 1
	[0267.893] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0268.389] SetEvent (hEvent=0x210) returned 1
	[0268.390] SetEvent (hEvent=0x26c) returned 1
	[0268.390] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0269.397] SetEvent (hEvent=0x218) returned 1
	[0269.397] SetEvent (hEvent=0x210) returned 1
	[0269.397] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0270.146] SetEvent (hEvent=0x248) returned 1
	[0270.146] SetEvent (hEvent=0x218) returned 1
	[0270.146] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0271.001] SetEvent (hEvent=0x218) returned 1
	[0271.001] SetEvent (hEvent=0x248) returned 1
	[0271.001] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.064] SetEvent (hEvent=0x26c) returned 1
	[0272.064] SetEvent (hEvent=0x218) returned 1
	[0272.064] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0272.752] SetEvent (hEvent=0x1b0) returned 1
	[0272.752] SetEvent (hEvent=0x26c) returned 1
	[0272.752] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0273.772] SetEvent (hEvent=0x234) returned 1
	[0273.772] SetEvent (hEvent=0x1b0) returned 1
	[0273.772] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0275.098] SetEvent (hEvent=0x210) returned 1
	[0275.098] SetEvent (hEvent=0x234) returned 1
	[0275.098] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0276.080] SetEvent (hEvent=0x118) returned 1
	[0276.080] SetEvent (hEvent=0x210) returned 1
	[0276.080] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0276.820] SetEvent (hEvent=0x218) returned 1
	[0276.820] SetEvent (hEvent=0x118) returned 1
	[0276.820] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0277.627] SetEvent (hEvent=0x248) returned 1
	[0277.627] SetEvent (hEvent=0x218) returned 1
	[0277.627] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0278.740] SetEvent (hEvent=0x26c) returned 1
	[0278.740] SetEvent (hEvent=0x248) returned 1
	[0278.740] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0279.584] SetEvent (hEvent=0x26c) returned 1
	[0279.584] SetEvent (hEvent=0x218) returned 1
	[0279.584] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0280.651] SetEvent (hEvent=0x234) returned 1
	[0280.651] SetEvent (hEvent=0x26c) returned 1
	[0280.652] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0281.416] SetEvent (hEvent=0x248) returned 1
	[0281.416] SetEvent (hEvent=0x234) returned 1
	[0281.416] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0282.657] SetEvent (hEvent=0x1b0) returned 1
	[0282.657] SetEvent (hEvent=0x118) returned 1
	[0282.657] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0283.885] SetEvent (hEvent=0x26c) returned 1
	[0283.885] SetEvent (hEvent=0x210) returned 1
	[0283.885] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0284.303] SetEvent (hEvent=0x210) returned 1
	[0284.303] SetEvent (hEvent=0x26c) returned 1
	[0284.303] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0285.021] SetEvent (hEvent=0x118) returned 1
	[0285.022] SetEvent (hEvent=0x210) returned 1
	[0285.022] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0285.583] SetEvent (hEvent=0x210) returned 1
	[0285.583] SetEvent (hEvent=0x118) returned 1
	[0285.583] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0286.368] SetEvent (hEvent=0x210) returned 1
	[0286.368] SetEvent (hEvent=0x1b0) returned 1
	[0286.368] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0286.909] SetEvent (hEvent=0x234) returned 1
	[0286.910] SetEvent (hEvent=0x210) returned 1
	[0286.910] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0287.666] SetEvent (hEvent=0x1b0) returned 1
	[0287.666] SetEvent (hEvent=0x234) returned 1
	[0287.666] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0288.495] SetEvent (hEvent=0x118) returned 1
	[0288.495] SetEvent (hEvent=0x1b0) returned 1
	[0288.495] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0289.504] SetEvent (hEvent=0x1b0) returned 1
	[0289.504] SetEvent (hEvent=0x118) returned 1
	[0289.504] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0290.392] SetEvent (hEvent=0x248) returned 1
	[0290.392] SetEvent (hEvent=0x1b0) returned 1
	[0290.392] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.147] SetEvent (hEvent=0x234) returned 1
	[0291.147] SetEvent (hEvent=0x118) returned 1
	[0291.147] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.556] SetEvent (hEvent=0x234) returned 1
	[0291.556] SetEvent (hEvent=0x218) returned 1
	[0291.557] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0291.837] SetEvent (hEvent=0x1b0) returned 1
	[0291.837] SetEvent (hEvent=0x234) returned 1
	[0291.838] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0292.255] SetEvent (hEvent=0x248) returned 1
	[0292.255] SetEvent (hEvent=0x1b0) returned 1
	[0292.255] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.254] SetEvent (hEvent=0x210) returned 1
	[0293.254] SetEvent (hEvent=0x248) returned 1
	[0293.254] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.536] SetEvent (hEvent=0x218) returned 1
	[0293.536] SetEvent (hEvent=0x210) returned 1
	[0293.536] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.834] SetEvent (hEvent=0x210) returned 1
	[0293.834] SetEvent (hEvent=0x218) returned 1
	[0293.834] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.846] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0293.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf")) returned 0x220
	[0293.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF", dwFileAttributes=0x220) returned 1
	[0293.861] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0293.996] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0293.996] ReadFile (in: hFile=0x1d4, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x212e, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x1128be18*=0x212e, lpOverlapped=0x0) returned 1
	[0294.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0294.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1146e802 | out: pbBuffer=0x1146e802) returned 1
	[0294.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1146e82e | out: pbBuffer=0x1146e82e) returned 1
	[0294.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0294.010] GetFileType (hFile=0x1d4) returned 0x1
	[0294.010] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.010] WriteFile (in: hFile=0x1d4, lpBuffer=0x1143c000*, nNumberOfBytesToWrite=0x212e, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x1143c000*, lpNumberOfBytesWritten=0x112a1dfc*=0x212e, lpOverlapped=0x112a1e08) returned 1
	[0294.010] GetFileType (hFile=0x1d4) returned 0x1
	[0294.011] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x212e, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.011] GetFileType (hFile=0x1d4) returned 0x1
	[0294.011] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.011] WriteFile (in: hFile=0x1d4, lpBuffer=0x110e6a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x110e6a80*, lpNumberOfBytesWritten=0x112a1dfc*=0x22a, lpOverlapped=0x112a1e08) returned 1
	[0294.011] GetFileType (hFile=0x1d4) returned 0x1
	[0294.011] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x212e, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.011] CloseHandle (hObject=0x1d4) returned 1
	[0294.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf.tl30z")) returned 0x220
	[0294.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.018] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0294.021] SetEvent (hEvent=0x210) returned 1
	[0294.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf")) returned 0x220
	[0294.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF", dwFileAttributes=0x220) returned 1
	[0294.022] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.123] SwitchToThread () returned 1
	[0294.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.125] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0294.126] ReadFile (in: hFile=0x1fc, lpBuffer=0x112be000, nNumberOfBytesToRead=0x1a60, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112be000*, lpNumberOfBytesRead=0x1128be18*=0x1a60, lpOverlapped=0x0) returned 1
	[0294.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f110 | out: pbBuffer=0x1140f110) returned 1
	[0294.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f108 | out: pbBuffer=0x1140f108) returned 1
	[0294.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cc802 | out: pbBuffer=0x113cc802) returned 1
	[0294.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cc804 | out: pbBuffer=0x113cc804) returned 1
	[0294.133] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f140 | out: pbBuffer=0x1140f140) returned 1
	[0294.133] GetFileType (hFile=0x1fc) returned 0x1
	[0294.133] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.133] WriteFile (in: hFile=0x1fc, lpBuffer=0x11280000*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11280000*, lpNumberOfBytesWritten=0x11031dfc*=0x1a60, lpOverlapped=0x11031e08) returned 1
	[0294.134] GetFileType (hFile=0x1fc) returned 0x1
	[0294.134] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1a60, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.134] GetFileType (hFile=0x1fc) returned 0x1
	[0294.134] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.134] WriteFile (in: hFile=0x1fc, lpBuffer=0x1129aa80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1129aa80*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0294.134] GetFileType (hFile=0x1fc) returned 0x1
	[0294.135] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1a60, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.135] CloseHandle (hObject=0x1fc) returned 1
	[0294.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf.tl30z")) returned 0x220
	[0294.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.138] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0294.141] SetEvent (hEvent=0x234) returned 1
	[0294.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf")) returned 0x220
	[0294.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF", dwFileAttributes=0x220) returned 1
	[0294.142] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.216] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0294.216] ReadFile (in: hFile=0x1fc, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x610c, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x1128be18*=0x610c, lpOverlapped=0x0) returned 1
	[0294.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3e0 | out: pbBuffer=0x1140f3e0) returned 1
	[0294.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1105e602 | out: pbBuffer=0x1105e602) returned 1
	[0294.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105e6d5 | out: pbBuffer=0x1105e6d5) returned 1
	[0294.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0294.223] GetFileType (hFile=0x1fc) returned 0x1
	[0294.223] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.223] WriteFile (in: hFile=0x1fc, lpBuffer=0x11468000*, nNumberOfBytesToWrite=0x610c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11468000*, lpNumberOfBytesWritten=0x11031dfc*=0x610c, lpOverlapped=0x11031e08) returned 1
	[0294.224] GetFileType (hFile=0x1fc) returned 0x1
	[0294.224] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x610c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.224] GetFileType (hFile=0x1fc) returned 0x1
	[0294.224] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.224] WriteFile (in: hFile=0x1fc, lpBuffer=0x1105ca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1105ca80*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0294.225] GetFileType (hFile=0x1fc) returned 0x1
	[0294.225] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x610c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.225] CloseHandle (hObject=0x1fc) returned 1
	[0294.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf.tl30z")) returned 0x220
	[0294.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.228] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0294.232] SetEvent (hEvent=0x234) returned 1
	[0294.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf")) returned 0x220
	[0294.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF", dwFileAttributes=0x220) returned 1
	[0294.232] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0294.319] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0294.319] ReadFile (in: hFile=0x250, lpBuffer=0x113bc000, nNumberOfBytesToRead=0x3eb4, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x113bc000*, lpNumberOfBytesRead=0x1128be18*=0x3eb4, lpOverlapped=0x0) returned 1
	[0294.325] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0294.325] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c4602 | out: pbBuffer=0x113c4602) returned 1
	[0294.325] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c4624 | out: pbBuffer=0x113c4624) returned 1
	[0294.325] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c4644 | out: pbBuffer=0x113c4644) returned 1
	[0294.326] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0294.327] GetFileType (hFile=0x250) returned 0x1
	[0294.327] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.327] WriteFile (in: hFile=0x250, lpBuffer=0x111e2000*, nNumberOfBytesToWrite=0x3eb4, lpNumberOfBytesWritten=0x112d5dfc, lpOverlapped=0x112d5e08 | out: lpBuffer=0x111e2000*, lpNumberOfBytesWritten=0x112d5dfc*=0x3eb4, lpOverlapped=0x112d5e08) returned 1
	[0294.328] GetFileType (hFile=0x250) returned 0x1
	[0294.328] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3eb4, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.328] GetFileType (hFile=0x250) returned 0x1
	[0294.328] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.329] WriteFile (in: hFile=0x250, lpBuffer=0x110b3500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112d5dfc, lpOverlapped=0x112d5e08 | out: lpBuffer=0x110b3500*, lpNumberOfBytesWritten=0x112d5dfc*=0x233, lpOverlapped=0x112d5e08) returned 1
	[0294.329] GetFileType (hFile=0x250) returned 0x1
	[0294.329] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3eb4, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.329] CloseHandle (hObject=0x250) returned 1
	[0294.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf.tl30z")) returned 0x220
	[0294.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.336] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0294.337] SetEvent (hEvent=0x234) returned 1
	[0294.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf")) returned 0x220
	[0294.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF", dwFileAttributes=0x220) returned 1
	[0294.338] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.474] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0294.474] ReadFile (in: hFile=0x1fc, lpBuffer=0x11358000, nNumberOfBytesToRead=0x18c4, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11358000*, lpNumberOfBytesRead=0x1128be18*=0x18c4, lpOverlapped=0x0) returned 1
	[0294.480] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0294.480] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0294.480] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1115d202 | out: pbBuffer=0x1115d202) returned 1
	[0294.480] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1115d2b1 | out: pbBuffer=0x1115d2b1) returned 1
	[0294.481] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0294.481] GetFileType (hFile=0x1fc) returned 0x1
	[0294.481] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.481] WriteFile (in: hFile=0x1fc, lpBuffer=0x11274000*, nNumberOfBytesToWrite=0x18c4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11274000*, lpNumberOfBytesWritten=0x11031dfc*=0x18c4, lpOverlapped=0x11031e08) returned 1
	[0294.482] GetFileType (hFile=0x1fc) returned 0x1
	[0294.482] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x18c4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.482] GetFileType (hFile=0x1fc) returned 0x1
	[0294.482] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.482] WriteFile (in: hFile=0x1fc, lpBuffer=0x11bd1880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bd1880*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0294.483] GetFileType (hFile=0x1fc) returned 0x1
	[0294.483] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x18c4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.483] CloseHandle (hObject=0x1fc) returned 1
	[0294.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf.tl30z")) returned 0x220
	[0294.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.486] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0294.490] SetEvent (hEvent=0x218) returned 1
	[0294.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf")) returned 0x220
	[0294.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF", dwFileAttributes=0x220) returned 1
	[0294.491] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.567] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0294.567] ReadFile (in: hFile=0x1fc, lpBuffer=0x112da000, nNumberOfBytesToRead=0x1748, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112da000*, lpNumberOfBytesRead=0x1128be18*=0x1748, lpOverlapped=0x0) returned 1
	[0294.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0294.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11462802 | out: pbBuffer=0x11462802) returned 1
	[0294.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0294.572] GetFileType (hFile=0x1fc) returned 0x1
	[0294.573] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11167de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.573] WriteFile (in: hFile=0x1fc, lpBuffer=0x110ec000*, nNumberOfBytesToWrite=0x1748, lpNumberOfBytesWritten=0x11167dfc, lpOverlapped=0x11167e08 | out: lpBuffer=0x110ec000*, lpNumberOfBytesWritten=0x11167dfc*=0x1748, lpOverlapped=0x11167e08) returned 1
	[0294.573] GetFileType (hFile=0x1fc) returned 0x1
	[0294.573] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1748, lpNewFilePointer=0x0, dwMoveMethod=0x11167de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.573] GetFileType (hFile=0x1fc) returned 0x1
	[0294.574] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11167de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.574] WriteFile (in: hFile=0x1fc, lpBuffer=0x110cca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11167dfc, lpOverlapped=0x11167e08 | out: lpBuffer=0x110cca80*, lpNumberOfBytesWritten=0x11167dfc*=0x22a, lpOverlapped=0x11167e08) returned 1
	[0294.574] GetFileType (hFile=0x1fc) returned 0x1
	[0294.574] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1748, lpNewFilePointer=0x0, dwMoveMethod=0x11167de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.574] CloseHandle (hObject=0x1fc) returned 1
	[0294.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf.tl30z")) returned 0x220
	[0294.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.576] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0294.578] SetEvent (hEvent=0x218) returned 1
	[0294.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf")) returned 0x220
	[0294.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF", dwFileAttributes=0x220) returned 1
	[0294.579] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0294.655] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0294.655] ReadFile (in: hFile=0x250, lpBuffer=0x112ca000, nNumberOfBytesToRead=0x4f4, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112ca000*, lpNumberOfBytesRead=0x1128be18*=0x4f4, lpOverlapped=0x0) returned 1
	[0294.659] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6840 | out: pbBuffer=0x113e6840) returned 1
	[0294.660] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1118e402 | out: pbBuffer=0x1118e402) returned 1
	[0294.660] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6870 | out: pbBuffer=0x113e6870) returned 1
	[0294.660] GetFileType (hFile=0x250) returned 0x1
	[0294.660] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.660] WriteFile (in: hFile=0x250, lpBuffer=0x11196000*, nNumberOfBytesToWrite=0x4f4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11196000*, lpNumberOfBytesWritten=0x11031dfc*=0x4f4, lpOverlapped=0x11031e08) returned 1
	[0294.661] GetFileType (hFile=0x250) returned 0x1
	[0294.661] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4f4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.661] GetFileType (hFile=0x250) returned 0x1
	[0294.661] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.661] WriteFile (in: hFile=0x250, lpBuffer=0x11198000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11198000*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0294.662] GetFileType (hFile=0x250) returned 0x1
	[0294.662] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4f4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.662] CloseHandle (hObject=0x250) returned 1
	[0294.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf.tl30z")) returned 0x220
	[0294.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.665] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0294.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf")) returned 0x220
	[0294.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF", dwFileAttributes=0x220) returned 1
	[0294.667] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0294.745] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0294.745] ReadFile (in: hFile=0x250, lpBuffer=0x111d7c00, nNumberOfBytesToRead=0x674, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x111d7c00*, lpNumberOfBytesRead=0x1128be18*=0x674, lpOverlapped=0x0) returned 1
	[0294.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0294.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11383202 | out: pbBuffer=0x11383202) returned 1
	[0294.750] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11383241 | out: pbBuffer=0x11383241) returned 1
	[0294.750] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113832a7 | out: pbBuffer=0x113832a7) returned 1
	[0294.750] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113832d7 | out: pbBuffer=0x113832d7) returned 1
	[0294.750] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0294.750] GetFileType (hFile=0x250) returned 0x1
	[0294.750] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.750] WriteFile (in: hFile=0x250, lpBuffer=0x11360000*, nNumberOfBytesToWrite=0x674, lpNumberOfBytesWritten=0x110c7dfc, lpOverlapped=0x110c7e08 | out: lpBuffer=0x11360000*, lpNumberOfBytesWritten=0x110c7dfc*=0x674, lpOverlapped=0x110c7e08) returned 1
	[0294.751] GetFileType (hFile=0x250) returned 0x1
	[0294.751] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x674, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.751] GetFileType (hFile=0x250) returned 0x1
	[0294.751] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.751] WriteFile (in: hFile=0x250, lpBuffer=0x11369880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x110c7dfc, lpOverlapped=0x110c7e08 | out: lpBuffer=0x11369880*, lpNumberOfBytesWritten=0x110c7dfc*=0x22a, lpOverlapped=0x110c7e08) returned 1
	[0294.751] GetFileType (hFile=0x250) returned 0x1
	[0294.751] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x674, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.752] CloseHandle (hObject=0x250) returned 1
	[0294.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf.tl30z")) returned 0x220
	[0294.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.755] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0294.756] SetEvent (hEvent=0x234) returned 1
	[0294.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf")) returned 0x220
	[0294.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF", dwFileAttributes=0x220) returned 1
	[0294.757] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.834] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0294.834] ReadFile (in: hFile=0x1fc, lpBuffer=0x11460000, nNumberOfBytesToRead=0x3a28, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11460000*, lpNumberOfBytesRead=0x1128be18*=0x3a28, lpOverlapped=0x0) returned 1
	[0294.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6530 | out: pbBuffer=0x113e6530) returned 1
	[0294.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11466802 | out: pbBuffer=0x11466802) returned 1
	[0294.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114668db | out: pbBuffer=0x114668db) returned 1
	[0294.843] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0294.843] GetFileType (hFile=0x1fc) returned 0x1
	[0294.843] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.844] WriteFile (in: hFile=0x1fc, lpBuffer=0x110e8000*, nNumberOfBytesToWrite=0x3a28, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x110e8000*, lpNumberOfBytesWritten=0x110c3dfc*=0x3a28, lpOverlapped=0x110c3e08) returned 1
	[0294.844] GetFileType (hFile=0x1fc) returned 0x1
	[0294.844] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3a28, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.844] GetFileType (hFile=0x1fc) returned 0x1
	[0294.844] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.844] WriteFile (in: hFile=0x1fc, lpBuffer=0x111c9500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x111c9500*, lpNumberOfBytesWritten=0x110c3dfc*=0x22a, lpOverlapped=0x110c3e08) returned 1
	[0294.844] GetFileType (hFile=0x1fc) returned 0x1
	[0294.845] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3a28, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.845] CloseHandle (hObject=0x1fc) returned 1
	[0294.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf.tl30z")) returned 0x220
	[0294.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.846] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0294.849] SetEvent (hEvent=0x26c) returned 1
	[0294.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf")) returned 0x220
	[0294.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF", dwFileAttributes=0x220) returned 1
	[0294.851] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.058] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0295.058] ReadFile (in: hFile=0x224, lpBuffer=0x11305000, nNumberOfBytesToRead=0x2c54, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11305000*, lpNumberOfBytesRead=0x1128be18*=0x2c54, lpOverlapped=0x0) returned 1
	[0295.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x110ac1d0 | out: pbBuffer=0x110ac1d0) returned 1
	[0295.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1120c602 | out: pbBuffer=0x1120c602) returned 1
	[0295.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x110ac200 | out: pbBuffer=0x110ac200) returned 1
	[0295.063] GetFileType (hFile=0x224) returned 0x1
	[0295.064] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.064] WriteFile (in: hFile=0x224, lpBuffer=0x1129a000*, nNumberOfBytesToWrite=0x2c54, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1129a000*, lpNumberOfBytesWritten=0x11031dfc*=0x2c54, lpOverlapped=0x11031e08) returned 1
	[0295.064] GetFileType (hFile=0x224) returned 0x1
	[0295.064] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2c54, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.064] GetFileType (hFile=0x224) returned 0x1
	[0295.064] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.064] WriteFile (in: hFile=0x224, lpBuffer=0x1109bc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1109bc00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0295.065] GetFileType (hFile=0x224) returned 0x1
	[0295.065] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2c54, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.065] CloseHandle (hObject=0x224) returned 1
	[0295.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf.tl30z")) returned 0x220
	[0295.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.068] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.071] SetEvent (hEvent=0x26c) returned 1
	[0295.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf")) returned 0x220
	[0295.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF", dwFileAttributes=0x220) returned 1
	[0295.072] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.166] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0295.166] ReadFile (in: hFile=0x224, lpBuffer=0x1117a000, nNumberOfBytesToRead=0x1fc8, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1117a000*, lpNumberOfBytesRead=0x1128be18*=0x1fc8, lpOverlapped=0x0) returned 1
	[0295.174] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69a0 | out: pbBuffer=0x113e69a0) returned 1
	[0295.174] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1117e702 | out: pbBuffer=0x1117e702) returned 1
	[0295.174] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117e727 | out: pbBuffer=0x1117e727) returned 1
	[0295.174] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117e771 | out: pbBuffer=0x1117e771) returned 1
	[0295.174] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117e7ca | out: pbBuffer=0x1117e7ca) returned 1
	[0295.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69d0 | out: pbBuffer=0x113e69d0) returned 1
	[0295.175] SetEvent (hEvent=0x26c) returned 1
	[0295.175] GetFileType (hFile=0x224) returned 0x1
	[0295.176] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.176] WriteFile (in: hFile=0x224, lpBuffer=0x11bc8000*, nNumberOfBytesToWrite=0x1fc8, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x11bc8000*, lpNumberOfBytesWritten=0x110c3dfc*=0x1fc8, lpOverlapped=0x110c3e08) returned 1
	[0295.176] GetFileType (hFile=0x224) returned 0x1
	[0295.176] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1fc8, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.176] GetFileType (hFile=0x224) returned 0x1
	[0295.176] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.177] WriteFile (in: hFile=0x224, lpBuffer=0x11bcc000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x11bcc000*, lpNumberOfBytesWritten=0x110c3dfc*=0x230, lpOverlapped=0x110c3e08) returned 1
	[0295.177] GetFileType (hFile=0x224) returned 0x1
	[0295.177] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1fc8, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.177] CloseHandle (hObject=0x224) returned 1
	[0295.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf.tl30z")) returned 0x220
	[0295.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.182] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.183] SetEvent (hEvent=0x26c) returned 1
	[0295.183] SetEvent (hEvent=0x218) returned 1
	[0295.183] SwitchToThread () returned 1
	[0295.185] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.189] SetEvent (hEvent=0x218) returned 1
	[0295.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf")) returned 0x220
	[0295.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF", dwFileAttributes=0x220) returned 1
	[0295.190] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0295.258] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0295.259] ReadFile (in: hFile=0x288, lpBuffer=0x11090000, nNumberOfBytesToRead=0x8f0c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x1128ce18*=0x8f0c, lpOverlapped=0x0) returned 1
	[0295.264] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0295.264] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119e802 | out: pbBuffer=0x1119e802) returned 1
	[0295.264] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0295.265] GetFileType (hFile=0x288) returned 0x1
	[0295.265] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.265] WriteFile (in: hFile=0x288, lpBuffer=0x11460000*, nNumberOfBytesToWrite=0x8f0c, lpNumberOfBytesWritten=0x110a3dfc, lpOverlapped=0x110a3e08 | out: lpBuffer=0x11460000*, lpNumberOfBytesWritten=0x110a3dfc*=0x8f0c, lpOverlapped=0x110a3e08) returned 1
	[0295.265] GetFileType (hFile=0x288) returned 0x1
	[0295.266] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x8f0c, lpNewFilePointer=0x0, dwMoveMethod=0x110a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.266] GetFileType (hFile=0x288) returned 0x1
	[0295.266] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.266] WriteFile (in: hFile=0x288, lpBuffer=0x111b2a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x110a3dfc, lpOverlapped=0x110a3e08 | out: lpBuffer=0x111b2a80*, lpNumberOfBytesWritten=0x110a3dfc*=0x230, lpOverlapped=0x110a3e08) returned 1
	[0295.266] GetFileType (hFile=0x288) returned 0x1
	[0295.266] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x8f0c, lpNewFilePointer=0x0, dwMoveMethod=0x110a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.267] CloseHandle (hObject=0x288) returned 1
	[0295.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf.tl30z")) returned 0x220
	[0295.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.270] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.272] SetEvent (hEvent=0x218) returned 1
	[0295.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf")) returned 0x220
	[0295.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF", dwFileAttributes=0x220) returned 1
	[0295.272] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0295.363] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0295.364] ReadFile (in: hFile=0x288, lpBuffer=0x1112c000, nNumberOfBytesToRead=0x4464, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1112c000*, lpNumberOfBytesRead=0x1128ce18*=0x4464, lpOverlapped=0x0) returned 1
	[0295.369] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0295.369] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e5202 | out: pbBuffer=0x112e5202) returned 1
	[0295.369] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e524a | out: pbBuffer=0x112e524a) returned 1
	[0295.370] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0295.370] GetFileType (hFile=0x288) returned 0x1
	[0295.370] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.370] WriteFile (in: hFile=0x288, lpBuffer=0x111dc000*, nNumberOfBytesToWrite=0x4464, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x111dc000*, lpNumberOfBytesWritten=0x1141ddfc*=0x4464, lpOverlapped=0x1141de08) returned 1
	[0295.371] GetFileType (hFile=0x288) returned 0x1
	[0295.371] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x4464, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.371] GetFileType (hFile=0x288) returned 0x1
	[0295.371] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.371] WriteFile (in: hFile=0x288, lpBuffer=0x11199880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11199880*, lpNumberOfBytesWritten=0x1141ddfc*=0x227, lpOverlapped=0x1141de08) returned 1
	[0295.371] GetFileType (hFile=0x288) returned 0x1
	[0295.372] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x4464, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.372] CloseHandle (hObject=0x288) returned 1
	[0295.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf.tl30z")) returned 0x220
	[0295.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.375] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.379] SetEvent (hEvent=0x218) returned 1
	[0295.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf")) returned 0x220
	[0295.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF", dwFileAttributes=0x220) returned 1
	[0295.380] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0295.461] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0295.461] ReadFile (in: hFile=0x1d8, lpBuffer=0x11338000, nNumberOfBytesToRead=0x560, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11338000*, lpNumberOfBytesRead=0x1128ce18*=0x560, lpOverlapped=0x0) returned 1
	[0295.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0295.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e5d02 | out: pbBuffer=0x112e5d02) returned 1
	[0295.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e5d8f | out: pbBuffer=0x112e5d8f) returned 1
	[0295.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e5db9 | out: pbBuffer=0x112e5db9) returned 1
	[0295.467] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0295.467] GetFileType (hFile=0x1d8) returned 0x1
	[0295.467] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.467] WriteFile (in: hFile=0x1d8, lpBuffer=0x11392000*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11392000*, lpNumberOfBytesWritten=0x1141ddfc*=0x560, lpOverlapped=0x1141de08) returned 1
	[0295.467] GetFileType (hFile=0x1d8) returned 0x1
	[0295.467] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x560, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.467] GetFileType (hFile=0x1d8) returned 0x1
	[0295.468] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.468] WriteFile (in: hFile=0x1d8, lpBuffer=0x111f5500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x111f5500*, lpNumberOfBytesWritten=0x1141ddfc*=0x224, lpOverlapped=0x1141de08) returned 1
	[0295.468] GetFileType (hFile=0x1d8) returned 0x1
	[0295.468] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x560, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.468] CloseHandle (hObject=0x1d8) returned 1
	[0295.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf.tl30z")) returned 0x220
	[0295.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.471] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.473] SetEvent (hEvent=0x26c) returned 1
	[0295.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf")) returned 0x220
	[0295.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF", dwFileAttributes=0x220) returned 1
	[0295.474] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0295.557] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0295.557] ReadFile (in: hFile=0x1d4, lpBuffer=0x11430000, nNumberOfBytesToRead=0x48dc, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x1128ce18*=0x48dc, lpOverlapped=0x0) returned 1
	[0295.563] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1d0 | out: pbBuffer=0x1140f1d0) returned 1
	[0295.563] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bd7d02 | out: pbBuffer=0x11bd7d02) returned 1
	[0295.564] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f200 | out: pbBuffer=0x1140f200) returned 1
	[0295.564] GetFileType (hFile=0x1d4) returned 0x1
	[0295.564] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.565] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ee000*, nNumberOfBytesToWrite=0x48dc, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x112ee000*, lpNumberOfBytesWritten=0x1141ddfc*=0x48dc, lpOverlapped=0x1141de08) returned 1
	[0295.565] GetFileType (hFile=0x1d4) returned 0x1
	[0295.565] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x48dc, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.565] GetFileType (hFile=0x1d4) returned 0x1
	[0295.565] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.565] WriteFile (in: hFile=0x1d4, lpBuffer=0x1132b180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x1132b180*, lpNumberOfBytesWritten=0x1141ddfc*=0x22d, lpOverlapped=0x1141de08) returned 1
	[0295.566] GetFileType (hFile=0x1d4) returned 0x1
	[0295.566] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x48dc, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.566] CloseHandle (hObject=0x1d4) returned 1
	[0295.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf.tl30z")) returned 0x220
	[0295.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.569] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.570] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf")) returned 0x220
	[0295.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF", dwFileAttributes=0x220) returned 1
	[0295.570] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0295.654] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0295.654] ReadFile (in: hFile=0x250, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x3888, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x1128ce18*=0x3888, lpOverlapped=0x0) returned 1
	[0295.659] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0295.659] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ae802 | out: pbBuffer=0x110ae802) returned 1
	[0295.660] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0295.660] GetFileType (hFile=0x250) returned 0x1
	[0295.660] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.661] WriteFile (in: hFile=0x250, lpBuffer=0x1137c000*, nNumberOfBytesToWrite=0x3888, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1137c000*, lpNumberOfBytesWritten=0x11031dfc*=0x3888, lpOverlapped=0x11031e08) returned 1
	[0295.661] GetFileType (hFile=0x250) returned 0x1
	[0295.661] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3888, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.661] GetFileType (hFile=0x250) returned 0x1
	[0295.661] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.661] WriteFile (in: hFile=0x250, lpBuffer=0x11136e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11136e00*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0295.662] GetFileType (hFile=0x250) returned 0x1
	[0295.662] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3888, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.662] CloseHandle (hObject=0x250) returned 1
	[0295.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf.tl30z")) returned 0x220
	[0295.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.665] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.667] SetEvent (hEvent=0x218) returned 1
	[0295.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf")) returned 0x220
	[0295.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF", dwFileAttributes=0x220) returned 1
	[0295.667] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0295.755] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0295.755] ReadFile (in: hFile=0x288, lpBuffer=0x111a4000, nNumberOfBytesToRead=0x16e8, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x111a4000*, lpNumberOfBytesRead=0x1128ce18*=0x16e8, lpOverlapped=0x0) returned 1
	[0295.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0295.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0295.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11096802 | out: pbBuffer=0x11096802) returned 1
	[0295.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1109686b | out: pbBuffer=0x1109686b) returned 1
	[0295.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0295.761] GetFileType (hFile=0x288) returned 0x1
	[0295.761] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.762] WriteFile (in: hFile=0x288, lpBuffer=0x110e8000*, nNumberOfBytesToWrite=0x16e8, lpNumberOfBytesWritten=0x111b7dfc, lpOverlapped=0x111b7e08 | out: lpBuffer=0x110e8000*, lpNumberOfBytesWritten=0x111b7dfc*=0x16e8, lpOverlapped=0x111b7e08) returned 1
	[0295.762] GetFileType (hFile=0x288) returned 0x1
	[0295.762] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x16e8, lpNewFilePointer=0x0, dwMoveMethod=0x111b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.762] GetFileType (hFile=0x288) returned 0x1
	[0295.762] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.762] WriteFile (in: hFile=0x288, lpBuffer=0x110aaa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x111b7dfc, lpOverlapped=0x111b7e08 | out: lpBuffer=0x110aaa80*, lpNumberOfBytesWritten=0x111b7dfc*=0x22d, lpOverlapped=0x111b7e08) returned 1
	[0295.765] GetFileType (hFile=0x288) returned 0x1
	[0295.765] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x16e8, lpNewFilePointer=0x0, dwMoveMethod=0x111b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.765] CloseHandle (hObject=0x288) returned 1
	[0295.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf.tl30z")) returned 0x220
	[0295.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.769] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.770] SetEvent (hEvent=0x210) returned 1
	[0295.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg")) returned 0x220
	[0295.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG", dwFileAttributes=0x220) returned 1
	[0295.771] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg.tl30z"), dwFlags=0x1) returned 1
	[0295.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.867] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0295.867] ReadFile (in: hFile=0x224, lpBuffer=0x1112e000, nNumberOfBytesToRead=0x38d8, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1112e000*, lpNumberOfBytesRead=0x1128ce18*=0x38d8, lpOverlapped=0x0) returned 1
	[0295.873] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0295.873] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4c8 | out: pbBuffer=0x1104e4c8) returned 1
	[0295.873] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11351d02 | out: pbBuffer=0x11351d02) returned 1
	[0295.873] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11351d3d | out: pbBuffer=0x11351d3d) returned 1
	[0295.874] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0295.874] GetFileType (hFile=0x224) returned 0x1
	[0295.874] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.875] WriteFile (in: hFile=0x224, lpBuffer=0x111c2000*, nNumberOfBytesToWrite=0x38d8, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x111c2000*, lpNumberOfBytesWritten=0x11339dfc*=0x38d8, lpOverlapped=0x11339e08) returned 1
	[0295.875] GetFileType (hFile=0x224) returned 0x1
	[0295.875] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x38d8, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.875] GetFileType (hFile=0x224) returned 0x1
	[0295.875] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.876] WriteFile (in: hFile=0x224, lpBuffer=0x11456700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11456700*, lpNumberOfBytesWritten=0x11339dfc*=0x22d, lpOverlapped=0x11339e08) returned 1
	[0295.876] GetFileType (hFile=0x224) returned 0x1
	[0295.876] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x38d8, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.876] CloseHandle (hObject=0x224) returned 1
	[0295.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg.tl30z")) returned 0x220
	[0295.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0295.879] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0295.882] SetEvent (hEvent=0x218) returned 1
	[0295.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg")) returned 0x220
	[0295.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG", dwFileAttributes=0x220) returned 1
	[0295.883] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg.tl30z"), dwFlags=0x1) returned 1
	[0296.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0296.016] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0296.016] ReadFile (in: hFile=0x288, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x67a3, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x1128ce18*=0x67a3, lpOverlapped=0x0) returned 1
	[0296.021] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0296.021] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332398 | out: pbBuffer=0x11332398) returned 1
	[0296.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141d202 | out: pbBuffer=0x1141d202) returned 1
	[0296.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323d0 | out: pbBuffer=0x113323d0) returned 1
	[0296.023] GetFileType (hFile=0x288) returned 0x1
	[0296.023] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.023] WriteFile (in: hFile=0x288, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x67a3, lpNumberOfBytesWritten=0x11327dfc, lpOverlapped=0x11327e08 | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x11327dfc*=0x67a3, lpOverlapped=0x11327e08) returned 1
	[0296.024] GetFileType (hFile=0x288) returned 0x1
	[0296.024] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x67a3, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.024] GetFileType (hFile=0x288) returned 0x1
	[0296.024] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.024] WriteFile (in: hFile=0x288, lpBuffer=0x1133d880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11327dfc, lpOverlapped=0x11327e08 | out: lpBuffer=0x1133d880*, lpNumberOfBytesWritten=0x11327dfc*=0x233, lpOverlapped=0x11327e08) returned 1
	[0296.024] GetFileType (hFile=0x288) returned 0x1
	[0296.024] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x67a3, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.024] CloseHandle (hObject=0x288) returned 1
	[0296.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg.tl30z")) returned 0x220
	[0296.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0296.028] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.032] SetEvent (hEvent=0x118) returned 1
	[0296.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg")) returned 0x220
	[0296.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG", dwFileAttributes=0x220) returned 1
	[0296.032] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg.tl30z"), dwFlags=0x1) returned 1
	[0296.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0296.190] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0296.190] ReadFile (in: hFile=0x224, lpBuffer=0x11116000, nNumberOfBytesToRead=0x7d6e, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11116000*, lpNumberOfBytesRead=0x1128ce18*=0x7d6e, lpOverlapped=0x0) returned 1
	[0296.196] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f030 | out: pbBuffer=0x1140f030) returned 1
	[0296.196] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f028 | out: pbBuffer=0x1140f028) returned 1
	[0296.196] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11299302 | out: pbBuffer=0x11299302) returned 1
	[0296.196] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1129936d | out: pbBuffer=0x1129936d) returned 1
	[0296.196] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11299398 | out: pbBuffer=0x11299398) returned 1
	[0296.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1129939b | out: pbBuffer=0x1129939b) returned 1
	[0296.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f060 | out: pbBuffer=0x1140f060) returned 1
	[0296.198] GetFileType (hFile=0x224) returned 0x1
	[0296.198] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.198] WriteFile (in: hFile=0x224, lpBuffer=0x1117a000*, nNumberOfBytesToWrite=0x7d6e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1117a000*, lpNumberOfBytesWritten=0x11031dfc*=0x7d6e, lpOverlapped=0x11031e08) returned 1
	[0296.199] GetFileType (hFile=0x224) returned 0x1
	[0296.199] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7d6e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.199] GetFileType (hFile=0x224) returned 0x1
	[0296.199] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.199] WriteFile (in: hFile=0x224, lpBuffer=0x11122700*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11122700*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0296.200] GetFileType (hFile=0x224) returned 0x1
	[0296.200] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7d6e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.200] CloseHandle (hObject=0x224) returned 1
	[0296.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg.tl30z")) returned 0x220
	[0296.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0296.204] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.206] SetEvent (hEvent=0x118) returned 1
	[0296.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf")) returned 0x220
	[0296.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF", dwFileAttributes=0x220) returned 1
	[0296.207] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0296.344] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0296.344] ReadFile (in: hFile=0x250, lpBuffer=0x11362000, nNumberOfBytesToRead=0x3ed2, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11362000*, lpNumberOfBytesRead=0x1128ce18*=0x3ed2, lpOverlapped=0x0) returned 1
	[0296.353] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0296.353] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1105a802 | out: pbBuffer=0x1105a802) returned 1
	[0296.353] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105a88b | out: pbBuffer=0x1105a88b) returned 1
	[0296.353] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e680 | out: pbBuffer=0x1104e680) returned 1
	[0296.354] GetFileType (hFile=0x250) returned 0x1
	[0296.354] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.354] WriteFile (in: hFile=0x250, lpBuffer=0x112d8000*, nNumberOfBytesToWrite=0x3ed2, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112d8000*, lpNumberOfBytesWritten=0x11031dfc*=0x3ed2, lpOverlapped=0x11031e08) returned 1
	[0296.355] GetFileType (hFile=0x250) returned 0x1
	[0296.355] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3ed2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.355] GetFileType (hFile=0x250) returned 0x1
	[0296.355] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.355] WriteFile (in: hFile=0x250, lpBuffer=0x1138b880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1138b880*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0296.356] GetFileType (hFile=0x250) returned 0x1
	[0296.356] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3ed2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.356] CloseHandle (hObject=0x250) returned 1
	[0296.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf.tl30z")) returned 0x220
	[0296.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.359] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.362] SetEvent (hEvent=0x210) returned 1
	[0296.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf")) returned 0x220
	[0296.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF", dwFileAttributes=0x220) returned 1
	[0296.363] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0296.446] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0296.446] ReadFile (in: hFile=0x1d4, lpBuffer=0x1146e000, nNumberOfBytesToRead=0x1c88, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1146e000*, lpNumberOfBytesRead=0x1128ce18*=0x1c88, lpOverlapped=0x0) returned 1
	[0296.451] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f370 | out: pbBuffer=0x1140f370) returned 1
	[0296.452] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f368 | out: pbBuffer=0x1140f368) returned 1
	[0296.452] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11472702 | out: pbBuffer=0x11472702) returned 1
	[0296.452] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1147273e | out: pbBuffer=0x1147273e) returned 1
	[0296.452] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3a0 | out: pbBuffer=0x1140f3a0) returned 1
	[0296.453] GetFileType (hFile=0x1d4) returned 0x1
	[0296.453] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.453] WriteFile (in: hFile=0x1d4, lpBuffer=0x1110a000*, nNumberOfBytesToWrite=0x1c88, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1110a000*, lpNumberOfBytesWritten=0x11031dfc*=0x1c88, lpOverlapped=0x11031e08) returned 1
	[0296.453] GetFileType (hFile=0x1d4) returned 0x1
	[0296.453] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1c88, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.453] GetFileType (hFile=0x1d4) returned 0x1
	[0296.453] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.454] WriteFile (in: hFile=0x1d4, lpBuffer=0x11104380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11104380*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0296.454] GetFileType (hFile=0x1d4) returned 0x1
	[0296.454] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1c88, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.454] CloseHandle (hObject=0x1d4) returned 1
	[0296.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf.tl30z")) returned 0x220
	[0296.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.458] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.459] SetEvent (hEvent=0x210) returned 1
	[0296.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf")) returned 0x220
	[0296.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF", dwFileAttributes=0x220) returned 1
	[0296.460] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.558] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0296.562] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0296.562] ReadFile (in: hFile=0x1d4, lpBuffer=0x11396000, nNumberOfBytesToRead=0x99a2, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x1128ce18*=0x99a2, lpOverlapped=0x0) returned 1
	[0296.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0296.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0296.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11472802 | out: pbBuffer=0x11472802) returned 1
	[0296.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114728c6 | out: pbBuffer=0x114728c6) returned 1
	[0296.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0296.572] GetFileType (hFile=0x1d4) returned 0x1
	[0296.572] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.572] WriteFile (in: hFile=0x1d4, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x99a2, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x99a2, lpOverlapped=0x1102be08) returned 1
	[0296.573] GetFileType (hFile=0x1d4) returned 0x1
	[0296.573] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x99a2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.573] GetFileType (hFile=0x1d4) returned 0x1
	[0296.573] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.573] WriteFile (in: hFile=0x1d4, lpBuffer=0x1125ce00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1125ce00*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0296.574] GetFileType (hFile=0x1d4) returned 0x1
	[0296.574] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x99a2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.574] CloseHandle (hObject=0x1d4) returned 1
	[0296.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf.tl30z")) returned 0x220
	[0296.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.581] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.597] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.631] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.640] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.661] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.677] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.694] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.701] SetEvent (hEvent=0x210) returned 1
	[0296.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf")) returned 0x220
	[0296.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF", dwFileAttributes=0x220) returned 1
	[0296.702] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0296.787] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0296.787] ReadFile (in: hFile=0x250, lpBuffer=0x11396000, nNumberOfBytesToRead=0x843a, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x11288e18*=0x843a, lpOverlapped=0x0) returned 1
	[0296.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0296.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f278 | out: pbBuffer=0x1140f278) returned 1
	[0296.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f5402 | out: pbBuffer=0x111f5402) returned 1
	[0296.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f54e5 | out: pbBuffer=0x111f54e5) returned 1
	[0296.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0296.793] GetFileType (hFile=0x250) returned 0x1
	[0296.793] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.793] WriteFile (in: hFile=0x250, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x843a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x843a, lpOverlapped=0x1102be08) returned 1
	[0296.794] GetFileType (hFile=0x250) returned 0x1
	[0296.794] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x843a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.794] GetFileType (hFile=0x250) returned 0x1
	[0296.794] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.794] WriteFile (in: hFile=0x250, lpBuffer=0x111d3c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111d3c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0296.795] GetFileType (hFile=0x250) returned 0x1
	[0296.795] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x843a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.795] CloseHandle (hObject=0x250) returned 1
	[0296.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf.tl30z")) returned 0x220
	[0296.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.797] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.800] SetEvent (hEvent=0x234) returned 1
	[0296.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf")) returned 0x220
	[0296.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF", dwFileAttributes=0x220) returned 1
	[0296.801] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0296.897] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0296.897] ReadFile (in: hFile=0x288, lpBuffer=0x112e1000, nNumberOfBytesToRead=0x2d7c, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x112e1000*, lpNumberOfBytesRead=0x11288e18*=0x2d7c, lpOverlapped=0x0) returned 1
	[0296.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0296.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6258 | out: pbBuffer=0x113e6258) returned 1
	[0296.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ed302 | out: pbBuffer=0x111ed302) returned 1
	[0296.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ed36d | out: pbBuffer=0x111ed36d) returned 1
	[0296.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0296.903] GetFileType (hFile=0x288) returned 0x1
	[0296.903] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.903] WriteFile (in: hFile=0x288, lpBuffer=0x113aa000*, nNumberOfBytesToWrite=0x2d7c, lpNumberOfBytesWritten=0x111e7dfc, lpOverlapped=0x111e7e08 | out: lpBuffer=0x113aa000*, lpNumberOfBytesWritten=0x111e7dfc*=0x2d7c, lpOverlapped=0x111e7e08) returned 1
	[0296.904] GetFileType (hFile=0x288) returned 0x1
	[0296.904] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x2d7c, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.904] GetFileType (hFile=0x288) returned 0x1
	[0296.904] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.904] WriteFile (in: hFile=0x288, lpBuffer=0x113f7880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x111e7dfc, lpOverlapped=0x111e7e08 | out: lpBuffer=0x113f7880*, lpNumberOfBytesWritten=0x111e7dfc*=0x233, lpOverlapped=0x111e7e08) returned 1
	[0296.904] GetFileType (hFile=0x288) returned 0x1
	[0296.904] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x2d7c, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.904] CloseHandle (hObject=0x288) returned 1
	[0296.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf.tl30z")) returned 0x220
	[0296.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.908] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0296.911] SetEvent (hEvent=0x234) returned 1
	[0296.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf")) returned 0x220
	[0296.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF", dwFileAttributes=0x220) returned 1
	[0296.911] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0297.026] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0297.026] ReadFile (in: hFile=0x250, lpBuffer=0x1145c000, nNumberOfBytesToRead=0x3fe2, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1145c000*, lpNumberOfBytesRead=0x11288e18*=0x3fe2, lpOverlapped=0x0) returned 1
	[0297.032] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324e0 | out: pbBuffer=0x113324e0) returned 1
	[0297.032] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130dc02 | out: pbBuffer=0x1130dc02) returned 1
	[0297.033] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130dc36 | out: pbBuffer=0x1130dc36) returned 1
	[0297.033] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0297.034] GetFileType (hFile=0x250) returned 0x1
	[0297.034] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.034] WriteFile (in: hFile=0x250, lpBuffer=0x1122a000*, nNumberOfBytesToWrite=0x3fe2, lpNumberOfBytesWritten=0x111e3dfc, lpOverlapped=0x111e3e08 | out: lpBuffer=0x1122a000*, lpNumberOfBytesWritten=0x111e3dfc*=0x3fe2, lpOverlapped=0x111e3e08) returned 1
	[0297.034] GetFileType (hFile=0x250) returned 0x1
	[0297.034] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3fe2, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.034] GetFileType (hFile=0x250) returned 0x1
	[0297.035] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.035] WriteFile (in: hFile=0x250, lpBuffer=0x1146e700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x111e3dfc, lpOverlapped=0x111e3e08 | out: lpBuffer=0x1146e700*, lpNumberOfBytesWritten=0x111e3dfc*=0x236, lpOverlapped=0x111e3e08) returned 1
	[0297.035] GetFileType (hFile=0x250) returned 0x1
	[0297.035] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3fe2, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.035] CloseHandle (hObject=0x250) returned 1
	[0297.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf.tl30z")) returned 0x220
	[0297.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.040] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0297.042] SetEvent (hEvent=0x234) returned 1
	[0297.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf")) returned 0x220
	[0297.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF", dwFileAttributes=0x220) returned 1
	[0297.043] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0297.168] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0297.168] ReadFile (in: hFile=0x224, lpBuffer=0x1118a000, nNumberOfBytesToRead=0xaac, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1118a000*, lpNumberOfBytesRead=0x11288e18*=0xaac, lpOverlapped=0x0) returned 1
	[0297.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0297.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11260802 | out: pbBuffer=0x11260802) returned 1
	[0297.176] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0297.176] GetFileType (hFile=0x224) returned 0x1
	[0297.176] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.177] WriteFile (in: hFile=0x224, lpBuffer=0x1141e000*, nNumberOfBytesToWrite=0xaac, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1141e000*, lpNumberOfBytesWritten=0x1102bdfc*=0xaac, lpOverlapped=0x1102be08) returned 1
	[0297.177] GetFileType (hFile=0x224) returned 0x1
	[0297.177] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xaac, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.177] GetFileType (hFile=0x224) returned 0x1
	[0297.178] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.178] WriteFile (in: hFile=0x224, lpBuffer=0x11166a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11166a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0297.178] GetFileType (hFile=0x224) returned 0x1
	[0297.178] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xaac, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.178] CloseHandle (hObject=0x224) returned 1
	[0297.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf.tl30z")) returned 0x220
	[0297.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.182] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0297.186] SetEvent (hEvent=0x234) returned 1
	[0297.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf")) returned 0x220
	[0297.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF", dwFileAttributes=0x220) returned 1
	[0297.187] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0297.268] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0297.268] ReadFile (in: hFile=0x1fc, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x15f4, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11288e18*=0x15f4, lpOverlapped=0x0) returned 1
	[0297.274] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0297.274] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3e8 | out: pbBuffer=0x1140f3e8) returned 1
	[0297.274] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b9c02 | out: pbBuffer=0x111b9c02) returned 1
	[0297.275] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0297.275] GetFileType (hFile=0x1fc) returned 0x1
	[0297.275] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1116dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.275] WriteFile (in: hFile=0x1fc, lpBuffer=0x113d2000*, nNumberOfBytesToWrite=0x15f4, lpNumberOfBytesWritten=0x1116ddfc, lpOverlapped=0x1116de08 | out: lpBuffer=0x113d2000*, lpNumberOfBytesWritten=0x1116ddfc*=0x15f4, lpOverlapped=0x1116de08) returned 1
	[0297.276] GetFileType (hFile=0x1fc) returned 0x1
	[0297.276] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x15f4, lpNewFilePointer=0x0, dwMoveMethod=0x1116dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.276] GetFileType (hFile=0x1fc) returned 0x1
	[0297.276] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1116dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.276] WriteFile (in: hFile=0x1fc, lpBuffer=0x1132a700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1116ddfc, lpOverlapped=0x1116de08 | out: lpBuffer=0x1132a700*, lpNumberOfBytesWritten=0x1116ddfc*=0x230, lpOverlapped=0x1116de08) returned 1
	[0297.276] GetFileType (hFile=0x1fc) returned 0x1
	[0297.277] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x15f4, lpNewFilePointer=0x0, dwMoveMethod=0x1116dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.277] CloseHandle (hObject=0x1fc) returned 1
	[0297.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf.tl30z")) returned 0x220
	[0297.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.292] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0297.345] SetEvent (hEvent=0x218) returned 1
	[0297.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf")) returned 0x220
	[0297.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF", dwFileAttributes=0x220) returned 1
	[0297.345] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0297.447] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0297.448] ReadFile (in: hFile=0x1d4, lpBuffer=0x112a6000, nNumberOfBytesToRead=0x16c0, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x112a6000*, lpNumberOfBytesRead=0x11288e18*=0x16c0, lpOverlapped=0x0) returned 1
	[0297.454] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6540 | out: pbBuffer=0x113e6540) returned 1
	[0297.454] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ae702 | out: pbBuffer=0x112ae702) returned 1
	[0297.454] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ae732 | out: pbBuffer=0x112ae732) returned 1
	[0297.455] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ae756 | out: pbBuffer=0x112ae756) returned 1
	[0297.455] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0297.456] GetFileType (hFile=0x1d4) returned 0x1
	[0297.456] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.456] WriteFile (in: hFile=0x1d4, lpBuffer=0x112c2000*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x11169dfc, lpOverlapped=0x11169e08 | out: lpBuffer=0x112c2000*, lpNumberOfBytesWritten=0x11169dfc*=0x16c0, lpOverlapped=0x11169e08) returned 1
	[0297.457] GetFileType (hFile=0x1d4) returned 0x1
	[0297.457] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x16c0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.457] GetFileType (hFile=0x1d4) returned 0x1
	[0297.457] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.457] WriteFile (in: hFile=0x1d4, lpBuffer=0x1112b500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11169dfc, lpOverlapped=0x11169e08 | out: lpBuffer=0x1112b500*, lpNumberOfBytesWritten=0x11169dfc*=0x227, lpOverlapped=0x11169e08) returned 1
	[0297.458] GetFileType (hFile=0x1d4) returned 0x1
	[0297.458] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x16c0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.458] CloseHandle (hObject=0x1d4) returned 1
	[0297.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf.tl30z")) returned 0x220
	[0297.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.464] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0297.469] SetEvent (hEvent=0x218) returned 1
	[0297.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf")) returned 0x220
	[0297.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF", dwFileAttributes=0x220) returned 1
	[0297.470] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0297.637] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0297.638] ReadFile (in: hFile=0x1d8, lpBuffer=0x110f0000, nNumberOfBytesToRead=0x1ca4, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x110f0000*, lpNumberOfBytesRead=0x11288e18*=0x1ca4, lpOverlapped=0x0) returned 1
	[0297.644] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0297.644] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ae802 | out: pbBuffer=0x112ae802) returned 1
	[0297.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0297.645] GetFileType (hFile=0x1d8) returned 0x1
	[0297.645] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.646] WriteFile (in: hFile=0x1d8, lpBuffer=0x11368000*, nNumberOfBytesToWrite=0x1ca4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11368000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1ca4, lpOverlapped=0x1102be08) returned 1
	[0297.646] GetFileType (hFile=0x1d8) returned 0x1
	[0297.646] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1ca4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.646] GetFileType (hFile=0x1d8) returned 0x1
	[0297.646] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.647] WriteFile (in: hFile=0x1d8, lpBuffer=0x11470a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11470a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0297.647] GetFileType (hFile=0x1d8) returned 0x1
	[0297.647] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1ca4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.647] CloseHandle (hObject=0x1d8) returned 1
	[0297.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf.tl30z")) returned 0x220
	[0297.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.650] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0297.653] SetEvent (hEvent=0x218) returned 1
	[0297.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf")) returned 0x220
	[0297.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF", dwFileAttributes=0x220) returned 1
	[0297.653] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0297.745] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0297.745] ReadFile (in: hFile=0x224, lpBuffer=0x112b4000, nNumberOfBytesToRead=0x48be, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x112b4000*, lpNumberOfBytesRead=0x11288e18*=0x48be, lpOverlapped=0x0) returned 1
	[0297.751] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0297.751] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0297.751] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d4802 | out: pbBuffer=0x110d4802) returned 1
	[0297.752] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0297.753] GetFileType (hFile=0x224) returned 0x1
	[0297.753] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.753] WriteFile (in: hFile=0x224, lpBuffer=0x113ae000*, nNumberOfBytesToWrite=0x48be, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x113ae000*, lpNumberOfBytesWritten=0x1129ddfc*=0x48be, lpOverlapped=0x1129de08) returned 1
	[0297.754] GetFileType (hFile=0x224) returned 0x1
	[0297.754] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x48be, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.754] GetFileType (hFile=0x224) returned 0x1
	[0297.754] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.754] WriteFile (in: hFile=0x224, lpBuffer=0x110e6a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x110e6a80*, lpNumberOfBytesWritten=0x1129ddfc*=0x230, lpOverlapped=0x1129de08) returned 1
	[0297.755] GetFileType (hFile=0x224) returned 0x1
	[0297.755] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x48be, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.755] CloseHandle (hObject=0x224) returned 1
	[0297.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf.tl30z")) returned 0x220
	[0297.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.758] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0297.764] SetEvent (hEvent=0x218) returned 1
	[0297.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf")) returned 0x220
	[0297.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF", dwFileAttributes=0x220) returned 1
	[0297.765] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0297.854] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0297.854] ReadFile (in: hFile=0x1fc, lpBuffer=0x1144c000, nNumberOfBytesToRead=0xef2, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1144c000*, lpNumberOfBytesRead=0x11288e18*=0xef2, lpOverlapped=0x0) returned 1
	[0297.859] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113320f0 | out: pbBuffer=0x113320f0) returned 1
	[0297.859] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a1102 | out: pbBuffer=0x110a1102) returned 1
	[0297.859] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113321b0 | out: pbBuffer=0x113321b0) returned 1
	[0297.859] GetFileType (hFile=0x1fc) returned 0x1
	[0297.860] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.860] WriteFile (in: hFile=0x1fc, lpBuffer=0x1145e000*, nNumberOfBytesToWrite=0xef2, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x1145e000*, lpNumberOfBytesWritten=0x1129ddfc*=0xef2, lpOverlapped=0x1129de08) returned 1
	[0297.860] GetFileType (hFile=0x1fc) returned 0x1
	[0297.860] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xef2, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.861] GetFileType (hFile=0x1fc) returned 0x1
	[0297.861] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.861] WriteFile (in: hFile=0x1fc, lpBuffer=0x1145c380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x1145c380*, lpNumberOfBytesWritten=0x1129ddfc*=0x230, lpOverlapped=0x1129de08) returned 1
	[0297.861] GetFileType (hFile=0x1fc) returned 0x1
	[0297.861] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xef2, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.861] CloseHandle (hObject=0x1fc) returned 1
	[0297.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf.tl30z")) returned 0x220
	[0297.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.865] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0297.869] SetEvent (hEvent=0x218) returned 1
	[0297.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf")) returned 0x220
	[0297.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF", dwFileAttributes=0x220) returned 1
	[0297.870] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0298.025] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0298.025] ReadFile (in: hFile=0x1fc, lpBuffer=0x11186000, nNumberOfBytesToRead=0x668c, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11186000*, lpNumberOfBytesRead=0x11288e18*=0x668c, lpOverlapped=0x0) returned 1
	[0298.031] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0298.031] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11270802 | out: pbBuffer=0x11270802) returned 1
	[0298.031] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0298.032] GetFileType (hFile=0x1fc) returned 0x1
	[0298.032] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.032] WriteFile (in: hFile=0x1fc, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x668c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x668c, lpOverlapped=0x1102be08) returned 1
	[0298.033] GetFileType (hFile=0x1fc) returned 0x1
	[0298.033] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x668c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.033] GetFileType (hFile=0x1fc) returned 0x1
	[0298.033] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.035] WriteFile (in: hFile=0x1fc, lpBuffer=0x11184e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11184e00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0298.036] GetFileType (hFile=0x1fc) returned 0x1
	[0298.036] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x668c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.036] CloseHandle (hObject=0x1fc) returned 1
	[0298.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf.tl30z")) returned 0x220
	[0298.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.041] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0298.045] SetEvent (hEvent=0x118) returned 1
	[0298.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf")) returned 0x220
	[0298.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF", dwFileAttributes=0x220) returned 1
	[0298.045] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0298.167] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0298.167] ReadFile (in: hFile=0x1fc, lpBuffer=0x1130a000, nNumberOfBytesToRead=0x3cce, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1130a000*, lpNumberOfBytesRead=0x11288e18*=0x3cce, lpOverlapped=0x0) returned 1
	[0298.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0298.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a8802 | out: pbBuffer=0x110a8802) returned 1
	[0298.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110a8882 | out: pbBuffer=0x110a8882) returned 1
	[0298.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0298.176] GetFileType (hFile=0x1fc) returned 0x1
	[0298.176] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1109fde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.176] WriteFile (in: hFile=0x1fc, lpBuffer=0x11120000*, nNumberOfBytesToWrite=0x3cce, lpNumberOfBytesWritten=0x1109fdfc, lpOverlapped=0x1109fe08 | out: lpBuffer=0x11120000*, lpNumberOfBytesWritten=0x1109fdfc*=0x3cce, lpOverlapped=0x1109fe08) returned 1
	[0298.177] GetFileType (hFile=0x1fc) returned 0x1
	[0298.177] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3cce, lpNewFilePointer=0x0, dwMoveMethod=0x1109fde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.177] GetFileType (hFile=0x1fc) returned 0x1
	[0298.177] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1109fde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.177] WriteFile (in: hFile=0x1fc, lpBuffer=0x110bca80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1109fdfc, lpOverlapped=0x1109fe08 | out: lpBuffer=0x110bca80*, lpNumberOfBytesWritten=0x1109fdfc*=0x233, lpOverlapped=0x1109fe08) returned 1
	[0298.177] GetFileType (hFile=0x1fc) returned 0x1
	[0298.177] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3cce, lpNewFilePointer=0x0, dwMoveMethod=0x1109fde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.178] CloseHandle (hObject=0x1fc) returned 1
	[0298.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf.tl30z")) returned 0x220
	[0298.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.181] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0298.183] SetEvent (hEvent=0x210) returned 1
	[0298.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf")) returned 0x220
	[0298.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF", dwFileAttributes=0x220) returned 1
	[0298.184] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0298.276] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0298.276] ReadFile (in: hFile=0x1fc, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x6f9c, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11288e18*=0x6f9c, lpOverlapped=0x0) returned 1
	[0298.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0298.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6268 | out: pbBuffer=0x113e6268) returned 1
	[0298.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11275302 | out: pbBuffer=0x11275302) returned 1
	[0298.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11275363 | out: pbBuffer=0x11275363) returned 1
	[0298.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11275366 | out: pbBuffer=0x11275366) returned 1
	[0298.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0298.292] GetFileType (hFile=0x1fc) returned 0x1
	[0298.292] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.292] WriteFile (in: hFile=0x1fc, lpBuffer=0x112fa000*, nNumberOfBytesToWrite=0x6f9c, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x112fa000*, lpNumberOfBytesWritten=0x111c7dfc*=0x6f9c, lpOverlapped=0x111c7e08) returned 1
	[0298.293] GetFileType (hFile=0x1fc) returned 0x1
	[0298.293] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6f9c, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.293] GetFileType (hFile=0x1fc) returned 0x1
	[0298.293] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.293] WriteFile (in: hFile=0x1fc, lpBuffer=0x11437c00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x11437c00*, lpNumberOfBytesWritten=0x111c7dfc*=0x236, lpOverlapped=0x111c7e08) returned 1
	[0298.294] GetFileType (hFile=0x1fc) returned 0x1
	[0298.294] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6f9c, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.295] CloseHandle (hObject=0x1fc) returned 1
	[0298.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf.tl30z")) returned 0x220
	[0298.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.297] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0298.300] SetEvent (hEvent=0x218) returned 1
	[0298.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf")) returned 0x220
	[0298.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF", dwFileAttributes=0x220) returned 1
	[0298.301] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0298.406] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0298.406] ReadFile (in: hFile=0x224, lpBuffer=0x11142000, nNumberOfBytesToRead=0x714e, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11142000*, lpNumberOfBytesRead=0x11288e18*=0x714e, lpOverlapped=0x0) returned 1
	[0298.416] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0298.417] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11156802 | out: pbBuffer=0x11156802) returned 1
	[0298.417] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11156877 | out: pbBuffer=0x11156877) returned 1
	[0298.417] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0298.418] GetFileType (hFile=0x224) returned 0x1
	[0298.418] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.418] WriteFile (in: hFile=0x224, lpBuffer=0x111a2000*, nNumberOfBytesToWrite=0x714e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111a2000*, lpNumberOfBytesWritten=0x11031dfc*=0x714e, lpOverlapped=0x11031e08) returned 1
	[0298.419] GetFileType (hFile=0x224) returned 0x1
	[0298.419] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x714e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.419] GetFileType (hFile=0x224) returned 0x1
	[0298.419] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.420] WriteFile (in: hFile=0x224, lpBuffer=0x11168a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11168a80*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0298.420] GetFileType (hFile=0x224) returned 0x1
	[0298.420] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x714e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.421] CloseHandle (hObject=0x224) returned 1
	[0298.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf.tl30z")) returned 0x220
	[0298.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.424] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0298.428] SetEvent (hEvent=0x218) returned 1
	[0298.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf")) returned 0x220
	[0298.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF", dwFileAttributes=0x220) returned 1
	[0298.428] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0298.665] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0298.665] ReadFile (in: hFile=0x1d4, lpBuffer=0x11418000, nNumberOfBytesToRead=0x13c4, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11418000*, lpNumberOfBytesRead=0x11288e18*=0x13c4, lpOverlapped=0x0) returned 1
	[0298.671] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0298.671] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11177302 | out: pbBuffer=0x11177302) returned 1
	[0298.671] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0298.671] GetFileType (hFile=0x1d4) returned 0x1
	[0298.672] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.672] WriteFile (in: hFile=0x1d4, lpBuffer=0x11376000*, nNumberOfBytesToWrite=0x13c4, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x11376000*, lpNumberOfBytesWritten=0x112bbdfc*=0x13c4, lpOverlapped=0x112bbe08) returned 1
	[0298.672] GetFileType (hFile=0x1d4) returned 0x1
	[0298.672] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x13c4, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.672] GetFileType (hFile=0x1d4) returned 0x1
	[0298.672] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.673] WriteFile (in: hFile=0x1d4, lpBuffer=0x1137d880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x1137d880*, lpNumberOfBytesWritten=0x112bbdfc*=0x22a, lpOverlapped=0x112bbe08) returned 1
	[0298.673] GetFileType (hFile=0x1d4) returned 0x1
	[0298.673] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x13c4, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.673] CloseHandle (hObject=0x1d4) returned 1
	[0298.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf.tl30z")) returned 0x220
	[0298.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.676] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0298.679] SetEvent (hEvent=0x118) returned 1
	[0298.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf")) returned 0x220
	[0298.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF", dwFileAttributes=0x220) returned 1
	[0298.679] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0298.746] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0298.746] ReadFile (in: hFile=0x1d8, lpBuffer=0x11094000, nNumberOfBytesToRead=0x302c, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11094000*, lpNumberOfBytesRead=0x11288e18*=0x302c, lpOverlapped=0x0) returned 1
	[0298.754] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0298.754] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332658 | out: pbBuffer=0x11332658) returned 1
	[0298.754] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a0702 | out: pbBuffer=0x110a0702) returned 1
	[0298.754] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110a0728 | out: pbBuffer=0x110a0728) returned 1
	[0298.754] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110a0740 | out: pbBuffer=0x110a0740) returned 1
	[0298.754] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0298.755] GetFileType (hFile=0x1d8) returned 0x1
	[0298.755] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.755] WriteFile (in: hFile=0x1d8, lpBuffer=0x110bc000*, nNumberOfBytesToWrite=0x302c, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x110bc000*, lpNumberOfBytesWritten=0x112b9dfc*=0x302c, lpOverlapped=0x112b9e08) returned 1
	[0298.755] GetFileType (hFile=0x1d8) returned 0x1
	[0298.755] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x302c, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.756] GetFileType (hFile=0x1d8) returned 0x1
	[0298.756] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.756] WriteFile (in: hFile=0x1d8, lpBuffer=0x1145b500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x1145b500*, lpNumberOfBytesWritten=0x112b9dfc*=0x227, lpOverlapped=0x112b9e08) returned 1
	[0298.756] GetFileType (hFile=0x1d8) returned 0x1
	[0298.756] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x302c, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.756] CloseHandle (hObject=0x1d8) returned 1
	[0298.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf.tl30z")) returned 0x220
	[0298.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.759] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0298.763] SetEvent (hEvent=0x234) returned 1
	[0298.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf")) returned 0x220
	[0298.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF", dwFileAttributes=0x220) returned 1
	[0298.763] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0298.833] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0298.833] ReadFile (in: hFile=0x224, lpBuffer=0x11396000, nNumberOfBytesToRead=0x7a46, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x11288e18*=0x7a46, lpOverlapped=0x0) returned 1
	[0298.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0298.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0298.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c4802 | out: pbBuffer=0x111c4802) returned 1
	[0298.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c487c | out: pbBuffer=0x111c487c) returned 1
	[0298.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0298.840] GetFileType (hFile=0x224) returned 0x1
	[0298.840] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.841] WriteFile (in: hFile=0x224, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0x7a46, lpNumberOfBytesWritten=0x110c7dfc, lpOverlapped=0x110c7e08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x110c7dfc*=0x7a46, lpOverlapped=0x110c7e08) returned 1
	[0298.841] GetFileType (hFile=0x224) returned 0x1
	[0298.841] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7a46, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.841] GetFileType (hFile=0x224) returned 0x1
	[0298.841] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.842] WriteFile (in: hFile=0x224, lpBuffer=0x113a0a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x110c7dfc, lpOverlapped=0x110c7e08 | out: lpBuffer=0x113a0a80*, lpNumberOfBytesWritten=0x110c7dfc*=0x230, lpOverlapped=0x110c7e08) returned 1
	[0298.842] GetFileType (hFile=0x224) returned 0x1
	[0298.842] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7a46, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.842] CloseHandle (hObject=0x224) returned 1
	[0298.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf.tl30z")) returned 0x220
	[0298.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.845] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0298.848] SetEvent (hEvent=0x218) returned 1
	[0298.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf")) returned 0x220
	[0298.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF", dwFileAttributes=0x220) returned 1
	[0298.849] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0299.126] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0299.126] ReadFile (in: hFile=0x1fc, lpBuffer=0x112ba000, nNumberOfBytesToRead=0x366e, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x112ba000*, lpNumberOfBytesRead=0x11288e18*=0x366e, lpOverlapped=0x0) returned 1
	[0299.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0299.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d0802 | out: pbBuffer=0x111d0802) returned 1
	[0299.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d083a | out: pbBuffer=0x111d083a) returned 1
	[0299.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0299.133] GetFileType (hFile=0x1fc) returned 0x1
	[0299.133] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.133] WriteFile (in: hFile=0x1fc, lpBuffer=0x11446000*, nNumberOfBytesToWrite=0x366e, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x11446000*, lpNumberOfBytesWritten=0x110c3dfc*=0x366e, lpOverlapped=0x110c3e08) returned 1
	[0299.133] GetFileType (hFile=0x1fc) returned 0x1
	[0299.133] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x366e, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.134] GetFileType (hFile=0x1fc) returned 0x1
	[0299.134] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.134] WriteFile (in: hFile=0x1fc, lpBuffer=0x111e2a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x111e2a80*, lpNumberOfBytesWritten=0x110c3dfc*=0x233, lpOverlapped=0x110c3e08) returned 1
	[0299.134] GetFileType (hFile=0x1fc) returned 0x1
	[0299.134] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x366e, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.134] CloseHandle (hObject=0x1fc) returned 1
	[0299.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf.tl30z")) returned 0x220
	[0299.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.137] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.141] SetEvent (hEvent=0x118) returned 1
	[0299.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf")) returned 0x220
	[0299.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF", dwFileAttributes=0x220) returned 1
	[0299.142] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0299.221] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0299.221] ReadFile (in: hFile=0x224, lpBuffer=0x11186000, nNumberOfBytesToRead=0x180e, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11186000*, lpNumberOfBytesRead=0x11288e18*=0x180e, lpOverlapped=0x0) returned 1
	[0299.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0299.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bc902 | out: pbBuffer=0x110bc902) returned 1
	[0299.227] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bc951 | out: pbBuffer=0x110bc951) returned 1
	[0299.227] SetEvent (hEvent=0x118) returned 1
	[0299.227] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e6a0 | out: pbBuffer=0x1104e6a0) returned 1
	[0299.228] GetFileType (hFile=0x224) returned 0x1
	[0299.228] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.228] WriteFile (in: hFile=0x224, lpBuffer=0x111a8000*, nNumberOfBytesToWrite=0x180e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111a8000*, lpNumberOfBytesWritten=0x11031dfc*=0x180e, lpOverlapped=0x11031e08) returned 1
	[0299.228] GetFileType (hFile=0x224) returned 0x1
	[0299.228] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x180e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.229] GetFileType (hFile=0x224) returned 0x1
	[0299.229] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.229] WriteFile (in: hFile=0x224, lpBuffer=0x110a7880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110a7880*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0299.229] GetFileType (hFile=0x224) returned 0x1
	[0299.229] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x180e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.229] CloseHandle (hObject=0x224) returned 1
	[0299.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf.tl30z")) returned 0x220
	[0299.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.235] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.236] SetEvent (hEvent=0x118) returned 1
	[0299.236] SetEvent (hEvent=0x234) returned 1
	[0299.236] SwitchToThread () returned 1
	[0299.238] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.240] SetEvent (hEvent=0x234) returned 1
	[0299.240] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf")) returned 0x220
	[0299.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF", dwFileAttributes=0x220) returned 1
	[0299.240] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0299.348] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0299.348] ReadFile (in: hFile=0x1d4, lpBuffer=0x11062000, nNumberOfBytesToRead=0xa5c, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11062000*, lpNumberOfBytesRead=0x11286e18*=0xa5c, lpOverlapped=0x0) returned 1
	[0299.353] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0299.353] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c4902 | out: pbBuffer=0x110c4902) returned 1
	[0299.354] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e690 | out: pbBuffer=0x1104e690) returned 1
	[0299.354] GetFileType (hFile=0x1d4) returned 0x1
	[0299.354] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.354] WriteFile (in: hFile=0x1d4, lpBuffer=0x113a2000*, nNumberOfBytesToWrite=0xa5c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113a2000*, lpNumberOfBytesWritten=0x11031dfc*=0xa5c, lpOverlapped=0x11031e08) returned 1
	[0299.355] GetFileType (hFile=0x1d4) returned 0x1
	[0299.355] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xa5c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.355] GetFileType (hFile=0x1d4) returned 0x1
	[0299.355] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.355] WriteFile (in: hFile=0x1d4, lpBuffer=0x1137dc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1137dc00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0299.355] GetFileType (hFile=0x1d4) returned 0x1
	[0299.355] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xa5c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.355] CloseHandle (hObject=0x1d4) returned 1
	[0299.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf.tl30z")) returned 0x220
	[0299.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.359] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf")) returned 0x220
	[0299.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF", dwFileAttributes=0x220) returned 1
	[0299.361] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.438] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0299.438] ReadFile (in: hFile=0x250, lpBuffer=0x11128000, nNumberOfBytesToRead=0x1f50, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11128000*, lpNumberOfBytesRead=0x11286e18*=0x1f50, lpOverlapped=0x0) returned 1
	[0299.443] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0299.443] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112d7302 | out: pbBuffer=0x112d7302) returned 1
	[0299.443] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112d736d | out: pbBuffer=0x112d736d) returned 1
	[0299.443] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0299.444] GetFileType (hFile=0x250) returned 0x1
	[0299.444] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.444] WriteFile (in: hFile=0x250, lpBuffer=0x11142000*, nNumberOfBytesToWrite=0x1f50, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x11142000*, lpNumberOfBytesWritten=0x1138bdfc*=0x1f50, lpOverlapped=0x1138be08) returned 1
	[0299.444] GetFileType (hFile=0x250) returned 0x1
	[0299.444] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1f50, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.445] GetFileType (hFile=0x250) returned 0x1
	[0299.445] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.445] WriteFile (in: hFile=0x250, lpBuffer=0x11321880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x11321880*, lpNumberOfBytesWritten=0x1138bdfc*=0x22d, lpOverlapped=0x1138be08) returned 1
	[0299.445] GetFileType (hFile=0x250) returned 0x1
	[0299.445] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1f50, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.446] CloseHandle (hObject=0x250) returned 1
	[0299.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf.tl30z")) returned 0x220
	[0299.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.449] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.453] SetEvent (hEvent=0x234) returned 1
	[0299.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg")) returned 0x220
	[0299.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG", dwFileAttributes=0x220) returned 1
	[0299.454] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg.tl30z"), dwFlags=0x1) returned 1
	[0299.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.538] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0299.538] ReadFile (in: hFile=0x250, lpBuffer=0x1135a000, nNumberOfBytesToRead=0xa783, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x1135a000*, lpNumberOfBytesRead=0x11286e18*=0xa783, lpOverlapped=0x0) returned 1
	[0299.543] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0299.543] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11350802 | out: pbBuffer=0x11350802) returned 1
	[0299.543] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11350808 | out: pbBuffer=0x11350808) returned 1
	[0299.543] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1135088d | out: pbBuffer=0x1135088d) returned 1
	[0299.543] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113508b5 | out: pbBuffer=0x113508b5) returned 1
	[0299.544] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0299.545] GetFileType (hFile=0x250) returned 0x1
	[0299.545] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.546] WriteFile (in: hFile=0x250, lpBuffer=0x113d2000*, nNumberOfBytesToWrite=0xa783, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x113d2000*, lpNumberOfBytesWritten=0x1141ddfc*=0xa783, lpOverlapped=0x1141de08) returned 1
	[0299.546] GetFileType (hFile=0x250) returned 0x1
	[0299.546] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xa783, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.546] GetFileType (hFile=0x250) returned 0x1
	[0299.547] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.547] WriteFile (in: hFile=0x250, lpBuffer=0x11254a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11254a80*, lpNumberOfBytesWritten=0x1141ddfc*=0x233, lpOverlapped=0x1141de08) returned 1
	[0299.547] GetFileType (hFile=0x250) returned 0x1
	[0299.547] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xa783, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.547] CloseHandle (hObject=0x250) returned 1
	[0299.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg.tl30z")) returned 0x220
	[0299.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0299.605] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.609] SetEvent (hEvent=0x118) returned 1
	[0299.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf")) returned 0x220
	[0299.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF", dwFileAttributes=0x220) returned 1
	[0299.610] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.759] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0299.759] ReadFile (in: hFile=0x250, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x24e2, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x11319e18*=0x24e2, lpOverlapped=0x0) returned 1
	[0299.763] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0299.764] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a8802 | out: pbBuffer=0x112a8802) returned 1
	[0299.764] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0299.764] GetFileType (hFile=0x250) returned 0x1
	[0299.764] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.765] WriteFile (in: hFile=0x250, lpBuffer=0x11108000*, nNumberOfBytesToWrite=0x24e2, lpNumberOfBytesWritten=0x11419dfc, lpOverlapped=0x11419e08 | out: lpBuffer=0x11108000*, lpNumberOfBytesWritten=0x11419dfc*=0x24e2, lpOverlapped=0x11419e08) returned 1
	[0299.765] GetFileType (hFile=0x250) returned 0x1
	[0299.765] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x24e2, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.765] GetFileType (hFile=0x250) returned 0x1
	[0299.766] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.766] WriteFile (in: hFile=0x250, lpBuffer=0x112bca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11419dfc, lpOverlapped=0x11419e08 | out: lpBuffer=0x112bca80*, lpNumberOfBytesWritten=0x11419dfc*=0x22a, lpOverlapped=0x11419e08) returned 1
	[0299.766] GetFileType (hFile=0x250) returned 0x1
	[0299.766] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x24e2, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.766] CloseHandle (hObject=0x250) returned 1
	[0299.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf.tl30z")) returned 0x220
	[0299.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.769] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.770] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.773] SetEvent (hEvent=0x118) returned 1
	[0299.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg")) returned 0x220
	[0299.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG", dwFileAttributes=0x220) returned 1
	[0299.774] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg.tl30z"), dwFlags=0x1) returned 1
	[0299.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0299.856] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0299.856] ReadFile (in: hFile=0x1fc, lpBuffer=0x1116a000, nNumberOfBytesToRead=0x8ad6, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1116a000*, lpNumberOfBytesRead=0x11425e18*=0x8ad6, lpOverlapped=0x0) returned 1
	[0299.861] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0299.862] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a9202 | out: pbBuffer=0x112a9202) returned 1
	[0299.862] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0299.864] SetEvent (hEvent=0x118) returned 1
	[0299.865] GetFileType (hFile=0x1fc) returned 0x1
	[0299.865] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.865] WriteFile (in: hFile=0x1fc, lpBuffer=0x11bd2000*, nNumberOfBytesToWrite=0x8ad6, lpNumberOfBytesWritten=0x11419dfc, lpOverlapped=0x11419e08 | out: lpBuffer=0x11bd2000*, lpNumberOfBytesWritten=0x11419dfc*=0x8ad6, lpOverlapped=0x11419e08) returned 1
	[0299.866] GetFileType (hFile=0x1fc) returned 0x1
	[0299.866] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x8ad6, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.866] GetFileType (hFile=0x1fc) returned 0x1
	[0299.866] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.866] WriteFile (in: hFile=0x1fc, lpBuffer=0x112bd880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11419dfc, lpOverlapped=0x11419e08 | out: lpBuffer=0x112bd880*, lpNumberOfBytesWritten=0x11419dfc*=0x233, lpOverlapped=0x11419e08) returned 1
	[0299.867] GetFileType (hFile=0x1fc) returned 0x1
	[0299.867] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x8ad6, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.867] CloseHandle (hObject=0x1fc) returned 1
	[0299.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg.tl30z")) returned 0x220
	[0299.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0299.873] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.874] SetEvent (hEvent=0x118) returned 1
	[0299.874] SetEvent (hEvent=0x234) returned 1
	[0299.874] SwitchToThread () returned 1
	[0299.876] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0299.879] SetEvent (hEvent=0x234) returned 1
	[0299.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf")) returned 0x220
	[0299.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF", dwFileAttributes=0x220) returned 1
	[0299.879] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0300.000] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0300.000] ReadFile (in: hFile=0x250, lpBuffer=0x112da000, nNumberOfBytesToRead=0x1066, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x112da000*, lpNumberOfBytesRead=0x11286e18*=0x1066, lpOverlapped=0x0) returned 1
	[0300.006] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111583f0 | out: pbBuffer=0x111583f0) returned 1
	[0300.006] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111583e8 | out: pbBuffer=0x111583e8) returned 1
	[0300.006] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bdd02 | out: pbBuffer=0x111bdd02) returned 1
	[0300.006] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111bdd38 | out: pbBuffer=0x111bdd38) returned 1
	[0300.007] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158420 | out: pbBuffer=0x11158420) returned 1
	[0300.007] GetFileType (hFile=0x250) returned 0x1
	[0300.007] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.008] WriteFile (in: hFile=0x250, lpBuffer=0x1132c000*, nNumberOfBytesToWrite=0x1066, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1132c000*, lpNumberOfBytesWritten=0x11031dfc*=0x1066, lpOverlapped=0x11031e08) returned 1
	[0300.008] GetFileType (hFile=0x250) returned 0x1
	[0300.008] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1066, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.008] GetFileType (hFile=0x250) returned 0x1
	[0300.008] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.009] WriteFile (in: hFile=0x250, lpBuffer=0x112e6a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112e6a80*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0300.009] GetFileType (hFile=0x250) returned 0x1
	[0300.009] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1066, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.009] CloseHandle (hObject=0x250) returned 1
	[0300.011] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf.tl30z")) returned 0x220
	[0300.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.012] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0300.016] SetEvent (hEvent=0x234) returned 1
	[0300.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf")) returned 0x220
	[0300.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF", dwFileAttributes=0x220) returned 1
	[0300.017] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0300.080] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0300.080] ReadFile (in: hFile=0x1f4, lpBuffer=0x11098000, nNumberOfBytesToRead=0x899c, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11098000*, lpNumberOfBytesRead=0x11286e18*=0x899c, lpOverlapped=0x0) returned 1
	[0300.403] SwitchToThread () returned 1
	[0300.426] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0300.443] SetEvent (hEvent=0x210) returned 1
	[0300.443] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6060 | out: pbBuffer=0x113e6060) returned 1
	[0300.443] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0300.458] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c5ea02 | out: pbBuffer=0x11c5ea02) returned 1
	[0300.458] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c5ea3c | out: pbBuffer=0x11c5ea3c) returned 1
	[0300.458] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c5ea57 | out: pbBuffer=0x11c5ea57) returned 1
	[0300.458] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158020 | out: pbBuffer=0x11158020) returned 1
	[0300.459] GetFileType (hFile=0x1f4) returned 0x1
	[0300.460] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.460] WriteFile (in: hFile=0x1f4, lpBuffer=0x113aa000*, nNumberOfBytesToWrite=0x899c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113aa000*, lpNumberOfBytesWritten=0x1133fdfc*=0x899c, lpOverlapped=0x1133fe08) returned 1
	[0300.460] GetFileType (hFile=0x1f4) returned 0x1
	[0300.461] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x899c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.461] GetFileType (hFile=0x1f4) returned 0x1
	[0300.461] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.461] WriteFile (in: hFile=0x1f4, lpBuffer=0x11ce4700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11ce4700*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0300.462] GetFileType (hFile=0x1f4) returned 0x1
	[0300.462] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x899c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.462] CloseHandle (hObject=0x1f4) returned 1
	[0300.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf.tl30z")) returned 0x220
	[0300.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1
	[0300.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf")) returned 0x220
	[0300.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF", dwFileAttributes=0x220) returned 1
	[0300.464] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0300.468] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0300.468] ReadFile (in: hFile=0x1f4, lpBuffer=0x11204a00, nNumberOfBytesToRead=0x1348, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11204a00*, lpNumberOfBytesRead=0x11023e18*=0x1348, lpOverlapped=0x0) returned 1
	[0301.002] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0301.015] SetEvent (hEvent=0x22c) returned 1
	[0301.015] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.731] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.738] SetEvent (hEvent=0x210) returned 1
	[0308.738] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid")) returned 0x220
	[0308.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID", dwFileAttributes=0x220) returned 1
	[0308.740] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0308.782] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11090e08 | out: lpMode=0x11090e08) returned 0
	[0308.782] ReadFile (in: hFile=0x1d8, lpBuffer=0x11134a00, nNumberOfBytesToRead=0x215a, lpNumberOfBytesRead=0x11090e18, lpOverlapped=0x0 | out: lpBuffer=0x11134a00*, lpNumberOfBytesRead=0x11090e18*=0x215a, lpOverlapped=0x0) returned 1
	[0308.871] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.903] SetEvent (hEvent=0x1e0) returned 1
	[0308.903] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) returned 0x0
	[0308.904] SetEvent (hEvent=0x2a8) returned 1
	[0308.904] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) 

Thread:
	id = 35
	os_tid = 0x9d8

	[0212.684] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0xa9ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xa9ff30*=0x20c) returned 1
	[0212.685] VirtualQuery (in: lpAddress=0xa9ff40, lpBuffer=0xa9ff40, dwLength=0x1c | out: lpBuffer=0xa9ff40*(BaseAddress=0xa9f000, AllocationBase=0x9a0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0212.685] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx")) returned 0x20
	[0212.685] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0212.686] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0219.996] SetEvent (hEvent=0x134) returned 1
	[0219.996] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x210
	[0219.996] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0220.044] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0220.044] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0220.074] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0220.074] SetEvent (hEvent=0x218) returned 1
	[0220.074] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0220.238] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0220.238] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0220.697] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11031e08 | out: lpMode=0x11031e08) returned 0
	[0220.698] ReadFile (in: hFile=0x224, lpBuffer=0x11b10000, nNumberOfBytesToRead=0x2507a, lpNumberOfBytesRead=0x11031e18, lpOverlapped=0x0 | out: lpBuffer=0x11b10000*, lpNumberOfBytesRead=0x11031e18*=0x2507a, lpOverlapped=0x0) returned 1
	[0220.712] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0220.712] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141c902 | out: pbBuffer=0x1141c902) returned 1
	[0220.713] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1141c937 | out: pbBuffer=0x1141c937) returned 1
	[0220.713] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0220.719] VirtualAlloc (lpAddress=0x11680000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x11680000
	[0220.730] GetFileType (hFile=0x224) returned 0x1
	[0220.730] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0220.730] WriteFile (in: hFile=0x224, lpBuffer=0x11680000*, nNumberOfBytesToWrite=0x2507a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11680000*, lpNumberOfBytesWritten=0x11031dfc*=0x2507a, lpOverlapped=0x11031e08) returned 1
	[0220.732] GetFileType (hFile=0x224) returned 0x1
	[0220.732] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2507a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0220.732] GetFileType (hFile=0x224) returned 0x1
	[0220.732] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0220.732] WriteFile (in: hFile=0x224, lpBuffer=0x11290a80*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11290a80*, lpNumberOfBytesWritten=0x11031dfc*=0x245, lpOverlapped=0x11031e08) returned 1
	[0220.798] GetFileType (hFile=0x224) returned 0x1
	[0220.798] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2507a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0220.798] CloseHandle (hObject=0x224) returned 1
	[0221.625] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.tl30z")) returned 0x20
	[0221.625] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0221.940] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0222.126] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0222.133] SetEvent (hEvent=0x22c) returned 1
	[0222.133] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0222.257] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0242.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 0x20
	[0242.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", dwFileAttributes=0x20) returned 1
	[0242.218] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.tl30z"), dwFlags=0x1) returned 1
	[0244.809] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0244.826] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0244.826] ReadFile (in: hFile=0x204, lpBuffer=0x11058000, nNumberOfBytesToRead=0xdc57, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11023e18*=0xdc57, lpOverlapped=0x0) returned 1
	[0244.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0244.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e108 | out: pbBuffer=0x1142e108) returned 1
	[0244.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11368802 | out: pbBuffer=0x11368802) returned 1
	[0244.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11368878 | out: pbBuffer=0x11368878) returned 1
	[0244.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113688af | out: pbBuffer=0x113688af) returned 1
	[0244.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0244.847] GetFileType (hFile=0x204) returned 0x1
	[0244.847] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.847] WriteFile (in: hFile=0x204, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0xdc57, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x112f5dfc*=0xdc57, lpOverlapped=0x112f5e08) returned 1
	[0244.847] GetFileType (hFile=0x204) returned 0x1
	[0244.848] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xdc57, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.848] GetFileType (hFile=0x204) returned 0x1
	[0244.848] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.848] WriteFile (in: hFile=0x204, lpBuffer=0x11240e00*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11240e00*, lpNumberOfBytesWritten=0x112f5dfc*=0x239, lpOverlapped=0x112f5e08) returned 1
	[0244.850] GetFileType (hFile=0x204) returned 0x1
	[0244.850] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xdc57, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.850] CloseHandle (hObject=0x204) returned 1
	[0244.906] SetEvent (hEvent=0x284) returned 1
	[0244.906] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0244.933] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0244.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.tl30z")) returned 0x20
	[0244.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0245.332] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0245.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.tl30z")) returned 0x20
	[0245.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0245.711] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0245.711] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x110b9e08 | out: lpMode=0x110b9e08) returned 0
	[0245.711] ReadFile (in: hFile=0x288, lpBuffer=0x110f2000, nNumberOfBytesToRead=0x25ade, lpNumberOfBytesRead=0x110b9e18, lpOverlapped=0x0 | out: lpBuffer=0x110f2000*, lpNumberOfBytesRead=0x110b9e18*=0x25ade, lpOverlapped=0x0) returned 1
	[0245.818] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0245.930] SetEvent (hEvent=0x1f0) returned 1
	[0245.930] SetEvent (hEvent=0x118) returned 1
	[0245.930] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0246.765] SetEvent (hEvent=0x26c) returned 1
	[0246.765] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0247.246] SetEvent (hEvent=0x218) returned 1
	[0247.246] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0247.287] SetEvent (hEvent=0x248) returned 1
	[0247.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20
	[0247.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x20) returned 1
	[0247.288] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.tl30z"), dwFlags=0x1) returned 1
	[0248.599] SetEvent (hEvent=0x150) returned 1
	[0248.600] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0248.635] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0248.635] ReadFile (in: hFile=0x1d4, lpBuffer=0x111b8460, nNumberOfBytesToRead=0x93, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x111b8460*, lpNumberOfBytesRead=0x11288e18*=0x93, lpOverlapped=0x0) returned 1
	[0248.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e560 | out: pbBuffer=0x1142e560) returned 1
	[0248.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e558 | out: pbBuffer=0x1142e558) returned 1
	[0248.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d6602 | out: pbBuffer=0x110d6602) returned 1
	[0248.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d662d | out: pbBuffer=0x110d662d) returned 1
	[0248.669] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e590 | out: pbBuffer=0x1142e590) returned 1
	[0248.669] GetFileType (hFile=0x1d4) returned 0x1
	[0248.669] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0248.670] WriteFile (in: hFile=0x1d4, lpBuffer=0x110d0c00*, nNumberOfBytesToWrite=0x93, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110d0c00*, lpNumberOfBytesWritten=0x11031dfc*=0x93, lpOverlapped=0x11031e08) returned 1
	[0248.670] GetFileType (hFile=0x1d4) returned 0x1
	[0248.670] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x93, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0248.670] GetFileType (hFile=0x1d4) returned 0x1
	[0248.670] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0248.671] WriteFile (in: hFile=0x1d4, lpBuffer=0x110e6380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110e6380*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0248.694] GetFileType (hFile=0x1d4) returned 0x1
	[0248.694] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x93, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0248.694] CloseHandle (hObject=0x1d4) returned 1
	[0248.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.tl30z")) returned 0x20
	[0248.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.tl30z", dwFileAttributes=0x21) returned 1
	[0248.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 0x20
	[0248.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties", dwFileAttributes=0x20) returned 1
	[0248.852] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.tl30z"), dwFlags=0x1) returned 1
	[0249.211] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0249.248] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0249.248] ReadFile (in: hFile=0x1d4, lpBuffer=0x1103cd40, nNumberOfBytesToRead=0x38, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1103cd40*, lpNumberOfBytesRead=0x11288e18*=0x38, lpOverlapped=0x0) returned 1
	[0249.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142ea10 | out: pbBuffer=0x1142ea10) returned 1
	[0249.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1149e602 | out: pbBuffer=0x1149e602) returned 1
	[0249.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142ea40 | out: pbBuffer=0x1142ea40) returned 1
	[0249.250] GetFileType (hFile=0x1d4) returned 0x1
	[0249.250] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0249.250] WriteFile (in: hFile=0x1d4, lpBuffer=0x11315200*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11315200*, lpNumberOfBytesWritten=0x1102bdfc*=0x38, lpOverlapped=0x1102be08) returned 1
	[0249.250] GetFileType (hFile=0x1d4) returned 0x1
	[0249.251] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0249.251] GetFileType (hFile=0x1d4) returned 0x1
	[0249.251] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0249.251] WriteFile (in: hFile=0x1d4, lpBuffer=0x113c3500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113c3500*, lpNumberOfBytesWritten=0x1102bdfc*=0x221, lpOverlapped=0x1102be08) returned 1
	[0249.255] GetFileType (hFile=0x1d4) returned 0x1
	[0249.266] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x38, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0249.266] CloseHandle (hObject=0x1d4) returned 1
	[0249.269] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.tl30z")) returned 0x20
	[0249.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0249.270] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0249.301] SetEvent (hEvent=0x248) returned 1
	[0249.301] SetEvent (hEvent=0x118) returned 1
	[0249.301] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0249.338] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0249.338] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0249.369] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0249.369] SetEvent (hEvent=0x248) returned 1
	[0249.369] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0249.373] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0249.373] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0249.902] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0249.946] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0250.020] SetEvent (hEvent=0x118) returned 1
	[0250.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 0x20
	[0250.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties", dwFileAttributes=0x20) returned 1
	[0250.021] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.tl30z"), dwFlags=0x1) returned 1
	[0250.316] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0250.316] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0250.317] ReadFile (in: hFile=0x1d0, lpBuffer=0x11216000, nNumberOfBytesToRead=0x997, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11216000*, lpNumberOfBytesRead=0x1131ae18*=0x997, lpOverlapped=0x0) returned 1
	[0250.330] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e420 | out: pbBuffer=0x1142e420) returned 1
	[0250.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e418 | out: pbBuffer=0x1142e418) returned 1
	[0250.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122c002 | out: pbBuffer=0x1122c002) returned 1
	[0250.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e450 | out: pbBuffer=0x1142e450) returned 1
	[0250.332] GetFileType (hFile=0x1d0) returned 0x1
	[0250.332] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.332] WriteFile (in: hFile=0x1d0, lpBuffer=0x11236000*, nNumberOfBytesToWrite=0x997, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11236000*, lpNumberOfBytesWritten=0x11031dfc*=0x997, lpOverlapped=0x11031e08) returned 1
	[0250.332] GetFileType (hFile=0x1d0) returned 0x1
	[0250.332] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x997, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.333] GetFileType (hFile=0x1d0) returned 0x1
	[0250.333] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.333] WriteFile (in: hFile=0x1d0, lpBuffer=0x11220a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11220a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0250.333] GetFileType (hFile=0x1d0) returned 0x1
	[0250.333] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x997, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.334] CloseHandle (hObject=0x1d0) returned 1
	[0250.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.tl30z")) returned 0x20
	[0250.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0250.339] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0250.421] SetEvent (hEvent=0x26c) returned 1
	[0250.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 0x20
	[0250.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties", dwFileAttributes=0x20) returned 1
	[0250.423] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.tl30z"), dwFlags=0x1) returned 1
	[0250.728] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0250.740] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0250.740] ReadFile (in: hFile=0x1d0, lpBuffer=0x11148000, nNumberOfBytesToRead=0x3926, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11148000*, lpNumberOfBytesRead=0x1131ae18*=0x3926, lpOverlapped=0x0) returned 1
	[0250.750] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0250.750] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1124d302 | out: pbBuffer=0x1124d302) returned 1
	[0250.751] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62c0 | out: pbBuffer=0x113e62c0) returned 1
	[0250.751] SetEvent (hEvent=0x1f0) returned 1
	[0250.751] GetFileType (hFile=0x1d0) returned 0x1
	[0250.751] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.752] WriteFile (in: hFile=0x1d0, lpBuffer=0x11176000*, nNumberOfBytesToWrite=0x3926, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11176000*, lpNumberOfBytesWritten=0x112f3dfc*=0x3926, lpOverlapped=0x112f3e08) returned 1
	[0250.752] GetFileType (hFile=0x1d0) returned 0x1
	[0250.752] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x3926, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.753] GetFileType (hFile=0x1d0) returned 0x1
	[0250.753] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.753] WriteFile (in: hFile=0x1d0, lpBuffer=0x11261880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11261880*, lpNumberOfBytesWritten=0x112f3dfc*=0x22d, lpOverlapped=0x112f3e08) returned 1
	[0250.753] GetFileType (hFile=0x1d0) returned 0x1
	[0250.753] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x3926, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.753] CloseHandle (hObject=0x1d0) returned 1
	[0250.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.tl30z")) returned 0x20
	[0250.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0250.764] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0250.766] SetEvent (hEvent=0x1e8) returned 1
	[0250.766] SetEvent (hEvent=0x26c) returned 1
	[0250.766] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0250.767] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x110fde08 | out: lpMode=0x110fde08) returned 0
	[0250.767] ReadFile (in: hFile=0x1d0, lpBuffer=0x11212000, nNumberOfBytesToRead=0xd30, lpNumberOfBytesRead=0x110fde18, lpOverlapped=0x0 | out: lpBuffer=0x11212000*, lpNumberOfBytesRead=0x110fde18*=0xd30, lpOverlapped=0x0) returned 1
	[0250.776] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0250.776] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11344802 | out: pbBuffer=0x11344802) returned 1
	[0250.777] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0250.777] GetFileType (hFile=0x1d0) returned 0x1
	[0250.777] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.777] WriteFile (in: hFile=0x1d0, lpBuffer=0x11472000*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x110fddfc, lpOverlapped=0x110fde08 | out: lpBuffer=0x11472000*, lpNumberOfBytesWritten=0x110fddfc*=0xd30, lpOverlapped=0x110fde08) returned 1
	[0250.777] GetFileType (hFile=0x1d0) returned 0x1
	[0250.778] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xd30, lpNewFilePointer=0x0, dwMoveMethod=0x110fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.778] GetFileType (hFile=0x1d0) returned 0x1
	[0250.778] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.778] WriteFile (in: hFile=0x1d0, lpBuffer=0x11260a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x110fddfc, lpOverlapped=0x110fde08 | out: lpBuffer=0x11260a80*, lpNumberOfBytesWritten=0x110fddfc*=0x227, lpOverlapped=0x110fde08) returned 1
	[0250.778] GetFileType (hFile=0x1d0) returned 0x1
	[0250.778] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xd30, lpNewFilePointer=0x0, dwMoveMethod=0x110fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.778] CloseHandle (hObject=0x1d0) returned 1
	[0250.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.tl30z")) returned 0x20
	[0250.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.tl30z", dwFileAttributes=0x21) returned 1
	[0250.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 0x20
	[0250.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index", dwFileAttributes=0x20) returned 1
	[0250.791] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.tl30z"), dwFlags=0x1) returned 1
	[0251.320] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0251.330] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0251.330] ReadFile (in: hFile=0x1d4, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x84e, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11287e18*=0x84e, lpOverlapped=0x0) returned 1
	[0251.338] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e120 | out: pbBuffer=0x1142e120) returned 1
	[0251.339] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11410802 | out: pbBuffer=0x11410802) returned 1
	[0251.339] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11410878 | out: pbBuffer=0x11410878) returned 1
	[0251.340] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e150 | out: pbBuffer=0x1142e150) returned 1
	[0251.340] GetFileType (hFile=0x1d4) returned 0x1
	[0251.340] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0251.340] WriteFile (in: hFile=0x1d4, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0x84e, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x1102ddfc*=0x84e, lpOverlapped=0x1102de08) returned 1
	[0251.341] GetFileType (hFile=0x1d4) returned 0x1
	[0251.341] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x84e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0251.341] GetFileType (hFile=0x1d4) returned 0x1
	[0251.341] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0251.342] WriteFile (in: hFile=0x1d4, lpBuffer=0x1146ca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1146ca80*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0251.342] GetFileType (hFile=0x1d4) returned 0x1
	[0251.343] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x84e, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0251.343] CloseHandle (hObject=0x1d4) returned 1
	[0251.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.tl30z")) returned 0x20
	[0251.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.tl30z", dwFileAttributes=0x21) returned 1
	[0251.409] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0253.316] SetEvent (hEvent=0x234) returned 1
	[0253.316] SetEvent (hEvent=0x24c) returned 1
	[0253.317] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0253.334] SetEvent (hEvent=0x234) returned 1
	[0253.334] SetEvent (hEvent=0x1e8) returned 1
	[0253.334] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0253.601] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0253.613] SetEvent (hEvent=0x134) returned 1
	[0253.613] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0253.772] SwitchToThread () returned 1
	[0253.816] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0253.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0253.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0253.877] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0254.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0254.750] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x110afe08 | out: lpMode=0x110afe08) returned 0
	[0254.750] ReadFile (in: hFile=0x1f4, lpBuffer=0x1138c000, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x110afe18, lpOverlapped=0x0 | out: lpBuffer=0x1138c000*, lpNumberOfBytesRead=0x110afe18*=0x4ed, lpOverlapped=0x0) returned 1
	[0254.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0254.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0254.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e0802 | out: pbBuffer=0x113e0802) returned 1
	[0254.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e08a1 | out: pbBuffer=0x113e08a1) returned 1
	[0254.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0254.760] GetFileType (hFile=0x1f4) returned 0x1
	[0254.760] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.760] WriteFile (in: hFile=0x1f4, lpBuffer=0x1132e000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x110afdfc, lpOverlapped=0x110afe08 | out: lpBuffer=0x1132e000*, lpNumberOfBytesWritten=0x110afdfc*=0x4ed, lpOverlapped=0x110afe08) returned 1
	[0254.760] GetFileType (hFile=0x1f4) returned 0x1
	[0254.760] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.760] GetFileType (hFile=0x1f4) returned 0x1
	[0254.761] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.761] WriteFile (in: hFile=0x1f4, lpBuffer=0x1131ea80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x110afdfc, lpOverlapped=0x110afe08 | out: lpBuffer=0x1131ea80*, lpNumberOfBytesWritten=0x110afdfc*=0x22d, lpOverlapped=0x110afe08) returned 1
	[0254.761] GetFileType (hFile=0x1f4) returned 0x1
	[0254.761] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.761] CloseHandle (hObject=0x1f4) returned 1
	[0254.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0254.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0254.794] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0254.910] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0255.349] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0255.958] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0255.964] SetEvent (hEvent=0x218) returned 1
	[0255.964] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0255.971] SetEvent (hEvent=0x218) returned 1
	[0255.974] SwitchToThread () returned 1
	[0255.980] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0255.985] SetEvent (hEvent=0x26c) returned 1
	[0255.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0255.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0255.986] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0256.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0256.420] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0256.420] ReadFile (in: hFile=0x1d8, lpBuffer=0x110f2000, nNumberOfBytesToRead=0xfdea, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x110f2000*, lpNumberOfBytesRead=0x1128be18*=0xfdea, lpOverlapped=0x0) returned 1
	[0256.453] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0256.453] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11102802 | out: pbBuffer=0x11102802) returned 1
	[0256.453] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11102828 | out: pbBuffer=0x11102828) returned 1
	[0256.454] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0256.455] GetFileType (hFile=0x1d8) returned 0x1
	[0256.456] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.456] WriteFile (in: hFile=0x1d8, lpBuffer=0x11094000*, nNumberOfBytesToWrite=0xfdea, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11094000*, lpNumberOfBytesWritten=0x1102bdfc*=0xfdea, lpOverlapped=0x1102be08) returned 1
	[0256.457] GetFileType (hFile=0x1d8) returned 0x1
	[0256.457] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xfdea, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.457] GetFileType (hFile=0x1d8) returned 0x1
	[0256.457] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.457] WriteFile (in: hFile=0x1d8, lpBuffer=0x113b1880*, nNumberOfBytesToWrite=0x23f, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113b1880*, lpNumberOfBytesWritten=0x1102bdfc*=0x23f, lpOverlapped=0x1102be08) returned 1
	[0256.458] GetFileType (hFile=0x1d8) returned 0x1
	[0256.458] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xfdea, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.458] CloseHandle (hObject=0x1d8) returned 1
	[0256.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0256.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0256.550] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0256.571] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0256.677] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0256.744] SetEvent (hEvent=0x118) returned 1
	[0256.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0256.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0256.745] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0257.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0257.219] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0257.219] ReadFile (in: hFile=0x1fc, lpBuffer=0x110c0a00, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110c0a00*, lpNumberOfBytesRead=0x11423e18*=0x4ed, lpOverlapped=0x0) returned 1
	[0257.229] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332ae0 | out: pbBuffer=0x11332ae0) returned 1
	[0257.229] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332ad8 | out: pbBuffer=0x11332ad8) returned 1
	[0257.229] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11180702 | out: pbBuffer=0x11180702) returned 1
	[0257.229] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111807a2 | out: pbBuffer=0x111807a2) returned 1
	[0257.230] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332b10 | out: pbBuffer=0x11332b10) returned 1
	[0257.230] GetFileType (hFile=0x1fc) returned 0x1
	[0257.230] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.231] WriteFile (in: hFile=0x1fc, lpBuffer=0x1118e000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x11fb3dfc, lpOverlapped=0x11fb3e08 | out: lpBuffer=0x1118e000*, lpNumberOfBytesWritten=0x11fb3dfc*=0x4ed, lpOverlapped=0x11fb3e08) returned 1
	[0257.231] GetFileType (hFile=0x1fc) returned 0x1
	[0257.231] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.231] GetFileType (hFile=0x1fc) returned 0x1
	[0257.231] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.232] WriteFile (in: hFile=0x1fc, lpBuffer=0x1118c380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11fb3dfc, lpOverlapped=0x11fb3e08 | out: lpBuffer=0x1118c380*, lpNumberOfBytesWritten=0x11fb3dfc*=0x22d, lpOverlapped=0x11fb3e08) returned 1
	[0257.232] GetFileType (hFile=0x1fc) returned 0x1
	[0257.232] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.232] CloseHandle (hObject=0x1fc) returned 1
	[0257.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0257.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0257.252] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0257.311] SetEvent (hEvent=0x234) returned 1
	[0257.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0257.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0257.313] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0257.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0257.774] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0257.774] ReadFile (in: hFile=0x1fc, lpBuffer=0x1107a000, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1107a000*, lpNumberOfBytesRead=0x11423e18*=0x4ed, lpOverlapped=0x0) returned 1
	[0257.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0257.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0257.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11180802 | out: pbBuffer=0x11180802) returned 1
	[0257.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0257.783] GetFileType (hFile=0x1fc) returned 0x1
	[0257.783] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0257.783] WriteFile (in: hFile=0x1fc, lpBuffer=0x11345000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11345000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4ed, lpOverlapped=0x1102be08) returned 1
	[0257.783] GetFileType (hFile=0x1fc) returned 0x1
	[0257.783] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0257.783] GetFileType (hFile=0x1fc) returned 0x1
	[0257.784] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0257.784] WriteFile (in: hFile=0x1fc, lpBuffer=0x111c5500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111c5500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0257.784] GetFileType (hFile=0x1fc) returned 0x1
	[0257.784] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0257.784] CloseHandle (hObject=0x1fc) returned 1
	[0257.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0257.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0257.880] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0257.897] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0257.935] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0258.074] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0258.237] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0259.073] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0259.081] SetEvent (hEvent=0x26c) returned 1
	[0259.081] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0259.088] SetEvent (hEvent=0x26c) returned 1
	[0259.088] SetEvent (hEvent=0x234) returned 1
	[0259.088] SwitchToThread () returned 1
	[0259.116] SwitchToThread () returned 1
	[0259.122] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0259.127] SetEvent (hEvent=0x234) returned 1
	[0259.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 0x220
	[0259.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF", dwFileAttributes=0x220) returned 1
	[0259.128] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.tl30z"), dwFlags=0x1) returned 1
	[0259.741] SetEvent (hEvent=0x150) returned 1
	[0259.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0259.748] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0259.748] ReadFile (in: hFile=0x1d8, lpBuffer=0x1136e000, nNumberOfBytesToRead=0xcb3, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x11425e18*=0xcb3, lpOverlapped=0x0) returned 1
	[0259.756] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112963f0 | out: pbBuffer=0x112963f0) returned 1
	[0259.756] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1135b202 | out: pbBuffer=0x1135b202) returned 1
	[0259.756] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296420 | out: pbBuffer=0x11296420) returned 1
	[0259.757] GetFileType (hFile=0x1d8) returned 0x1
	[0259.757] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.757] WriteFile (in: hFile=0x1d8, lpBuffer=0x113ec000*, nNumberOfBytesToWrite=0xcb3, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x113ec000*, lpNumberOfBytesWritten=0x112bbdfc*=0xcb3, lpOverlapped=0x112bbe08) returned 1
	[0259.757] GetFileType (hFile=0x1d8) returned 0x1
	[0259.757] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcb3, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.758] GetFileType (hFile=0x1d8) returned 0x1
	[0259.758] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.758] WriteFile (in: hFile=0x1d8, lpBuffer=0x11365880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x11365880*, lpNumberOfBytesWritten=0x112bbdfc*=0x22d, lpOverlapped=0x112bbe08) returned 1
	[0259.758] GetFileType (hFile=0x1d8) returned 0x1
	[0259.758] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcb3, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.758] CloseHandle (hObject=0x1d8) returned 1
	[0259.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.tl30z")) returned 0x220
	[0259.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0259.782] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0259.790] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0259.809] SetEvent (hEvent=0x26c) returned 1
	[0259.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 0x220
	[0259.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", dwFileAttributes=0x220) returned 1
	[0259.810] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.tl30z"), dwFlags=0x1) returned 1
	[0260.169] SetEvent (hEvent=0x150) returned 1
	[0260.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0260.175] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0260.175] ReadFile (in: hFile=0x1fc, lpBuffer=0x11331000, nNumberOfBytesToRead=0x1f6, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11331000*, lpNumberOfBytesRead=0x11425e18*=0x1f6, lpOverlapped=0x0) returned 1
	[0260.179] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0260.179] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e4702 | out: pbBuffer=0x110e4702) returned 1
	[0260.179] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e47c0 | out: pbBuffer=0x110e47c0) returned 1
	[0260.179] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332540 | out: pbBuffer=0x11332540) returned 1
	[0260.179] GetFileType (hFile=0x1fc) returned 0x1
	[0260.179] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.180] WriteFile (in: hFile=0x1fc, lpBuffer=0x11338c00*, nNumberOfBytesToWrite=0x1f6, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11338c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x1f6, lpOverlapped=0x1102be08) returned 1
	[0260.180] GetFileType (hFile=0x1fc) returned 0x1
	[0260.180] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1f6, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.180] GetFileType (hFile=0x1fc) returned 0x1
	[0260.180] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.180] WriteFile (in: hFile=0x1fc, lpBuffer=0x1132f500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1132f500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0260.186] GetFileType (hFile=0x1fc) returned 0x1
	[0260.186] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1f6, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.186] CloseHandle (hObject=0x1fc) returned 1
	[0260.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.tl30z")) returned 0x220
	[0260.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0260.196] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0260.256] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0260.303] SetEvent (hEvent=0x118) returned 1
	[0260.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 0x220
	[0260.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", dwFileAttributes=0x220) returned 1
	[0260.304] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.tl30z"), dwFlags=0x1) returned 1
	[0260.559] SetEvent (hEvent=0x150) returned 1
	[0260.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0260.562] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0260.562] ReadFile (in: hFile=0x288, lpBuffer=0x110f6000, nNumberOfBytesToRead=0x1485, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110f6000*, lpNumberOfBytesRead=0x1128ce18*=0x1485, lpOverlapped=0x0) returned 1
	[0260.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296b40 | out: pbBuffer=0x11296b40) returned 1
	[0260.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11100602 | out: pbBuffer=0x11100602) returned 1
	[0260.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11100670 | out: pbBuffer=0x11100670) returned 1
	[0260.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296b70 | out: pbBuffer=0x11296b70) returned 1
	[0260.573] GetFileType (hFile=0x288) returned 0x1
	[0260.573] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.573] WriteFile (in: hFile=0x288, lpBuffer=0x11116000*, nNumberOfBytesToWrite=0x1485, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x11116000*, lpNumberOfBytesWritten=0x112bfdfc*=0x1485, lpOverlapped=0x112bfe08) returned 1
	[0260.573] GetFileType (hFile=0x288) returned 0x1
	[0260.573] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1485, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.574] GetFileType (hFile=0x288) returned 0x1
	[0260.574] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.574] WriteFile (in: hFile=0x288, lpBuffer=0x1111a000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x1111a000*, lpNumberOfBytesWritten=0x112bfdfc*=0x227, lpOverlapped=0x112bfe08) returned 1
	[0260.574] GetFileType (hFile=0x288) returned 0x1
	[0260.574] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1485, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.574] CloseHandle (hObject=0x288) returned 1
	[0260.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.tl30z")) returned 0x220
	[0260.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0260.672] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0260.681] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0260.805] SetEvent (hEvent=0x118) returned 1
	[0260.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 0x220
	[0260.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", dwFileAttributes=0x220) returned 1
	[0260.806] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.tl30z"), dwFlags=0x1) returned 1
	[0261.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0261.149] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0261.149] ReadFile (in: hFile=0x224, lpBuffer=0x1134d500, nNumberOfBytesToRead=0x135b, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1134d500*, lpNumberOfBytesRead=0x1131ce18*=0x135b, lpOverlapped=0x0) returned 1
	[0261.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0261.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e338 | out: pbBuffer=0x1104e338) returned 1
	[0261.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11177202 | out: pbBuffer=0x11177202) returned 1
	[0261.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0261.155] GetFileType (hFile=0x224) returned 0x1
	[0261.156] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.156] WriteFile (in: hFile=0x224, lpBuffer=0x11292000*, nNumberOfBytesToWrite=0x135b, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11292000*, lpNumberOfBytesWritten=0x1102bdfc*=0x135b, lpOverlapped=0x1102be08) returned 1
	[0261.156] GetFileType (hFile=0x224) returned 0x1
	[0261.156] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x135b, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.156] GetFileType (hFile=0x224) returned 0x1
	[0261.157] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.157] WriteFile (in: hFile=0x224, lpBuffer=0x111dbc00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111dbc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0261.157] GetFileType (hFile=0x224) returned 0x1
	[0261.157] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x135b, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.157] CloseHandle (hObject=0x224) returned 1
	[0261.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.tl30z")) returned 0x220
	[0261.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0261.179] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0261.303] SetEvent (hEvent=0x248) returned 1
	[0261.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 0x220
	[0261.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", dwFileAttributes=0x220) returned 1
	[0261.304] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.tl30z"), dwFlags=0x1) returned 1
	[0261.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0261.510] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0261.510] ReadFile (in: hFile=0x224, lpBuffer=0x11298000, nNumberOfBytesToRead=0x33c6, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11298000*, lpNumberOfBytesRead=0x11023e18*=0x33c6, lpOverlapped=0x0) returned 1
	[0261.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0261.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6288 | out: pbBuffer=0x113e6288) returned 1
	[0261.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11375202 | out: pbBuffer=0x11375202) returned 1
	[0261.515] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62c0 | out: pbBuffer=0x113e62c0) returned 1
	[0261.515] GetFileType (hFile=0x224) returned 0x1
	[0261.515] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.516] WriteFile (in: hFile=0x224, lpBuffer=0x113be000*, nNumberOfBytesToWrite=0x33c6, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x113be000*, lpNumberOfBytesWritten=0x112bfdfc*=0x33c6, lpOverlapped=0x112bfe08) returned 1
	[0261.516] GetFileType (hFile=0x224) returned 0x1
	[0261.516] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x33c6, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.516] GetFileType (hFile=0x224) returned 0x1
	[0261.516] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.517] WriteFile (in: hFile=0x224, lpBuffer=0x112c5880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x112c5880*, lpNumberOfBytesWritten=0x112bfdfc*=0x230, lpOverlapped=0x112bfe08) returned 1
	[0261.517] GetFileType (hFile=0x224) returned 0x1
	[0261.517] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x33c6, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.517] CloseHandle (hObject=0x224) returned 1
	[0261.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.tl30z")) returned 0x220
	[0261.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0261.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 0x220
	[0261.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", dwFileAttributes=0x220) returned 1
	[0261.528] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.tl30z"), dwFlags=0x1) returned 1
	[0261.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0261.892] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0261.892] ReadFile (in: hFile=0x224, lpBuffer=0x110d6000, nNumberOfBytesToRead=0x2420, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x110d6000*, lpNumberOfBytesRead=0x11023e18*=0x2420, lpOverlapped=0x0) returned 1
	[0261.898] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296070 | out: pbBuffer=0x11296070) returned 1
	[0261.899] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11296068 | out: pbBuffer=0x11296068) returned 1
	[0261.899] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b1202 | out: pbBuffer=0x111b1202) returned 1
	[0261.899] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b1214 | out: pbBuffer=0x111b1214) returned 1
	[0261.899] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b12b5 | out: pbBuffer=0x111b12b5) returned 1
	[0261.899] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112960a0 | out: pbBuffer=0x112960a0) returned 1
	[0261.900] GetFileType (hFile=0x224) returned 0x1
	[0261.900] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.900] WriteFile (in: hFile=0x224, lpBuffer=0x111f8000*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111f8000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2420, lpOverlapped=0x1102be08) returned 1
	[0261.900] GetFileType (hFile=0x224) returned 0x1
	[0261.901] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2420, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.901] GetFileType (hFile=0x224) returned 0x1
	[0261.901] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.901] WriteFile (in: hFile=0x224, lpBuffer=0x111dc700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111dc700*, lpNumberOfBytesWritten=0x1102bdfc*=0x221, lpOverlapped=0x1102be08) returned 1
	[0261.901] GetFileType (hFile=0x224) returned 0x1
	[0261.901] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2420, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.901] CloseHandle (hObject=0x224) returned 1
	[0261.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.tl30z")) returned 0x220
	[0261.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0261.921] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0261.928] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0261.947] SetEvent (hEvent=0x248) returned 1
	[0261.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 0x220
	[0261.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", dwFileAttributes=0x220) returned 1
	[0261.948] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.tl30z"), dwFlags=0x1) returned 1
	[0262.400] SetEvent (hEvent=0x150) returned 1
	[0262.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0262.408] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0262.409] ReadFile (in: hFile=0x1d4, lpBuffer=0x1144c000, nNumberOfBytesToRead=0xc30, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1144c000*, lpNumberOfBytesRead=0x11023e18*=0xc30, lpOverlapped=0x0) returned 1
	[0262.419] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0262.419] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332808 | out: pbBuffer=0x11332808) returned 1
	[0262.419] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130f402 | out: pbBuffer=0x1130f402) returned 1
	[0262.419] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130f4c6 | out: pbBuffer=0x1130f4c6) returned 1
	[0262.420] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332840 | out: pbBuffer=0x11332840) returned 1
	[0262.420] GetFileType (hFile=0x1d4) returned 0x1
	[0262.420] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11225de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.420] WriteFile (in: hFile=0x1d4, lpBuffer=0x11472000*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x11225dfc, lpOverlapped=0x11225e08 | out: lpBuffer=0x11472000*, lpNumberOfBytesWritten=0x11225dfc*=0xc30, lpOverlapped=0x11225e08) returned 1
	[0262.421] GetFileType (hFile=0x1d4) returned 0x1
	[0262.421] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xc30, lpNewFilePointer=0x0, dwMoveMethod=0x11225de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.421] GetFileType (hFile=0x1d4) returned 0x1
	[0262.421] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11225de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.421] WriteFile (in: hFile=0x1d4, lpBuffer=0x1145e380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11225dfc, lpOverlapped=0x11225e08 | out: lpBuffer=0x1145e380*, lpNumberOfBytesWritten=0x11225dfc*=0x224, lpOverlapped=0x11225e08) returned 1
	[0262.421] GetFileType (hFile=0x1d4) returned 0x1
	[0262.421] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xc30, lpNewFilePointer=0x0, dwMoveMethod=0x11225de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.422] CloseHandle (hObject=0x1d4) returned 1
	[0262.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.tl30z")) returned 0x220
	[0262.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0262.441] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0262.545] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0262.645] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0262.702] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0262.742] SetEvent (hEvent=0x1e8) returned 1
	[0262.742] SetEvent (hEvent=0x118) returned 1
	[0262.742] SetEvent (hEvent=0x1f0) returned 1
	[0262.742] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0262.813] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0262.813] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0262.833] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0262.834] SetEvent (hEvent=0x118) returned 1
	[0262.834] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0262.847] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0262.847] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0264.587] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0264.593] SetEvent (hEvent=0x248) returned 1
	[0264.593] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0264.601] SetEvent (hEvent=0x248) returned 1
	[0264.602] SwitchToThread () returned 1
	[0264.608] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0264.620] SetEvent (hEvent=0x248) returned 1
	[0264.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 0x220
	[0264.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", dwFileAttributes=0x220) returned 1
	[0264.621] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0264.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0264.965] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0264.965] ReadFile (in: hFile=0x1d8, lpBuffer=0x11396000, nNumberOfBytesToRead=0x17ac, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x11287e18*=0x17ac, lpOverlapped=0x0) returned 1
	[0264.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f550 | out: pbBuffer=0x1140f550) returned 1
	[0264.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1139e802 | out: pbBuffer=0x1139e802) returned 1
	[0264.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139e866 | out: pbBuffer=0x1139e866) returned 1
	[0264.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139e878 | out: pbBuffer=0x1139e878) returned 1
	[0264.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139e8be | out: pbBuffer=0x1139e8be) returned 1
	[0264.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f580 | out: pbBuffer=0x1140f580) returned 1
	[0264.997] GetFileType (hFile=0x1d8) returned 0x1
	[0264.997] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.997] WriteFile (in: hFile=0x1d8, lpBuffer=0x113f8000*, nNumberOfBytesToWrite=0x17ac, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x113f8000*, lpNumberOfBytesWritten=0x112bfdfc*=0x17ac, lpOverlapped=0x112bfe08) returned 1
	[0264.997] GetFileType (hFile=0x1d8) returned 0x1
	[0264.997] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x17ac, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.998] GetFileType (hFile=0x1d8) returned 0x1
	[0264.998] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.998] WriteFile (in: hFile=0x1d8, lpBuffer=0x1105d500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x1105d500*, lpNumberOfBytesWritten=0x112bfdfc*=0x230, lpOverlapped=0x112bfe08) returned 1
	[0264.998] GetFileType (hFile=0x1d8) returned 0x1
	[0264.998] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x17ac, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.998] CloseHandle (hObject=0x1d8) returned 1
	[0265.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.tl30z")) returned 0x220
	[0265.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0265.089] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0265.097] SetEvent (hEvent=0x1b0) returned 1
	[0265.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 0x220
	[0265.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", dwFileAttributes=0x220) returned 1
	[0265.098] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0265.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0265.909] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0265.909] ReadFile (in: hFile=0x1d8, lpBuffer=0x110b8000, nNumberOfBytesToRead=0xc48, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110b8000*, lpNumberOfBytesRead=0x11287e18*=0xc48, lpOverlapped=0x0) returned 1
	[0265.915] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296550 | out: pbBuffer=0x11296550) returned 1
	[0265.915] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110be702 | out: pbBuffer=0x110be702) returned 1
	[0265.916] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296580 | out: pbBuffer=0x11296580) returned 1
	[0265.916] GetFileType (hFile=0x1d8) returned 0x1
	[0265.916] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.916] WriteFile (in: hFile=0x1d8, lpBuffer=0x11180000*, nNumberOfBytesToWrite=0xc48, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11180000*, lpNumberOfBytesWritten=0x112b9dfc*=0xc48, lpOverlapped=0x112b9e08) returned 1
	[0265.917] GetFileType (hFile=0x1d8) returned 0x1
	[0265.917] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc48, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.917] GetFileType (hFile=0x1d8) returned 0x1
	[0265.917] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.917] WriteFile (in: hFile=0x1d8, lpBuffer=0x110a5500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x110a5500*, lpNumberOfBytesWritten=0x112b9dfc*=0x224, lpOverlapped=0x112b9e08) returned 1
	[0265.917] GetFileType (hFile=0x1d8) returned 0x1
	[0265.917] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc48, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.918] CloseHandle (hObject=0x1d8) returned 1
	[0265.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.tl30z")) returned 0x220
	[0265.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0265.925] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0265.940] SetEvent (hEvent=0x1b0) returned 1
	[0265.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 0x220
	[0265.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", dwFileAttributes=0x220) returned 1
	[0265.941] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0266.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.244] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0266.244] ReadFile (in: hFile=0x1d8, lpBuffer=0x110d5000, nNumberOfBytesToRead=0x7e0, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110d5000*, lpNumberOfBytesRead=0x11287e18*=0x7e0, lpOverlapped=0x0) returned 1
	[0266.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0266.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6568 | out: pbBuffer=0x113e6568) returned 1
	[0266.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11158702 | out: pbBuffer=0x11158702) returned 1
	[0266.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158725 | out: pbBuffer=0x11158725) returned 1
	[0266.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158725 | out: pbBuffer=0x11158725) returned 1
	[0266.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158765 | out: pbBuffer=0x11158765) returned 1
	[0266.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111587db | out: pbBuffer=0x111587db) returned 1
	[0266.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65a0 | out: pbBuffer=0x113e65a0) returned 1
	[0266.251] GetFileType (hFile=0x1d8) returned 0x1
	[0266.251] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.251] WriteFile (in: hFile=0x1d8, lpBuffer=0x11169000*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x11193dfc, lpOverlapped=0x11193e08 | out: lpBuffer=0x11169000*, lpNumberOfBytesWritten=0x11193dfc*=0x7e0, lpOverlapped=0x11193e08) returned 1
	[0266.252] GetFileType (hFile=0x1d8) returned 0x1
	[0266.252] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7e0, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.252] GetFileType (hFile=0x1d8) returned 0x1
	[0266.252] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.252] WriteFile (in: hFile=0x1d8, lpBuffer=0x1113d500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11193dfc, lpOverlapped=0x11193e08 | out: lpBuffer=0x1113d500*, lpNumberOfBytesWritten=0x11193dfc*=0x22a, lpOverlapped=0x11193e08) returned 1
	[0266.253] GetFileType (hFile=0x1d8) returned 0x1
	[0266.253] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7e0, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.253] CloseHandle (hObject=0x1d8) returned 1
	[0266.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.tl30z")) returned 0x220
	[0266.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0266.263] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0266.316] SetEvent (hEvent=0x1b0) returned 1
	[0266.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 0x220
	[0266.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", dwFileAttributes=0x220) returned 1
	[0266.317] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0266.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.695] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0266.695] ReadFile (in: hFile=0x1d8, lpBuffer=0x11300c00, nNumberOfBytesToRead=0x12c8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11300c00*, lpNumberOfBytesRead=0x11287e18*=0x12c8, lpOverlapped=0x0) returned 1
	[0266.719] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296c90 | out: pbBuffer=0x11296c90) returned 1
	[0266.719] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111dbb02 | out: pbBuffer=0x111dbb02) returned 1
	[0266.720] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296cc0 | out: pbBuffer=0x11296cc0) returned 1
	[0266.720] GetFileType (hFile=0x1d8) returned 0x1
	[0266.720] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.720] WriteFile (in: hFile=0x1d8, lpBuffer=0x11232000*, nNumberOfBytesToWrite=0x12c8, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11232000*, lpNumberOfBytesWritten=0x112b9dfc*=0x12c8, lpOverlapped=0x112b9e08) returned 1
	[0266.721] GetFileType (hFile=0x1d8) returned 0x1
	[0266.721] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x12c8, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.721] GetFileType (hFile=0x1d8) returned 0x1
	[0266.721] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.721] WriteFile (in: hFile=0x1d8, lpBuffer=0x111edc00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x111edc00*, lpNumberOfBytesWritten=0x112b9dfc*=0x227, lpOverlapped=0x112b9e08) returned 1
	[0266.722] GetFileType (hFile=0x1d8) returned 0x1
	[0266.722] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x12c8, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.722] CloseHandle (hObject=0x1d8) returned 1
	[0266.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.tl30z")) returned 0x220
	[0266.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0266.730] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0266.803] SetEvent (hEvent=0x1b0) returned 1
	[0266.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x220
	[0266.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", dwFileAttributes=0x220) returned 1
	[0266.804] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.297] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0267.297] ReadFile (in: hFile=0x1d8, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x6906, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x11287e18*=0x6906, lpOverlapped=0x0) returned 1
	[0267.303] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0267.303] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123b402 | out: pbBuffer=0x1123b402) returned 1
	[0267.304] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0267.305] GetFileType (hFile=0x1d8) returned 0x1
	[0267.305] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.305] WriteFile (in: hFile=0x1d8, lpBuffer=0x110e0000*, nNumberOfBytesToWrite=0x6906, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110e0000*, lpNumberOfBytesWritten=0x11031dfc*=0x6906, lpOverlapped=0x11031e08) returned 1
	[0267.306] GetFileType (hFile=0x1d8) returned 0x1
	[0267.306] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6906, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.306] GetFileType (hFile=0x1d8) returned 0x1
	[0267.306] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.306] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bc9c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bc9c00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0267.307] GetFileType (hFile=0x1d8) returned 0x1
	[0267.307] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6906, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.307] CloseHandle (hObject=0x1d8) returned 1
	[0267.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.tl30z")) returned 0x220
	[0267.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.323] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0267.408] SetEvent (hEvent=0x26c) returned 1
	[0267.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x220
	[0267.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", dwFileAttributes=0x220) returned 1
	[0267.409] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.585] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0267.585] ReadFile (in: hFile=0x1d8, lpBuffer=0x112a8800, nNumberOfBytesToRead=0x4354, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x112a8800*, lpNumberOfBytesRead=0x11287e18*=0x4354, lpOverlapped=0x0) returned 1
	[0267.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0267.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a4802 | out: pbBuffer=0x110a4802) returned 1
	[0267.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110a484c | out: pbBuffer=0x110a484c) returned 1
	[0267.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110a486a | out: pbBuffer=0x110a486a) returned 1
	[0267.595] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65b0 | out: pbBuffer=0x113e65b0) returned 1
	[0267.595] GetFileType (hFile=0x1d8) returned 0x1
	[0267.595] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.595] WriteFile (in: hFile=0x1d8, lpBuffer=0x111f4000*, nNumberOfBytesToWrite=0x4354, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x111f4000*, lpNumberOfBytesWritten=0x11373dfc*=0x4354, lpOverlapped=0x11373e08) returned 1
	[0267.596] GetFileType (hFile=0x1d8) returned 0x1
	[0267.596] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4354, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.596] GetFileType (hFile=0x1d8) returned 0x1
	[0267.596] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.596] WriteFile (in: hFile=0x1d8, lpBuffer=0x111d9500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x111d9500*, lpNumberOfBytesWritten=0x11373dfc*=0x22a, lpOverlapped=0x11373e08) returned 1
	[0267.597] GetFileType (hFile=0x1d8) returned 0x1
	[0267.597] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4354, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.597] CloseHandle (hObject=0x1d8) returned 1
	[0267.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.tl30z")) returned 0x220
	[0267.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.658] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0267.666] SetEvent (hEvent=0x26c) returned 1
	[0267.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x220
	[0267.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", dwFileAttributes=0x220) returned 1
	[0267.666] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.874] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0267.874] ReadFile (in: hFile=0x1d8, lpBuffer=0x11187000, nNumberOfBytesToRead=0xfe2, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11187000*, lpNumberOfBytesRead=0x11022e18*=0xfe2, lpOverlapped=0x0) returned 1
	[0267.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1c0 | out: pbBuffer=0x1140f1c0) returned 1
	[0267.880] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11217f02 | out: pbBuffer=0x11217f02) returned 1
	[0267.880] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11217fa1 | out: pbBuffer=0x11217fa1) returned 1
	[0267.880] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1f0 | out: pbBuffer=0x1140f1f0) returned 1
	[0267.880] SetEvent (hEvent=0x26c) returned 1
	[0267.881] GetFileType (hFile=0x1d8) returned 0x1
	[0267.881] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.881] WriteFile (in: hFile=0x1d8, lpBuffer=0x111a8000*, nNumberOfBytesToWrite=0xfe2, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111a8000*, lpNumberOfBytesWritten=0x11031dfc*=0xfe2, lpOverlapped=0x11031e08) returned 1
	[0267.881] GetFileType (hFile=0x1d8) returned 0x1
	[0267.881] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xfe2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.881] GetFileType (hFile=0x1d8) returned 0x1
	[0267.881] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.882] WriteFile (in: hFile=0x1d8, lpBuffer=0x1117f500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1117f500*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0267.882] GetFileType (hFile=0x1d8) returned 0x1
	[0267.882] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xfe2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.882] CloseHandle (hObject=0x1d8) returned 1
	[0267.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.tl30z")) returned 0x220
	[0267.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.900] SwitchToThread () returned 1
	[0267.903] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0267.916] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0267.953] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.006] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.045] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.088] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.134] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.175] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.208] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.250] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.305] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.336] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.371] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.385] SetEvent (hEvent=0x26c) returned 1
	[0268.386] SetEvent (hEvent=0x1f0) returned 1
	[0268.386] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0268.390] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.390] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0268.393] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.394] SetEvent (hEvent=0x26c) returned 1
	[0268.394] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0268.399] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0268.400] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.396] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.398] SetEvent (hEvent=0x218) returned 1
	[0269.399] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.406] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.423] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.454] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.497] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.522] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.556] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.591] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.614] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.645] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.689] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.755] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.789] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.831] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.868] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.898] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.927] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0269.939] SetEvent (hEvent=0x248) returned 1
	[0269.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x220
	[0269.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", dwFileAttributes=0x220) returned 1
	[0269.939] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.135] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0270.135] ReadFile (in: hFile=0x1d8, lpBuffer=0x11216000, nNumberOfBytesToRead=0x4c14, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11216000*, lpNumberOfBytesRead=0x11023e18*=0x4c14, lpOverlapped=0x0) returned 1
	[0270.140] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e68d0 | out: pbBuffer=0x113e68d0) returned 1
	[0270.140] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e68c8 | out: pbBuffer=0x113e68c8) returned 1
	[0270.140] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1117b202 | out: pbBuffer=0x1117b202) returned 1
	[0270.140] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117b2b5 | out: pbBuffer=0x1117b2b5) returned 1
	[0270.140] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6900 | out: pbBuffer=0x113e6900) returned 1
	[0270.141] SetEvent (hEvent=0x248) returned 1
	[0270.141] GetFileType (hFile=0x1d8) returned 0x1
	[0270.141] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.141] WriteFile (in: hFile=0x1d8, lpBuffer=0x11252000*, nNumberOfBytesToWrite=0x4c14, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11252000*, lpNumberOfBytesWritten=0x11031dfc*=0x4c14, lpOverlapped=0x11031e08) returned 1
	[0270.142] GetFileType (hFile=0x1d8) returned 0x1
	[0270.142] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4c14, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.142] GetFileType (hFile=0x1d8) returned 0x1
	[0270.142] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.142] WriteFile (in: hFile=0x1d8, lpBuffer=0x11299880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11299880*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0270.142] GetFileType (hFile=0x1d8) returned 0x1
	[0270.143] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4c14, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.143] CloseHandle (hObject=0x1d8) returned 1
	[0270.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf.tl30z")) returned 0x220
	[0270.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.149] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0270.154] SetEvent (hEvent=0x248) returned 1
	[0270.154] SetEvent (hEvent=0x218) returned 1
	[0270.154] SwitchToThread () returned 1
	[0270.158] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0270.163] SetEvent (hEvent=0x218) returned 1
	[0270.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x220
	[0270.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF", dwFileAttributes=0x220) returned 1
	[0270.164] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.325] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0270.325] ReadFile (in: hFile=0x1d8, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x5a4, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x11428e18*=0x5a4, lpOverlapped=0x0) returned 1
	[0270.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0270.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1126dd02 | out: pbBuffer=0x1126dd02) returned 1
	[0270.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0270.331] GetFileType (hFile=0x1d8) returned 0x1
	[0270.331] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.332] WriteFile (in: hFile=0x1d8, lpBuffer=0x113d2000*, nNumberOfBytesToWrite=0x5a4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113d2000*, lpNumberOfBytesWritten=0x11031dfc*=0x5a4, lpOverlapped=0x11031e08) returned 1
	[0270.332] GetFileType (hFile=0x1d8) returned 0x1
	[0270.332] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5a4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.332] GetFileType (hFile=0x1d8) returned 0x1
	[0270.332] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.332] WriteFile (in: hFile=0x1d8, lpBuffer=0x11324a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11324a80*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0270.333] GetFileType (hFile=0x1d8) returned 0x1
	[0270.333] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5a4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.333] CloseHandle (hObject=0x1d8) returned 1
	[0270.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf.tl30z")) returned 0x220
	[0270.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.347] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0270.357] SetEvent (hEvent=0x218) returned 1
	[0270.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x220
	[0270.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF", dwFileAttributes=0x220) returned 1
	[0270.357] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.513] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0270.513] ReadFile (in: hFile=0x1d8, lpBuffer=0x110bb500, nNumberOfBytesToRead=0x6b0, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110bb500*, lpNumberOfBytesRead=0x11428e18*=0x6b0, lpOverlapped=0x0) returned 1
	[0270.518] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f050 | out: pbBuffer=0x1140f050) returned 1
	[0270.518] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d9302 | out: pbBuffer=0x110d9302) returned 1
	[0270.519] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f080 | out: pbBuffer=0x1140f080) returned 1
	[0270.519] GetFileType (hFile=0x1d8) returned 0x1
	[0270.519] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.519] WriteFile (in: hFile=0x1d8, lpBuffer=0x11314000*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x113f1dfc, lpOverlapped=0x113f1e08 | out: lpBuffer=0x11314000*, lpNumberOfBytesWritten=0x113f1dfc*=0x6b0, lpOverlapped=0x113f1e08) returned 1
	[0270.520] GetFileType (hFile=0x1d8) returned 0x1
	[0270.520] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6b0, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.520] GetFileType (hFile=0x1d8) returned 0x1
	[0270.520] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.520] WriteFile (in: hFile=0x1d8, lpBuffer=0x11312380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113f1dfc, lpOverlapped=0x113f1e08 | out: lpBuffer=0x11312380*, lpNumberOfBytesWritten=0x113f1dfc*=0x227, lpOverlapped=0x113f1e08) returned 1
	[0270.520] GetFileType (hFile=0x1d8) returned 0x1
	[0270.520] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6b0, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.521] CloseHandle (hObject=0x1d8) returned 1
	[0270.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf.tl30z")) returned 0x220
	[0270.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.536] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0270.560] SetEvent (hEvent=0x218) returned 1
	[0270.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x220
	[0270.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF", dwFileAttributes=0x220) returned 1
	[0270.561] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.841] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0270.841] ReadFile (in: hFile=0x1d8, lpBuffer=0x11214300, nNumberOfBytesToRead=0x634, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11214300*, lpNumberOfBytesRead=0x11428e18*=0x634, lpOverlapped=0x0) returned 1
	[0270.849] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x114523d0 | out: pbBuffer=0x114523d0) returned 1
	[0270.849] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c5d02 | out: pbBuffer=0x111c5d02) returned 1
	[0270.849] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c5d2a | out: pbBuffer=0x111c5d2a) returned 1
	[0270.849] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c5d39 | out: pbBuffer=0x111c5d39) returned 1
	[0270.849] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11452400 | out: pbBuffer=0x11452400) returned 1
	[0270.849] GetFileType (hFile=0x1d8) returned 0x1
	[0270.849] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.849] WriteFile (in: hFile=0x1d8, lpBuffer=0x1111a000*, nNumberOfBytesToWrite=0x634, lpNumberOfBytesWritten=0x1146fdfc, lpOverlapped=0x1146fe08 | out: lpBuffer=0x1111a000*, lpNumberOfBytesWritten=0x1146fdfc*=0x634, lpOverlapped=0x1146fe08) returned 1
	[0270.850] GetFileType (hFile=0x1d8) returned 0x1
	[0270.850] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x634, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.850] GetFileType (hFile=0x1d8) returned 0x1
	[0270.850] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.850] WriteFile (in: hFile=0x1d8, lpBuffer=0x11114700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1146fdfc, lpOverlapped=0x1146fe08 | out: lpBuffer=0x11114700*, lpNumberOfBytesWritten=0x1146fdfc*=0x227, lpOverlapped=0x1146fe08) returned 1
	[0270.850] GetFileType (hFile=0x1d8) returned 0x1
	[0270.850] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x634, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.851] CloseHandle (hObject=0x1d8) returned 1
	[0270.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf.tl30z")) returned 0x220
	[0270.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.860] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0270.866] SetEvent (hEvent=0x218) returned 1
	[0270.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x220
	[0270.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF", dwFileAttributes=0x220) returned 1
	[0270.866] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.020] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0271.020] ReadFile (in: hFile=0x1d8, lpBuffer=0x11260000, nNumberOfBytesToRead=0x9b8, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11260000*, lpNumberOfBytesRead=0x11428e18*=0x9b8, lpOverlapped=0x0) returned 1
	[0271.027] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0271.027] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c8802 | out: pbBuffer=0x113c8802) returned 1
	[0271.027] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c8876 | out: pbBuffer=0x113c8876) returned 1
	[0271.028] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0271.028] GetFileType (hFile=0x1d8) returned 0x1
	[0271.028] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.028] WriteFile (in: hFile=0x1d8, lpBuffer=0x11335000*, nNumberOfBytesToWrite=0x9b8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11335000*, lpNumberOfBytesWritten=0x11031dfc*=0x9b8, lpOverlapped=0x11031e08) returned 1
	[0271.028] GetFileType (hFile=0x1d8) returned 0x1
	[0271.028] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9b8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.028] GetFileType (hFile=0x1d8) returned 0x1
	[0271.029] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.029] WriteFile (in: hFile=0x1d8, lpBuffer=0x1118ce00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1118ce00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0271.029] GetFileType (hFile=0x1d8) returned 0x1
	[0271.029] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9b8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.029] CloseHandle (hObject=0x1d8) returned 1
	[0271.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf.tl30z")) returned 0x220
	[0271.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.037] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0271.041] SetEvent (hEvent=0x26c) returned 1
	[0271.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x220
	[0271.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF", dwFileAttributes=0x220) returned 1
	[0271.041] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.330] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0271.330] ReadFile (in: hFile=0x1d8, lpBuffer=0x113f2000, nNumberOfBytesToRead=0xaac, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113f2000*, lpNumberOfBytesRead=0x11428e18*=0xaac, lpOverlapped=0x0) returned 1
	[0271.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0271.334] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0271.334] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11062802 | out: pbBuffer=0x11062802) returned 1
	[0271.334] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110628db | out: pbBuffer=0x110628db) returned 1
	[0271.334] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0271.334] GetFileType (hFile=0x1d8) returned 0x1
	[0271.335] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.335] WriteFile (in: hFile=0x1d8, lpBuffer=0x112d6000*, nNumberOfBytesToWrite=0xaac, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x112d6000*, lpNumberOfBytesWritten=0x1105ddfc*=0xaac, lpOverlapped=0x1105de08) returned 1
	[0271.335] GetFileType (hFile=0x1d8) returned 0x1
	[0271.335] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xaac, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.335] GetFileType (hFile=0x1d8) returned 0x1
	[0271.335] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.336] WriteFile (in: hFile=0x1d8, lpBuffer=0x113a2a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x113a2a80*, lpNumberOfBytesWritten=0x1105ddfc*=0x22a, lpOverlapped=0x1105de08) returned 1
	[0271.336] GetFileType (hFile=0x1d8) returned 0x1
	[0271.336] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xaac, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.336] CloseHandle (hObject=0x1d8) returned 1
	[0271.414] SetEvent (hEvent=0x150) returned 1
	[0271.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf.tl30z")) returned 0x220
	[0271.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.419] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0271.432] SetEvent (hEvent=0x26c) returned 1
	[0271.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x220
	[0271.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF", dwFileAttributes=0x220) returned 1
	[0271.432] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.599] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0271.599] ReadFile (in: hFile=0x1d8, lpBuffer=0x113c5000, nNumberOfBytesToRead=0xf6c, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113c5000*, lpNumberOfBytesRead=0x11428e18*=0xf6c, lpOverlapped=0x0) returned 1
	[0271.604] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b20 | out: pbBuffer=0x113e6b20) returned 1
	[0271.604] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e5202 | out: pbBuffer=0x113e5202) returned 1
	[0271.604] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e52c5 | out: pbBuffer=0x113e52c5) returned 1
	[0271.604] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b50 | out: pbBuffer=0x113e6b50) returned 1
	[0271.604] GetFileType (hFile=0x1d8) returned 0x1
	[0271.605] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.605] WriteFile (in: hFile=0x1d8, lpBuffer=0x11436000*, nNumberOfBytesToWrite=0xf6c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11436000*, lpNumberOfBytesWritten=0x11031dfc*=0xf6c, lpOverlapped=0x11031e08) returned 1
	[0271.605] GetFileType (hFile=0x1d8) returned 0x1
	[0271.605] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xf6c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.605] GetFileType (hFile=0x1d8) returned 0x1
	[0271.605] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.606] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c1180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113c1180*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0271.606] GetFileType (hFile=0x1d8) returned 0x1
	[0271.606] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xf6c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.606] CloseHandle (hObject=0x1d8) returned 1
	[0271.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf.tl30z")) returned 0x220
	[0271.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.611] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0271.619] SetEvent (hEvent=0x26c) returned 1
	[0271.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf")) returned 0x220
	[0271.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF", dwFileAttributes=0x220) returned 1
	[0271.620] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.824] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0271.824] ReadFile (in: hFile=0x1d8, lpBuffer=0x112a6000, nNumberOfBytesToRead=0x976, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x112a6000*, lpNumberOfBytesRead=0x11428e18*=0x976, lpOverlapped=0x0) returned 1
	[0271.829] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113322c0 | out: pbBuffer=0x113322c0) returned 1
	[0271.829] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113322b8 | out: pbBuffer=0x113322b8) returned 1
	[0271.829] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11441d02 | out: pbBuffer=0x11441d02) returned 1
	[0271.829] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11441d7b | out: pbBuffer=0x11441d7b) returned 1
	[0271.830] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113322f0 | out: pbBuffer=0x113322f0) returned 1
	[0271.830] GetFileType (hFile=0x1d8) returned 0x1
	[0271.830] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.830] WriteFile (in: hFile=0x1d8, lpBuffer=0x112b3000*, nNumberOfBytesToWrite=0x976, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x112b3000*, lpNumberOfBytesWritten=0x1105ddfc*=0x976, lpOverlapped=0x1105de08) returned 1
	[0271.831] GetFileType (hFile=0x1d8) returned 0x1
	[0271.831] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x976, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.831] GetFileType (hFile=0x1d8) returned 0x1
	[0271.831] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.831] WriteFile (in: hFile=0x1d8, lpBuffer=0x11179180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x11179180*, lpNumberOfBytesWritten=0x1105ddfc*=0x22d, lpOverlapped=0x1105de08) returned 1
	[0271.831] GetFileType (hFile=0x1d8) returned 0x1
	[0271.831] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x976, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.831] CloseHandle (hObject=0x1d8) returned 1
	[0271.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf.tl30z")) returned 0x220
	[0271.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.838] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0271.849] SetEvent (hEvent=0x26c) returned 1
	[0271.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf")) returned 0x220
	[0271.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", dwFileAttributes=0x220) returned 1
	[0271.849] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.981] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0271.981] ReadFile (in: hFile=0x1d8, lpBuffer=0x1111c000, nNumberOfBytesToRead=0xc18a, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1111c000*, lpNumberOfBytesRead=0x11428e18*=0xc18a, lpOverlapped=0x0) returned 1
	[0271.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e7270 | out: pbBuffer=0x113e7270) returned 1
	[0271.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e7268 | out: pbBuffer=0x113e7268) returned 1
	[0271.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11130702 | out: pbBuffer=0x11130702) returned 1
	[0271.987] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e72a0 | out: pbBuffer=0x113e72a0) returned 1
	[0271.988] GetFileType (hFile=0x1d8) returned 0x1
	[0271.988] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.988] WriteFile (in: hFile=0x1d8, lpBuffer=0x11206000*, nNumberOfBytesToWrite=0xc18a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11206000*, lpNumberOfBytesWritten=0x11031dfc*=0xc18a, lpOverlapped=0x11031e08) returned 1
	[0271.989] GetFileType (hFile=0x1d8) returned 0x1
	[0271.989] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc18a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.989] GetFileType (hFile=0x1d8) returned 0x1
	[0271.989] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.989] WriteFile (in: hFile=0x1d8, lpBuffer=0x110c1880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110c1880*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0271.989] GetFileType (hFile=0x1d8) returned 0x1
	[0271.989] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc18a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.990] CloseHandle (hObject=0x1d8) returned 1
	[0271.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf.tl30z")) returned 0x220
	[0271.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.994] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0272.008] SetEvent (hEvent=0x26c) returned 1
	[0272.008] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x220
	[0272.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF", dwFileAttributes=0x220) returned 1
	[0272.009] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.162] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0272.162] ReadFile (in: hFile=0x1d8, lpBuffer=0x11058000, nNumberOfBytesToRead=0x73bc, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11428e18*=0x73bc, lpOverlapped=0x0) returned 1
	[0272.171] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0272.171] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267302 | out: pbBuffer=0x11267302) returned 1
	[0272.171] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126733c | out: pbBuffer=0x1126733c) returned 1
	[0272.171] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267366 | out: pbBuffer=0x11267366) returned 1
	[0272.172] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0272.173] GetFileType (hFile=0x1d8) returned 0x1
	[0272.173] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.173] WriteFile (in: hFile=0x1d8, lpBuffer=0x112d4000*, nNumberOfBytesToWrite=0x73bc, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x112d4000*, lpNumberOfBytesWritten=0x112c9dfc*=0x73bc, lpOverlapped=0x112c9e08) returned 1
	[0272.174] GetFileType (hFile=0x1d8) returned 0x1
	[0272.174] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x73bc, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.174] GetFileType (hFile=0x1d8) returned 0x1
	[0272.174] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.174] WriteFile (in: hFile=0x1d8, lpBuffer=0x1123fc00*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1123fc00*, lpNumberOfBytesWritten=0x112c9dfc*=0x236, lpOverlapped=0x112c9e08) returned 1
	[0272.174] GetFileType (hFile=0x1d8) returned 0x1
	[0272.174] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x73bc, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.174] CloseHandle (hObject=0x1d8) returned 1
	[0272.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf.tl30z")) returned 0x220
	[0272.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.182] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0272.201] SetEvent (hEvent=0x1b0) returned 1
	[0272.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x220
	[0272.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF", dwFileAttributes=0x220) returned 1
	[0272.202] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.452] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0272.452] ReadFile (in: hFile=0x1d8, lpBuffer=0x113d4e00, nNumberOfBytesToRead=0x318, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113d4e00*, lpNumberOfBytesRead=0x11428e18*=0x318, lpOverlapped=0x0) returned 1
	[0272.460] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0272.460] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e2902 | out: pbBuffer=0x113e2902) returned 1
	[0272.460] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e2985 | out: pbBuffer=0x113e2985) returned 1
	[0272.460] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0272.461] GetFileType (hFile=0x1d8) returned 0x1
	[0272.461] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.461] WriteFile (in: hFile=0x1d8, lpBuffer=0x110c3000*, nNumberOfBytesToWrite=0x318, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x110c3000*, lpNumberOfBytesWritten=0x112c9dfc*=0x318, lpOverlapped=0x112c9e08) returned 1
	[0272.461] GetFileType (hFile=0x1d8) returned 0x1
	[0272.461] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.461] GetFileType (hFile=0x1d8) returned 0x1
	[0272.461] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.461] WriteFile (in: hFile=0x1d8, lpBuffer=0x113d5c00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x113d5c00*, lpNumberOfBytesWritten=0x112c9dfc*=0x224, lpOverlapped=0x112c9e08) returned 1
	[0272.462] GetFileType (hFile=0x1d8) returned 0x1
	[0272.462] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.462] CloseHandle (hObject=0x1d8) returned 1
	[0272.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf.tl30z")) returned 0x220
	[0272.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.472] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0272.480] SetEvent (hEvent=0x1b0) returned 1
	[0272.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x220
	[0272.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF", dwFileAttributes=0x220) returned 1
	[0272.481] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.642] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0272.642] ReadFile (in: hFile=0x1d8, lpBuffer=0x1115c000, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1115c000*, lpNumberOfBytesRead=0x11428e18*=0x2c8, lpOverlapped=0x0) returned 1
	[0272.647] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332440 | out: pbBuffer=0x11332440) returned 1
	[0272.647] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332438 | out: pbBuffer=0x11332438) returned 1
	[0272.647] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11164502 | out: pbBuffer=0x11164502) returned 1
	[0272.648] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332470 | out: pbBuffer=0x11332470) returned 1
	[0272.648] GetFileType (hFile=0x1d8) returned 0x1
	[0272.648] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.648] WriteFile (in: hFile=0x1d8, lpBuffer=0x11174000*, nNumberOfBytesToWrite=0x2c8, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x11174000*, lpNumberOfBytesWritten=0x112c5dfc*=0x2c8, lpOverlapped=0x112c5e08) returned 1
	[0272.649] GetFileType (hFile=0x1d8) returned 0x1
	[0272.649] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.649] GetFileType (hFile=0x1d8) returned 0x1
	[0272.649] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.649] WriteFile (in: hFile=0x1d8, lpBuffer=0x11176000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x11176000*, lpNumberOfBytesWritten=0x112c5dfc*=0x224, lpOverlapped=0x112c5e08) returned 1
	[0272.649] GetFileType (hFile=0x1d8) returned 0x1
	[0272.649] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2c8, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.649] CloseHandle (hObject=0x1d8) returned 1
	[0272.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf.tl30z")) returned 0x220
	[0272.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.657] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0272.671] SetEvent (hEvent=0x1b0) returned 1
	[0272.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x220
	[0272.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF", dwFileAttributes=0x220) returned 1
	[0272.672] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.866] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0272.866] ReadFile (in: hFile=0x1d8, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x600c, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11428e18*=0x600c, lpOverlapped=0x0) returned 1
	[0272.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0272.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0272.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261302 | out: pbBuffer=0x11261302) returned 1
	[0272.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126130a | out: pbBuffer=0x1126130a) returned 1
	[0272.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112613cc | out: pbBuffer=0x112613cc) returned 1
	[0272.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0272.878] GetFileType (hFile=0x1d8) returned 0x1
	[0272.878] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.878] WriteFile (in: hFile=0x1d8, lpBuffer=0x1135a000*, nNumberOfBytesToWrite=0x600c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x600c, lpOverlapped=0x1102be08) returned 1
	[0272.879] GetFileType (hFile=0x1d8) returned 0x1
	[0272.879] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x600c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.879] GetFileType (hFile=0x1d8) returned 0x1
	[0272.879] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.880] WriteFile (in: hFile=0x1d8, lpBuffer=0x11177c00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11177c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0272.880] GetFileType (hFile=0x1d8) returned 0x1
	[0272.880] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x600c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.880] CloseHandle (hObject=0x1d8) returned 1
	[0272.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf.tl30z")) returned 0x220
	[0272.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.891] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0272.896] SetEvent (hEvent=0x218) returned 1
	[0272.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x220
	[0272.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF", dwFileAttributes=0x220) returned 1
	[0272.897] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.050] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0273.050] ReadFile (in: hFile=0x1d8, lpBuffer=0x113bd000, nNumberOfBytesToRead=0xe20, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113bd000*, lpNumberOfBytesRead=0x11428e18*=0xe20, lpOverlapped=0x0) returned 1
	[0273.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0273.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e628 | out: pbBuffer=0x1104e628) returned 1
	[0273.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ac702 | out: pbBuffer=0x112ac702) returned 1
	[0273.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ac759 | out: pbBuffer=0x112ac759) returned 1
	[0273.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0273.063] GetFileType (hFile=0x1d8) returned 0x1
	[0273.063] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.063] WriteFile (in: hFile=0x1d8, lpBuffer=0x112be000*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x112be000*, lpNumberOfBytesWritten=0x112c9dfc*=0xe20, lpOverlapped=0x112c9e08) returned 1
	[0273.064] GetFileType (hFile=0x1d8) returned 0x1
	[0273.064] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xe20, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.064] GetFileType (hFile=0x1d8) returned 0x1
	[0273.064] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.064] WriteFile (in: hFile=0x1d8, lpBuffer=0x113ab500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x113ab500*, lpNumberOfBytesWritten=0x112c9dfc*=0x224, lpOverlapped=0x112c9e08) returned 1
	[0273.064] GetFileType (hFile=0x1d8) returned 0x1
	[0273.065] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xe20, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.065] CloseHandle (hObject=0x1d8) returned 1
	[0273.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf.tl30z")) returned 0x220
	[0273.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.074] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0273.085] SetEvent (hEvent=0x218) returned 1
	[0273.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x220
	[0273.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF", dwFileAttributes=0x220) returned 1
	[0273.085] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.227] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0273.227] ReadFile (in: hFile=0x1d8, lpBuffer=0x11299000, nNumberOfBytesToRead=0xb90, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11299000*, lpNumberOfBytesRead=0x11428e18*=0xb90, lpOverlapped=0x0) returned 1
	[0273.233] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332ae0 | out: pbBuffer=0x11332ae0) returned 1
	[0273.233] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11460602 | out: pbBuffer=0x11460602) returned 1
	[0273.233] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11460666 | out: pbBuffer=0x11460666) returned 1
	[0273.233] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1146067e | out: pbBuffer=0x1146067e) returned 1
	[0273.233] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114606cc | out: pbBuffer=0x114606cc) returned 1
	[0273.233] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332b10 | out: pbBuffer=0x11332b10) returned 1
	[0273.234] GetFileType (hFile=0x1d8) returned 0x1
	[0273.234] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.234] WriteFile (in: hFile=0x1d8, lpBuffer=0x1146c000*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1146c000*, lpNumberOfBytesWritten=0x1102bdfc*=0xb90, lpOverlapped=0x1102be08) returned 1
	[0273.234] GetFileType (hFile=0x1d8) returned 0x1
	[0273.234] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb90, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.234] GetFileType (hFile=0x1d8) returned 0x1
	[0273.234] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.234] WriteFile (in: hFile=0x1d8, lpBuffer=0x11468380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11468380*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0273.235] GetFileType (hFile=0x1d8) returned 0x1
	[0273.235] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb90, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.235] CloseHandle (hObject=0x1d8) returned 1
	[0273.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf.tl30z")) returned 0x220
	[0273.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.253] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0273.258] SetEvent (hEvent=0x218) returned 1
	[0273.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x220
	[0273.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF", dwFileAttributes=0x220) returned 1
	[0273.258] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.433] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0273.433] ReadFile (in: hFile=0x1d8, lpBuffer=0x1107db00, nNumberOfBytesToRead=0x820, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1107db00*, lpNumberOfBytesRead=0x11428e18*=0x820, lpOverlapped=0x0) returned 1
	[0273.438] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6600 | out: pbBuffer=0x113e6600) returned 1
	[0273.438] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e65f8 | out: pbBuffer=0x113e65f8) returned 1
	[0273.438] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110f5a02 | out: pbBuffer=0x110f5a02) returned 1
	[0273.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110f5a82 | out: pbBuffer=0x110f5a82) returned 1
	[0273.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110f5acc | out: pbBuffer=0x110f5acc) returned 1
	[0273.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6630 | out: pbBuffer=0x113e6630) returned 1
	[0273.439] GetFileType (hFile=0x1d8) returned 0x1
	[0273.439] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.440] WriteFile (in: hFile=0x1d8, lpBuffer=0x11156000*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11156000*, lpNumberOfBytesWritten=0x112c9dfc*=0x820, lpOverlapped=0x112c9e08) returned 1
	[0273.440] GetFileType (hFile=0x1d8) returned 0x1
	[0273.440] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x820, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.440] GetFileType (hFile=0x1d8) returned 0x1
	[0273.440] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.440] WriteFile (in: hFile=0x1d8, lpBuffer=0x11105c00*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11105c00*, lpNumberOfBytesWritten=0x112c9dfc*=0x21e, lpOverlapped=0x112c9e08) returned 1
	[0273.441] GetFileType (hFile=0x1d8) returned 0x1
	[0273.441] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x820, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.441] CloseHandle (hObject=0x1d8) returned 1
	[0273.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf.tl30z")) returned 0x220
	[0273.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.452] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0273.460] SetEvent (hEvent=0x218) returned 1
	[0273.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x220
	[0273.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF", dwFileAttributes=0x220) returned 1
	[0273.460] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.754] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0273.754] ReadFile (in: hFile=0x1d8, lpBuffer=0x1123c000, nNumberOfBytesToRead=0x804, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1123c000*, lpNumberOfBytesRead=0x11428e18*=0x804, lpOverlapped=0x0) returned 1
	[0273.762] SetEvent (hEvent=0x234) returned 1
	[0273.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3c0 | out: pbBuffer=0x1140f3c0) returned 1
	[0273.763] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3b8 | out: pbBuffer=0x1140f3b8) returned 1
	[0273.763] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f7e02 | out: pbBuffer=0x111f7e02) returned 1
	[0273.763] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0273.763] GetFileType (hFile=0x1d8) returned 0x1
	[0273.763] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.763] WriteFile (in: hFile=0x1d8, lpBuffer=0x11245000*, nNumberOfBytesToWrite=0x804, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x11245000*, lpNumberOfBytesWritten=0x112c5dfc*=0x804, lpOverlapped=0x112c5e08) returned 1
	[0273.764] GetFileType (hFile=0x1d8) returned 0x1
	[0273.764] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x804, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.764] GetFileType (hFile=0x1d8) returned 0x1
	[0273.764] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.764] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bd0700*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x11bd0700*, lpNumberOfBytesWritten=0x112c5dfc*=0x21e, lpOverlapped=0x112c5e08) returned 1
	[0273.764] GetFileType (hFile=0x1d8) returned 0x1
	[0273.764] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x804, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.765] CloseHandle (hObject=0x1d8) returned 1
	[0273.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf.tl30z")) returned 0x220
	[0273.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.782] SwitchToThread () returned 1
	[0273.786] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0273.799] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0273.835] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0273.870] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0273.925] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0273.952] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0273.973] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0273.991] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.013] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.063] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.095] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.133] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.186] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.239] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.289] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.336] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.421] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.458] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.500] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.532] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.568] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.608] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.642] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.684] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.854] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.898] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0274.956] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0275.016] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0275.069] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0275.088] SetEvent (hEvent=0x234) returned 1
	[0275.089] SetEvent (hEvent=0x1f0) returned 1
	[0275.089] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0275.098] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0275.099] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0275.105] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0275.105] SetEvent (hEvent=0x234) returned 1
	[0275.105] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0275.109] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0275.109] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0276.080] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0276.082] SetEvent (hEvent=0x118) returned 1
	[0276.082] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0276.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x220
	[0276.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF", dwFileAttributes=0x220) returned 1
	[0276.095] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.287] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0276.287] ReadFile (in: hFile=0x224, lpBuffer=0x110da000, nNumberOfBytesToRead=0x2168, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x110da000*, lpNumberOfBytesRead=0x1128be18*=0x2168, lpOverlapped=0x0) returned 1
	[0276.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66e0 | out: pbBuffer=0x113e66e0) returned 1
	[0276.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d5402 | out: pbBuffer=0x110d5402) returned 1
	[0276.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d542e | out: pbBuffer=0x110d542e) returned 1
	[0276.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d5492 | out: pbBuffer=0x110d5492) returned 1
	[0276.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6710 | out: pbBuffer=0x113e6710) returned 1
	[0276.292] GetFileType (hFile=0x224) returned 0x1
	[0276.292] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.292] WriteFile (in: hFile=0x224, lpBuffer=0x11062000*, nNumberOfBytesToWrite=0x2168, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11062000*, lpNumberOfBytesWritten=0x11031dfc*=0x2168, lpOverlapped=0x11031e08) returned 1
	[0276.293] GetFileType (hFile=0x224) returned 0x1
	[0276.293] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2168, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.293] GetFileType (hFile=0x224) returned 0x1
	[0276.293] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.293] WriteFile (in: hFile=0x224, lpBuffer=0x1132e700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1132e700*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0276.294] GetFileType (hFile=0x224) returned 0x1
	[0276.294] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2168, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.294] CloseHandle (hObject=0x224) returned 1
	[0276.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf.tl30z")) returned 0x220
	[0276.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.308] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0276.321] SetEvent (hEvent=0x218) returned 1
	[0276.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x220
	[0276.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF", dwFileAttributes=0x220) returned 1
	[0276.322] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.543] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0276.543] ReadFile (in: hFile=0x224, lpBuffer=0x112b0000, nNumberOfBytesToRead=0x400c, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112b0000*, lpNumberOfBytesRead=0x1128be18*=0x400c, lpOverlapped=0x0) returned 1
	[0276.548] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0276.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c6602 | out: pbBuffer=0x112c6602) returned 1
	[0276.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0276.549] GetFileType (hFile=0x224) returned 0x1
	[0276.549] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.550] WriteFile (in: hFile=0x224, lpBuffer=0x11444000*, nNumberOfBytesToWrite=0x400c, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x11444000*, lpNumberOfBytesWritten=0x1139fdfc*=0x400c, lpOverlapped=0x1139fe08) returned 1
	[0276.550] GetFileType (hFile=0x224) returned 0x1
	[0276.550] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x400c, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.550] GetFileType (hFile=0x224) returned 0x1
	[0276.550] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.550] WriteFile (in: hFile=0x224, lpBuffer=0x112a1500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x112a1500*, lpNumberOfBytesWritten=0x1139fdfc*=0x221, lpOverlapped=0x1139fe08) returned 1
	[0276.551] GetFileType (hFile=0x224) returned 0x1
	[0276.551] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x400c, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.551] CloseHandle (hObject=0x224) returned 1
	[0276.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf.tl30z")) returned 0x220
	[0276.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.564] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0276.582] SetEvent (hEvent=0x218) returned 1
	[0276.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x220
	[0276.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF", dwFileAttributes=0x220) returned 1
	[0276.583] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.742] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0276.742] ReadFile (in: hFile=0x224, lpBuffer=0x1113c000, nNumberOfBytesToRead=0x43fe, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1113c000*, lpNumberOfBytesRead=0x1128be18*=0x43fe, lpOverlapped=0x0) returned 1
	[0276.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0276.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f568 | out: pbBuffer=0x1140f568) returned 1
	[0276.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123a702 | out: pbBuffer=0x1123a702) returned 1
	[0276.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0276.748] GetFileType (hFile=0x224) returned 0x1
	[0276.748] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.748] WriteFile (in: hFile=0x224, lpBuffer=0x1116a000*, nNumberOfBytesToWrite=0x43fe, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x1116a000*, lpNumberOfBytesWritten=0x113a3dfc*=0x43fe, lpOverlapped=0x113a3e08) returned 1
	[0276.748] GetFileType (hFile=0x224) returned 0x1
	[0276.748] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x43fe, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.748] GetFileType (hFile=0x224) returned 0x1
	[0276.749] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.749] WriteFile (in: hFile=0x224, lpBuffer=0x11211500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x11211500*, lpNumberOfBytesWritten=0x113a3dfc*=0x236, lpOverlapped=0x113a3e08) returned 1
	[0276.749] GetFileType (hFile=0x224) returned 0x1
	[0276.749] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x43fe, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.749] CloseHandle (hObject=0x224) returned 1
	[0276.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf.tl30z")) returned 0x220
	[0276.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.761] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0276.767] SetEvent (hEvent=0x218) returned 1
	[0276.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf")) returned 0x220
	[0276.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF", dwFileAttributes=0x220) returned 1
	[0276.767] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.904] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0276.904] ReadFile (in: hFile=0x224, lpBuffer=0x1119a000, nNumberOfBytesToRead=0x2b90, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1119a000*, lpNumberOfBytesRead=0x1128be18*=0x2b90, lpOverlapped=0x0) returned 1
	[0276.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0276.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267302 | out: pbBuffer=0x11267302) returned 1
	[0276.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267342 | out: pbBuffer=0x11267342) returned 1
	[0276.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0276.910] GetFileType (hFile=0x224) returned 0x1
	[0276.910] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.910] WriteFile (in: hFile=0x224, lpBuffer=0x1138e000*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1138e000*, lpNumberOfBytesWritten=0x11031dfc*=0x2b90, lpOverlapped=0x11031e08) returned 1
	[0276.910] GetFileType (hFile=0x224) returned 0x1
	[0276.911] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2b90, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.911] GetFileType (hFile=0x224) returned 0x1
	[0276.911] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.911] WriteFile (in: hFile=0x224, lpBuffer=0x1143e000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1143e000*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0276.911] GetFileType (hFile=0x224) returned 0x1
	[0276.911] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2b90, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.911] CloseHandle (hObject=0x224) returned 1
	[0276.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf.tl30z")) returned 0x220
	[0276.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.918] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0276.928] SetEvent (hEvent=0x1b0) returned 1
	[0276.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf")) returned 0x220
	[0276.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF", dwFileAttributes=0x220) returned 1
	[0276.929] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0277.309] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0277.309] ReadFile (in: hFile=0x224, lpBuffer=0x1144c000, nNumberOfBytesToRead=0x121a, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1144c000*, lpNumberOfBytesRead=0x1128be18*=0x121a, lpOverlapped=0x0) returned 1
	[0277.315] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0277.315] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e628 | out: pbBuffer=0x1104e628) returned 1
	[0277.315] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ba702 | out: pbBuffer=0x110ba702) returned 1
	[0277.315] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110ba72c | out: pbBuffer=0x110ba72c) returned 1
	[0277.315] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0277.316] GetFileType (hFile=0x224) returned 0x1
	[0277.316] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.316] WriteFile (in: hFile=0x224, lpBuffer=0x11226000*, nNumberOfBytesToWrite=0x121a, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11226000*, lpNumberOfBytesWritten=0x113a1dfc*=0x121a, lpOverlapped=0x113a1e08) returned 1
	[0277.316] GetFileType (hFile=0x224) returned 0x1
	[0277.316] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x121a, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.316] GetFileType (hFile=0x224) returned 0x1
	[0277.317] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.317] WriteFile (in: hFile=0x224, lpBuffer=0x110d9500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x110d9500*, lpNumberOfBytesWritten=0x113a1dfc*=0x227, lpOverlapped=0x113a1e08) returned 1
	[0277.317] GetFileType (hFile=0x224) returned 0x1
	[0277.317] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x121a, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.317] CloseHandle (hObject=0x224) returned 1
	[0277.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf.tl30z")) returned 0x220
	[0277.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.322] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0277.345] SetEvent (hEvent=0x234) returned 1
	[0277.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf")) returned 0x220
	[0277.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF", dwFileAttributes=0x220) returned 1
	[0277.346] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0277.489] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0277.489] ReadFile (in: hFile=0x1d8, lpBuffer=0x111f8000, nNumberOfBytesToRead=0x91c, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x111f8000*, lpNumberOfBytesRead=0x1128be18*=0x91c, lpOverlapped=0x0) returned 1
	[0277.495] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202050 | out: pbBuffer=0x11202050) returned 1
	[0277.495] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bb102 | out: pbBuffer=0x110bb102) returned 1
	[0277.496] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bb11d | out: pbBuffer=0x110bb11d) returned 1
	[0277.496] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202080 | out: pbBuffer=0x11202080) returned 1
	[0277.497] GetFileType (hFile=0x1d8) returned 0x1
	[0277.497] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.497] WriteFile (in: hFile=0x1d8, lpBuffer=0x11201000*, nNumberOfBytesToWrite=0x91c, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11201000*, lpNumberOfBytesWritten=0x113a1dfc*=0x91c, lpOverlapped=0x113a1e08) returned 1
	[0277.498] GetFileType (hFile=0x1d8) returned 0x1
	[0277.498] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x91c, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.498] GetFileType (hFile=0x1d8) returned 0x1
	[0277.498] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.498] WriteFile (in: hFile=0x1d8, lpBuffer=0x1120a380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x1120a380*, lpNumberOfBytesWritten=0x113a1dfc*=0x227, lpOverlapped=0x113a1e08) returned 1
	[0277.499] GetFileType (hFile=0x1d8) returned 0x1
	[0277.499] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x91c, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.499] CloseHandle (hObject=0x1d8) returned 1
	[0277.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf.tl30z")) returned 0x220
	[0277.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.503] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0277.508] SetEvent (hEvent=0x234) returned 1
	[0277.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf")) returned 0x220
	[0277.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF", dwFileAttributes=0x220) returned 1
	[0277.508] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0277.700] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0277.700] ReadFile (in: hFile=0x1fc, lpBuffer=0x110b8000, nNumberOfBytesToRead=0x329e, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x110b8000*, lpNumberOfBytesRead=0x1128be18*=0x329e, lpOverlapped=0x0) returned 1
	[0277.705] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202100 | out: pbBuffer=0x11202100) returned 1
	[0277.705] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112020f8 | out: pbBuffer=0x112020f8) returned 1
	[0277.705] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11334802 | out: pbBuffer=0x11334802) returned 1
	[0277.706] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202130 | out: pbBuffer=0x11202130) returned 1
	[0277.706] GetFileType (hFile=0x1fc) returned 0x1
	[0277.706] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0277.706] WriteFile (in: hFile=0x1fc, lpBuffer=0x110f6000*, nNumberOfBytesToWrite=0x329e, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110f6000*, lpNumberOfBytesWritten=0x1102bdfc*=0x329e, lpOverlapped=0x1102be08) returned 1
	[0277.707] GetFileType (hFile=0x1fc) returned 0x1
	[0277.707] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x329e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0277.707] GetFileType (hFile=0x1fc) returned 0x1
	[0277.707] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0277.707] WriteFile (in: hFile=0x1fc, lpBuffer=0x11476a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11476a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0277.707] GetFileType (hFile=0x1fc) returned 0x1
	[0277.707] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x329e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0277.707] CloseHandle (hObject=0x1fc) returned 1
	[0277.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf.tl30z")) returned 0x220
	[0277.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.716] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0277.724] SetEvent (hEvent=0x26c) returned 1
	[0277.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf")) returned 0x220
	[0277.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF", dwFileAttributes=0x220) returned 1
	[0277.725] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0277.999] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0277.999] ReadFile (in: hFile=0x1fc, lpBuffer=0x110c3500, nNumberOfBytesToRead=0x61c, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x110c3500*, lpNumberOfBytesRead=0x1128be18*=0x61c, lpOverlapped=0x0) returned 1
	[0278.008] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202410 | out: pbBuffer=0x11202410) returned 1
	[0278.008] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11335c02 | out: pbBuffer=0x11335c02) returned 1
	[0278.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202440 | out: pbBuffer=0x11202440) returned 1
	[0278.009] GetFileType (hFile=0x1fc) returned 0x1
	[0278.009] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.009] WriteFile (in: hFile=0x1fc, lpBuffer=0x113f2000*, nNumberOfBytesToWrite=0x61c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113f2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x61c, lpOverlapped=0x1102be08) returned 1
	[0278.009] GetFileType (hFile=0x1fc) returned 0x1
	[0278.009] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x61c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.009] GetFileType (hFile=0x1fc) returned 0x1
	[0278.009] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.010] WriteFile (in: hFile=0x1fc, lpBuffer=0x11064700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11064700*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0278.010] GetFileType (hFile=0x1fc) returned 0x1
	[0278.010] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x61c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.010] CloseHandle (hObject=0x1fc) returned 1
	[0278.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf.tl30z")) returned 0x220
	[0278.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.020] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0278.023] SetEvent (hEvent=0x26c) returned 1
	[0278.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf")) returned 0x220
	[0278.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF", dwFileAttributes=0x220) returned 1
	[0278.024] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.291] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0278.291] ReadFile (in: hFile=0x224, lpBuffer=0x11092300, nNumberOfBytesToRead=0x670, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11092300*, lpNumberOfBytesRead=0x1128be18*=0x670, lpOverlapped=0x0) returned 1
	[0278.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0278.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324e8 | out: pbBuffer=0x113324e8) returned 1
	[0278.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113dfd02 | out: pbBuffer=0x113dfd02) returned 1
	[0278.298] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0278.298] GetFileType (hFile=0x224) returned 0x1
	[0278.298] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.298] WriteFile (in: hFile=0x224, lpBuffer=0x110dc000*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110dc000*, lpNumberOfBytesWritten=0x1102bdfc*=0x670, lpOverlapped=0x1102be08) returned 1
	[0278.298] GetFileType (hFile=0x224) returned 0x1
	[0278.298] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x670, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.299] GetFileType (hFile=0x224) returned 0x1
	[0278.299] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.299] WriteFile (in: hFile=0x224, lpBuffer=0x110d6700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110d6700*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0278.299] GetFileType (hFile=0x224) returned 0x1
	[0278.299] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x670, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.299] CloseHandle (hObject=0x224) returned 1
	[0278.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf.tl30z")) returned 0x220
	[0278.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.316] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0278.333] SetEvent (hEvent=0x26c) returned 1
	[0278.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid")) returned 0x220
	[0278.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID", dwFileAttributes=0x220) returned 1
	[0278.334] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0278.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.594] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0278.594] ReadFile (in: hFile=0x224, lpBuffer=0x112b6000, nNumberOfBytesToRead=0x1d8f, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112b6000*, lpNumberOfBytesRead=0x1128be18*=0x1d8f, lpOverlapped=0x0) returned 1
	[0278.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112029e0 | out: pbBuffer=0x112029e0) returned 1
	[0278.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bc502 | out: pbBuffer=0x112bc502) returned 1
	[0278.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112bc53f | out: pbBuffer=0x112bc53f) returned 1
	[0278.602] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202a10 | out: pbBuffer=0x11202a10) returned 1
	[0278.602] GetFileType (hFile=0x224) returned 0x1
	[0278.602] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.603] WriteFile (in: hFile=0x224, lpBuffer=0x11128000*, nNumberOfBytesToWrite=0x1d8f, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x11128000*, lpNumberOfBytesWritten=0x1139fdfc*=0x1d8f, lpOverlapped=0x1139fe08) returned 1
	[0278.603] GetFileType (hFile=0x224) returned 0x1
	[0278.603] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1d8f, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.604] GetFileType (hFile=0x224) returned 0x1
	[0278.604] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.604] WriteFile (in: hFile=0x224, lpBuffer=0x1112c000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x1112c000*, lpNumberOfBytesWritten=0x1139fdfc*=0x233, lpOverlapped=0x1139fe08) returned 1
	[0278.604] GetFileType (hFile=0x224) returned 0x1
	[0278.604] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1d8f, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.604] CloseHandle (hObject=0x224) returned 1
	[0278.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid.tl30z")) returned 0x220
	[0278.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0278.614] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0278.618] SetEvent (hEvent=0x26c) returned 1
	[0278.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf")) returned 0x220
	[0278.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF", dwFileAttributes=0x220) returned 1
	[0278.619] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.827] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0278.827] ReadFile (in: hFile=0x224, lpBuffer=0x11076480, nNumberOfBytesToRead=0x402, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11076480*, lpNumberOfBytesRead=0x1128be18*=0x402, lpOverlapped=0x0) returned 1
	[0278.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0278.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0278.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e5402 | out: pbBuffer=0x110e5402) returned 1
	[0278.840] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e545c | out: pbBuffer=0x110e545c) returned 1
	[0278.840] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0278.840] GetFileType (hFile=0x224) returned 0x1
	[0278.840] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.840] WriteFile (in: hFile=0x224, lpBuffer=0x1140a000*, nNumberOfBytesToWrite=0x402, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x1140a000*, lpNumberOfBytesWritten=0x113a1dfc*=0x402, lpOverlapped=0x113a1e08) returned 1
	[0278.841] GetFileType (hFile=0x224) returned 0x1
	[0278.841] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x402, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.841] GetFileType (hFile=0x224) returned 0x1
	[0278.841] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.841] WriteFile (in: hFile=0x224, lpBuffer=0x11412000*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11412000*, lpNumberOfBytesWritten=0x113a1dfc*=0x21e, lpOverlapped=0x113a1e08) returned 1
	[0278.842] GetFileType (hFile=0x224) returned 0x1
	[0278.842] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x402, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.842] CloseHandle (hObject=0x224) returned 1
	[0278.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf.tl30z")) returned 0x220
	[0278.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.869] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0278.881] SetEvent (hEvent=0x26c) returned 1
	[0278.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf")) returned 0x220
	[0278.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF", dwFileAttributes=0x220) returned 1
	[0278.882] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.037] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0279.037] ReadFile (in: hFile=0x224, lpBuffer=0x111fd800, nNumberOfBytesToRead=0x5f8, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x111fd800*, lpNumberOfBytesRead=0x1128be18*=0x5f8, lpOverlapped=0x0) returned 1
	[0279.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0279.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f7d02 | out: pbBuffer=0x111f7d02) returned 1
	[0279.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f7deb | out: pbBuffer=0x111f7deb) returned 1
	[0279.043] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0279.043] GetFileType (hFile=0x224) returned 0x1
	[0279.043] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.043] WriteFile (in: hFile=0x224, lpBuffer=0x1132c000*, nNumberOfBytesToWrite=0x5f8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1132c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5f8, lpOverlapped=0x1102be08) returned 1
	[0279.043] GetFileType (hFile=0x224) returned 0x1
	[0279.043] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5f8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.044] GetFileType (hFile=0x224) returned 0x1
	[0279.044] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.044] WriteFile (in: hFile=0x224, lpBuffer=0x11328700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11328700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0279.050] GetFileType (hFile=0x224) returned 0x1
	[0279.051] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5f8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.051] CloseHandle (hObject=0x224) returned 1
	[0279.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf.tl30z")) returned 0x220
	[0279.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.061] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0279.069] SetEvent (hEvent=0x26c) returned 1
	[0279.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf")) returned 0x220
	[0279.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF", dwFileAttributes=0x220) returned 1
	[0279.069] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.242] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0279.242] ReadFile (in: hFile=0x224, lpBuffer=0x11096000, nNumberOfBytesToRead=0x16a6, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11096000*, lpNumberOfBytesRead=0x1128be18*=0x16a6, lpOverlapped=0x0) returned 1
	[0279.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202100 | out: pbBuffer=0x11202100) returned 1
	[0279.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112020f8 | out: pbBuffer=0x112020f8) returned 1
	[0279.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b0802 | out: pbBuffer=0x110b0802) returned 1
	[0279.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202130 | out: pbBuffer=0x11202130) returned 1
	[0279.250] GetFileType (hFile=0x224) returned 0x1
	[0279.251] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.251] WriteFile (in: hFile=0x224, lpBuffer=0x11210000*, nNumberOfBytesToWrite=0x16a6, lpNumberOfBytesWritten=0x110abdfc, lpOverlapped=0x110abe08 | out: lpBuffer=0x11210000*, lpNumberOfBytesWritten=0x110abdfc*=0x16a6, lpOverlapped=0x110abe08) returned 1
	[0279.251] GetFileType (hFile=0x224) returned 0x1
	[0279.251] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x16a6, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.251] GetFileType (hFile=0x224) returned 0x1
	[0279.251] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.252] WriteFile (in: hFile=0x224, lpBuffer=0x113bca80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x110abdfc, lpOverlapped=0x110abe08 | out: lpBuffer=0x113bca80*, lpNumberOfBytesWritten=0x110abdfc*=0x22d, lpOverlapped=0x110abe08) returned 1
	[0279.252] GetFileType (hFile=0x224) returned 0x1
	[0279.252] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x16a6, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.252] CloseHandle (hObject=0x224) returned 1
	[0279.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf.tl30z")) returned 0x220
	[0279.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.261] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0279.265] SetEvent (hEvent=0x26c) returned 1
	[0279.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf")) returned 0x220
	[0279.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF", dwFileAttributes=0x220) returned 1
	[0279.266] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.431] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0279.431] ReadFile (in: hFile=0x224, lpBuffer=0x1129e000, nNumberOfBytesToRead=0x2994, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1129e000*, lpNumberOfBytesRead=0x1128be18*=0x2994, lpOverlapped=0x0) returned 1
	[0279.440] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6870 | out: pbBuffer=0x113e6870) returned 1
	[0279.440] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a1e02 | out: pbBuffer=0x111a1e02) returned 1
	[0279.440] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e68a0 | out: pbBuffer=0x113e68a0) returned 1
	[0279.441] GetFileType (hFile=0x224) returned 0x1
	[0279.441] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.441] WriteFile (in: hFile=0x224, lpBuffer=0x112c6000*, nNumberOfBytesToWrite=0x2994, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x112c6000*, lpNumberOfBytesWritten=0x113a1dfc*=0x2994, lpOverlapped=0x113a1e08) returned 1
	[0279.441] GetFileType (hFile=0x224) returned 0x1
	[0279.441] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2994, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.441] GetFileType (hFile=0x224) returned 0x1
	[0279.442] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.442] WriteFile (in: hFile=0x224, lpBuffer=0x111cb880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x111cb880*, lpNumberOfBytesWritten=0x113a1dfc*=0x22a, lpOverlapped=0x113a1e08) returned 1
	[0279.442] GetFileType (hFile=0x224) returned 0x1
	[0279.442] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2994, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.442] CloseHandle (hObject=0x224) returned 1
	[0279.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf.tl30z")) returned 0x220
	[0279.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.463] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0279.472] SetEvent (hEvent=0x26c) returned 1
	[0279.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf")) returned 0x220
	[0279.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF", dwFileAttributes=0x220) returned 1
	[0279.473] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.609] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0279.609] ReadFile (in: hFile=0x224, lpBuffer=0x11bdf000, nNumberOfBytesToRead=0xfc0, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11bdf000*, lpNumberOfBytesRead=0x1131ce18*=0xfc0, lpOverlapped=0x0) returned 1
	[0279.614] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0279.615] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c2802 | out: pbBuffer=0x112c2802) returned 1
	[0279.615] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c2850 | out: pbBuffer=0x112c2850) returned 1
	[0279.615] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c288c | out: pbBuffer=0x112c288c) returned 1
	[0279.615] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0279.615] GetFileType (hFile=0x224) returned 0x1
	[0279.615] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.615] WriteFile (in: hFile=0x224, lpBuffer=0x11330000*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11330000*, lpNumberOfBytesWritten=0x1102bdfc*=0xfc0, lpOverlapped=0x1102be08) returned 1
	[0279.616] GetFileType (hFile=0x224) returned 0x1
	[0279.616] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xfc0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.616] GetFileType (hFile=0x224) returned 0x1
	[0279.616] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.616] WriteFile (in: hFile=0x224, lpBuffer=0x1113d880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1113d880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0279.616] GetFileType (hFile=0x224) returned 0x1
	[0279.617] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xfc0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.617] CloseHandle (hObject=0x224) returned 1
	[0279.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf.tl30z")) returned 0x220
	[0279.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.631] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0279.636] SetEvent (hEvent=0x218) returned 1
	[0279.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf")) returned 0x220
	[0279.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF", dwFileAttributes=0x220) returned 1
	[0279.636] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.951] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0279.951] ReadFile (in: hFile=0x224, lpBuffer=0x11076480, nNumberOfBytesToRead=0x47c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11076480*, lpNumberOfBytesRead=0x1131ce18*=0x47c, lpOverlapped=0x0) returned 1
	[0279.972] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0279.972] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e638 | out: pbBuffer=0x1104e638) returned 1
	[0279.972] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11064802 | out: pbBuffer=0x11064802) returned 1
	[0279.972] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11064872 | out: pbBuffer=0x11064872) returned 1
	[0279.972] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11064893 | out: pbBuffer=0x11064893) returned 1
	[0279.972] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0279.973] GetFileType (hFile=0x224) returned 0x1
	[0279.973] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.973] WriteFile (in: hFile=0x224, lpBuffer=0x1120e000*, nNumberOfBytesToWrite=0x47c, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x1120e000*, lpNumberOfBytesWritten=0x1121ddfc*=0x47c, lpOverlapped=0x1121de08) returned 1
	[0279.973] GetFileType (hFile=0x224) returned 0x1
	[0279.973] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x47c, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.973] GetFileType (hFile=0x224) returned 0x1
	[0279.973] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.973] WriteFile (in: hFile=0x224, lpBuffer=0x11391500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x11391500*, lpNumberOfBytesWritten=0x1121ddfc*=0x22a, lpOverlapped=0x1121de08) returned 1
	[0279.973] GetFileType (hFile=0x224) returned 0x1
	[0279.974] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x47c, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.974] CloseHandle (hObject=0x224) returned 1
	[0279.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf.tl30z")) returned 0x220
	[0279.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.985] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.017] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.057] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.093] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.128] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.164] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.198] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.227] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.289] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.343] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.423] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.468] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.500] SetEvent (hEvent=0x234) returned 1
	[0280.500] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf")) returned 0x220
	[0280.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF", dwFileAttributes=0x220) returned 1
	[0280.501] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0280.711] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0280.711] ReadFile (in: hFile=0x1d8, lpBuffer=0x11bc6000, nNumberOfBytesToRead=0x136a, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesRead=0x11287e18*=0x136a, lpOverlapped=0x0) returned 1
	[0280.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0280.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b2f02 | out: pbBuffer=0x110b2f02) returned 1
	[0280.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0280.717] GetFileType (hFile=0x1d8) returned 0x1
	[0280.717] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1118dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.717] WriteFile (in: hFile=0x1d8, lpBuffer=0x1116e000*, nNumberOfBytesToWrite=0x136a, lpNumberOfBytesWritten=0x1118ddfc, lpOverlapped=0x1118de08 | out: lpBuffer=0x1116e000*, lpNumberOfBytesWritten=0x1118ddfc*=0x136a, lpOverlapped=0x1118de08) returned 1
	[0280.718] GetFileType (hFile=0x1d8) returned 0x1
	[0280.718] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x136a, lpNewFilePointer=0x0, dwMoveMethod=0x1118dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.718] GetFileType (hFile=0x1d8) returned 0x1
	[0280.718] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1118dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.718] WriteFile (in: hFile=0x1d8, lpBuffer=0x110c4e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1118ddfc, lpOverlapped=0x1118de08 | out: lpBuffer=0x110c4e00*, lpNumberOfBytesWritten=0x1118ddfc*=0x22d, lpOverlapped=0x1118de08) returned 1
	[0280.719] GetFileType (hFile=0x1d8) returned 0x1
	[0280.719] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x136a, lpNewFilePointer=0x0, dwMoveMethod=0x1118dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.719] CloseHandle (hObject=0x1d8) returned 1
	[0280.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf.tl30z")) returned 0x220
	[0280.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.731] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0280.734] SetEvent (hEvent=0x1b0) returned 1
	[0280.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf")) returned 0x220
	[0280.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF", dwFileAttributes=0x220) returned 1
	[0280.735] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.002] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0281.002] ReadFile (in: hFile=0x1d8, lpBuffer=0x111a4000, nNumberOfBytesToRead=0xb10, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x111a4000*, lpNumberOfBytesRead=0x11287e18*=0xb10, lpOverlapped=0x0) returned 1
	[0281.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0281.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0281.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11191302 | out: pbBuffer=0x11191302) returned 1
	[0281.009] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0281.009] GetFileType (hFile=0x1d8) returned 0x1
	[0281.010] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.010] WriteFile (in: hFile=0x1d8, lpBuffer=0x111b8000*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111b8000*, lpNumberOfBytesWritten=0x1102bdfc*=0xb10, lpOverlapped=0x1102be08) returned 1
	[0281.010] GetFileType (hFile=0x1d8) returned 0x1
	[0281.010] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb10, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.011] GetFileType (hFile=0x1d8) returned 0x1
	[0281.011] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.011] WriteFile (in: hFile=0x1d8, lpBuffer=0x11091880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11091880*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0281.011] GetFileType (hFile=0x1d8) returned 0x1
	[0281.011] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb10, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.011] CloseHandle (hObject=0x1d8) returned 1
	[0281.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf.tl30z")) returned 0x220
	[0281.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.021] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0281.032] SetEvent (hEvent=0x248) returned 1
	[0281.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf")) returned 0x220
	[0281.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF", dwFileAttributes=0x220) returned 1
	[0281.033] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.178] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0281.178] ReadFile (in: hFile=0x1d8, lpBuffer=0x11076480, nNumberOfBytesToRead=0x432, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11076480*, lpNumberOfBytesRead=0x11287e18*=0x432, lpOverlapped=0x0) returned 1
	[0281.182] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327e0 | out: pbBuffer=0x113327e0) returned 1
	[0281.182] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327d8 | out: pbBuffer=0x113327d8) returned 1
	[0281.182] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a1502 | out: pbBuffer=0x113a1502) returned 1
	[0281.182] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a155f | out: pbBuffer=0x113a155f) returned 1
	[0281.182] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a156d | out: pbBuffer=0x113a156d) returned 1
	[0281.182] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0281.182] GetFileType (hFile=0x1d8) returned 0x1
	[0281.183] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.183] WriteFile (in: hFile=0x1d8, lpBuffer=0x11314000*, nNumberOfBytesToWrite=0x432, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11314000*, lpNumberOfBytesWritten=0x11031dfc*=0x432, lpOverlapped=0x11031e08) returned 1
	[0281.183] GetFileType (hFile=0x1d8) returned 0x1
	[0281.183] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x432, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.183] GetFileType (hFile=0x1d8) returned 0x1
	[0281.183] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.183] WriteFile (in: hFile=0x1d8, lpBuffer=0x112ff180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112ff180*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0281.183] GetFileType (hFile=0x1d8) returned 0x1
	[0281.184] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x432, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.184] CloseHandle (hObject=0x1d8) returned 1
	[0281.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf.tl30z")) returned 0x220
	[0281.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.197] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0281.205] SetEvent (hEvent=0x248) returned 1
	[0281.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf")) returned 0x220
	[0281.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF", dwFileAttributes=0x220) returned 1
	[0281.205] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.371] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0281.371] ReadFile (in: hFile=0x1d8, lpBuffer=0x1139b000, nNumberOfBytesToRead=0x788, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1139b000*, lpNumberOfBytesRead=0x11287e18*=0x788, lpOverlapped=0x0) returned 1
	[0281.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202010 | out: pbBuffer=0x11202010) returned 1
	[0281.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202008 | out: pbBuffer=0x11202008) returned 1
	[0281.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111eda02 | out: pbBuffer=0x111eda02) returned 1
	[0281.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111edac7 | out: pbBuffer=0x111edac7) returned 1
	[0281.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111edae5 | out: pbBuffer=0x111edae5) returned 1
	[0281.378] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202040 | out: pbBuffer=0x11202040) returned 1
	[0281.378] GetFileType (hFile=0x1d8) returned 0x1
	[0281.378] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1118fde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.378] WriteFile (in: hFile=0x1d8, lpBuffer=0x11132000*, nNumberOfBytesToWrite=0x788, lpNumberOfBytesWritten=0x1118fdfc, lpOverlapped=0x1118fe08 | out: lpBuffer=0x11132000*, lpNumberOfBytesWritten=0x1118fdfc*=0x788, lpOverlapped=0x1118fe08) returned 1
	[0281.379] GetFileType (hFile=0x1d8) returned 0x1
	[0281.379] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x788, lpNewFilePointer=0x0, dwMoveMethod=0x1118fde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.379] GetFileType (hFile=0x1d8) returned 0x1
	[0281.379] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1118fde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.379] WriteFile (in: hFile=0x1d8, lpBuffer=0x11128700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1118fdfc, lpOverlapped=0x1118fe08 | out: lpBuffer=0x11128700*, lpNumberOfBytesWritten=0x1118fdfc*=0x227, lpOverlapped=0x1118fe08) returned 1
	[0281.379] GetFileType (hFile=0x1d8) returned 0x1
	[0281.379] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x788, lpNewFilePointer=0x0, dwMoveMethod=0x1118fde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.379] CloseHandle (hObject=0x1d8) returned 1
	[0281.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf.tl30z")) returned 0x220
	[0281.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.386] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0281.394] SetEvent (hEvent=0x248) returned 1
	[0281.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf")) returned 0x220
	[0281.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF", dwFileAttributes=0x220) returned 1
	[0281.394] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0282.031] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0282.031] ReadFile (in: hFile=0x1d8, lpBuffer=0x11204000, nNumberOfBytesToRead=0xb80, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11204000*, lpNumberOfBytesRead=0x11287e18*=0xb80, lpOverlapped=0x0) returned 1
	[0282.034] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0282.034] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e628 | out: pbBuffer=0x1104e628) returned 1
	[0282.034] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11376802 | out: pbBuffer=0x11376802) returned 1
	[0282.035] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0282.035] GetFileType (hFile=0x1d8) returned 0x1
	[0282.035] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.035] WriteFile (in: hFile=0x1d8, lpBuffer=0x11392000*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11392000*, lpNumberOfBytesWritten=0x1102bdfc*=0xb80, lpOverlapped=0x1102be08) returned 1
	[0282.035] GetFileType (hFile=0x1d8) returned 0x1
	[0282.035] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb80, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.036] GetFileType (hFile=0x1d8) returned 0x1
	[0282.036] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.036] WriteFile (in: hFile=0x1d8, lpBuffer=0x11169880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11169880*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0282.036] GetFileType (hFile=0x1d8) returned 0x1
	[0282.036] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb80, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.036] CloseHandle (hObject=0x1d8) returned 1
	[0282.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf.tl30z")) returned 0x220
	[0282.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.042] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0282.053] SetEvent (hEvent=0x1b0) returned 1
	[0282.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf")) returned 0x220
	[0282.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF", dwFileAttributes=0x220) returned 1
	[0282.054] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0282.195] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0282.195] ReadFile (in: hFile=0x1d8, lpBuffer=0x111e4000, nNumberOfBytesToRead=0x4278, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x111e4000*, lpNumberOfBytesRead=0x11287e18*=0x4278, lpOverlapped=0x0) returned 1
	[0282.199] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6310 | out: pbBuffer=0x113e6310) returned 1
	[0282.203] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6308 | out: pbBuffer=0x113e6308) returned 1
	[0282.203] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11454802 | out: pbBuffer=0x11454802) returned 1
	[0282.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114548ca | out: pbBuffer=0x114548ca) returned 1
	[0282.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6340 | out: pbBuffer=0x113e6340) returned 1
	[0282.204] GetFileType (hFile=0x1d8) returned 0x1
	[0282.205] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.205] WriteFile (in: hFile=0x1d8, lpBuffer=0x110d0000*, nNumberOfBytesToWrite=0x4278, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110d0000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4278, lpOverlapped=0x1102be08) returned 1
	[0282.205] GetFileType (hFile=0x1d8) returned 0x1
	[0282.205] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4278, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.205] GetFileType (hFile=0x1d8) returned 0x1
	[0282.206] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.206] WriteFile (in: hFile=0x1d8, lpBuffer=0x113b8380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113b8380*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0282.206] GetFileType (hFile=0x1d8) returned 0x1
	[0282.206] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4278, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.206] CloseHandle (hObject=0x1d8) returned 1
	[0282.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf.tl30z")) returned 0x220
	[0282.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.217] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0282.224] SetEvent (hEvent=0x1b0) returned 1
	[0282.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf")) returned 0x220
	[0282.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF", dwFileAttributes=0x220) returned 1
	[0282.225] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0282.602] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0282.603] ReadFile (in: hFile=0x288, lpBuffer=0x11184000, nNumberOfBytesToRead=0x4dba, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11184000*, lpNumberOfBytesRead=0x11287e18*=0x4dba, lpOverlapped=0x0) returned 1
	[0282.623] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112026f0 | out: pbBuffer=0x112026f0) returned 1
	[0282.623] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112026e8 | out: pbBuffer=0x112026e8) returned 1
	[0282.623] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11129202 | out: pbBuffer=0x11129202) returned 1
	[0282.623] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1112922b | out: pbBuffer=0x1112922b) returned 1
	[0282.624] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202720 | out: pbBuffer=0x11202720) returned 1
	[0282.626] SetEvent (hEvent=0x1b0) returned 1
	[0282.627] GetFileType (hFile=0x288) returned 0x1
	[0282.629] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.630] WriteFile (in: hFile=0x288, lpBuffer=0x11bca000*, nNumberOfBytesToWrite=0x4dba, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x11bca000*, lpNumberOfBytesWritten=0x111c7dfc*=0x4dba, lpOverlapped=0x111c7e08) returned 1
	[0282.630] GetFileType (hFile=0x288) returned 0x1
	[0282.630] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x4dba, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.630] GetFileType (hFile=0x288) returned 0x1
	[0282.631] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.631] WriteFile (in: hFile=0x288, lpBuffer=0x1119c380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x1119c380*, lpNumberOfBytesWritten=0x111c7dfc*=0x233, lpOverlapped=0x111c7e08) returned 1
	[0282.631] GetFileType (hFile=0x288) returned 0x1
	[0282.631] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x4dba, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.631] CloseHandle (hObject=0x288) returned 1
	[0282.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf.tl30z")) returned 0x220
	[0282.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.661] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0282.667] SetEvent (hEvent=0x1b0) returned 1
	[0282.667] SetEvent (hEvent=0x118) returned 1
	[0282.667] SwitchToThread () returned 1
	[0282.673] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0282.733] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0282.795] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0282.806] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0282.888] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0282.926] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0282.955] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0282.992] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.020] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.063] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.087] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.154] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.197] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.239] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.248] SetEvent (hEvent=0x1b0) returned 1
	[0283.250] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0283.260] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.260] SetEvent (hEvent=0x1b0) returned 1
	[0283.261] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0283.263] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.264] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.884] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.888] SetEvent (hEvent=0x26c) returned 1
	[0283.888] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.907] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.915] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.953] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0283.985] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0284.012] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0284.051] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0284.081] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0284.114] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0284.144] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0284.196] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0284.290] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0284.301] SetEvent (hEvent=0x26c) returned 1
	[0284.301] SetEvent (hEvent=0x1f0) returned 1
	[0284.301] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0284.303] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0284.303] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x0
	[0284.305] SetEvent (hEvent=0x234) returned 1
	[0284.305] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0284.308] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0284.308] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.021] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.024] SetEvent (hEvent=0x118) returned 1
	[0285.024] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.028] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.043] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.085] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.118] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.154] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.192] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.225] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.268] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.353] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.387] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.431] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.460] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.511] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.560] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.580] SetEvent (hEvent=0x118) returned 1
	[0285.581] SetEvent (hEvent=0x1f0) returned 1
	[0285.581] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0285.590] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.590] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x0
	[0285.595] SetEvent (hEvent=0x1b0) returned 1
	[0285.595] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0285.601] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.640] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.718] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.755] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.792] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.834] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.916] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0285.963] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.009] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.148] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.178] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.236] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.293] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.344] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.363] SetEvent (hEvent=0x1b0) returned 1
	[0286.363] SetEvent (hEvent=0x1f0) returned 1
	[0286.364] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0286.369] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.369] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0286.372] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.372] SetEvent (hEvent=0x1b0) returned 1
	[0286.372] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0286.378] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.378] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.909] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.911] SetEvent (hEvent=0x234) returned 1
	[0286.911] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0286.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf")) returned 0x220
	[0286.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF", dwFileAttributes=0x220) returned 1
	[0286.919] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.137] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0287.137] ReadFile (in: hFile=0x1d4, lpBuffer=0x110d0800, nNumberOfBytesToRead=0x4290, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110d0800*, lpNumberOfBytesRead=0x1128ce18*=0x4290, lpOverlapped=0x0) returned 1
	[0287.145] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332960 | out: pbBuffer=0x11332960) returned 1
	[0287.145] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332958 | out: pbBuffer=0x11332958) returned 1
	[0287.145] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136fd02 | out: pbBuffer=0x1136fd02) returned 1
	[0287.146] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332990 | out: pbBuffer=0x11332990) returned 1
	[0287.147] GetFileType (hFile=0x1d4) returned 0x1
	[0287.147] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.147] WriteFile (in: hFile=0x1d4, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x4290, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4290, lpOverlapped=0x1102be08) returned 1
	[0287.148] GetFileType (hFile=0x1d4) returned 0x1
	[0287.148] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4290, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.148] GetFileType (hFile=0x1d4) returned 0x1
	[0287.148] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.148] WriteFile (in: hFile=0x1d4, lpBuffer=0x11257180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11257180*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0287.148] GetFileType (hFile=0x1d4) returned 0x1
	[0287.148] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4290, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.149] CloseHandle (hObject=0x1d4) returned 1
	[0287.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf.tl30z")) returned 0x220
	[0287.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.163] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0287.175] SetEvent (hEvent=0x1b0) returned 1
	[0287.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf")) returned 0x220
	[0287.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF", dwFileAttributes=0x220) returned 1
	[0287.175] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.543] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0287.543] ReadFile (in: hFile=0x1d4, lpBuffer=0x111d8000, nNumberOfBytesToRead=0x5c2c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x111d8000*, lpNumberOfBytesRead=0x1128ce18*=0x5c2c, lpOverlapped=0x0) returned 1
	[0287.550] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0287.550] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bdfe02 | out: pbBuffer=0x11bdfe02) returned 1
	[0287.550] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0287.551] GetFileType (hFile=0x1d4) returned 0x1
	[0287.551] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.551] WriteFile (in: hFile=0x1d4, lpBuffer=0x11106000*, nNumberOfBytesToWrite=0x5c2c, lpNumberOfBytesWritten=0x1121bdfc, lpOverlapped=0x1121be08 | out: lpBuffer=0x11106000*, lpNumberOfBytesWritten=0x1121bdfc*=0x5c2c, lpOverlapped=0x1121be08) returned 1
	[0287.552] GetFileType (hFile=0x1d4) returned 0x1
	[0287.552] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5c2c, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.552] GetFileType (hFile=0x1d4) returned 0x1
	[0287.552] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.552] WriteFile (in: hFile=0x1d4, lpBuffer=0x111ec700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1121bdfc, lpOverlapped=0x1121be08 | out: lpBuffer=0x111ec700*, lpNumberOfBytesWritten=0x1121bdfc*=0x22d, lpOverlapped=0x1121be08) returned 1
	[0287.552] GetFileType (hFile=0x1d4) returned 0x1
	[0287.553] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5c2c, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.553] CloseHandle (hObject=0x1d4) returned 1
	[0287.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf.tl30z")) returned 0x220
	[0287.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.568] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0287.578] SetEvent (hEvent=0x1b0) returned 1
	[0287.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf")) returned 0x220
	[0287.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF", dwFileAttributes=0x220) returned 1
	[0287.579] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.740] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0287.740] ReadFile (in: hFile=0x1d4, lpBuffer=0x11062000, nNumberOfBytesToRead=0x2d0c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11062000*, lpNumberOfBytesRead=0x1128ce18*=0x2d0c, lpOverlapped=0x0) returned 1
	[0287.752] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0287.752] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1115d202 | out: pbBuffer=0x1115d202) returned 1
	[0287.752] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0287.753] GetFileType (hFile=0x1d4) returned 0x1
	[0287.753] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0287.753] WriteFile (in: hFile=0x1d4, lpBuffer=0x11418000*, nNumberOfBytesToWrite=0x2d0c, lpNumberOfBytesWritten=0x11133dfc, lpOverlapped=0x11133e08 | out: lpBuffer=0x11418000*, lpNumberOfBytesWritten=0x11133dfc*=0x2d0c, lpOverlapped=0x11133e08) returned 1
	[0287.754] GetFileType (hFile=0x1d4) returned 0x1
	[0287.754] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2d0c, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0287.754] GetFileType (hFile=0x1d4) returned 0x1
	[0287.754] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0287.754] WriteFile (in: hFile=0x1d4, lpBuffer=0x11476a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11133dfc, lpOverlapped=0x11133e08 | out: lpBuffer=0x11476a80*, lpNumberOfBytesWritten=0x11133dfc*=0x22a, lpOverlapped=0x11133e08) returned 1
	[0287.754] GetFileType (hFile=0x1d4) returned 0x1
	[0287.754] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2d0c, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0287.754] CloseHandle (hObject=0x1d4) returned 1
	[0287.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf.tl30z")) returned 0x220
	[0287.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.767] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0287.780] SetEvent (hEvent=0x234) returned 1
	[0287.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf")) returned 0x220
	[0287.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF", dwFileAttributes=0x220) returned 1
	[0287.780] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.011] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0288.011] ReadFile (in: hFile=0x250, lpBuffer=0x113d6800, nNumberOfBytesToRead=0x4540, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x113d6800*, lpNumberOfBytesRead=0x1128ce18*=0x4540, lpOverlapped=0x0) returned 1
	[0288.019] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e620 | out: pbBuffer=0x1104e620) returned 1
	[0288.019] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c6802 | out: pbBuffer=0x113c6802) returned 1
	[0288.019] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0288.020] GetFileType (hFile=0x250) returned 0x1
	[0288.020] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.020] WriteFile (in: hFile=0x250, lpBuffer=0x11434000*, nNumberOfBytesToWrite=0x4540, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11434000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4540, lpOverlapped=0x1102be08) returned 1
	[0288.020] GetFileType (hFile=0x250) returned 0x1
	[0288.020] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4540, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.021] GetFileType (hFile=0x250) returned 0x1
	[0288.021] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.021] WriteFile (in: hFile=0x250, lpBuffer=0x113b3500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113b3500*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0288.021] GetFileType (hFile=0x250) returned 0x1
	[0288.021] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4540, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.021] CloseHandle (hObject=0x250) returned 1
	[0288.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf.tl30z")) returned 0x220
	[0288.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.025] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0288.032] SetEvent (hEvent=0x118) returned 1
	[0288.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf")) returned 0x220
	[0288.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF", dwFileAttributes=0x220) returned 1
	[0288.032] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.213] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0288.213] ReadFile (in: hFile=0x250, lpBuffer=0x1119a000, nNumberOfBytesToRead=0x3dd8, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1119a000*, lpNumberOfBytesRead=0x1128ce18*=0x3dd8, lpOverlapped=0x0) returned 1
	[0288.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66b0 | out: pbBuffer=0x113e66b0) returned 1
	[0288.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66a8 | out: pbBuffer=0x113e66a8) returned 1
	[0288.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11311202 | out: pbBuffer=0x11311202) returned 1
	[0288.221] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11311248 | out: pbBuffer=0x11311248) returned 1
	[0288.221] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66e0 | out: pbBuffer=0x113e66e0) returned 1
	[0288.222] GetFileType (hFile=0x250) returned 0x1
	[0288.222] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.222] WriteFile (in: hFile=0x250, lpBuffer=0x112a0000*, nNumberOfBytesToWrite=0x3dd8, lpNumberOfBytesWritten=0x11133dfc, lpOverlapped=0x11133e08 | out: lpBuffer=0x112a0000*, lpNumberOfBytesWritten=0x11133dfc*=0x3dd8, lpOverlapped=0x11133e08) returned 1
	[0288.223] GetFileType (hFile=0x250) returned 0x1
	[0288.223] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3dd8, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.223] GetFileType (hFile=0x250) returned 0x1
	[0288.223] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.224] WriteFile (in: hFile=0x250, lpBuffer=0x110f5500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11133dfc, lpOverlapped=0x11133e08 | out: lpBuffer=0x110f5500*, lpNumberOfBytesWritten=0x11133dfc*=0x233, lpOverlapped=0x11133e08) returned 1
	[0288.224] GetFileType (hFile=0x250) returned 0x1
	[0288.224] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3dd8, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.224] CloseHandle (hObject=0x250) returned 1
	[0288.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf.tl30z")) returned 0x220
	[0288.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.237] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0288.248] SetEvent (hEvent=0x118) returned 1
	[0288.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf")) returned 0x220
	[0288.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF", dwFileAttributes=0x220) returned 1
	[0288.249] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.525] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0288.526] ReadFile (in: hFile=0x250, lpBuffer=0x111bc000, nNumberOfBytesToRead=0x7e4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x111bc000*, lpNumberOfBytesRead=0x1128ce18*=0x7e4, lpOverlapped=0x0) returned 1
	[0288.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0288.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112be802 | out: pbBuffer=0x112be802) returned 1
	[0288.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112be8c9 | out: pbBuffer=0x112be8c9) returned 1
	[0288.539] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0288.539] GetFileType (hFile=0x250) returned 0x1
	[0288.539] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.539] WriteFile (in: hFile=0x250, lpBuffer=0x11345000*, nNumberOfBytesToWrite=0x7e4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11345000*, lpNumberOfBytesWritten=0x11031dfc*=0x7e4, lpOverlapped=0x11031e08) returned 1
	[0288.539] GetFileType (hFile=0x250) returned 0x1
	[0288.539] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x7e4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.540] GetFileType (hFile=0x250) returned 0x1
	[0288.540] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.540] WriteFile (in: hFile=0x250, lpBuffer=0x11be2a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11be2a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0288.540] GetFileType (hFile=0x250) returned 0x1
	[0288.540] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x7e4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.540] CloseHandle (hObject=0x250) returned 1
	[0288.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf.tl30z")) returned 0x220
	[0288.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.553] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0288.562] SetEvent (hEvent=0x1b0) returned 1
	[0288.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf")) returned 0x220
	[0288.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF", dwFileAttributes=0x220) returned 1
	[0288.562] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.741] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0288.741] ReadFile (in: hFile=0x250, lpBuffer=0x11194000, nNumberOfBytesToRead=0x42a4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11194000*, lpNumberOfBytesRead=0x1128ce18*=0x42a4, lpOverlapped=0x0) returned 1
	[0288.748] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0288.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4c8 | out: pbBuffer=0x1104e4c8) returned 1
	[0288.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c11e02 | out: pbBuffer=0x11c11e02) returned 1
	[0288.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c11e79 | out: pbBuffer=0x11c11e79) returned 1
	[0288.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0288.750] GetFileType (hFile=0x250) returned 0x1
	[0288.750] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.750] WriteFile (in: hFile=0x250, lpBuffer=0x1139c000*, nNumberOfBytesToWrite=0x42a4, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x1139c000*, lpNumberOfBytesWritten=0x1124bdfc*=0x42a4, lpOverlapped=0x1124be08) returned 1
	[0288.750] GetFileType (hFile=0x250) returned 0x1
	[0288.751] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x42a4, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.751] GetFileType (hFile=0x250) returned 0x1
	[0288.751] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.751] WriteFile (in: hFile=0x250, lpBuffer=0x11252a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11252a80*, lpNumberOfBytesWritten=0x1124bdfc*=0x227, lpOverlapped=0x1124be08) returned 1
	[0288.751] GetFileType (hFile=0x250) returned 0x1
	[0288.751] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x42a4, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.751] CloseHandle (hObject=0x250) returned 1
	[0288.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf.tl30z")) returned 0x220
	[0288.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.760] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0288.774] SetEvent (hEvent=0x1b0) returned 1
	[0288.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf")) returned 0x220
	[0288.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF", dwFileAttributes=0x220) returned 1
	[0288.775] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.016] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0289.016] ReadFile (in: hFile=0x250, lpBuffer=0x11070600, nNumberOfBytesToRead=0x1210, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11070600*, lpNumberOfBytesRead=0x1128ce18*=0x1210, lpOverlapped=0x0) returned 1
	[0289.020] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332a40 | out: pbBuffer=0x11332a40) returned 1
	[0289.020] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11be0602 | out: pbBuffer=0x11be0602) returned 1
	[0289.021] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332a70 | out: pbBuffer=0x11332a70) returned 1
	[0289.021] GetFileType (hFile=0x250) returned 0x1
	[0289.021] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.022] WriteFile (in: hFile=0x250, lpBuffer=0x112b4000*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112b4000*, lpNumberOfBytesWritten=0x11031dfc*=0x1210, lpOverlapped=0x11031e08) returned 1
	[0289.022] GetFileType (hFile=0x250) returned 0x1
	[0289.022] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1210, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.022] GetFileType (hFile=0x250) returned 0x1
	[0289.022] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.023] WriteFile (in: hFile=0x250, lpBuffer=0x11bfd880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bfd880*, lpNumberOfBytesWritten=0x11031dfc*=0x221, lpOverlapped=0x11031e08) returned 1
	[0289.023] GetFileType (hFile=0x250) returned 0x1
	[0289.023] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1210, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.023] CloseHandle (hObject=0x250) returned 1
	[0289.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf.tl30z")) returned 0x220
	[0289.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.034] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0289.044] SetEvent (hEvent=0x1b0) returned 1
	[0289.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf")) returned 0x220
	[0289.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF", dwFileAttributes=0x220) returned 1
	[0289.045] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.219] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0289.219] ReadFile (in: hFile=0x250, lpBuffer=0x1134f000, nNumberOfBytesToRead=0x2b04, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1134f000*, lpNumberOfBytesRead=0x1128ce18*=0x2b04, lpOverlapped=0x0) returned 1
	[0289.223] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f4c0 | out: pbBuffer=0x1140f4c0) returned 1
	[0289.223] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f4b8 | out: pbBuffer=0x1140f4b8) returned 1
	[0289.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11449102 | out: pbBuffer=0x11449102) returned 1
	[0289.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11449107 | out: pbBuffer=0x11449107) returned 1
	[0289.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144912f | out: pbBuffer=0x1144912f) returned 1
	[0289.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f4f0 | out: pbBuffer=0x1140f4f0) returned 1
	[0289.225] GetFileType (hFile=0x250) returned 0x1
	[0289.225] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.225] WriteFile (in: hFile=0x250, lpBuffer=0x110ae000*, nNumberOfBytesToWrite=0x2b04, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x110ae000*, lpNumberOfBytesWritten=0x1124bdfc*=0x2b04, lpOverlapped=0x1124be08) returned 1
	[0289.226] GetFileType (hFile=0x250) returned 0x1
	[0289.226] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2b04, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.226] GetFileType (hFile=0x250) returned 0x1
	[0289.226] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.226] WriteFile (in: hFile=0x250, lpBuffer=0x11453180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11453180*, lpNumberOfBytesWritten=0x1124bdfc*=0x227, lpOverlapped=0x1124be08) returned 1
	[0289.226] GetFileType (hFile=0x250) returned 0x1
	[0289.227] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2b04, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.227] CloseHandle (hObject=0x250) returned 1
	[0289.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf.tl30z")) returned 0x220
	[0289.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.253] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0289.266] SetEvent (hEvent=0x1b0) returned 1
	[0289.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf")) returned 0x220
	[0289.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF", dwFileAttributes=0x220) returned 1
	[0289.267] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.477] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0289.477] ReadFile (in: hFile=0x250, lpBuffer=0x110fea80, nNumberOfBytesToRead=0x4928, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110fea80*, lpNumberOfBytesRead=0x1128ce18*=0x4928, lpOverlapped=0x0) returned 1
	[0289.486] SetEvent (hEvent=0x1b0) returned 1
	[0289.487] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11333180 | out: pbBuffer=0x11333180) returned 1
	[0289.487] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bfb02 | out: pbBuffer=0x110bfb02) returned 1
	[0289.487] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bfbad | out: pbBuffer=0x110bfbad) returned 1
	[0289.488] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113331b0 | out: pbBuffer=0x113331b0) returned 1
	[0289.490] GetFileType (hFile=0x250) returned 0x1
	[0289.490] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.490] WriteFile (in: hFile=0x250, lpBuffer=0x11166000*, nNumberOfBytesToWrite=0x4928, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11166000*, lpNumberOfBytesWritten=0x11031dfc*=0x4928, lpOverlapped=0x11031e08) returned 1
	[0289.491] GetFileType (hFile=0x250) returned 0x1
	[0289.491] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4928, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.491] GetFileType (hFile=0x250) returned 0x1
	[0289.491] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.491] WriteFile (in: hFile=0x250, lpBuffer=0x1116e000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1116e000*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0289.492] GetFileType (hFile=0x250) returned 0x1
	[0289.492] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4928, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.492] CloseHandle (hObject=0x250) returned 1
	[0289.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf.tl30z")) returned 0x220
	[0289.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.516] SwitchToThread () returned 1
	[0289.519] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0289.527] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0289.574] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0289.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf")) returned 0x220
	[0289.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF", dwFileAttributes=0x220) returned 1
	[0289.599] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0289.895] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0289.895] ReadFile (in: hFile=0x1d4, lpBuffer=0x113e4000, nNumberOfBytesToRead=0x1cd8, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x113e4000*, lpNumberOfBytesRead=0x11425e18*=0x1cd8, lpOverlapped=0x0) returned 1
	[0289.901] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0289.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bd302 | out: pbBuffer=0x110bd302) returned 1
	[0289.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bd35c | out: pbBuffer=0x110bd35c) returned 1
	[0289.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0289.902] GetFileType (hFile=0x1d4) returned 0x1
	[0289.902] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.903] WriteFile (in: hFile=0x1d4, lpBuffer=0x1124c000*, nNumberOfBytesToWrite=0x1cd8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1124c000*, lpNumberOfBytesWritten=0x11031dfc*=0x1cd8, lpOverlapped=0x11031e08) returned 1
	[0289.903] GetFileType (hFile=0x1d4) returned 0x1
	[0289.903] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1cd8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.903] GetFileType (hFile=0x1d4) returned 0x1
	[0289.903] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.903] WriteFile (in: hFile=0x1d4, lpBuffer=0x1116fc00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1116fc00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0289.924] GetFileType (hFile=0x1d4) returned 0x1
	[0289.924] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1cd8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.924] CloseHandle (hObject=0x1d4) returned 1
	[0289.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf.tl30z")) returned 0x220
	[0289.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.949] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0289.970] SetEvent (hEvent=0x248) returned 1
	[0289.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf")) returned 0x220
	[0289.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF", dwFileAttributes=0x220) returned 1
	[0289.971] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.225] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0290.225] ReadFile (in: hFile=0x1d4, lpBuffer=0x1117c500, nNumberOfBytesToRead=0x2030, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1117c500*, lpNumberOfBytesRead=0x11425e18*=0x2030, lpOverlapped=0x0) returned 1
	[0290.232] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0290.232] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112fb202 | out: pbBuffer=0x112fb202) returned 1
	[0290.232] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112fb272 | out: pbBuffer=0x112fb272) returned 1
	[0290.232] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0290.233] GetFileType (hFile=0x1d4) returned 0x1
	[0290.233] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.233] WriteFile (in: hFile=0x1d4, lpBuffer=0x112aa000*, nNumberOfBytesToWrite=0x2030, lpNumberOfBytesWritten=0x1145fdfc, lpOverlapped=0x1145fe08 | out: lpBuffer=0x112aa000*, lpNumberOfBytesWritten=0x1145fdfc*=0x2030, lpOverlapped=0x1145fe08) returned 1
	[0290.233] GetFileType (hFile=0x1d4) returned 0x1
	[0290.234] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2030, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.234] GetFileType (hFile=0x1d4) returned 0x1
	[0290.234] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.234] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ae000*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1145fdfc, lpOverlapped=0x1145fe08 | out: lpBuffer=0x112ae000*, lpNumberOfBytesWritten=0x1145fdfc*=0x221, lpOverlapped=0x1145fe08) returned 1
	[0290.234] GetFileType (hFile=0x1d4) returned 0x1
	[0290.234] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2030, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.234] CloseHandle (hObject=0x1d4) returned 1
	[0290.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf.tl30z")) returned 0x220
	[0290.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.257] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0290.265] SetEvent (hEvent=0x248) returned 1
	[0290.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf")) returned 0x220
	[0290.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF", dwFileAttributes=0x220) returned 1
	[0290.266] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.469] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0290.469] ReadFile (in: hFile=0x1d4, lpBuffer=0x1134c000, nNumberOfBytesToRead=0x5bfc, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1134c000*, lpNumberOfBytesRead=0x11425e18*=0x5bfc, lpOverlapped=0x0) returned 1
	[0290.479] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0290.479] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bf5302 | out: pbBuffer=0x11bf5302) returned 1
	[0290.480] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bf53b6 | out: pbBuffer=0x11bf53b6) returned 1
	[0290.480] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bf53d0 | out: pbBuffer=0x11bf53d0) returned 1
	[0290.480] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0290.481] GetFileType (hFile=0x1d4) returned 0x1
	[0290.481] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.481] WriteFile (in: hFile=0x1d4, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x5bfc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x11031dfc*=0x5bfc, lpOverlapped=0x11031e08) returned 1
	[0290.482] GetFileType (hFile=0x1d4) returned 0x1
	[0290.482] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5bfc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.482] GetFileType (hFile=0x1d4) returned 0x1
	[0290.482] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.482] WriteFile (in: hFile=0x1d4, lpBuffer=0x11c05c00*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c05c00*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0290.482] GetFileType (hFile=0x1d4) returned 0x1
	[0290.483] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5bfc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.483] CloseHandle (hObject=0x1d4) returned 1
	[0290.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf.tl30z")) returned 0x220
	[0290.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.493] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0290.503] SetEvent (hEvent=0x248) returned 1
	[0290.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf")) returned 0x220
	[0290.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF", dwFileAttributes=0x220) returned 1
	[0290.504] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0290.735] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0290.735] ReadFile (in: hFile=0x250, lpBuffer=0x1145e000, nNumberOfBytesToRead=0x35d8, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1145e000*, lpNumberOfBytesRead=0x11425e18*=0x35d8, lpOverlapped=0x0) returned 1
	[0290.746] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6710 | out: pbBuffer=0x113e6710) returned 1
	[0290.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1146d302 | out: pbBuffer=0x1146d302) returned 1
	[0290.748] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6740 | out: pbBuffer=0x113e6740) returned 1
	[0290.748] GetFileType (hFile=0x250) returned 0x1
	[0290.748] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11451de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.749] WriteFile (in: hFile=0x250, lpBuffer=0x112a8000*, nNumberOfBytesToWrite=0x35d8, lpNumberOfBytesWritten=0x11451dfc, lpOverlapped=0x11451e08 | out: lpBuffer=0x112a8000*, lpNumberOfBytesWritten=0x11451dfc*=0x35d8, lpOverlapped=0x11451e08) returned 1
	[0290.749] GetFileType (hFile=0x250) returned 0x1
	[0290.749] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x35d8, lpNewFilePointer=0x0, dwMoveMethod=0x11451de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.749] GetFileType (hFile=0x250) returned 0x1
	[0290.749] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11451de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.749] WriteFile (in: hFile=0x250, lpBuffer=0x11294700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11451dfc, lpOverlapped=0x11451e08 | out: lpBuffer=0x11294700*, lpNumberOfBytesWritten=0x11451dfc*=0x230, lpOverlapped=0x11451e08) returned 1
	[0290.750] GetFileType (hFile=0x250) returned 0x1
	[0290.750] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x35d8, lpNewFilePointer=0x0, dwMoveMethod=0x11451de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.750] CloseHandle (hObject=0x250) returned 1
	[0290.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf.tl30z")) returned 0x220
	[0290.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.761] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0290.770] SetEvent (hEvent=0x26c) returned 1
	[0290.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf")) returned 0x220
	[0290.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF", dwFileAttributes=0x220) returned 1
	[0290.771] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.038] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0291.038] ReadFile (in: hFile=0x1d4, lpBuffer=0x11194000, nNumberOfBytesToRead=0x69cc, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11194000*, lpNumberOfBytesRead=0x11425e18*=0x69cc, lpOverlapped=0x0) returned 1
	[0291.044] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0291.044] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e638 | out: pbBuffer=0x1104e638) returned 1
	[0291.044] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11188902 | out: pbBuffer=0x11188902) returned 1
	[0291.044] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118894e | out: pbBuffer=0x1118894e) returned 1
	[0291.044] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11188979 | out: pbBuffer=0x11188979) returned 1
	[0291.045] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0291.045] GetFileType (hFile=0x1d4) returned 0x1
	[0291.045] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.046] WriteFile (in: hFile=0x1d4, lpBuffer=0x111f8000*, nNumberOfBytesToWrite=0x69cc, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x111f8000*, lpNumberOfBytesWritten=0x112fddfc*=0x69cc, lpOverlapped=0x112fde08) returned 1
	[0291.046] GetFileType (hFile=0x1d4) returned 0x1
	[0291.046] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x69cc, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.046] GetFileType (hFile=0x1d4) returned 0x1
	[0291.047] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.047] WriteFile (in: hFile=0x1d4, lpBuffer=0x1117d500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x1117d500*, lpNumberOfBytesWritten=0x112fddfc*=0x230, lpOverlapped=0x112fde08) returned 1
	[0291.047] GetFileType (hFile=0x1d4) returned 0x1
	[0291.047] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x69cc, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.047] CloseHandle (hObject=0x1d4) returned 1
	[0291.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf.tl30z")) returned 0x220
	[0291.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.066] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0291.075] SetEvent (hEvent=0x234) returned 1
	[0291.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf")) returned 0x220
	[0291.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF", dwFileAttributes=0x220) returned 1
	[0291.076] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.305] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0291.305] ReadFile (in: hFile=0x1d4, lpBuffer=0x1143e000, nNumberOfBytesToRead=0x4ea8, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1143e000*, lpNumberOfBytesRead=0x1131ce18*=0x4ea8, lpOverlapped=0x0) returned 1
	[0291.312] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0291.312] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0291.312] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11372802 | out: pbBuffer=0x11372802) returned 1
	[0291.312] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11372844 | out: pbBuffer=0x11372844) returned 1
	[0291.313] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0291.313] GetFileType (hFile=0x1d4) returned 0x1
	[0291.313] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.314] WriteFile (in: hFile=0x1d4, lpBuffer=0x1135c000*, nNumberOfBytesToWrite=0x4ea8, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x1135c000*, lpNumberOfBytesWritten=0x1141ddfc*=0x4ea8, lpOverlapped=0x1141de08) returned 1
	[0291.314] GetFileType (hFile=0x1d4) returned 0x1
	[0291.314] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4ea8, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.314] GetFileType (hFile=0x1d4) returned 0x1
	[0291.315] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.315] WriteFile (in: hFile=0x1d4, lpBuffer=0x11256a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11256a80*, lpNumberOfBytesWritten=0x1141ddfc*=0x22d, lpOverlapped=0x1141de08) returned 1
	[0291.315] GetFileType (hFile=0x1d4) returned 0x1
	[0291.315] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4ea8, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.315] CloseHandle (hObject=0x1d4) returned 1
	[0291.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf.tl30z")) returned 0x220
	[0291.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.333] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0291.341] SetEvent (hEvent=0x234) returned 1
	[0291.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf")) returned 0x220
	[0291.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF", dwFileAttributes=0x220) returned 1
	[0291.341] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.493] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0291.494] ReadFile (in: hFile=0x1d4, lpBuffer=0x11310000, nNumberOfBytesToRead=0x3ee4, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11310000*, lpNumberOfBytesRead=0x1131ce18*=0x3ee4, lpOverlapped=0x0) returned 1
	[0291.500] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0291.500] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f568 | out: pbBuffer=0x1140f568) returned 1
	[0291.500] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11104702 | out: pbBuffer=0x11104702) returned 1
	[0291.501] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11104752 | out: pbBuffer=0x11104752) returned 1
	[0291.501] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11104754 | out: pbBuffer=0x11104754) returned 1
	[0291.501] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0291.502] GetFileType (hFile=0x1d4) returned 0x1
	[0291.502] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.502] WriteFile (in: hFile=0x1d4, lpBuffer=0x112a4000*, nNumberOfBytesToWrite=0x3ee4, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x112a4000*, lpNumberOfBytesWritten=0x1141ddfc*=0x3ee4, lpOverlapped=0x1141de08) returned 1
	[0291.502] GetFileType (hFile=0x1d4) returned 0x1
	[0291.502] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3ee4, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.503] GetFileType (hFile=0x1d4) returned 0x1
	[0291.503] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.503] WriteFile (in: hFile=0x1d4, lpBuffer=0x110df500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x110df500*, lpNumberOfBytesWritten=0x1141ddfc*=0x233, lpOverlapped=0x1141de08) returned 1
	[0291.503] GetFileType (hFile=0x1d4) returned 0x1
	[0291.503] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3ee4, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.503] CloseHandle (hObject=0x1d4) returned 1
	[0291.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf.tl30z")) returned 0x220
	[0291.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.507] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0291.509] SetEvent (hEvent=0x234) returned 1
	[0291.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf")) returned 0x220
	[0291.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF", dwFileAttributes=0x220) returned 1
	[0291.509] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0291.581] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0291.581] ReadFile (in: hFile=0x1d8, lpBuffer=0x11368000, nNumberOfBytesToRead=0x1f3c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11368000*, lpNumberOfBytesRead=0x1131ce18*=0x1f3c, lpOverlapped=0x0) returned 1
	[0291.586] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0291.586] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0291.586] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1121e802 | out: pbBuffer=0x1121e802) returned 1
	[0291.586] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121e866 | out: pbBuffer=0x1121e866) returned 1
	[0291.586] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121e8bb | out: pbBuffer=0x1121e8bb) returned 1
	[0291.586] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0291.587] GetFileType (hFile=0x1d8) returned 0x1
	[0291.587] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.587] WriteFile (in: hFile=0x1d8, lpBuffer=0x11370000*, nNumberOfBytesToWrite=0x1f3c, lpNumberOfBytesWritten=0x110f5dfc, lpOverlapped=0x110f5e08 | out: lpBuffer=0x11370000*, lpNumberOfBytesWritten=0x110f5dfc*=0x1f3c, lpOverlapped=0x110f5e08) returned 1
	[0291.587] GetFileType (hFile=0x1d8) returned 0x1
	[0291.587] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1f3c, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.588] GetFileType (hFile=0x1d8) returned 0x1
	[0291.588] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.588] WriteFile (in: hFile=0x1d8, lpBuffer=0x11240a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x110f5dfc, lpOverlapped=0x110f5e08 | out: lpBuffer=0x11240a80*, lpNumberOfBytesWritten=0x110f5dfc*=0x233, lpOverlapped=0x110f5e08) returned 1
	[0291.588] GetFileType (hFile=0x1d8) returned 0x1
	[0291.588] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1f3c, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.588] CloseHandle (hObject=0x1d8) returned 1
	[0291.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf.tl30z")) returned 0x220
	[0291.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.591] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0291.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf")) returned 0x220
	[0291.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF", dwFileAttributes=0x220) returned 1
	[0291.593] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0291.660] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0291.660] ReadFile (in: hFile=0x1d8, lpBuffer=0x11462000, nNumberOfBytesToRead=0x347c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11462000*, lpNumberOfBytesRead=0x1131ce18*=0x347c, lpOverlapped=0x0) returned 1
	[0291.664] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0291.664] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6268 | out: pbBuffer=0x113e6268) returned 1
	[0291.665] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1124d302 | out: pbBuffer=0x1124d302) returned 1
	[0291.665] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0291.665] GetFileType (hFile=0x1d8) returned 0x1
	[0291.665] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.666] WriteFile (in: hFile=0x1d8, lpBuffer=0x110dc000*, nNumberOfBytesToWrite=0x347c, lpNumberOfBytesWritten=0x110f1dfc, lpOverlapped=0x110f1e08 | out: lpBuffer=0x110dc000*, lpNumberOfBytesWritten=0x110f1dfc*=0x347c, lpOverlapped=0x110f1e08) returned 1
	[0291.666] GetFileType (hFile=0x1d8) returned 0x1
	[0291.666] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x347c, lpNewFilePointer=0x0, dwMoveMethod=0x110f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.666] GetFileType (hFile=0x1d8) returned 0x1
	[0291.666] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.666] WriteFile (in: hFile=0x1d8, lpBuffer=0x11431880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x110f1dfc, lpOverlapped=0x110f1e08 | out: lpBuffer=0x11431880*, lpNumberOfBytesWritten=0x110f1dfc*=0x230, lpOverlapped=0x110f1e08) returned 1
	[0291.667] GetFileType (hFile=0x1d8) returned 0x1
	[0291.667] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x347c, lpNewFilePointer=0x0, dwMoveMethod=0x110f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.667] CloseHandle (hObject=0x1d8) returned 1
	[0291.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf.tl30z")) returned 0x220
	[0291.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.669] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0291.672] SetEvent (hEvent=0x1b0) returned 1
	[0291.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf")) returned 0x220
	[0291.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF", dwFileAttributes=0x220) returned 1
	[0291.672] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.736] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0291.736] ReadFile (in: hFile=0x1d4, lpBuffer=0x11398a80, nNumberOfBytesToRead=0x2a64, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11398a80*, lpNumberOfBytesRead=0x1131ce18*=0x2a64, lpOverlapped=0x0) returned 1
	[0291.741] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0291.741] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332698 | out: pbBuffer=0x11332698) returned 1
	[0291.741] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1118e702 | out: pbBuffer=0x1118e702) returned 1
	[0291.741] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326d0 | out: pbBuffer=0x113326d0) returned 1
	[0291.742] GetFileType (hFile=0x1d4) returned 0x1
	[0291.742] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.742] WriteFile (in: hFile=0x1d4, lpBuffer=0x110f8000*, nNumberOfBytesToWrite=0x2a64, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110f8000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2a64, lpOverlapped=0x1102be08) returned 1
	[0291.742] GetFileType (hFile=0x1d4) returned 0x1
	[0291.742] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2a64, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.742] GetFileType (hFile=0x1d4) returned 0x1
	[0291.743] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.743] WriteFile (in: hFile=0x1d4, lpBuffer=0x113af880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113af880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0291.743] GetFileType (hFile=0x1d4) returned 0x1
	[0291.743] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2a64, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.743] CloseHandle (hObject=0x1d4) returned 1
	[0291.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf.tl30z")) returned 0x220
	[0291.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.746] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0291.747] SetEvent (hEvent=0x1b0) returned 1
	[0291.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf")) returned 0x220
	[0291.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF", dwFileAttributes=0x220) returned 1
	[0291.748] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.879] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0291.879] ReadFile (in: hFile=0x1d4, lpBuffer=0x1134c000, nNumberOfBytesToRead=0x5c78, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1134c000*, lpNumberOfBytesRead=0x1131ce18*=0x5c78, lpOverlapped=0x0) returned 1
	[0291.888] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0291.888] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11266802 | out: pbBuffer=0x11266802) returned 1
	[0291.888] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11266814 | out: pbBuffer=0x11266814) returned 1
	[0291.889] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0291.890] GetFileType (hFile=0x1d4) returned 0x1
	[0291.890] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.890] WriteFile (in: hFile=0x1d4, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x5c78, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5c78, lpOverlapped=0x1102be08) returned 1
	[0291.891] GetFileType (hFile=0x1d4) returned 0x1
	[0291.891] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5c78, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.891] GetFileType (hFile=0x1d4) returned 0x1
	[0291.891] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.891] WriteFile (in: hFile=0x1d4, lpBuffer=0x112c8a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112c8a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0291.892] GetFileType (hFile=0x1d4) returned 0x1
	[0291.892] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5c78, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.892] CloseHandle (hObject=0x1d4) returned 1
	[0291.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf.tl30z")) returned 0x220
	[0291.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.899] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0291.901] SetEvent (hEvent=0x248) returned 1
	[0291.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf")) returned 0x220
	[0291.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF", dwFileAttributes=0x220) returned 1
	[0291.902] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0292.011] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0292.011] ReadFile (in: hFile=0x1fc, lpBuffer=0x113bc000, nNumberOfBytesToRead=0x1338, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x113bc000*, lpNumberOfBytesRead=0x1131ce18*=0x1338, lpOverlapped=0x0) returned 1
	[0292.019] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0292.019] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6568 | out: pbBuffer=0x113e6568) returned 1
	[0292.019] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c2702 | out: pbBuffer=0x113c2702) returned 1
	[0292.020] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65a0 | out: pbBuffer=0x113e65a0) returned 1
	[0292.020] GetFileType (hFile=0x1fc) returned 0x1
	[0292.021] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.021] WriteFile (in: hFile=0x1fc, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x1338, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1338, lpOverlapped=0x1102be08) returned 1
	[0292.021] GetFileType (hFile=0x1fc) returned 0x1
	[0292.021] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1338, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.021] GetFileType (hFile=0x1fc) returned 0x1
	[0292.021] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.021] WriteFile (in: hFile=0x1fc, lpBuffer=0x112d5880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112d5880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0292.022] GetFileType (hFile=0x1fc) returned 0x1
	[0292.022] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1338, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.022] CloseHandle (hObject=0x1fc) returned 1
	[0292.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf.tl30z")) returned 0x220
	[0292.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.025] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0292.030] SetEvent (hEvent=0x248) returned 1
	[0292.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf")) returned 0x220
	[0292.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF", dwFileAttributes=0x220) returned 1
	[0292.030] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0292.166] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0292.166] ReadFile (in: hFile=0x250, lpBuffer=0x110f4000, nNumberOfBytesToRead=0x1788, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110f4000*, lpNumberOfBytesRead=0x1131ce18*=0x1788, lpOverlapped=0x0) returned 1
	[0292.171] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0292.171] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b3e02 | out: pbBuffer=0x110b3e02) returned 1
	[0292.171] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b3e7c | out: pbBuffer=0x110b3e7c) returned 1
	[0292.172] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0292.172] GetFileType (hFile=0x250) returned 0x1
	[0292.172] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.172] WriteFile (in: hFile=0x250, lpBuffer=0x11120000*, nNumberOfBytesToWrite=0x1788, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x11120000*, lpNumberOfBytesWritten=0x1136fdfc*=0x1788, lpOverlapped=0x1136fe08) returned 1
	[0292.173] GetFileType (hFile=0x250) returned 0x1
	[0292.173] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1788, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.173] GetFileType (hFile=0x250) returned 0x1
	[0292.173] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.173] WriteFile (in: hFile=0x250, lpBuffer=0x11108700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x11108700*, lpNumberOfBytesWritten=0x1136fdfc*=0x22a, lpOverlapped=0x1136fe08) returned 1
	[0292.173] GetFileType (hFile=0x250) returned 0x1
	[0292.173] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1788, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.174] CloseHandle (hObject=0x250) returned 1
	[0292.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf.tl30z")) returned 0x220
	[0292.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.177] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0292.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf")) returned 0x220
	[0292.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF", dwFileAttributes=0x220) returned 1
	[0292.184] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0292.264] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0292.264] ReadFile (in: hFile=0x224, lpBuffer=0x112bc000, nNumberOfBytesToRead=0x1acc, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x112bc000*, lpNumberOfBytesRead=0x1131ce18*=0x1acc, lpOverlapped=0x0) returned 1
	[0292.268] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0292.268] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0292.268] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11222802 | out: pbBuffer=0x11222802) returned 1
	[0292.268] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0292.269] GetFileType (hFile=0x224) returned 0x1
	[0292.269] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.269] WriteFile (in: hFile=0x224, lpBuffer=0x11228000*, nNumberOfBytesToWrite=0x1acc, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11228000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1acc, lpOverlapped=0x1102be08) returned 1
	[0292.269] GetFileType (hFile=0x224) returned 0x1
	[0292.269] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1acc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.269] GetFileType (hFile=0x224) returned 0x1
	[0292.269] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.269] WriteFile (in: hFile=0x224, lpBuffer=0x11442a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11442a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0292.270] GetFileType (hFile=0x224) returned 0x1
	[0292.270] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1acc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.270] CloseHandle (hObject=0x224) returned 1
	[0292.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf.tl30z")) returned 0x220
	[0292.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.273] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0292.274] SetEvent (hEvent=0x1b0) returned 1
	[0292.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf")) returned 0x220
	[0292.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF", dwFileAttributes=0x220) returned 1
	[0292.274] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0292.969] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0292.969] ReadFile (in: hFile=0x224, lpBuffer=0x113ee000, nNumberOfBytesToRead=0x2c8c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x113ee000*, lpNumberOfBytesRead=0x1131ce18*=0x2c8c, lpOverlapped=0x0) returned 1
	[0292.978] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0292.978] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11062802 | out: pbBuffer=0x11062802) returned 1
	[0292.978] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0292.980] GetFileType (hFile=0x224) returned 0x1
	[0292.980] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.980] WriteFile (in: hFile=0x224, lpBuffer=0x112f8000*, nNumberOfBytesToWrite=0x2c8c, lpNumberOfBytesWritten=0x113abdfc, lpOverlapped=0x113abe08 | out: lpBuffer=0x112f8000*, lpNumberOfBytesWritten=0x113abdfc*=0x2c8c, lpOverlapped=0x113abe08) returned 1
	[0292.981] GetFileType (hFile=0x224) returned 0x1
	[0292.981] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2c8c, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.981] GetFileType (hFile=0x224) returned 0x1
	[0292.981] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.981] WriteFile (in: hFile=0x224, lpBuffer=0x113c8a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113abdfc, lpOverlapped=0x113abe08 | out: lpBuffer=0x113c8a80*, lpNumberOfBytesWritten=0x113abdfc*=0x22a, lpOverlapped=0x113abe08) returned 1
	[0292.981] GetFileType (hFile=0x224) returned 0x1
	[0292.981] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2c8c, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.982] CloseHandle (hObject=0x224) returned 1
	[0292.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf.tl30z")) returned 0x220
	[0292.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.003] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.010] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.028] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.055] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.075] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.094] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.114] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.133] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.150] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.169] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.187] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.218] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.239] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.250] SetEvent (hEvent=0x248) returned 1
	[0293.252] SetEvent (hEvent=0x1f0) returned 1
	[0293.252] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0293.256] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.256] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x0
	[0293.257] SetEvent (hEvent=0x118) returned 1
	[0293.257] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0293.262] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.262] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.292] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.535] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.538] SetEvent (hEvent=0x218) returned 1
	[0293.538] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.542] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.548] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.572] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.592] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.614] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.634] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.742] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.753] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.772] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.793] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.812] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.828] SetEvent (hEvent=0x218) returned 1
	[0293.828] SetEvent (hEvent=0x1f0) returned 1
	[0293.829] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0293.835] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.835] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x0
	[0293.838] SetEvent (hEvent=0x234) returned 1
	[0293.838] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0293.841] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0293.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf")) returned 0x220
	[0293.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF", dwFileAttributes=0x220) returned 1
	[0293.842] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0293.982] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11c09e08 | out: lpMode=0x11c09e08) returned 0
	[0293.983] ReadFile (in: hFile=0x1d4, lpBuffer=0x11168000, nNumberOfBytesToRead=0xb544, lpNumberOfBytesRead=0x11c09e18, lpOverlapped=0x0 | out: lpBuffer=0x11168000*, lpNumberOfBytesRead=0x11c09e18*=0xb544, lpOverlapped=0x0) returned 1
	[0293.992] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0293.992] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cc902 | out: pbBuffer=0x113cc902) returned 1
	[0293.992] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cc90e | out: pbBuffer=0x113cc90e) returned 1
	[0293.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65a0 | out: pbBuffer=0x113e65a0) returned 1
	[0293.994] GetFileType (hFile=0x1d4) returned 0x1
	[0293.994] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11c09de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.994] WriteFile (in: hFile=0x1d4, lpBuffer=0x11458000*, nNumberOfBytesToWrite=0xb544, lpNumberOfBytesWritten=0x11c09dfc, lpOverlapped=0x11c09e08 | out: lpBuffer=0x11458000*, lpNumberOfBytesWritten=0x11c09dfc*=0xb544, lpOverlapped=0x11c09e08) returned 1
	[0293.995] GetFileType (hFile=0x1d4) returned 0x1
	[0293.995] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xb544, lpNewFilePointer=0x0, dwMoveMethod=0x11c09de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.995] GetFileType (hFile=0x1d4) returned 0x1
	[0293.995] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11c09de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.995] WriteFile (in: hFile=0x1d4, lpBuffer=0x1129b500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11c09dfc, lpOverlapped=0x11c09e08 | out: lpBuffer=0x1129b500*, lpNumberOfBytesWritten=0x11c09dfc*=0x230, lpOverlapped=0x11c09e08) returned 1
	[0293.996] GetFileType (hFile=0x1d4) returned 0x1
	[0293.996] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xb544, lpNewFilePointer=0x0, dwMoveMethod=0x11c09de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.996] CloseHandle (hObject=0x1d4) returned 1
	[0294.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf.tl30z")) returned 0x220
	[0294.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.016] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.024] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.042] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.061] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.080] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.091] SetEvent (hEvent=0x218) returned 1
	[0294.092] SetEvent (hEvent=0x1b0) returned 1
	[0294.092] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0294.095] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.095] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x0
	[0294.096] SetEvent (hEvent=0x234) returned 1
	[0294.096] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0294.098] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.123] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.424] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.425] SetEvent (hEvent=0x234) returned 1
	[0294.426] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf")) returned 0x220
	[0294.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF", dwFileAttributes=0x220) returned 1
	[0294.463] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.550] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0294.550] ReadFile (in: hFile=0x1fc, lpBuffer=0x11326000, nNumberOfBytesToRead=0x3094, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11326000*, lpNumberOfBytesRead=0x11023e18*=0x3094, lpOverlapped=0x0) returned 1
	[0294.555] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0294.555] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6548 | out: pbBuffer=0x113e6548) returned 1
	[0294.555] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c7002 | out: pbBuffer=0x110c7002) returned 1
	[0294.555] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c7057 | out: pbBuffer=0x110c7057) returned 1
	[0294.555] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c70b3 | out: pbBuffer=0x110c70b3) returned 1
	[0294.556] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0294.556] GetFileType (hFile=0x1fc) returned 0x1
	[0294.556] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.556] WriteFile (in: hFile=0x1fc, lpBuffer=0x112d4000*, nNumberOfBytesToWrite=0x3094, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112d4000*, lpNumberOfBytesWritten=0x11031dfc*=0x3094, lpOverlapped=0x11031e08) returned 1
	[0294.557] GetFileType (hFile=0x1fc) returned 0x1
	[0294.557] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3094, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.557] GetFileType (hFile=0x1fc) returned 0x1
	[0294.557] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.557] WriteFile (in: hFile=0x1fc, lpBuffer=0x11060380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11060380*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0294.557] GetFileType (hFile=0x1fc) returned 0x1
	[0294.557] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3094, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.558] CloseHandle (hObject=0x1fc) returned 1
	[0294.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf.tl30z")) returned 0x220
	[0294.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.561] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.563] SetEvent (hEvent=0x218) returned 1
	[0294.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf")) returned 0x220
	[0294.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF", dwFileAttributes=0x220) returned 1
	[0294.564] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0294.638] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0294.638] ReadFile (in: hFile=0x250, lpBuffer=0x11214000, nNumberOfBytesToRead=0x8774, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11214000*, lpNumberOfBytesRead=0x11023e18*=0x8774, lpOverlapped=0x0) returned 1
	[0294.643] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332370 | out: pbBuffer=0x11332370) returned 1
	[0294.643] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332368 | out: pbBuffer=0x11332368) returned 1
	[0294.643] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11351202 | out: pbBuffer=0x11351202) returned 1
	[0294.643] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1135125f | out: pbBuffer=0x1135125f) returned 1
	[0294.644] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0294.645] GetFileType (hFile=0x250) returned 0x1
	[0294.645] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1116bde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.645] WriteFile (in: hFile=0x250, lpBuffer=0x11174000*, nNumberOfBytesToWrite=0x8774, lpNumberOfBytesWritten=0x1116bdfc, lpOverlapped=0x1116be08 | out: lpBuffer=0x11174000*, lpNumberOfBytesWritten=0x1116bdfc*=0x8774, lpOverlapped=0x1116be08) returned 1
	[0294.646] GetFileType (hFile=0x250) returned 0x1
	[0294.646] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x8774, lpNewFilePointer=0x0, dwMoveMethod=0x1116bde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.646] GetFileType (hFile=0x250) returned 0x1
	[0294.646] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1116bde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.646] WriteFile (in: hFile=0x250, lpBuffer=0x113f9880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1116bdfc, lpOverlapped=0x1116be08 | out: lpBuffer=0x113f9880*, lpNumberOfBytesWritten=0x1116bdfc*=0x233, lpOverlapped=0x1116be08) returned 1
	[0294.646] GetFileType (hFile=0x250) returned 0x1
	[0294.646] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x8774, lpNewFilePointer=0x0, dwMoveMethod=0x1116bde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.647] CloseHandle (hObject=0x250) returned 1
	[0294.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf.tl30z")) returned 0x220
	[0294.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.649] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.652] SetEvent (hEvent=0x218) returned 1
	[0294.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf")) returned 0x220
	[0294.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF", dwFileAttributes=0x220) returned 1
	[0294.653] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0294.729] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0294.729] ReadFile (in: hFile=0x250, lpBuffer=0x11344000, nNumberOfBytesToRead=0x4b8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11344000*, lpNumberOfBytesRead=0x11023e18*=0x4b8, lpOverlapped=0x0) returned 1
	[0294.733] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0294.734] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0294.734] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11382802 | out: pbBuffer=0x11382802) returned 1
	[0294.734] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11382874 | out: pbBuffer=0x11382874) returned 1
	[0294.734] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0294.734] GetFileType (hFile=0x250) returned 0x1
	[0294.734] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.735] WriteFile (in: hFile=0x250, lpBuffer=0x112c6000*, nNumberOfBytesToWrite=0x4b8, lpNumberOfBytesWritten=0x110c7dfc, lpOverlapped=0x110c7e08 | out: lpBuffer=0x112c6000*, lpNumberOfBytesWritten=0x110c7dfc*=0x4b8, lpOverlapped=0x110c7e08) returned 1
	[0294.735] GetFileType (hFile=0x250) returned 0x1
	[0294.735] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4b8, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.735] GetFileType (hFile=0x250) returned 0x1
	[0294.735] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.735] WriteFile (in: hFile=0x250, lpBuffer=0x11368a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x110c7dfc, lpOverlapped=0x110c7e08 | out: lpBuffer=0x11368a80*, lpNumberOfBytesWritten=0x110c7dfc*=0x227, lpOverlapped=0x110c7e08) returned 1
	[0294.736] GetFileType (hFile=0x250) returned 0x1
	[0294.736] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4b8, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.736] CloseHandle (hObject=0x250) returned 1
	[0294.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf.tl30z")) returned 0x220
	[0294.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.738] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf")) returned 0x220
	[0294.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF", dwFileAttributes=0x220) returned 1
	[0294.742] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.817] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0294.817] ReadFile (in: hFile=0x1fc, lpBuffer=0x111aa000, nNumberOfBytesToRead=0x1ec4, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111aa000*, lpNumberOfBytesRead=0x11023e18*=0x1ec4, lpOverlapped=0x0) returned 1
	[0294.822] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63d0 | out: pbBuffer=0x113e63d0) returned 1
	[0294.822] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63c8 | out: pbBuffer=0x113e63c8) returned 1
	[0294.822] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a5e02 | out: pbBuffer=0x113a5e02) returned 1
	[0294.823] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0294.823] GetFileType (hFile=0x1fc) returned 0x1
	[0294.823] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.823] WriteFile (in: hFile=0x1fc, lpBuffer=0x1145c000*, nNumberOfBytesToWrite=0x1ec4, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x1145c000*, lpNumberOfBytesWritten=0x110c3dfc*=0x1ec4, lpOverlapped=0x110c3e08) returned 1
	[0294.824] GetFileType (hFile=0x1fc) returned 0x1
	[0294.824] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1ec4, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.824] GetFileType (hFile=0x1fc) returned 0x1
	[0294.824] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.824] WriteFile (in: hFile=0x1fc, lpBuffer=0x111c8700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x111c8700*, lpNumberOfBytesWritten=0x110c3dfc*=0x22d, lpOverlapped=0x110c3e08) returned 1
	[0294.825] GetFileType (hFile=0x1fc) returned 0x1
	[0294.825] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1ec4, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.825] CloseHandle (hObject=0x1fc) returned 1
	[0294.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf.tl30z")) returned 0x220
	[0294.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.828] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0294.831] SetEvent (hEvent=0x26c) returned 1
	[0294.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf")) returned 0x220
	[0294.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF", dwFileAttributes=0x220) returned 1
	[0294.831] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.035] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0295.035] ReadFile (in: hFile=0x224, lpBuffer=0x1109c000, nNumberOfBytesToRead=0x29ac, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1109c000*, lpNumberOfBytesRead=0x11023e18*=0x29ac, lpOverlapped=0x0) returned 1
	[0295.045] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x110ac060 | out: pbBuffer=0x110ac060) returned 1
	[0295.046] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f5b02 | out: pbBuffer=0x112f5b02) returned 1
	[0295.046] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f5b56 | out: pbBuffer=0x112f5b56) returned 1
	[0295.046] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f5ba0 | out: pbBuffer=0x112f5ba0) returned 1
	[0295.046] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f5bd2 | out: pbBuffer=0x112f5bd2) returned 1
	[0295.046] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x110ac090 | out: pbBuffer=0x110ac090) returned 1
	[0295.047] GetFileType (hFile=0x224) returned 0x1
	[0295.047] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.047] WriteFile (in: hFile=0x224, lpBuffer=0x11202000*, nNumberOfBytesToWrite=0x29ac, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11202000*, lpNumberOfBytesWritten=0x11031dfc*=0x29ac, lpOverlapped=0x11031e08) returned 1
	[0295.048] GetFileType (hFile=0x224) returned 0x1
	[0295.048] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x29ac, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.048] GetFileType (hFile=0x224) returned 0x1
	[0295.048] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.048] WriteFile (in: hFile=0x224, lpBuffer=0x1109ae00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1109ae00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0295.048] GetFileType (hFile=0x224) returned 0x1
	[0295.048] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x29ac, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.049] CloseHandle (hObject=0x224) returned 1
	[0295.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf.tl30z")) returned 0x220
	[0295.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.052] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0295.055] SetEvent (hEvent=0x26c) returned 1
	[0295.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf")) returned 0x220
	[0295.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF", dwFileAttributes=0x220) returned 1
	[0295.056] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.141] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0295.141] ReadFile (in: hFile=0x224, lpBuffer=0x11156000, nNumberOfBytesToRead=0x1ea8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11156000*, lpNumberOfBytesRead=0x11023e18*=0x1ea8, lpOverlapped=0x0) returned 1
	[0295.147] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6820 | out: pbBuffer=0x113e6820) returned 1
	[0295.147] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6818 | out: pbBuffer=0x113e6818) returned 1
	[0295.147] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11467d02 | out: pbBuffer=0x11467d02) returned 1
	[0295.148] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6850 | out: pbBuffer=0x113e6850) returned 1
	[0295.148] GetFileType (hFile=0x224) returned 0x1
	[0295.148] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.148] WriteFile (in: hFile=0x224, lpBuffer=0x11176000*, nNumberOfBytesToWrite=0x1ea8, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x11176000*, lpNumberOfBytesWritten=0x110c3dfc*=0x1ea8, lpOverlapped=0x110c3e08) returned 1
	[0295.149] GetFileType (hFile=0x224) returned 0x1
	[0295.149] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1ea8, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.149] GetFileType (hFile=0x224) returned 0x1
	[0295.149] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.149] WriteFile (in: hFile=0x224, lpBuffer=0x11153180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x11153180*, lpNumberOfBytesWritten=0x110c3dfc*=0x22d, lpOverlapped=0x110c3e08) returned 1
	[0295.150] GetFileType (hFile=0x224) returned 0x1
	[0295.150] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1ea8, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.150] CloseHandle (hObject=0x224) returned 1
	[0295.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf.tl30z")) returned 0x220
	[0295.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.158] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0295.162] SetEvent (hEvent=0x26c) returned 1
	[0295.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf")) returned 0x220
	[0295.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF", dwFileAttributes=0x220) returned 1
	[0295.163] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0295.239] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0295.239] ReadFile (in: hFile=0x288, lpBuffer=0x113ec000, nNumberOfBytesToRead=0x4e80, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x113ec000*, lpNumberOfBytesRead=0x11023e18*=0x4e80, lpOverlapped=0x0) returned 1
	[0295.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0295.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1117f302 | out: pbBuffer=0x1117f302) returned 1
	[0295.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117f32d | out: pbBuffer=0x1117f32d) returned 1
	[0295.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0295.249] GetFileType (hFile=0x288) returned 0x1
	[0295.249] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.249] WriteFile (in: hFile=0x288, lpBuffer=0x111c4000*, nNumberOfBytesToWrite=0x4e80, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111c4000*, lpNumberOfBytesWritten=0x11031dfc*=0x4e80, lpOverlapped=0x11031e08) returned 1
	[0295.249] GetFileType (hFile=0x288) returned 0x1
	[0295.250] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x4e80, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.250] GetFileType (hFile=0x288) returned 0x1
	[0295.250] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.250] WriteFile (in: hFile=0x288, lpBuffer=0x11bcdc00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bcdc00*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0295.250] GetFileType (hFile=0x288) returned 0x1
	[0295.250] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x4e80, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.251] CloseHandle (hObject=0x288) returned 1
	[0295.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf.tl30z")) returned 0x220
	[0295.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.253] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0295.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf")) returned 0x220
	[0295.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF", dwFileAttributes=0x220) returned 1
	[0295.257] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.345] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0295.345] ReadFile (in: hFile=0x224, lpBuffer=0x113db000, nNumberOfBytesToRead=0x4238, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113db000*, lpNumberOfBytesRead=0x11428e18*=0x4238, lpOverlapped=0x0) returned 1
	[0295.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0295.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11100702 | out: pbBuffer=0x11100702) returned 1
	[0295.352] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0295.352] GetFileType (hFile=0x224) returned 0x1
	[0295.352] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.352] WriteFile (in: hFile=0x224, lpBuffer=0x11124000*, nNumberOfBytesToWrite=0x4238, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11124000*, lpNumberOfBytesWritten=0x11031dfc*=0x4238, lpOverlapped=0x11031e08) returned 1
	[0295.353] GetFileType (hFile=0x224) returned 0x1
	[0295.353] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4238, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.353] GetFileType (hFile=0x224) returned 0x1
	[0295.353] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.353] WriteFile (in: hFile=0x224, lpBuffer=0x112b7880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112b7880*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0295.354] GetFileType (hFile=0x224) returned 0x1
	[0295.354] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4238, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.354] CloseHandle (hObject=0x224) returned 1
	[0295.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf.tl30z")) returned 0x220
	[0295.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.357] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0295.360] SetEvent (hEvent=0x218) returned 1
	[0295.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf")) returned 0x220
	[0295.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF", dwFileAttributes=0x220) returned 1
	[0295.360] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0295.441] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0295.441] ReadFile (in: hFile=0x1d8, lpBuffer=0x1123d500, nNumberOfBytesToRead=0x30f0, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1123d500*, lpNumberOfBytesRead=0x11428e18*=0x30f0, lpOverlapped=0x0) returned 1
	[0295.448] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0295.448] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e5302 | out: pbBuffer=0x112e5302) returned 1
	[0295.448] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0295.449] GetFileType (hFile=0x1d8) returned 0x1
	[0295.449] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.449] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bc6000*, nNumberOfBytesToWrite=0x30f0, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesWritten=0x1141ddfc*=0x30f0, lpOverlapped=0x1141de08) returned 1
	[0295.450] GetFileType (hFile=0x1d8) returned 0x1
	[0295.450] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x30f0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.450] GetFileType (hFile=0x1d8) returned 0x1
	[0295.450] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.450] WriteFile (in: hFile=0x1d8, lpBuffer=0x111f4700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x111f4700*, lpNumberOfBytesWritten=0x1141ddfc*=0x22a, lpOverlapped=0x1141de08) returned 1
	[0295.450] GetFileType (hFile=0x1d8) returned 0x1
	[0295.450] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x30f0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.451] CloseHandle (hObject=0x1d8) returned 1
	[0295.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf.tl30z")) returned 0x220
	[0295.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.453] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0295.457] SetEvent (hEvent=0x26c) returned 1
	[0295.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf")) returned 0x220
	[0295.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF", dwFileAttributes=0x220) returned 1
	[0295.458] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0295.540] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0295.540] ReadFile (in: hFile=0x1d4, lpBuffer=0x1121c000, nNumberOfBytesToRead=0x2c84, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1121c000*, lpNumberOfBytesRead=0x11428e18*=0x2c84, lpOverlapped=0x0) returned 1
	[0295.545] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0295.545] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11217d02 | out: pbBuffer=0x11217d02) returned 1
	[0295.545] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0295.545] GetFileType (hFile=0x1d4) returned 0x1
	[0295.546] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.546] WriteFile (in: hFile=0x1d4, lpBuffer=0x113c6000*, nNumberOfBytesToWrite=0x2c84, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x113c6000*, lpNumberOfBytesWritten=0x1141fdfc*=0x2c84, lpOverlapped=0x1141fe08) returned 1
	[0295.546] GetFileType (hFile=0x1d4) returned 0x1
	[0295.546] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2c84, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.546] GetFileType (hFile=0x1d4) returned 0x1
	[0295.546] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.547] WriteFile (in: hFile=0x1d4, lpBuffer=0x1122c700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x1122c700*, lpNumberOfBytesWritten=0x1141fdfc*=0x227, lpOverlapped=0x1141fe08) returned 1
	[0295.547] GetFileType (hFile=0x1d4) returned 0x1
	[0295.547] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2c84, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.547] CloseHandle (hObject=0x1d4) returned 1
	[0295.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf.tl30z")) returned 0x220
	[0295.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.550] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0295.553] SetEvent (hEvent=0x118) returned 1
	[0295.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf")) returned 0x220
	[0295.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF", dwFileAttributes=0x220) returned 1
	[0295.554] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0295.629] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0295.629] ReadFile (in: hFile=0x250, lpBuffer=0x11209500, nNumberOfBytesToRead=0x51aa, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11209500*, lpNumberOfBytesRead=0x11428e18*=0x51aa, lpOverlapped=0x0) returned 1
	[0295.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66f0 | out: pbBuffer=0x113e66f0) returned 1
	[0295.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110af102 | out: pbBuffer=0x110af102) returned 1
	[0295.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110af151 | out: pbBuffer=0x110af151) returned 1
	[0295.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110af184 | out: pbBuffer=0x110af184) returned 1
	[0295.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6720 | out: pbBuffer=0x113e6720) returned 1
	[0295.638] SetEvent (hEvent=0x118) returned 1
	[0295.639] GetFileType (hFile=0x250) returned 0x1
	[0295.639] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.639] WriteFile (in: hFile=0x250, lpBuffer=0x11168000*, nNumberOfBytesToWrite=0x51aa, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x11168000*, lpNumberOfBytesWritten=0x1141fdfc*=0x51aa, lpOverlapped=0x1141fe08) returned 1
	[0295.640] GetFileType (hFile=0x250) returned 0x1
	[0295.640] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x51aa, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.640] GetFileType (hFile=0x250) returned 0x1
	[0295.640] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.640] WriteFile (in: hFile=0x250, lpBuffer=0x11136380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x11136380*, lpNumberOfBytesWritten=0x1141fdfc*=0x22d, lpOverlapped=0x1141fe08) returned 1
	[0295.640] GetFileType (hFile=0x250) returned 0x1
	[0295.641] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x51aa, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.641] CloseHandle (hObject=0x250) returned 1
	[0295.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf.tl30z")) returned 0x220
	[0295.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.645] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0295.646] SetEvent (hEvent=0x118) returned 1
	[0295.646] SetEvent (hEvent=0x218) returned 1
	[0295.646] SwitchToThread () returned 1
	[0295.648] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0295.650] SetEvent (hEvent=0x218) returned 1
	[0295.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf")) returned 0x220
	[0295.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF", dwFileAttributes=0x220) returned 1
	[0295.651] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0295.739] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0295.739] ReadFile (in: hFile=0x1fc, lpBuffer=0x113d6000, nNumberOfBytesToRead=0x3198, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113d6000*, lpNumberOfBytesRead=0x1128ae18*=0x3198, lpOverlapped=0x0) returned 1
	[0295.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0295.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110af202 | out: pbBuffer=0x110af202) returned 1
	[0295.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0295.750] GetFileType (hFile=0x1fc) returned 0x1
	[0295.750] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.750] WriteFile (in: hFile=0x1fc, lpBuffer=0x110c6000*, nNumberOfBytesToWrite=0x3198, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110c6000*, lpNumberOfBytesWritten=0x11031dfc*=0x3198, lpOverlapped=0x11031e08) returned 1
	[0295.750] GetFileType (hFile=0x1fc) returned 0x1
	[0295.751] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3198, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.751] GetFileType (hFile=0x1fc) returned 0x1
	[0295.751] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.751] WriteFile (in: hFile=0x1fc, lpBuffer=0x11137c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11137c00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0295.751] GetFileType (hFile=0x1fc) returned 0x1
	[0295.751] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3198, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.751] CloseHandle (hObject=0x1fc) returned 1
	[0295.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf.tl30z")) returned 0x220
	[0295.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.758] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0295.772] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0295.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg")) returned 0x220
	[0295.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG", dwFileAttributes=0x220) returned 1
	[0295.793] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg.tl30z"), dwFlags=0x1) returned 1
	[0295.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.886] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1118be08 | out: lpMode=0x1118be08) returned 0
	[0295.886] ReadFile (in: hFile=0x224, lpBuffer=0x111c6000, nNumberOfBytesToRead=0xb12e, lpNumberOfBytesRead=0x1118be18, lpOverlapped=0x0 | out: lpBuffer=0x111c6000*, lpNumberOfBytesRead=0x1118be18*=0xb12e, lpOverlapped=0x0) returned 1
	[0295.892] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0295.892] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e648 | out: pbBuffer=0x1104e648) returned 1
	[0295.892] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d4702 | out: pbBuffer=0x111d4702) returned 1
	[0295.893] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e680 | out: pbBuffer=0x1104e680) returned 1
	[0295.894] SetEvent (hEvent=0x218) returned 1
	[0295.894] GetFileType (hFile=0x224) returned 0x1
	[0295.894] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.894] WriteFile (in: hFile=0x224, lpBuffer=0x11214000*, nNumberOfBytesToWrite=0xb12e, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11214000*, lpNumberOfBytesWritten=0x11339dfc*=0xb12e, lpOverlapped=0x11339e08) returned 1
	[0295.895] GetFileType (hFile=0x224) returned 0x1
	[0295.895] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xb12e, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.895] GetFileType (hFile=0x224) returned 0x1
	[0295.895] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.895] WriteFile (in: hFile=0x224, lpBuffer=0x11457500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11457500*, lpNumberOfBytesWritten=0x11339dfc*=0x233, lpOverlapped=0x11339e08) returned 1
	[0295.895] GetFileType (hFile=0x224) returned 0x1
	[0295.895] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xb12e, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.896] CloseHandle (hObject=0x224) returned 1
	[0295.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg.tl30z")) returned 0x220
	[0295.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0295.901] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0295.903] SetEvent (hEvent=0x218) returned 1
	[0295.903] SetEvent (hEvent=0x118) returned 1
	[0295.903] SwitchToThread () returned 1
	[0295.924] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0295.926] SetEvent (hEvent=0x118) returned 1
	[0295.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg")) returned 0x220
	[0295.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG", dwFileAttributes=0x220) returned 1
	[0295.927] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg.tl30z"), dwFlags=0x1) returned 1
	[0296.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0296.035] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0296.035] ReadFile (in: hFile=0x288, lpBuffer=0x11090000, nNumberOfBytesToRead=0x5de2, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x1131be18*=0x5de2, lpOverlapped=0x0) returned 1
	[0296.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0296.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4a8 | out: pbBuffer=0x1104e4a8) returned 1
	[0296.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1126dd02 | out: pbBuffer=0x1126dd02) returned 1
	[0296.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126dd70 | out: pbBuffer=0x1126dd70) returned 1
	[0296.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0296.043] GetFileType (hFile=0x288) returned 0x1
	[0296.043] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.043] WriteFile (in: hFile=0x288, lpBuffer=0x110c2000*, nNumberOfBytesToWrite=0x5de2, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110c2000*, lpNumberOfBytesWritten=0x11031dfc*=0x5de2, lpOverlapped=0x11031e08) returned 1
	[0296.043] GetFileType (hFile=0x288) returned 0x1
	[0296.044] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5de2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.044] GetFileType (hFile=0x288) returned 0x1
	[0296.044] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.044] WriteFile (in: hFile=0x288, lpBuffer=0x11098a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11098a80*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0296.044] GetFileType (hFile=0x288) returned 0x1
	[0296.044] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5de2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.045] CloseHandle (hObject=0x288) returned 1
	[0296.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg.tl30z")) returned 0x220
	[0296.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0296.047] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.050] SetEvent (hEvent=0x118) returned 1
	[0296.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg")) returned 0x220
	[0296.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG", dwFileAttributes=0x220) returned 1
	[0296.052] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg.tl30z"), dwFlags=0x1) returned 1
	[0296.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0296.213] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0296.213] ReadFile (in: hFile=0x250, lpBuffer=0x1118a000, nNumberOfBytesToRead=0x40e7, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1118a000*, lpNumberOfBytesRead=0x1131be18*=0x40e7, lpOverlapped=0x0) returned 1
	[0296.221] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0296.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112cb202 | out: pbBuffer=0x112cb202) returned 1
	[0296.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332840 | out: pbBuffer=0x11332840) returned 1
	[0296.223] SetEvent (hEvent=0x118) returned 1
	[0296.223] GetFileType (hFile=0x250) returned 0x1
	[0296.223] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.223] WriteFile (in: hFile=0x250, lpBuffer=0x11bd0000*, nNumberOfBytesToWrite=0x40e7, lpNumberOfBytesWritten=0x11327dfc, lpOverlapped=0x11327e08 | out: lpBuffer=0x11bd0000*, lpNumberOfBytesWritten=0x11327dfc*=0x40e7, lpOverlapped=0x11327e08) returned 1
	[0296.224] GetFileType (hFile=0x250) returned 0x1
	[0296.224] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x40e7, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.224] GetFileType (hFile=0x250) returned 0x1
	[0296.224] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.224] WriteFile (in: hFile=0x250, lpBuffer=0x111a8380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11327dfc, lpOverlapped=0x11327e08 | out: lpBuffer=0x111a8380*, lpNumberOfBytesWritten=0x11327dfc*=0x22d, lpOverlapped=0x11327e08) returned 1
	[0296.225] GetFileType (hFile=0x250) returned 0x1
	[0296.225] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x40e7, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.225] CloseHandle (hObject=0x250) returned 1
	[0296.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg.tl30z")) returned 0x220
	[0296.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0296.230] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.233] SetEvent (hEvent=0x118) returned 1
	[0296.233] SetEvent (hEvent=0x218) returned 1
	[0296.233] SwitchToThread () returned 1
	[0296.269] SwitchToThread () returned 1
	[0296.271] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.305] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.323] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.343] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.364] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.385] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.404] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.425] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.445] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.462] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.500] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.519] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.537] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.549] SetEvent (hEvent=0x118) returned 1
	[0296.550] SetEvent (hEvent=0x1b0) returned 1
	[0296.550] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0296.552] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.552] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0296.555] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.555] SetEvent (hEvent=0x234) returned 1
	[0296.555] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x0
	[0296.559] SetEvent (hEvent=0x1f0) returned 1
	[0296.559] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.577] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.703] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.758] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.761] SetEvent (hEvent=0x218) returned 1
	[0296.761] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf")) returned 0x220
	[0296.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF", dwFileAttributes=0x220) returned 1
	[0296.765] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0296.857] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0296.857] ReadFile (in: hFile=0x224, lpBuffer=0x11058000, nNumberOfBytesToRead=0x19c4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x1128ce18*=0x19c4, lpOverlapped=0x0) returned 1
	[0296.863] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0296.863] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ec802 | out: pbBuffer=0x111ec802) returned 1
	[0296.863] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ec813 | out: pbBuffer=0x111ec813) returned 1
	[0296.864] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0296.864] GetFileType (hFile=0x224) returned 0x1
	[0296.864] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.864] WriteFile (in: hFile=0x224, lpBuffer=0x112e4000*, nNumberOfBytesToWrite=0x19c4, lpNumberOfBytesWritten=0x111e7dfc, lpOverlapped=0x111e7e08 | out: lpBuffer=0x112e4000*, lpNumberOfBytesWritten=0x111e7dfc*=0x19c4, lpOverlapped=0x111e7e08) returned 1
	[0296.865] GetFileType (hFile=0x224) returned 0x1
	[0296.865] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x19c4, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.865] GetFileType (hFile=0x224) returned 0x1
	[0296.865] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.866] WriteFile (in: hFile=0x224, lpBuffer=0x113f6a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x111e7dfc, lpOverlapped=0x111e7e08 | out: lpBuffer=0x113f6a80*, lpNumberOfBytesWritten=0x111e7dfc*=0x22a, lpOverlapped=0x111e7e08) returned 1
	[0296.866] GetFileType (hFile=0x224) returned 0x1
	[0296.866] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x19c4, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.866] CloseHandle (hObject=0x224) returned 1
	[0296.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf.tl30z")) returned 0x220
	[0296.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.869] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.872] SetEvent (hEvent=0x234) returned 1
	[0296.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf")) returned 0x220
	[0296.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF", dwFileAttributes=0x220) returned 1
	[0296.873] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0296.981] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0296.981] ReadFile (in: hFile=0x1d4, lpBuffer=0x112f6000, nNumberOfBytesToRead=0x3040, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112f6000*, lpNumberOfBytesRead=0x1128ce18*=0x3040, lpOverlapped=0x0) returned 1
	[0296.988] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332220 | out: pbBuffer=0x11332220) returned 1
	[0296.989] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130c802 | out: pbBuffer=0x1130c802) returned 1
	[0296.989] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332250 | out: pbBuffer=0x11332250) returned 1
	[0296.989] GetFileType (hFile=0x1d4) returned 0x1
	[0296.989] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.990] WriteFile (in: hFile=0x1d4, lpBuffer=0x11132000*, nNumberOfBytesToWrite=0x3040, lpNumberOfBytesWritten=0x111e3dfc, lpOverlapped=0x111e3e08 | out: lpBuffer=0x11132000*, lpNumberOfBytesWritten=0x111e3dfc*=0x3040, lpOverlapped=0x111e3e08) returned 1
	[0296.990] GetFileType (hFile=0x1d4) returned 0x1
	[0296.990] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3040, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.990] GetFileType (hFile=0x1d4) returned 0x1
	[0296.990] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.990] WriteFile (in: hFile=0x1d4, lpBuffer=0x1110aa80*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x111e3dfc, lpOverlapped=0x111e3e08 | out: lpBuffer=0x1110aa80*, lpNumberOfBytesWritten=0x111e3dfc*=0x221, lpOverlapped=0x111e3e08) returned 1
	[0296.991] GetFileType (hFile=0x1d4) returned 0x1
	[0296.991] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3040, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.991] CloseHandle (hObject=0x1d4) returned 1
	[0296.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf.tl30z")) returned 0x220
	[0296.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.994] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0296.997] SetEvent (hEvent=0x234) returned 1
	[0296.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf")) returned 0x220
	[0296.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF", dwFileAttributes=0x220) returned 1
	[0296.998] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0297.083] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0297.083] ReadFile (in: hFile=0x288, lpBuffer=0x11154000, nNumberOfBytesToRead=0x1d94, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11154000*, lpNumberOfBytesRead=0x1128ce18*=0x1d94, lpOverlapped=0x0) returned 1
	[0297.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f9d0 | out: pbBuffer=0x1140f9d0) returned 1
	[0297.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11158802 | out: pbBuffer=0x11158802) returned 1
	[0297.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fa00 | out: pbBuffer=0x1140fa00) returned 1
	[0297.092] GetFileType (hFile=0x288) returned 0x1
	[0297.092] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.092] WriteFile (in: hFile=0x288, lpBuffer=0x11174000*, nNumberOfBytesToWrite=0x1d94, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11174000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1d94, lpOverlapped=0x1102be08) returned 1
	[0297.092] GetFileType (hFile=0x288) returned 0x1
	[0297.092] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1d94, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.093] GetFileType (hFile=0x288) returned 0x1
	[0297.093] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.093] WriteFile (in: hFile=0x288, lpBuffer=0x11166380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11166380*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0297.093] GetFileType (hFile=0x288) returned 0x1
	[0297.093] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1d94, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.093] CloseHandle (hObject=0x288) returned 1
	[0297.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf.tl30z")) returned 0x220
	[0297.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.097] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0297.099] SetEvent (hEvent=0x234) returned 1
	[0297.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf")) returned 0x220
	[0297.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF", dwFileAttributes=0x220) returned 1
	[0297.099] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0297.229] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0297.229] ReadFile (in: hFile=0x288, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x1258, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x1128ce18*=0x1258, lpOverlapped=0x0) returned 1
	[0297.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0297.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b9202 | out: pbBuffer=0x111b9202) returned 1
	[0297.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0297.253] GetFileType (hFile=0x288) returned 0x1
	[0297.253] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1116dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.253] WriteFile (in: hFile=0x288, lpBuffer=0x110d8000*, nNumberOfBytesToWrite=0x1258, lpNumberOfBytesWritten=0x1116ddfc, lpOverlapped=0x1116de08 | out: lpBuffer=0x110d8000*, lpNumberOfBytesWritten=0x1116ddfc*=0x1258, lpOverlapped=0x1116de08) returned 1
	[0297.253] GetFileType (hFile=0x288) returned 0x1
	[0297.254] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1258, lpNewFilePointer=0x0, dwMoveMethod=0x1116dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.254] GetFileType (hFile=0x288) returned 0x1
	[0297.254] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1116dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.254] WriteFile (in: hFile=0x288, lpBuffer=0x11179880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1116ddfc, lpOverlapped=0x1116de08 | out: lpBuffer=0x11179880*, lpNumberOfBytesWritten=0x1116ddfc*=0x227, lpOverlapped=0x1116de08) returned 1
	[0297.254] GetFileType (hFile=0x288) returned 0x1
	[0297.254] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1258, lpNewFilePointer=0x0, dwMoveMethod=0x1116dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.254] CloseHandle (hObject=0x288) returned 1
	[0297.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf.tl30z")) returned 0x220
	[0297.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.260] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0297.264] SetEvent (hEvent=0x218) returned 1
	[0297.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf")) returned 0x220
	[0297.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF", dwFileAttributes=0x220) returned 1
	[0297.265] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0297.412] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0297.412] ReadFile (in: hFile=0x1d8, lpBuffer=0x11112000, nNumberOfBytesToRead=0x3004, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11112000*, lpNumberOfBytesRead=0x1128ce18*=0x3004, lpOverlapped=0x0) returned 1
	[0297.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0297.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1135bd02 | out: pbBuffer=0x1135bd02) returned 1
	[0297.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1135bdbd | out: pbBuffer=0x1135bdbd) returned 1
	[0297.419] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0297.419] GetFileType (hFile=0x1d8) returned 0x1
	[0297.420] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.420] WriteFile (in: hFile=0x1d8, lpBuffer=0x112a2000*, nNumberOfBytesToWrite=0x3004, lpNumberOfBytesWritten=0x11169dfc, lpOverlapped=0x11169e08 | out: lpBuffer=0x112a2000*, lpNumberOfBytesWritten=0x11169dfc*=0x3004, lpOverlapped=0x11169e08) returned 1
	[0297.420] GetFileType (hFile=0x1d8) returned 0x1
	[0297.420] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3004, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.420] GetFileType (hFile=0x1d8) returned 0x1
	[0297.421] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.421] WriteFile (in: hFile=0x1d8, lpBuffer=0x1112a700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11169dfc, lpOverlapped=0x11169e08 | out: lpBuffer=0x1112a700*, lpNumberOfBytesWritten=0x11169dfc*=0x221, lpOverlapped=0x11169e08) returned 1
	[0297.421] GetFileType (hFile=0x1d8) returned 0x1
	[0297.421] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3004, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.421] CloseHandle (hObject=0x1d8) returned 1
	[0297.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf.tl30z")) returned 0x220
	[0297.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.425] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0297.427] SetEvent (hEvent=0x218) returned 1
	[0297.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf")) returned 0x220
	[0297.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF", dwFileAttributes=0x220) returned 1
	[0297.442] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0297.561] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0297.562] ReadFile (in: hFile=0x1d8, lpBuffer=0x11115500, nNumberOfBytesToRead=0x336a, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11115500*, lpNumberOfBytesRead=0x1128ce18*=0x336a, lpOverlapped=0x0) returned 1
	[0297.573] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6840 | out: pbBuffer=0x113e6840) returned 1
	[0297.573] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112afb02 | out: pbBuffer=0x112afb02) returned 1
	[0297.573] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6870 | out: pbBuffer=0x113e6870) returned 1
	[0297.574] SetEvent (hEvent=0x218) returned 1
	[0297.574] GetFileType (hFile=0x1d8) returned 0x1
	[0297.574] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.575] WriteFile (in: hFile=0x1d8, lpBuffer=0x11258000*, nNumberOfBytesToWrite=0x336a, lpNumberOfBytesWritten=0x11169dfc, lpOverlapped=0x11169e08 | out: lpBuffer=0x11258000*, lpNumberOfBytesWritten=0x11169dfc*=0x336a, lpOverlapped=0x11169e08) returned 1
	[0297.575] GetFileType (hFile=0x1d8) returned 0x1
	[0297.575] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x336a, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.576] GetFileType (hFile=0x1d8) returned 0x1
	[0297.576] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.576] WriteFile (in: hFile=0x1d8, lpBuffer=0x11471180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11169dfc, lpOverlapped=0x11169e08 | out: lpBuffer=0x11471180*, lpNumberOfBytesWritten=0x11169dfc*=0x230, lpOverlapped=0x11169e08) returned 1
	[0297.576] GetFileType (hFile=0x1d8) returned 0x1
	[0297.580] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x336a, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.580] CloseHandle (hObject=0x1d8) returned 1
	[0297.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf.tl30z")) returned 0x220
	[0297.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.593] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0297.596] SetEvent (hEvent=0x218) returned 1
	[0297.597] SetEvent (hEvent=0x118) returned 1
	[0297.597] SwitchToThread () returned 1
	[0297.634] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0298.007] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0298.014] SetEvent (hEvent=0x218) returned 1
	[0298.014] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0298.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf")) returned 0x220
	[0298.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF", dwFileAttributes=0x220) returned 1
	[0298.021] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0298.150] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0298.150] ReadFile (in: hFile=0x1d8, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x6624, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x1131de18*=0x6624, lpOverlapped=0x0) returned 1
	[0298.161] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0298.161] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f268 | out: pbBuffer=0x1140f268) returned 1
	[0298.161] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11271202 | out: pbBuffer=0x11271202) returned 1
	[0298.161] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11271218 | out: pbBuffer=0x11271218) returned 1
	[0298.161] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112712bf | out: pbBuffer=0x112712bf) returned 1
	[0298.162] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0298.162] GetFileType (hFile=0x1d8) returned 0x1
	[0298.162] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.163] WriteFile (in: hFile=0x1d8, lpBuffer=0x112fe000*, nNumberOfBytesToWrite=0x6624, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112fe000*, lpNumberOfBytesWritten=0x1102bdfc*=0x6624, lpOverlapped=0x1102be08) returned 1
	[0298.163] GetFileType (hFile=0x1d8) returned 0x1
	[0298.163] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6624, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.163] GetFileType (hFile=0x1d8) returned 0x1
	[0298.163] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.164] WriteFile (in: hFile=0x1d8, lpBuffer=0x11185c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11185c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0298.164] GetFileType (hFile=0x1d8) returned 0x1
	[0298.164] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6624, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.164] CloseHandle (hObject=0x1d8) returned 1
	[0298.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf.tl30z")) returned 0x220
	[0298.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.173] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0298.186] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0298.209] SetEvent (hEvent=0x218) returned 1
	[0298.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf")) returned 0x220
	[0298.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF", dwFileAttributes=0x220) returned 1
	[0298.210] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0298.315] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0298.315] ReadFile (in: hFile=0x1fc, lpBuffer=0x11302000, nNumberOfBytesToRead=0x9d6c, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11302000*, lpNumberOfBytesRead=0x1128ae18*=0x9d6c, lpOverlapped=0x0) returned 1
	[0298.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0298.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11433202 | out: pbBuffer=0x11433202) returned 1
	[0298.328] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323e0 | out: pbBuffer=0x113323e0) returned 1
	[0298.329] GetFileType (hFile=0x1fc) returned 0x1
	[0298.329] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.329] WriteFile (in: hFile=0x1fc, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x9d6c, lpNumberOfBytesWritten=0x111c3dfc, lpOverlapped=0x111c3e08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x111c3dfc*=0x9d6c, lpOverlapped=0x111c3e08) returned 1
	[0298.331] GetFileType (hFile=0x1fc) returned 0x1
	[0298.331] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x9d6c, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.331] GetFileType (hFile=0x1fc) returned 0x1
	[0298.331] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.331] WriteFile (in: hFile=0x1fc, lpBuffer=0x1133f880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x111c3dfc, lpOverlapped=0x111c3e08 | out: lpBuffer=0x1133f880*, lpNumberOfBytesWritten=0x111c3dfc*=0x236, lpOverlapped=0x111c3e08) returned 1
	[0298.332] GetFileType (hFile=0x1fc) returned 0x1
	[0298.332] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x9d6c, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.332] CloseHandle (hObject=0x1fc) returned 1
	[0298.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf.tl30z")) returned 0x220
	[0298.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.336] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0298.339] SetEvent (hEvent=0x218) returned 1
	[0298.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf")) returned 0x220
	[0298.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF", dwFileAttributes=0x220) returned 1
	[0298.340] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0298.431] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0298.431] SetEvent (hEvent=0x218) returned 1
	[0298.431] ReadFile (in: hFile=0x224, lpBuffer=0x111ac000, nNumberOfBytesToRead=0x7c4e, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x111ac000*, lpNumberOfBytesRead=0x1128ae18*=0x7c4e, lpOverlapped=0x0) returned 1
	[0298.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0298.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11157302 | out: pbBuffer=0x11157302) returned 1
	[0298.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11157309 | out: pbBuffer=0x11157309) returned 1
	[0298.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111573d1 | out: pbBuffer=0x111573d1) returned 1
	[0298.440] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3a0 | out: pbBuffer=0x1104e3a0) returned 1
	[0298.441] GetFileType (hFile=0x224) returned 0x1
	[0298.441] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.441] WriteFile (in: hFile=0x224, lpBuffer=0x11c08000*, nNumberOfBytesToWrite=0x7c4e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c08000*, lpNumberOfBytesWritten=0x11031dfc*=0x7c4e, lpOverlapped=0x11031e08) returned 1
	[0298.442] GetFileType (hFile=0x224) returned 0x1
	[0298.442] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7c4e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.442] GetFileType (hFile=0x224) returned 0x1
	[0298.442] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.442] WriteFile (in: hFile=0x224, lpBuffer=0x11169880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11169880*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0298.442] GetFileType (hFile=0x224) returned 0x1
	[0298.443] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7c4e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.443] CloseHandle (hObject=0x224) returned 1
	[0298.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf.tl30z")) returned 0x220
	[0298.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.448] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0298.452] SetEvent (hEvent=0x118) returned 1
	[0298.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf")) returned 0x220
	[0298.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF", dwFileAttributes=0x220) returned 1
	[0298.453] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0298.683] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0298.683] ReadFile (in: hFile=0x1d4, lpBuffer=0x112be000, nNumberOfBytesToRead=0x35bc, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x112be000*, lpNumberOfBytesRead=0x11319e18*=0x35bc, lpOverlapped=0x0) returned 1
	[0298.688] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0298.688] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112d6702 | out: pbBuffer=0x112d6702) returned 1
	[0298.688] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6430 | out: pbBuffer=0x113e6430) returned 1
	[0298.689] GetFileType (hFile=0x1d4) returned 0x1
	[0298.689] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.689] WriteFile (in: hFile=0x1d4, lpBuffer=0x110e4000*, nNumberOfBytesToWrite=0x35bc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110e4000*, lpNumberOfBytesWritten=0x11031dfc*=0x35bc, lpOverlapped=0x11031e08) returned 1
	[0298.689] GetFileType (hFile=0x1d4) returned 0x1
	[0298.690] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x35bc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.690] GetFileType (hFile=0x1d4) returned 0x1
	[0298.690] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.690] WriteFile (in: hFile=0x1d4, lpBuffer=0x11345500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11345500*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0298.690] GetFileType (hFile=0x1d4) returned 0x1
	[0298.690] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x35bc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.690] CloseHandle (hObject=0x1d4) returned 1
	[0298.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf.tl30z")) returned 0x220
	[0298.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.693] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0298.693] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0298.696] SetEvent (hEvent=0x118) returned 1
	[0298.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf")) returned 0x220
	[0298.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF", dwFileAttributes=0x220) returned 1
	[0298.697] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0298.766] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x110c9e08 | out: lpMode=0x110c9e08) returned 0
	[0298.766] ReadFile (in: hFile=0x288, lpBuffer=0x110f8000, nNumberOfBytesToRead=0x2004, lpNumberOfBytesRead=0x110c9e18, lpOverlapped=0x0 | out: lpBuffer=0x110f8000*, lpNumberOfBytesRead=0x110c9e18*=0x2004, lpOverlapped=0x0) returned 1
	[0298.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0298.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0298.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11114802 | out: pbBuffer=0x11114802) returned 1
	[0298.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0298.771] GetFileType (hFile=0x288) returned 0x1
	[0298.772] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.772] WriteFile (in: hFile=0x288, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x2004, lpNumberOfBytesWritten=0x110c9dfc, lpOverlapped=0x110c9e08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x110c9dfc*=0x2004, lpOverlapped=0x110c9e08) returned 1
	[0298.772] GetFileType (hFile=0x288) returned 0x1
	[0298.772] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x2004, lpNewFilePointer=0x0, dwMoveMethod=0x110c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.772] GetFileType (hFile=0x288) returned 0x1
	[0298.772] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.773] WriteFile (in: hFile=0x288, lpBuffer=0x1112aa80*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x110c9dfc, lpOverlapped=0x110c9e08 | out: lpBuffer=0x1112aa80*, lpNumberOfBytesWritten=0x110c9dfc*=0x21e, lpOverlapped=0x110c9e08) returned 1
	[0298.773] GetFileType (hFile=0x288) returned 0x1
	[0298.773] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x2004, lpNewFilePointer=0x0, dwMoveMethod=0x110c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.773] CloseHandle (hObject=0x288) returned 1
	[0298.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf.tl30z")) returned 0x220
	[0298.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.775] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0298.776] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0298.784] SetEvent (hEvent=0x234) returned 1
	[0298.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf")) returned 0x220
	[0298.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF", dwFileAttributes=0x220) returned 1
	[0298.784] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0298.854] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0298.854] ReadFile (in: hFile=0x224, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x4c0a, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11022e18*=0x4c0a, lpOverlapped=0x0) returned 1
	[0298.860] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0298.860] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c5202 | out: pbBuffer=0x111c5202) returned 1
	[0298.860] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c52dd | out: pbBuffer=0x111c52dd) returned 1
	[0298.861] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0298.861] GetFileType (hFile=0x224) returned 0x1
	[0298.861] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.861] WriteFile (in: hFile=0x224, lpBuffer=0x112ee000*, nNumberOfBytesToWrite=0x4c0a, lpNumberOfBytesWritten=0x110c7dfc, lpOverlapped=0x110c7e08 | out: lpBuffer=0x112ee000*, lpNumberOfBytesWritten=0x110c7dfc*=0x4c0a, lpOverlapped=0x110c7e08) returned 1
	[0298.862] GetFileType (hFile=0x224) returned 0x1
	[0298.862] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4c0a, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.862] GetFileType (hFile=0x224) returned 0x1
	[0298.862] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.863] WriteFile (in: hFile=0x224, lpBuffer=0x113a1880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x110c7dfc, lpOverlapped=0x110c7e08 | out: lpBuffer=0x113a1880*, lpNumberOfBytesWritten=0x110c7dfc*=0x227, lpOverlapped=0x110c7e08) returned 1
	[0298.863] GetFileType (hFile=0x224) returned 0x1
	[0298.863] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4c0a, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.863] CloseHandle (hObject=0x224) returned 1
	[0298.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf.tl30z")) returned 0x220
	[0298.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.865] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0298.868] SetEvent (hEvent=0x218) returned 1
	[0298.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf")) returned 0x220
	[0298.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF", dwFileAttributes=0x220) returned 1
	[0298.869] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0299.144] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0299.144] ReadFile (in: hFile=0x1fc, lpBuffer=0x1144c000, nNumberOfBytesToRead=0x273e, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1144c000*, lpNumberOfBytesRead=0x11022e18*=0x273e, lpOverlapped=0x0) returned 1
	[0299.150] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0299.150] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d1202 | out: pbBuffer=0x111d1202) returned 1
	[0299.150] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2c0 | out: pbBuffer=0x1140f2c0) returned 1
	[0299.151] GetFileType (hFile=0x1fc) returned 0x1
	[0299.151] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.151] WriteFile (in: hFile=0x1fc, lpBuffer=0x1146e000*, nNumberOfBytesToWrite=0x273e, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x1146e000*, lpNumberOfBytesWritten=0x110c3dfc*=0x273e, lpOverlapped=0x110c3e08) returned 1
	[0299.152] GetFileType (hFile=0x1fc) returned 0x1
	[0299.152] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x273e, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.152] GetFileType (hFile=0x1fc) returned 0x1
	[0299.152] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.152] WriteFile (in: hFile=0x1fc, lpBuffer=0x111e3880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x111e3880*, lpNumberOfBytesWritten=0x110c3dfc*=0x233, lpOverlapped=0x110c3e08) returned 1
	[0299.152] GetFileType (hFile=0x1fc) returned 0x1
	[0299.152] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x273e, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.153] CloseHandle (hObject=0x1fc) returned 1
	[0299.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf.tl30z")) returned 0x220
	[0299.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.156] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0299.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf")) returned 0x220
	[0299.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF", dwFileAttributes=0x220) returned 1
	[0299.159] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0299.243] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0299.243] ReadFile (in: hFile=0x224, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x25cc, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x11022e18*=0x25cc, lpOverlapped=0x0) returned 1
	[0299.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0299.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0299.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bc802 | out: pbBuffer=0x110bc802) returned 1
	[0299.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0299.252] GetFileType (hFile=0x224) returned 0x1
	[0299.252] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.252] WriteFile (in: hFile=0x224, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x25cc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x11031dfc*=0x25cc, lpOverlapped=0x11031e08) returned 1
	[0299.255] GetFileType (hFile=0x224) returned 0x1
	[0299.255] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x25cc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.255] GetFileType (hFile=0x224) returned 0x1
	[0299.255] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.255] WriteFile (in: hFile=0x224, lpBuffer=0x110a6a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110a6a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0299.255] GetFileType (hFile=0x224) returned 0x1
	[0299.256] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x25cc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.256] CloseHandle (hObject=0x224) returned 1
	[0299.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf.tl30z")) returned 0x220
	[0299.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.264] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0299.268] SetEvent (hEvent=0x234) returned 1
	[0299.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf")) returned 0x220
	[0299.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF", dwFileAttributes=0x220) returned 1
	[0299.269] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.364] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0299.364] ReadFile (in: hFile=0x250, lpBuffer=0x113f4000, nNumberOfBytesToRead=0xf00, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x113f4000*, lpNumberOfBytesRead=0x11022e18*=0xf00, lpOverlapped=0x0) returned 1
	[0299.368] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0299.368] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0299.368] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112d6802 | out: pbBuffer=0x112d6802) returned 1
	[0299.368] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112d6853 | out: pbBuffer=0x112d6853) returned 1
	[0299.368] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112d68ad | out: pbBuffer=0x112d68ad) returned 1
	[0299.369] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0299.369] GetFileType (hFile=0x250) returned 0x1
	[0299.369] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.369] WriteFile (in: hFile=0x250, lpBuffer=0x113e2000*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x113e2000*, lpNumberOfBytesWritten=0x1138bdfc*=0xf00, lpOverlapped=0x1138be08) returned 1
	[0299.370] GetFileType (hFile=0x250) returned 0x1
	[0299.370] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xf00, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.370] GetFileType (hFile=0x250) returned 0x1
	[0299.370] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.370] WriteFile (in: hFile=0x250, lpBuffer=0x11320a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x11320a80*, lpNumberOfBytesWritten=0x1138bdfc*=0x224, lpOverlapped=0x1138be08) returned 1
	[0299.371] GetFileType (hFile=0x250) returned 0x1
	[0299.371] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xf00, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.371] CloseHandle (hObject=0x250) returned 1
	[0299.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf.tl30z")) returned 0x220
	[0299.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.374] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0299.375] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0299.378] SetEvent (hEvent=0x234) returned 1
	[0299.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf")) returned 0x220
	[0299.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF", dwFileAttributes=0x220) returned 1
	[0299.379] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.457] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0299.457] ReadFile (in: hFile=0x250, lpBuffer=0x11148000, nNumberOfBytesToRead=0x81ce, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11148000*, lpNumberOfBytesRead=0x11287e18*=0x81ce, lpOverlapped=0x0) returned 1
	[0299.462] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3d0 | out: pbBuffer=0x1140f3d0) returned 1
	[0299.462] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112d7e02 | out: pbBuffer=0x112d7e02) returned 1
	[0299.462] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112d7e7d | out: pbBuffer=0x112d7e7d) returned 1
	[0299.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0299.464] GetFileType (hFile=0x250) returned 0x1
	[0299.464] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.464] WriteFile (in: hFile=0x250, lpBuffer=0x111dc000*, nNumberOfBytesToWrite=0x81ce, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x111dc000*, lpNumberOfBytesWritten=0x1138bdfc*=0x81ce, lpOverlapped=0x1138be08) returned 1
	[0299.465] GetFileType (hFile=0x250) returned 0x1
	[0299.465] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x81ce, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.465] GetFileType (hFile=0x250) returned 0x1
	[0299.465] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.465] WriteFile (in: hFile=0x250, lpBuffer=0x11160700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x11160700*, lpNumberOfBytesWritten=0x1138bdfc*=0x230, lpOverlapped=0x1138be08) returned 1
	[0299.466] GetFileType (hFile=0x250) returned 0x1
	[0299.466] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x81ce, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.466] CloseHandle (hObject=0x250) returned 1
	[0299.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf.tl30z")) returned 0x220
	[0299.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.469] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0299.473] SetEvent (hEvent=0x234) returned 1
	[0299.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg")) returned 0x220
	[0299.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG", dwFileAttributes=0x220) returned 1
	[0299.474] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg.tl30z"), dwFlags=0x1) returned 1
	[0299.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.613] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0299.614] ReadFile (in: hFile=0x250, lpBuffer=0x11430000, nNumberOfBytesToRead=0x5474, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11287e18*=0x5474, lpOverlapped=0x0) returned 1
	[0299.636] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0299.636] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267302 | out: pbBuffer=0x11267302) returned 1
	[0299.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267328 | out: pbBuffer=0x11267328) returned 1
	[0299.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0299.639] GetFileType (hFile=0x250) returned 0x1
	[0299.640] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.640] WriteFile (in: hFile=0x250, lpBuffer=0x110cc000*, nNumberOfBytesToWrite=0x5474, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110cc000*, lpNumberOfBytesWritten=0x11031dfc*=0x5474, lpOverlapped=0x11031e08) returned 1
	[0299.643] GetFileType (hFile=0x250) returned 0x1
	[0299.643] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x5474, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.644] GetFileType (hFile=0x250) returned 0x1
	[0299.644] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.644] WriteFile (in: hFile=0x250, lpBuffer=0x11231c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11231c00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0299.644] GetFileType (hFile=0x250) returned 0x1
	[0299.644] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x5474, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.644] CloseHandle (hObject=0x250) returned 1
	[0299.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg.tl30z")) returned 0x220
	[0299.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0299.654] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0299.659] SetEvent (hEvent=0x118) returned 1
	[0299.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf")) returned 0x220
	[0299.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF", dwFileAttributes=0x220) returned 1
	[0299.660] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.777] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0299.777] ReadFile (in: hFile=0x250, lpBuffer=0x11110000, nNumberOfBytesToRead=0x9b3a, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11110000*, lpNumberOfBytesRead=0x11287e18*=0x9b3a, lpOverlapped=0x0) returned 1
	[0299.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0299.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6578 | out: pbBuffer=0x113e6578) returned 1
	[0299.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1111c702 | out: pbBuffer=0x1111c702) returned 1
	[0299.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1111c762 | out: pbBuffer=0x1111c762) returned 1
	[0299.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1111c7a9 | out: pbBuffer=0x1111c7a9) returned 1
	[0299.785] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65b0 | out: pbBuffer=0x113e65b0) returned 1
	[0299.787] GetFileType (hFile=0x250) returned 0x1
	[0299.787] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.787] WriteFile (in: hFile=0x250, lpBuffer=0x111de000*, nNumberOfBytesToWrite=0x9b3a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111de000*, lpNumberOfBytesWritten=0x11031dfc*=0x9b3a, lpOverlapped=0x11031e08) returned 1
	[0299.788] GetFileType (hFile=0x250) returned 0x1
	[0299.788] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x9b3a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.788] GetFileType (hFile=0x250) returned 0x1
	[0299.788] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.788] WriteFile (in: hFile=0x250, lpBuffer=0x113cb880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113cb880*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0299.789] GetFileType (hFile=0x250) returned 0x1
	[0299.789] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x9b3a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.789] CloseHandle (hObject=0x250) returned 1
	[0299.790] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf.tl30z")) returned 0x220
	[0299.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.792] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0299.795] SetEvent (hEvent=0x118) returned 1
	[0299.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg")) returned 0x220
	[0299.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG", dwFileAttributes=0x220) returned 1
	[0299.796] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg.tl30z"), dwFlags=0x1) returned 1
	[0299.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0299.882] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0299.882] ReadFile (in: hFile=0x1fc, lpBuffer=0x113aa000, nNumberOfBytesToRead=0xe2e9, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11287e18*=0xe2e9, lpOverlapped=0x0) returned 1
	[0299.889] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158110 | out: pbBuffer=0x11158110) returned 1
	[0299.889] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bc802 | out: pbBuffer=0x111bc802) returned 1
	[0299.889] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158140 | out: pbBuffer=0x11158140) returned 1
	[0299.891] GetFileType (hFile=0x1fc) returned 0x1
	[0299.891] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.891] WriteFile (in: hFile=0x1fc, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0xe2e9, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x11031dfc*=0xe2e9, lpOverlapped=0x11031e08) returned 1
	[0299.892] GetFileType (hFile=0x1fc) returned 0x1
	[0299.892] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xe2e9, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.892] GetFileType (hFile=0x1fc) returned 0x1
	[0299.892] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.892] WriteFile (in: hFile=0x1fc, lpBuffer=0x112bca80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112bca80*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0299.893] GetFileType (hFile=0x1fc) returned 0x1
	[0299.893] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xe2e9, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.893] CloseHandle (hObject=0x1fc) returned 1
	[0299.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg.tl30z")) returned 0x220
	[0299.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0299.897] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0299.898] SetEvent (hEvent=0x234) returned 1
	[0299.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf")) returned 0x220
	[0299.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF", dwFileAttributes=0x220) returned 1
	[0299.899] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0300.020] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0300.020] ReadFile (in: hFile=0x250, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x332a, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11287e18*=0x332a, lpOverlapped=0x0) returned 1
	[0300.029] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0300.029] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4b8 | out: pbBuffer=0x1104e4b8) returned 1
	[0300.029] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b7e02 | out: pbBuffer=0x112b7e02) returned 1
	[0300.029] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0300.030] GetFileType (hFile=0x250) returned 0x1
	[0300.030] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.030] WriteFile (in: hFile=0x250, lpBuffer=0x112a6000*, nNumberOfBytesToWrite=0x332a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112a6000*, lpNumberOfBytesWritten=0x1133ddfc*=0x332a, lpOverlapped=0x1133de08) returned 1
	[0300.031] GetFileType (hFile=0x250) returned 0x1
	[0300.031] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x332a, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.031] GetFileType (hFile=0x250) returned 0x1
	[0300.031] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.031] WriteFile (in: hFile=0x250, lpBuffer=0x110e4700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110e4700*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0300.031] GetFileType (hFile=0x250) returned 0x1
	[0300.031] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x332a, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.032] CloseHandle (hObject=0x250) returned 1
	[0300.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf.tl30z")) returned 0x220
	[0300.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.036] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0300.040] SetEvent (hEvent=0x234) returned 1
	[0300.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf")) returned 0x220
	[0300.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF", dwFileAttributes=0x220) returned 1
	[0300.040] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0300.091] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0300.091] ReadFile (in: hFile=0x1d0, lpBuffer=0x110a2000, nNumberOfBytesToRead=0x4de6, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110a2000*, lpNumberOfBytesRead=0x11287e18*=0x4de6, lpOverlapped=0x0) returned 1
	[0300.340] SetEvent (hEvent=0x150) returned 1
	[0300.340] SetEvent (hEvent=0x134) returned 1
	[0300.342] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0300.342] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122e802 | out: pbBuffer=0x1122e802) returned 1
	[0300.343] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f160 | out: pbBuffer=0x1140f160) returned 1
	[0300.344] GetFileType (hFile=0x1d0) returned 0x1
	[0300.344] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.344] WriteFile (in: hFile=0x1d0, lpBuffer=0x11c1c000*, nNumberOfBytesToWrite=0x4de6, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11c1c000*, lpNumberOfBytesWritten=0x11339dfc*=0x4de6, lpOverlapped=0x11339e08) returned 1
	[0300.344] GetFileType (hFile=0x1d0) returned 0x1
	[0300.345] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x4de6, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.345] GetFileType (hFile=0x1d0) returned 0x1
	[0300.345] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.345] WriteFile (in: hFile=0x1d0, lpBuffer=0x1124aa80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1124aa80*, lpNumberOfBytesWritten=0x11339dfc*=0x233, lpOverlapped=0x11339e08) returned 1
	[0300.345] GetFileType (hFile=0x1d0) returned 0x1
	[0300.345] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x4de6, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.345] CloseHandle (hObject=0x1d0) returned 1
	[0300.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf.tl30z")) returned 0x220
	[0300.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.347] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0300.403] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0300.426] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0300.426] SetEvent (hEvent=0x274) returned 1
	[0300.426] SetEvent (hEvent=0x27c) returned 1
	[0300.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x112cc8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a4
	[0300.431] CloseHandle (hObject=0x2a4) returned 1
	[0300.431] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0300.440] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0300.440] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0300.444] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0300.444] SetEvent (hEvent=0x2a8) returned 1
	[0300.444] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0x1) returned 0x102
	[0300.446] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0300.446] SetEvent (hEvent=0x1f0) returned 1
	[0300.446] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0300.470] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0300.481] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0300.546] SetEvent (hEvent=0x22c) returned 1
	[0300.546] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0300.553] SetEvent (hEvent=0x27c) returned 1
	[0300.553] SetEvent (hEvent=0x160) returned 1
	[0300.553] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0300.559] SetEvent (hEvent=0x160) returned 1
	[0300.559] SetEvent (hEvent=0x174) returned 1
	[0300.559] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0300.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf")) returned 0x220
	[0300.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF", dwFileAttributes=0x220) returned 1
	[0300.614] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x29c
	[0300.676] GetConsoleMode (in: hConsoleHandle=0x29c, lpMode=0x111d3e08 | out: lpMode=0x111d3e08) returned 0
	[0300.676] ReadFile (in: hFile=0x29c, lpBuffer=0x11274000, nNumberOfBytesToRead=0x1df8, lpNumberOfBytesRead=0x111d3e18, lpOverlapped=0x0 | out: lpBuffer=0x11274000*, lpNumberOfBytesRead=0x111d3e18*=0x1df8, lpOverlapped=0x0) returned 1
	[0301.008] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0301.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324e0 | out: pbBuffer=0x113324e0) returned 1
	[0301.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11281302 | out: pbBuffer=0x11281302) returned 1
	[0301.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11281366 | out: pbBuffer=0x11281366) returned 1
	[0301.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0301.081] GetFileType (hFile=0x29c) returned 0x1
	[0301.081] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11361de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.082] WriteFile (in: hFile=0x29c, lpBuffer=0x11222000*, nNumberOfBytesToWrite=0x1df8, lpNumberOfBytesWritten=0x11361dfc, lpOverlapped=0x11361e08 | out: lpBuffer=0x11222000*, lpNumberOfBytesWritten=0x11361dfc*=0x1df8, lpOverlapped=0x11361e08) returned 1
	[0301.091] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0301.125] GetFileType (hFile=0x29c) returned 0x1
	[0301.125] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x1df8, lpNewFilePointer=0x0, dwMoveMethod=0x11361de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.125] SetEvent (hEvent=0x124) returned 1
	[0301.125] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0301.131] SetEvent (hEvent=0x25c) returned 1
	[0301.131] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0308.677] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0308.688] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0308.691] SetEvent (hEvent=0x26c) returned 1
	[0308.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid")) returned 0x220
	[0308.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID", dwFileAttributes=0x220) returned 1
	[0308.692] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.738] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0308.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0308.741] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0308.741] ReadFile (in: hFile=0x21c, lpBuffer=0x1121a480, nNumberOfBytesToRead=0x19f4, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1121a480*, lpNumberOfBytesRead=0x1128ae18*=0x19f4, lpOverlapped=0x0) returned 1
	[0308.875] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0308.936] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0308.936] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c11902 | out: pbBuffer=0x11c11902) returned 1
	[0308.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c11955 | out: pbBuffer=0x11c11955) returned 1
	[0308.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0308.937] GetFileType (hFile=0x21c) returned 0x1
	[0308.937] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.937] WriteFile (in: hFile=0x21c, lpBuffer=0x113e4000*, nNumberOfBytesToWrite=0x19f4, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x113e4000*, lpNumberOfBytesWritten=0x1145bdfc*=0x19f4, lpOverlapped=0x1145be08) returned 1
	[0308.938] GetFileType (hFile=0x21c) returned 0x1
	[0308.938] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x19f4, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.938] GetFileType (hFile=0x21c) returned 0x1
	[0308.938] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.938] WriteFile (in: hFile=0x21c, lpBuffer=0x11c0ee00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x11c0ee00*, lpNumberOfBytesWritten=0x1145bdfc*=0x230, lpOverlapped=0x1145be08) returned 1
	[0308.938] GetFileType (hFile=0x21c) returned 0x1
	[0308.939] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x19f4, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.939] CloseHandle (hObject=0x21c) returned 1
	[0308.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid.tl30z")) returned 0x220
	[0308.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0308.939] SetEvent (hEvent=0x234) returned 1
	[0308.939] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0309.273] SetEvent (hEvent=0x164) returned 1
	[0309.273] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0309.280] SetEvent (hEvent=0x1b0) returned 1
	[0309.280] SetEvent (hEvent=0x1e0) returned 1
	[0309.280] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0313.689] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0313.701] SetEvent (hEvent=0x1bc) returned 1
	[0313.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp")) returned 0x220
	[0313.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP", dwFileAttributes=0x220) returned 1
	[0313.701] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254
	[0313.757] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0313.757] ReadFile (in: hFile=0x254, lpBuffer=0x112bc000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x112bc000*, lpNumberOfBytesRead=0x11022e18*=0x7db8, lpOverlapped=0x0) returned 1
	[0313.827] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0313.834] SetEvent (hEvent=0x1e0) returned 1
	[0313.835] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0317.634] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0317.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf")) returned 0x220
	[0317.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF", dwFileAttributes=0x220) returned 1
	[0317.637] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0317.782] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1123ae08 | out: lpMode=0x1123ae08) returned 0
	[0317.782] ReadFile (in: hFile=0x2a0, lpBuffer=0x113ec000, nNumberOfBytesToRead=0x36aa, lpNumberOfBytesRead=0x1123ae18, lpOverlapped=0x0 | out: lpBuffer=0x113ec000*, lpNumberOfBytesRead=0x1123ae18*=0x36aa, lpOverlapped=0x0) returned 1
	[0317.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63c0 | out: pbBuffer=0x113e63c0) returned 1
	[0317.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63b8 | out: pbBuffer=0x113e63b8) returned 1
	[0317.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b9c02 | out: pbBuffer=0x113b9c02) returned 1
	[0317.840] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b9c75 | out: pbBuffer=0x113b9c75) returned 1
	[0317.840] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b9cd7 | out: pbBuffer=0x113b9cd7) returned 1
	[0317.840] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0317.841] GetFileType (hFile=0x2a0) returned 0x1
	[0317.841] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.841] WriteFile (in: hFile=0x2a0, lpBuffer=0x11208000*, nNumberOfBytesToWrite=0x36aa, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11208000*, lpNumberOfBytesWritten=0x1102bdfc*=0x36aa, lpOverlapped=0x1102be08) returned 1
	[0317.841] GetFileType (hFile=0x2a0) returned 0x1
	[0317.841] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x36aa, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.841] GetFileType (hFile=0x2a0) returned 0x1
	[0317.841] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.842] WriteFile (in: hFile=0x2a0, lpBuffer=0x112df180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112df180*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0317.842] GetFileType (hFile=0x2a0) returned 0x1
	[0317.842] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x36aa, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.842] CloseHandle (hObject=0x2a0) returned 1
	[0317.861] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0
	[0317.884] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) 

Thread:
	id = 36
	os_tid = 0xf64

	[0212.687] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0xb9ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xb9ff30*=0x214) returned 1
	[0212.687] VirtualQuery (in: lpAddress=0xb9ff40, lpBuffer=0xb9ff40, dwLength=0x1c | out: lpBuffer=0xb9ff40*(BaseAddress=0xb9f000, AllocationBase=0xaa0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0212.687] SetEvent (hEvent=0x1b0) returned 1
	[0212.687] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x218
	[0212.687] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0212.762] GetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 0x20
	[0212.762] SetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx", dwFileAttributes=0x20) returned 1
	[0212.763] MoveFileExW (lpExistingFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), lpNewFileName="C:\\Logs\\Key Management Service.evtx.tl30z" (normalized: "c:\\logs\\key management service.evtx.tl30z"), dwFlags=0x1) returned 1
	[0220.071] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0220.210] SetEvent (hEvent=0x210) returned 1
	[0220.210] SetEvent (hEvent=0x118) returned 1
	[0220.211] ReadFile (in: hFile=0x21c, lpBuffer=0x11396000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11555e18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x11555e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0220.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0220.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107a802 | out: pbBuffer=0x1107a802) returned 1
	[0220.218] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107a849 | out: pbBuffer=0x1107a849) returned 1
	[0220.218] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107a8e0 | out: pbBuffer=0x1107a8e0) returned 1
	[0220.218] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0220.220] GetFileType (hFile=0x21c) returned 0x1
	[0220.220] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0220.220] WriteFile (in: hFile=0x21c, lpBuffer=0x1159c000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1159c000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0220.231] GetFileType (hFile=0x21c) returned 0x1
	[0220.231] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0220.231] GetFileType (hFile=0x21c) returned 0x1
	[0220.231] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0220.231] WriteFile (in: hFile=0x21c, lpBuffer=0x1163ae00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1163ae00*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0220.232] GetFileType (hFile=0x21c) returned 0x1
	[0220.232] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0220.232] CloseHandle (hObject=0x21c) returned 1
	[0220.697] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.tl30z")) returned 0x20
	[0220.697] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0220.983] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0242.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar")) returned 0x20
	[0242.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", dwFileAttributes=0x20) returned 1
	[0242.263] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.tl30z"), dwFlags=0x1) returned 1
	[0245.236] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0245.336] SetEvent (hEvent=0x134) returned 1
	[0245.336] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0245.381] SetEvent (hEvent=0x134) returned 1
	[0245.381] SetEvent (hEvent=0x1b0) returned 1
	[0245.381] SetEvent (hEvent=0x248) returned 1
	[0245.381] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0245.706] ReadFile (in: hFile=0x1d8, lpBuffer=0x110ce000, nNumberOfBytesToRead=0x110bf, lpNumberOfBytesRead=0x112efe18, lpOverlapped=0x0 | out: lpBuffer=0x110ce000*, lpNumberOfBytesRead=0x112efe18*=0x110bf, lpOverlapped=0x0) returned 1
	[0245.810] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0245.933] SetEvent (hEvent=0x1b0) returned 1
	[0245.933] SetEvent (hEvent=0x26c) returned 1
	[0245.933] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0246.752] SetEvent (hEvent=0x248) returned 1
	[0246.752] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0246.766] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0247.213] SetEvent (hEvent=0x234) returned 1
	[0247.213] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0247.223] SetEvent (hEvent=0x248) returned 1
	[0247.224] GetFileType (hFile=0x1f4) returned 0x1
	[0247.224] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0247.224] WriteFile (in: hFile=0x1f4, lpBuffer=0x114aa000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x114aa000*, lpNumberOfBytesWritten=0x112efdfc*=0x100000, lpOverlapped=0x112efe08) returned 1
	[0247.234] GetFileType (hFile=0x1f4) returned 0x1
	[0247.234] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x100000, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0247.234] SetEvent (hEvent=0x210) returned 1
	[0247.234] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0247.246] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0247.246] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0247.267] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0247.268] SetEvent (hEvent=0x1e8) returned 1
	[0247.268] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0247.277] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0247.277] GetFileType (hFile=0x1f4) returned 0x1
	[0247.278] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0247.278] WriteFile (in: hFile=0x1f4, lpBuffer=0x11334000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11334000*, lpNumberOfBytesWritten=0x112efdfc*=0x2d8, lpOverlapped=0x112efe08) returned 1
	[0247.289] GetFileType (hFile=0x1f4) returned 0x1
	[0247.289] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x100000, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0247.289] CloseHandle (hObject=0x1f4) returned 1
	[0248.272] SetEvent (hEvent=0x150) returned 1
	[0248.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.tl30z")) returned 0x20
	[0248.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0248.274] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0248.420] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0250.924] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0250.940] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0250.961] SetEvent (hEvent=0x24c) returned 1
	[0250.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar")) returned 0x20
	[0250.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", dwFileAttributes=0x20) returned 1
	[0250.962] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.tl30z"), dwFlags=0x1) returned 1
	[0251.865] SetEvent (hEvent=0x118) returned 1
	[0251.865] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0251.874] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0251.874] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0251.874] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11031e08 | out: lpMode=0x11031e08) returned 0
	[0251.878] ReadFile (in: hFile=0x1d8, lpBuffer=0x114d8000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x11031e18, lpOverlapped=0x0 | out: lpBuffer=0x114d8000*, lpNumberOfBytesRead=0x11031e18*=0x100000, lpOverlapped=0x0) returned 1
	[0251.954] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0251.954] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11410802 | out: pbBuffer=0x11410802) returned 1
	[0251.955] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0251.971] SwitchToThread () returned 1
	[0251.975] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0252.330] SwitchToThread () returned 1
	[0252.372] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0252.398] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0252.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 0x20
	[0252.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy", dwFileAttributes=0x20) returned 1
	[0252.416] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.tl30z"), dwFlags=0x1) returned 1
	[0252.784] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0252.792] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0252.792] ReadFile (in: hFile=0x1fc, lpBuffer=0x1133c000, nNumberOfBytesToRead=0x9a2, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1133c000*, lpNumberOfBytesRead=0x11428e18*=0x9a2, lpOverlapped=0x0) returned 1
	[0252.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0252.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113323b8 | out: pbBuffer=0x113323b8) returned 1
	[0252.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138a802 | out: pbBuffer=0x1138a802) returned 1
	[0252.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138a8be | out: pbBuffer=0x1138a8be) returned 1
	[0252.805] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323f0 | out: pbBuffer=0x113323f0) returned 1
	[0252.805] GetFileType (hFile=0x1fc) returned 0x1
	[0252.805] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.805] WriteFile (in: hFile=0x1fc, lpBuffer=0x11364000*, nNumberOfBytesToWrite=0x9a2, lpNumberOfBytesWritten=0x113ebdfc, lpOverlapped=0x113ebe08 | out: lpBuffer=0x11364000*, lpNumberOfBytesWritten=0x113ebdfc*=0x9a2, lpOverlapped=0x113ebe08) returned 1
	[0252.806] GetFileType (hFile=0x1fc) returned 0x1
	[0252.806] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x9a2, lpNewFilePointer=0x0, dwMoveMethod=0x113ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.806] GetFileType (hFile=0x1fc) returned 0x1
	[0252.806] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.806] WriteFile (in: hFile=0x1fc, lpBuffer=0x1137ea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113ebdfc, lpOverlapped=0x113ebe08 | out: lpBuffer=0x1137ea80*, lpNumberOfBytesWritten=0x113ebdfc*=0x227, lpOverlapped=0x113ebe08) returned 1
	[0252.806] GetFileType (hFile=0x1fc) returned 0x1
	[0252.807] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x9a2, lpNewFilePointer=0x0, dwMoveMethod=0x113ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.807] CloseHandle (hObject=0x1fc) returned 1
	[0252.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.tl30z")) returned 0x20
	[0252.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.tl30z", dwFileAttributes=0x21) returned 1
	[0252.820] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0252.992] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0253.002] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0253.018] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0253.117] SetEvent (hEvent=0x234) returned 1
	[0253.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 0x20
	[0253.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release", dwFileAttributes=0x20) returned 1
	[0253.118] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.tl30z"), dwFlags=0x1) returned 1
	[0253.119] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0253.119] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0253.119] ReadFile (in: hFile=0x288, lpBuffer=0x113c2000, nNumberOfBytesToRead=0x210, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x113c2000*, lpNumberOfBytesRead=0x11023e18*=0x210, lpOverlapped=0x0) returned 1
	[0253.123] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e120 | out: pbBuffer=0x1142e120) returned 1
	[0253.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e118 | out: pbBuffer=0x1142e118) returned 1
	[0253.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c0802 | out: pbBuffer=0x111c0802) returned 1
	[0253.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c08cf | out: pbBuffer=0x111c08cf) returned 1
	[0253.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e150 | out: pbBuffer=0x1142e150) returned 1
	[0253.124] GetFileType (hFile=0x288) returned 0x1
	[0253.124] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.125] WriteFile (in: hFile=0x288, lpBuffer=0x111c6600*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111c6600*, lpNumberOfBytesWritten=0x1102bdfc*=0x210, lpOverlapped=0x1102be08) returned 1
	[0253.125] GetFileType (hFile=0x288) returned 0x1
	[0253.125] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.125] GetFileType (hFile=0x288) returned 0x1
	[0253.125] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.126] WriteFile (in: hFile=0x288, lpBuffer=0x111d2a80*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111d2a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x21e, lpOverlapped=0x1102be08) returned 1
	[0253.147] GetFileType (hFile=0x288) returned 0x1
	[0253.147] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x210, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.147] CloseHandle (hObject=0x288) returned 1
	[0253.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.tl30z")) returned 0x20
	[0253.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.tl30z", dwFileAttributes=0x21) returned 1
	[0253.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml")) returned 0x20
	[0253.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", dwFileAttributes=0x20) returned 1
	[0253.149] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.tl30z"), dwFlags=0x1) returned 1
	[0253.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0253.151] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0253.151] VirtualAlloc (lpAddress=0x11e66000, dwSize=0x4a000, flAllocationType=0x1000, flProtect=0x4) returned 0x11e66000
	[0253.164] ReadFile (in: hFile=0x288, lpBuffer=0x11e66000, nNumberOfBytesToRead=0x488f2, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11e66000*, lpNumberOfBytesRead=0x11286e18*=0x488f2, lpOverlapped=0x0) returned 1
	[0253.219] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2a0 | out: pbBuffer=0x1142e2a0) returned 1
	[0253.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c1202 | out: pbBuffer=0x111c1202) returned 1
	[0253.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c125d | out: pbBuffer=0x111c125d) returned 1
	[0253.220] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2d0 | out: pbBuffer=0x1142e2d0) returned 1
	[0253.225] VirtualAlloc (lpAddress=0x11eba000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0x11eba000
	[0253.238] VirtualAlloc (lpAddress=0x11ef8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11ef8000
	[0253.240] VirtualAlloc (lpAddress=0x11efc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11efc000
	[0253.241] VirtualAlloc (lpAddress=0x11f00000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11f00000
	[0253.243] VirtualAlloc (lpAddress=0x11f04000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x11f04000
	[0253.288] SetEvent (hEvent=0x1e8) returned 1
	[0253.288] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0253.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0253.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0253.298] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0253.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0253.300] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0253.300] ReadFile (in: hFile=0x204, lpBuffer=0x11416600, nNumberOfBytesToRead=0x5fd, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11416600*, lpNumberOfBytesRead=0x11288e18*=0x5fd, lpOverlapped=0x0) returned 1
	[0253.318] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0253.554] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332200 | out: pbBuffer=0x11332200) returned 1
	[0253.555] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11384802 | out: pbBuffer=0x11384802) returned 1
	[0253.555] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332230 | out: pbBuffer=0x11332230) returned 1
	[0253.555] GetFileType (hFile=0x204) returned 0x1
	[0253.555] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.556] WriteFile (in: hFile=0x204, lpBuffer=0x113b5000*, nNumberOfBytesToWrite=0x5fd, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113b5000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5fd, lpOverlapped=0x1102be08) returned 1
	[0253.556] GetFileType (hFile=0x204) returned 0x1
	[0253.556] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x5fd, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.556] GetFileType (hFile=0x204) returned 0x1
	[0253.556] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.556] WriteFile (in: hFile=0x204, lpBuffer=0x1135ea80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135ea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0253.557] GetFileType (hFile=0x204) returned 0x1
	[0253.557] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x5fd, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.557] CloseHandle (hObject=0x204) returned 1
	[0253.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0253.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0253.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0253.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0253.559] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0253.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0253.920] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0253.920] ReadFile (in: hFile=0x204, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x122ec, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x1128ae18*=0x122ec, lpOverlapped=0x0) returned 1
	[0253.929] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e290 | out: pbBuffer=0x1142e290) returned 1
	[0253.929] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136f302 | out: pbBuffer=0x1136f302) returned 1
	[0253.929] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136f3a2 | out: pbBuffer=0x1136f3a2) returned 1
	[0253.929] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136f3dc | out: pbBuffer=0x1136f3dc) returned 1
	[0253.930] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2c0 | out: pbBuffer=0x1142e2c0) returned 1
	[0253.931] VirtualAlloc (lpAddress=0x11faa000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11faa000
	[0253.932] VirtualAlloc (lpAddress=0x11fae000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x11fae000
	[0253.934] VirtualAlloc (lpAddress=0x11fb6000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x11fb6000
	[0253.937] VirtualAlloc (lpAddress=0x11fc6000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x11fc6000
	[0253.945] GetFileType (hFile=0x204) returned 0x1
	[0253.945] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f9bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.945] WriteFile (in: hFile=0x204, lpBuffer=0x11fc6000*, nNumberOfBytesToWrite=0x122ec, lpNumberOfBytesWritten=0x11f9bdfc, lpOverlapped=0x11f9be08 | out: lpBuffer=0x11fc6000*, lpNumberOfBytesWritten=0x11f9bdfc*=0x122ec, lpOverlapped=0x11f9be08) returned 1
	[0253.946] GetFileType (hFile=0x204) returned 0x1
	[0253.951] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x122ec, lpNewFilePointer=0x0, dwMoveMethod=0x11f9bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.951] GetFileType (hFile=0x204) returned 0x1
	[0253.951] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f9bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.952] WriteFile (in: hFile=0x204, lpBuffer=0x110c9880*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11f9bdfc, lpOverlapped=0x11f9be08 | out: lpBuffer=0x110c9880*, lpNumberOfBytesWritten=0x11f9bdfc*=0x239, lpOverlapped=0x11f9be08) returned 1
	[0253.961] GetFileType (hFile=0x204) returned 0x1
	[0253.961] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x122ec, lpNewFilePointer=0x0, dwMoveMethod=0x11f9bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.961] CloseHandle (hObject=0x204) returned 1
	[0253.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0253.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0253.981] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0254.086] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0254.109] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0254.372] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0254.454] SetEvent (hEvent=0x134) returned 1
	[0254.455] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0254.462] SetEvent (hEvent=0x24c) returned 1
	[0254.462] SetEvent (hEvent=0x124) returned 1
	[0254.462] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0254.466] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0254.467] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0254.475] SetEvent (hEvent=0x118) returned 1
	[0254.475] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0254.480] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0254.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0254.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0254.481] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0255.201] SetEvent (hEvent=0x150) returned 1
	[0255.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0255.297] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11f6be08 | out: lpMode=0x11f6be08) returned 0
	[0255.297] ReadFile (in: hFile=0x250, lpBuffer=0x1138ca00, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x11f6be18, lpOverlapped=0x0 | out: lpBuffer=0x1138ca00*, lpNumberOfBytesRead=0x11f6be18*=0x4ed, lpOverlapped=0x0) returned 1
	[0255.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e7c0 | out: pbBuffer=0x1104e7c0) returned 1
	[0255.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e7b8 | out: pbBuffer=0x1104e7b8) returned 1
	[0255.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11451102 | out: pbBuffer=0x11451102) returned 1
	[0255.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114511ad | out: pbBuffer=0x114511ad) returned 1
	[0255.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e7f0 | out: pbBuffer=0x1104e7f0) returned 1
	[0255.309] GetFileType (hFile=0x250) returned 0x1
	[0255.309] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.309] WriteFile (in: hFile=0x250, lpBuffer=0x111ea000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x11f6bdfc, lpOverlapped=0x11f6be08 | out: lpBuffer=0x111ea000*, lpNumberOfBytesWritten=0x11f6bdfc*=0x4ed, lpOverlapped=0x11f6be08) returned 1
	[0255.309] GetFileType (hFile=0x250) returned 0x1
	[0255.309] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.310] GetFileType (hFile=0x250) returned 0x1
	[0255.310] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.310] WriteFile (in: hFile=0x250, lpBuffer=0x11472380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11f6bdfc, lpOverlapped=0x11f6be08 | out: lpBuffer=0x11472380*, lpNumberOfBytesWritten=0x11f6bdfc*=0x22d, lpOverlapped=0x11f6be08) returned 1
	[0255.310] GetFileType (hFile=0x250) returned 0x1
	[0255.310] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.310] CloseHandle (hObject=0x250) returned 1
	[0255.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0255.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0255.356] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0255.432] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0255.466] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0255.731] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0255.859] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0255.886] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0255.953] SetEvent (hEvent=0x210) returned 1
	[0255.954] SetEvent (hEvent=0x1f0) returned 1
	[0255.954] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0255.959] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0255.959] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0255.964] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0255.965] SetEvent (hEvent=0x210) returned 1
	[0255.965] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0255.974] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0255.975] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0257.628] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0257.634] SetEvent (hEvent=0x234) returned 1
	[0257.635] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0257.644] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0257.771] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0257.880] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0257.893] SetEvent (hEvent=0x210) returned 1
	[0257.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml")) returned 0x220
	[0257.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", dwFileAttributes=0x220) returned 1
	[0257.894] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.tl30z"), dwFlags=0x1) returned 1
	[0258.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0258.551] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0258.551] ReadFile (in: hFile=0x1d4, lpBuffer=0x11096000, nNumberOfBytesToRead=0x25231, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11096000*, lpNumberOfBytesRead=0x11423e18*=0x25231, lpOverlapped=0x0) returned 1
	[0258.564] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0258.564] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c6802 | out: pbBuffer=0x110c6802) returned 1
	[0258.564] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c686e | out: pbBuffer=0x110c686e) returned 1
	[0258.564] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c68df | out: pbBuffer=0x110c68df) returned 1
	[0258.564] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0258.568] GetFileType (hFile=0x1d4) returned 0x1
	[0258.568] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0258.568] WriteFile (in: hFile=0x1d4, lpBuffer=0x11216000*, nNumberOfBytesToWrite=0x25231, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11216000*, lpNumberOfBytesWritten=0x1102bdfc*=0x25231, lpOverlapped=0x1102be08) returned 1
	[0258.570] GetFileType (hFile=0x1d4) returned 0x1
	[0258.570] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x25231, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0258.570] GetFileType (hFile=0x1d4) returned 0x1
	[0258.570] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0258.571] WriteFile (in: hFile=0x1d4, lpBuffer=0x1110aa80*, nNumberOfBytesToWrite=0x242, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1110aa80*, lpNumberOfBytesWritten=0x1102bdfc*=0x242, lpOverlapped=0x1102be08) returned 1
	[0258.588] GetFileType (hFile=0x1d4) returned 0x1
	[0258.588] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x25231, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0258.588] CloseHandle (hObject=0x1d4) returned 1
	[0258.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.tl30z")) returned 0x220
	[0258.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0258.670] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0258.935] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0258.952] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0258.967] SetEvent (hEvent=0x1b0) returned 1
	[0258.967] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0259.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 0x220
	[0259.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", dwFileAttributes=0x220) returned 1
	[0259.058] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.tl30z"), dwFlags=0x1) returned 1
	[0259.590] SetEvent (hEvent=0x150) returned 1
	[0259.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0259.597] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0259.597] ReadFile (in: hFile=0x288, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x1a1c, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x1131de18*=0x1a1c, lpOverlapped=0x0) returned 1
	[0259.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0259.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0259.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c7d02 | out: pbBuffer=0x112c7d02) returned 1
	[0259.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c7d4e | out: pbBuffer=0x112c7d4e) returned 1
	[0259.602] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0259.602] GetFileType (hFile=0x288) returned 0x1
	[0259.602] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.602] WriteFile (in: hFile=0x288, lpBuffer=0x1133c000*, nNumberOfBytesToWrite=0x1a1c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1133c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1a1c, lpOverlapped=0x1102be08) returned 1
	[0259.603] GetFileType (hFile=0x288) returned 0x1
	[0259.603] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1a1c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.603] GetFileType (hFile=0x288) returned 0x1
	[0259.603] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.603] WriteFile (in: hFile=0x288, lpBuffer=0x1132e700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1132e700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0259.603] GetFileType (hFile=0x288) returned 0x1
	[0259.604] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1a1c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.604] CloseHandle (hObject=0x288) returned 1
	[0259.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.tl30z")) returned 0x220
	[0259.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0259.620] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0259.730] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0259.761] SetEvent (hEvent=0x26c) returned 1
	[0259.761] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 0x220
	[0259.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", dwFileAttributes=0x220) returned 1
	[0259.762] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.tl30z"), dwFlags=0x1) returned 1
	[0259.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0260.001] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0260.001] ReadFile (in: hFile=0x1d8, lpBuffer=0x112fc000, nNumberOfBytesToRead=0x205, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x112fc000*, lpNumberOfBytesRead=0x11287e18*=0x205, lpOverlapped=0x0) returned 1
	[0260.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0260.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130a802 | out: pbBuffer=0x1130a802) returned 1
	[0260.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130a889 | out: pbBuffer=0x1130a889) returned 1
	[0260.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130a89a | out: pbBuffer=0x1130a89a) returned 1
	[0260.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0260.006] GetFileType (hFile=0x1d8) returned 0x1
	[0260.006] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.006] WriteFile (in: hFile=0x1d8, lpBuffer=0x11310600*, nNumberOfBytesToWrite=0x205, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x11310600*, lpNumberOfBytesWritten=0x112bbdfc*=0x205, lpOverlapped=0x112bbe08) returned 1
	[0260.006] GetFileType (hFile=0x1d8) returned 0x1
	[0260.006] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x205, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.006] GetFileType (hFile=0x1d8) returned 0x1
	[0260.007] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.007] WriteFile (in: hFile=0x1d8, lpBuffer=0x110d0a80*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x110d0a80*, lpNumberOfBytesWritten=0x112bbdfc*=0x221, lpOverlapped=0x112bbe08) returned 1
	[0260.012] GetFileType (hFile=0x1d8) returned 0x1
	[0260.012] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x205, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.012] CloseHandle (hObject=0x1d8) returned 1
	[0260.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.tl30z")) returned 0x220
	[0260.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0260.116] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0260.121] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0260.188] SetEvent (hEvent=0x118) returned 1
	[0260.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 0x220
	[0260.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", dwFileAttributes=0x220) returned 1
	[0260.189] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.tl30z"), dwFlags=0x1) returned 1
	[0260.482] SetEvent (hEvent=0x150) returned 1
	[0260.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0260.524] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0260.524] ReadFile (in: hFile=0x1fc, lpBuffer=0x11440000, nNumberOfBytesToRead=0x30c2, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11440000*, lpNumberOfBytesRead=0x1128ae18*=0x30c2, lpOverlapped=0x0) returned 1
	[0260.530] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0260.530] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332808 | out: pbBuffer=0x11332808) returned 1
	[0260.531] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e5c02 | out: pbBuffer=0x110e5c02) returned 1
	[0260.531] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332840 | out: pbBuffer=0x11332840) returned 1
	[0260.531] GetFileType (hFile=0x1fc) returned 0x1
	[0260.532] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.532] WriteFile (in: hFile=0x1fc, lpBuffer=0x110f2000*, nNumberOfBytesToWrite=0x30c2, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110f2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x30c2, lpOverlapped=0x1102be08) returned 1
	[0260.532] GetFileType (hFile=0x1fc) returned 0x1
	[0260.532] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x30c2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.532] GetFileType (hFile=0x1fc) returned 0x1
	[0260.533] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.533] WriteFile (in: hFile=0x1fc, lpBuffer=0x11437180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11437180*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0260.533] GetFileType (hFile=0x1fc) returned 0x1
	[0260.533] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x30c2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.533] CloseHandle (hObject=0x1fc) returned 1
	[0260.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.tl30z")) returned 0x220
	[0260.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0260.551] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0260.558] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0260.660] SetEvent (hEvent=0x118) returned 1
	[0260.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 0x220
	[0260.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", dwFileAttributes=0x220) returned 1
	[0260.660] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.tl30z"), dwFlags=0x1) returned 1
	[0261.051] SetEvent (hEvent=0x150) returned 1
	[0261.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0261.111] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0261.111] ReadFile (in: hFile=0x1d8, lpBuffer=0x1134c000, nNumberOfBytesToRead=0x14c3, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1134c000*, lpNumberOfBytesRead=0x1128ce18*=0x14c3, lpOverlapped=0x0) returned 1
	[0261.123] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0261.123] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0261.123] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11176802 | out: pbBuffer=0x11176802) returned 1
	[0261.123] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117686a | out: pbBuffer=0x1117686a) returned 1
	[0261.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0261.124] GetFileType (hFile=0x1d8) returned 0x1
	[0261.124] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.124] WriteFile (in: hFile=0x1d8, lpBuffer=0x11344000*, nNumberOfBytesToWrite=0x14c3, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11344000*, lpNumberOfBytesWritten=0x1102bdfc*=0x14c3, lpOverlapped=0x1102be08) returned 1
	[0261.125] GetFileType (hFile=0x1d8) returned 0x1
	[0261.125] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x14c3, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.125] GetFileType (hFile=0x1d8) returned 0x1
	[0261.125] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.125] WriteFile (in: hFile=0x1d8, lpBuffer=0x111dae00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111dae00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0261.125] GetFileType (hFile=0x1d8) returned 0x1
	[0261.126] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x14c3, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.126] CloseHandle (hObject=0x1d8) returned 1
	[0261.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.tl30z")) returned 0x220
	[0261.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0261.141] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0261.147] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0261.171] SetEvent (hEvent=0x248) returned 1
	[0261.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 0x220
	[0261.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", dwFileAttributes=0x220) returned 1
	[0261.172] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.tl30z"), dwFlags=0x1) returned 1
	[0261.473] SetEvent (hEvent=0x150) returned 1
	[0261.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0261.482] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0261.482] ReadFile (in: hFile=0x1d8, lpBuffer=0x1132e000, nNumberOfBytesToRead=0x1b48, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1132e000*, lpNumberOfBytesRead=0x1131ce18*=0x1b48, lpOverlapped=0x0) returned 1
	[0261.485] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0261.485] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332398 | out: pbBuffer=0x11332398) returned 1
	[0261.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ef302 | out: pbBuffer=0x113ef302) returned 1
	[0261.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323d0 | out: pbBuffer=0x113323d0) returned 1
	[0261.486] GetFileType (hFile=0x1d8) returned 0x1
	[0261.486] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.487] WriteFile (in: hFile=0x1d8, lpBuffer=0x111c2000*, nNumberOfBytesToWrite=0x1b48, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x111c2000*, lpNumberOfBytesWritten=0x112bddfc*=0x1b48, lpOverlapped=0x112bde08) returned 1
	[0261.487] GetFileType (hFile=0x1d8) returned 0x1
	[0261.487] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b48, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.487] GetFileType (hFile=0x1d8) returned 0x1
	[0261.487] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.488] WriteFile (in: hFile=0x1d8, lpBuffer=0x112d7880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x112d7880*, lpNumberOfBytesWritten=0x112bddfc*=0x22a, lpOverlapped=0x112bde08) returned 1
	[0261.488] GetFileType (hFile=0x1d8) returned 0x1
	[0261.488] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b48, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.488] CloseHandle (hObject=0x1d8) returned 1
	[0261.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.tl30z")) returned 0x220
	[0261.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0261.496] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0261.529] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0261.548] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0261.623] SetEvent (hEvent=0x248) returned 1
	[0261.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 0x220
	[0261.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", dwFileAttributes=0x220) returned 1
	[0261.624] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.tl30z"), dwFlags=0x1) returned 1
	[0261.932] SetEvent (hEvent=0x150) returned 1
	[0261.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0261.936] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0261.936] ReadFile (in: hFile=0x1d4, lpBuffer=0x111fe000, nNumberOfBytesToRead=0x1398, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x111fe000*, lpNumberOfBytesRead=0x11288e18*=0x1398, lpOverlapped=0x0) returned 1
	[0261.943] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0261.943] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332508 | out: pbBuffer=0x11332508) returned 1
	[0261.943] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113efe02 | out: pbBuffer=0x113efe02) returned 1
	[0261.943] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332540 | out: pbBuffer=0x11332540) returned 1
	[0261.944] GetFileType (hFile=0x1d4) returned 0x1
	[0261.944] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.944] WriteFile (in: hFile=0x1d4, lpBuffer=0x11312000*, nNumberOfBytesToWrite=0x1398, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11312000*, lpNumberOfBytesWritten=0x112bddfc*=0x1398, lpOverlapped=0x112bde08) returned 1
	[0261.944] GetFileType (hFile=0x1d4) returned 0x1
	[0261.944] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1398, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.945] GetFileType (hFile=0x1d4) returned 0x1
	[0261.945] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.945] WriteFile (in: hFile=0x1d4, lpBuffer=0x112fc700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x112fc700*, lpNumberOfBytesWritten=0x112bddfc*=0x22a, lpOverlapped=0x112bde08) returned 1
	[0261.945] GetFileType (hFile=0x1d4) returned 0x1
	[0261.945] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1398, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.945] CloseHandle (hObject=0x1d4) returned 1
	[0261.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.tl30z")) returned 0x220
	[0261.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0262.050] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0262.144] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0262.196] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0262.255] SetEvent (hEvent=0x248) returned 1
	[0262.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 0x220
	[0262.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", dwFileAttributes=0x220) returned 1
	[0262.255] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0262.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0262.562] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0262.563] ReadFile (in: hFile=0x1d8, lpBuffer=0x11112000, nNumberOfBytesToRead=0x127e, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11112000*, lpNumberOfBytesRead=0x1128ce18*=0x127e, lpOverlapped=0x0) returned 1
	[0262.568] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0262.568] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f568 | out: pbBuffer=0x1140f568) returned 1
	[0262.568] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1110c902 | out: pbBuffer=0x1110c902) returned 1
	[0262.568] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1110c91b | out: pbBuffer=0x1110c91b) returned 1
	[0262.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0262.569] GetFileType (hFile=0x1d8) returned 0x1
	[0262.569] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.569] WriteFile (in: hFile=0x1d8, lpBuffer=0x11134000*, nNumberOfBytesToWrite=0x127e, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11134000*, lpNumberOfBytesWritten=0x112b9dfc*=0x127e, lpOverlapped=0x112b9e08) returned 1
	[0262.570] GetFileType (hFile=0x1d8) returned 0x1
	[0262.570] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x127e, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.570] GetFileType (hFile=0x1d8) returned 0x1
	[0262.570] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.570] WriteFile (in: hFile=0x1d8, lpBuffer=0x11103500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11103500*, lpNumberOfBytesWritten=0x112b9dfc*=0x230, lpOverlapped=0x112b9e08) returned 1
	[0262.570] GetFileType (hFile=0x1d8) returned 0x1
	[0262.570] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x127e, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.570] CloseHandle (hObject=0x1d8) returned 1
	[0262.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.tl30z")) returned 0x220
	[0262.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0262.651] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0262.659] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0262.699] SetEvent (hEvent=0x210) returned 1
	[0262.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 0x220
	[0262.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", dwFileAttributes=0x220) returned 1
	[0262.700] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0263.207] SetEvent (hEvent=0x150) returned 1
	[0263.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0263.214] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0263.214] ReadFile (in: hFile=0x224, lpBuffer=0x11418000, nNumberOfBytesToRead=0x1ba0, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11418000*, lpNumberOfBytesRead=0x1131de18*=0x1ba0, lpOverlapped=0x0) returned 1
	[0263.223] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0263.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122c802 | out: pbBuffer=0x1122c802) returned 1
	[0263.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0263.224] GetFileType (hFile=0x224) returned 0x1
	[0263.225] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.225] WriteFile (in: hFile=0x224, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x1ba0, lpNumberOfBytesWritten=0x1110bdfc, lpOverlapped=0x1110be08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x1110bdfc*=0x1ba0, lpOverlapped=0x1110be08) returned 1
	[0263.225] GetFileType (hFile=0x224) returned 0x1
	[0263.225] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1ba0, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.225] GetFileType (hFile=0x224) returned 0x1
	[0263.226] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.226] WriteFile (in: hFile=0x224, lpBuffer=0x1133ca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1110bdfc, lpOverlapped=0x1110be08 | out: lpBuffer=0x1133ca80*, lpNumberOfBytesWritten=0x1110bdfc*=0x22a, lpOverlapped=0x1110be08) returned 1
	[0263.226] GetFileType (hFile=0x224) returned 0x1
	[0263.226] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1ba0, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.226] CloseHandle (hObject=0x224) returned 1
	[0263.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.tl30z")) returned 0x220
	[0263.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0263.352] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0263.468] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0263.521] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0263.634] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0263.683] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0263.819] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0263.998] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0264.200] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0264.223] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0264.242] SetEvent (hEvent=0x1b0) returned 1
	[0264.243] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 0x220
	[0264.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", dwFileAttributes=0x220) returned 1
	[0264.244] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0264.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0264.617] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0264.617] ReadFile (in: hFile=0x1fc, lpBuffer=0x11090000, nNumberOfBytesToRead=0x19e8, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x11316e18*=0x19e8, lpOverlapped=0x0) returned 1
	[0264.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0264.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11260802 | out: pbBuffer=0x11260802) returned 1
	[0264.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0264.639] GetFileType (hFile=0x1fc) returned 0x1
	[0264.639] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.639] WriteFile (in: hFile=0x1fc, lpBuffer=0x111b8000*, nNumberOfBytesToWrite=0x19e8, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x111b8000*, lpNumberOfBytesWritten=0x112bfdfc*=0x19e8, lpOverlapped=0x112bfe08) returned 1
	[0264.640] GetFileType (hFile=0x1fc) returned 0x1
	[0264.640] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x19e8, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.640] GetFileType (hFile=0x1fc) returned 0x1
	[0264.640] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.640] WriteFile (in: hFile=0x1fc, lpBuffer=0x112eaa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x112eaa80*, lpNumberOfBytesWritten=0x112bfdfc*=0x22d, lpOverlapped=0x112bfe08) returned 1
	[0264.641] GetFileType (hFile=0x1fc) returned 0x1
	[0264.641] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x19e8, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.641] CloseHandle (hObject=0x1fc) returned 1
	[0264.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.tl30z")) returned 0x220
	[0264.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0264.666] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0264.775] SetEvent (hEvent=0x248) returned 1
	[0264.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 0x220
	[0264.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", dwFileAttributes=0x220) returned 1
	[0264.776] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0265.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0265.102] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0265.102] ReadFile (in: hFile=0x1d8, lpBuffer=0x110cc000, nNumberOfBytesToRead=0xd58, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11316e18*=0xd58, lpOverlapped=0x0) returned 1
	[0265.183] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0265.183] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134f202 | out: pbBuffer=0x1134f202) returned 1
	[0265.183] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134f2e5 | out: pbBuffer=0x1134f2e5) returned 1
	[0265.183] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0265.184] GetFileType (hFile=0x1d8) returned 0x1
	[0265.184] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.184] WriteFile (in: hFile=0x1d8, lpBuffer=0x110e6000*, nNumberOfBytesToWrite=0xd58, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x110e6000*, lpNumberOfBytesWritten=0x112b9dfc*=0xd58, lpOverlapped=0x112b9e08) returned 1
	[0265.184] GetFileType (hFile=0x1d8) returned 0x1
	[0265.185] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xd58, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.185] GetFileType (hFile=0x1d8) returned 0x1
	[0265.185] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.185] WriteFile (in: hFile=0x1d8, lpBuffer=0x1136f880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x1136f880*, lpNumberOfBytesWritten=0x112b9dfc*=0x22a, lpOverlapped=0x112b9e08) returned 1
	[0265.185] GetFileType (hFile=0x1d8) returned 0x1
	[0265.185] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xd58, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.185] CloseHandle (hObject=0x1d8) returned 1
	[0265.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.tl30z")) returned 0x220
	[0265.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0265.353] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0265.456] SetEvent (hEvent=0x1b0) returned 1
	[0265.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 0x220
	[0265.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", dwFileAttributes=0x220) returned 1
	[0265.457] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0265.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.008] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0266.008] ReadFile (in: hFile=0x1d8, lpBuffer=0x11186000, nNumberOfBytesToRead=0x1df4, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11186000*, lpNumberOfBytesRead=0x11022e18*=0x1df4, lpOverlapped=0x0) returned 1
	[0266.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0266.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0266.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119e802 | out: pbBuffer=0x1119e802) returned 1
	[0266.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0266.015] GetFileType (hFile=0x1d8) returned 0x1
	[0266.015] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11197de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.015] WriteFile (in: hFile=0x1d8, lpBuffer=0x11458000*, nNumberOfBytesToWrite=0x1df4, lpNumberOfBytesWritten=0x11197dfc, lpOverlapped=0x11197e08 | out: lpBuffer=0x11458000*, lpNumberOfBytesWritten=0x11197dfc*=0x1df4, lpOverlapped=0x11197e08) returned 1
	[0266.015] GetFileType (hFile=0x1d8) returned 0x1
	[0266.015] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1df4, lpNewFilePointer=0x0, dwMoveMethod=0x11197de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.015] GetFileType (hFile=0x1d8) returned 0x1
	[0266.016] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11197de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.016] WriteFile (in: hFile=0x1d8, lpBuffer=0x11436a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11197dfc, lpOverlapped=0x11197e08 | out: lpBuffer=0x11436a80*, lpNumberOfBytesWritten=0x11197dfc*=0x233, lpOverlapped=0x11197e08) returned 1
	[0266.016] GetFileType (hFile=0x1d8) returned 0x1
	[0266.016] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1df4, lpNewFilePointer=0x0, dwMoveMethod=0x11197de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.016] CloseHandle (hObject=0x1d8) returned 1
	[0266.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.tl30z")) returned 0x220
	[0266.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0266.038] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0266.050] SetEvent (hEvent=0x1b0) returned 1
	[0266.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 0x220
	[0266.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", dwFileAttributes=0x220) returned 1
	[0266.051] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0266.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.329] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0266.329] ReadFile (in: hFile=0x1d8, lpBuffer=0x1116a000, nNumberOfBytesToRead=0x9bc, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1116a000*, lpNumberOfBytesRead=0x11022e18*=0x9bc, lpOverlapped=0x0) returned 1
	[0266.339] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66d0 | out: pbBuffer=0x113e66d0) returned 1
	[0266.340] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11159202 | out: pbBuffer=0x11159202) returned 1
	[0266.340] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1115921f | out: pbBuffer=0x1115921f) returned 1
	[0266.340] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11159251 | out: pbBuffer=0x11159251) returned 1
	[0266.340] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6700 | out: pbBuffer=0x113e6700) returned 1
	[0266.340] GetFileType (hFile=0x1d8) returned 0x1
	[0266.340] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.341] WriteFile (in: hFile=0x1d8, lpBuffer=0x111ce000*, nNumberOfBytesToWrite=0x9bc, lpNumberOfBytesWritten=0x11193dfc, lpOverlapped=0x11193e08 | out: lpBuffer=0x111ce000*, lpNumberOfBytesWritten=0x11193dfc*=0x9bc, lpOverlapped=0x11193e08) returned 1
	[0266.341] GetFileType (hFile=0x1d8) returned 0x1
	[0266.341] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9bc, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.341] GetFileType (hFile=0x1d8) returned 0x1
	[0266.341] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.341] WriteFile (in: hFile=0x1d8, lpBuffer=0x111c6380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11193dfc, lpOverlapped=0x11193e08 | out: lpBuffer=0x111c6380*, lpNumberOfBytesWritten=0x11193dfc*=0x22d, lpOverlapped=0x11193e08) returned 1
	[0266.342] GetFileType (hFile=0x1d8) returned 0x1
	[0266.342] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9bc, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.342] CloseHandle (hObject=0x1d8) returned 1
	[0266.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.tl30z")) returned 0x220
	[0266.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0266.351] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0266.357] SetEvent (hEvent=0x1b0) returned 1
	[0266.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 0x220
	[0266.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", dwFileAttributes=0x220) returned 1
	[0266.358] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0266.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.813] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0266.813] ReadFile (in: hFile=0x1d8, lpBuffer=0x11234000, nNumberOfBytesToRead=0x1384, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11234000*, lpNumberOfBytesRead=0x11022e18*=0x1384, lpOverlapped=0x0) returned 1
	[0266.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69b0 | out: pbBuffer=0x113e69b0) returned 1
	[0266.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123a702 | out: pbBuffer=0x1123a702) returned 1
	[0266.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69f0 | out: pbBuffer=0x113e69f0) returned 1
	[0266.822] SetEvent (hEvent=0x1b0) returned 1
	[0266.822] GetFileType (hFile=0x1d8) returned 0x1
	[0266.822] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.822] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bc6000*, nNumberOfBytesToWrite=0x1384, lpNumberOfBytesWritten=0x11193dfc, lpOverlapped=0x11193e08 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesWritten=0x11193dfc*=0x1384, lpOverlapped=0x11193e08) returned 1
	[0266.823] GetFileType (hFile=0x1d8) returned 0x1
	[0266.823] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1384, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.823] GetFileType (hFile=0x1d8) returned 0x1
	[0266.823] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.823] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bc8000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11193dfc, lpOverlapped=0x11193e08 | out: lpBuffer=0x11bc8000*, lpNumberOfBytesWritten=0x11193dfc*=0x227, lpOverlapped=0x11193e08) returned 1
	[0266.824] GetFileType (hFile=0x1d8) returned 0x1
	[0266.824] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1384, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.824] CloseHandle (hObject=0x1d8) returned 1
	[0266.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.tl30z")) returned 0x220
	[0266.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0266.844] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0266.848] SetEvent (hEvent=0x1b0) returned 1
	[0266.849] SetEvent (hEvent=0x118) returned 1
	[0266.849] SwitchToThread () returned 1
	[0266.858] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0266.927] SetEvent (hEvent=0x118) returned 1
	[0266.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x220
	[0266.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", dwFileAttributes=0x220) returned 1
	[0266.928] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.414] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0267.414] ReadFile (in: hFile=0x1d8, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x7114, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x1128ae18*=0x7114, lpOverlapped=0x0) returned 1
	[0267.420] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296260 | out: pbBuffer=0x11296260) returned 1
	[0267.420] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11296258 | out: pbBuffer=0x11296258) returned 1
	[0267.420] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11391302 | out: pbBuffer=0x11391302) returned 1
	[0267.420] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139139c | out: pbBuffer=0x1139139c) returned 1
	[0267.420] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113913ae | out: pbBuffer=0x113913ae) returned 1
	[0267.421] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296290 | out: pbBuffer=0x11296290) returned 1
	[0267.421] GetFileType (hFile=0x1d8) returned 0x1
	[0267.422] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0267.422] WriteFile (in: hFile=0x1d8, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x7114, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1136fdfc*=0x7114, lpOverlapped=0x1136fe08) returned 1
	[0267.422] GetFileType (hFile=0x1d8) returned 0x1
	[0267.422] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7114, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0267.423] GetFileType (hFile=0x1d8) returned 0x1
	[0267.423] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0267.423] WriteFile (in: hFile=0x1d8, lpBuffer=0x113f3880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x113f3880*, lpNumberOfBytesWritten=0x1136fdfc*=0x22a, lpOverlapped=0x1136fe08) returned 1
	[0267.423] GetFileType (hFile=0x1d8) returned 0x1
	[0267.423] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7114, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0267.423] CloseHandle (hObject=0x1d8) returned 1
	[0267.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.tl30z")) returned 0x220
	[0267.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.434] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0267.450] SetEvent (hEvent=0x26c) returned 1
	[0267.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x220
	[0267.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", dwFileAttributes=0x220) returned 1
	[0267.451] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.680] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0267.682] ReadFile (in: hFile=0x1d8, lpBuffer=0x111fc000, nNumberOfBytesToRead=0x3ef0, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x111fc000*, lpNumberOfBytesRead=0x1128ae18*=0x3ef0, lpOverlapped=0x0) returned 1
	[0267.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0267.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4c8 | out: pbBuffer=0x1104e4c8) returned 1
	[0267.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123bf02 | out: pbBuffer=0x1123bf02) returned 1
	[0267.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0267.691] GetFileType (hFile=0x1d8) returned 0x1
	[0267.691] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.691] WriteFile (in: hFile=0x1d8, lpBuffer=0x110f2000*, nNumberOfBytesToWrite=0x3ef0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110f2000*, lpNumberOfBytesWritten=0x11031dfc*=0x3ef0, lpOverlapped=0x11031e08) returned 1
	[0267.691] GetFileType (hFile=0x1d8) returned 0x1
	[0267.692] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3ef0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.692] GetFileType (hFile=0x1d8) returned 0x1
	[0267.692] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.692] WriteFile (in: hFile=0x1d8, lpBuffer=0x11206a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11206a80*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0267.693] GetFileType (hFile=0x1d8) returned 0x1
	[0267.693] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3ef0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.693] CloseHandle (hObject=0x1d8) returned 1
	[0267.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.tl30z")) returned 0x220
	[0267.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.729] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0267.736] SetEvent (hEvent=0x26c) returned 1
	[0267.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x220
	[0267.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", dwFileAttributes=0x220) returned 1
	[0267.736] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.917] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0267.917] ReadFile (in: hFile=0x1d8, lpBuffer=0x1134c000, nNumberOfBytesToRead=0x5f00, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1134c000*, lpNumberOfBytesRead=0x1128ae18*=0x5f00, lpOverlapped=0x0) returned 1
	[0267.922] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0267.922] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0267.922] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119c902 | out: pbBuffer=0x1119c902) returned 1
	[0267.922] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119c954 | out: pbBuffer=0x1119c954) returned 1
	[0267.923] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0267.923] GetFileType (hFile=0x1d8) returned 0x1
	[0267.923] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.924] WriteFile (in: hFile=0x1d8, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x5f00, lpNumberOfBytesWritten=0x11391dfc, lpOverlapped=0x11391e08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x11391dfc*=0x5f00, lpOverlapped=0x11391e08) returned 1
	[0267.924] GetFileType (hFile=0x1d8) returned 0x1
	[0267.924] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5f00, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.924] GetFileType (hFile=0x1d8) returned 0x1
	[0267.924] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.924] WriteFile (in: hFile=0x1d8, lpBuffer=0x1117ea80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11391dfc, lpOverlapped=0x11391e08 | out: lpBuffer=0x1117ea80*, lpNumberOfBytesWritten=0x11391dfc*=0x22a, lpOverlapped=0x11391e08) returned 1
	[0267.925] GetFileType (hFile=0x1d8) returned 0x1
	[0267.925] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5f00, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.925] CloseHandle (hObject=0x1d8) returned 1
	[0267.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.tl30z")) returned 0x220
	[0267.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.932] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0267.949] SetEvent (hEvent=0x210) returned 1
	[0267.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x220
	[0267.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", dwFileAttributes=0x220) returned 1
	[0267.950] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.142] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0268.142] ReadFile (in: hFile=0x1d4, lpBuffer=0x113c4000, nNumberOfBytesToRead=0x38cc, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113c4000*, lpNumberOfBytesRead=0x1128ae18*=0x38cc, lpOverlapped=0x0) returned 1
	[0268.152] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0268.152] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3f8 | out: pbBuffer=0x1140f3f8) returned 1
	[0268.152] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119df02 | out: pbBuffer=0x1119df02) returned 1
	[0268.152] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f430 | out: pbBuffer=0x1140f430) returned 1
	[0268.153] GetFileType (hFile=0x1d4) returned 0x1
	[0268.153] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.153] WriteFile (in: hFile=0x1d4, lpBuffer=0x110a0000*, nNumberOfBytesToWrite=0x38cc, lpNumberOfBytesWritten=0x11391dfc, lpOverlapped=0x11391e08 | out: lpBuffer=0x110a0000*, lpNumberOfBytesWritten=0x11391dfc*=0x38cc, lpOverlapped=0x11391e08) returned 1
	[0268.154] GetFileType (hFile=0x1d4) returned 0x1
	[0268.154] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x38cc, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.154] GetFileType (hFile=0x1d4) returned 0x1
	[0268.154] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.154] WriteFile (in: hFile=0x1d4, lpBuffer=0x1144ca80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11391dfc, lpOverlapped=0x11391e08 | out: lpBuffer=0x1144ca80*, lpNumberOfBytesWritten=0x11391dfc*=0x22d, lpOverlapped=0x11391e08) returned 1
	[0268.154] GetFileType (hFile=0x1d4) returned 0x1
	[0268.154] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x38cc, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.154] CloseHandle (hObject=0x1d4) returned 1
	[0268.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.tl30z")) returned 0x220
	[0268.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.165] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0268.172] SetEvent (hEvent=0x210) returned 1
	[0268.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 0x220
	[0268.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", dwFileAttributes=0x220) returned 1
	[0268.173] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.tl30z"), dwFlags=0x1) returned 1
	[0268.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.341] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0268.341] ReadFile (in: hFile=0x1d4, lpBuffer=0x11108000, nNumberOfBytesToRead=0x4fe6, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11108000*, lpNumberOfBytesRead=0x1128ae18*=0x4fe6, lpOverlapped=0x0) returned 1
	[0268.346] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112961c0 | out: pbBuffer=0x112961c0) returned 1
	[0268.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b9b02 | out: pbBuffer=0x110b9b02) returned 1
	[0268.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b9b94 | out: pbBuffer=0x110b9b94) returned 1
	[0268.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112961f0 | out: pbBuffer=0x112961f0) returned 1
	[0268.348] GetFileType (hFile=0x1d4) returned 0x1
	[0268.348] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.348] WriteFile (in: hFile=0x1d4, lpBuffer=0x11148000*, nNumberOfBytesToWrite=0x4fe6, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x11148000*, lpNumberOfBytesWritten=0x1138ddfc*=0x4fe6, lpOverlapped=0x1138de08) returned 1
	[0268.349] GetFileType (hFile=0x1d4) returned 0x1
	[0268.349] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4fe6, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.349] GetFileType (hFile=0x1d4) returned 0x1
	[0268.349] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.349] WriteFile (in: hFile=0x1d4, lpBuffer=0x111eb180*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x111eb180*, lpNumberOfBytesWritten=0x1138ddfc*=0x236, lpOverlapped=0x1138de08) returned 1
	[0268.350] GetFileType (hFile=0x1d4) returned 0x1
	[0268.350] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4fe6, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.350] CloseHandle (hObject=0x1d4) returned 1
	[0268.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.tl30z")) returned 0x220
	[0268.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.358] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0268.368] SetEvent (hEvent=0x210) returned 1
	[0268.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x220
	[0268.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", dwFileAttributes=0x220) returned 1
	[0268.369] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.533] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0268.534] ReadFile (in: hFile=0x1d4, lpBuffer=0x11062000, nNumberOfBytesToRead=0x3896, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11062000*, lpNumberOfBytesRead=0x1128ae18*=0x3896, lpOverlapped=0x0) returned 1
	[0268.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0268.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e358 | out: pbBuffer=0x1104e358) returned 1
	[0268.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11351302 | out: pbBuffer=0x11351302) returned 1
	[0268.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0268.538] GetFileType (hFile=0x1d4) returned 0x1
	[0268.538] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.539] WriteFile (in: hFile=0x1d4, lpBuffer=0x1132a000*, nNumberOfBytesToWrite=0x3896, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x1132a000*, lpNumberOfBytesWritten=0x1138ddfc*=0x3896, lpOverlapped=0x1138de08) returned 1
	[0268.539] GetFileType (hFile=0x1d4) returned 0x1
	[0268.539] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3896, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.539] GetFileType (hFile=0x1d4) returned 0x1
	[0268.539] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.540] WriteFile (in: hFile=0x1d4, lpBuffer=0x1136f880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x1136f880*, lpNumberOfBytesWritten=0x1138ddfc*=0x22d, lpOverlapped=0x1138de08) returned 1
	[0268.540] GetFileType (hFile=0x1d4) returned 0x1
	[0268.540] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3896, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.540] CloseHandle (hObject=0x1d4) returned 1
	[0268.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.tl30z")) returned 0x220
	[0268.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.554] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0268.562] SetEvent (hEvent=0x234) returned 1
	[0268.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x220
	[0268.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", dwFileAttributes=0x220) returned 1
	[0268.563] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.738] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0268.738] ReadFile (in: hFile=0x1d4, lpBuffer=0x111a8000, nNumberOfBytesToRead=0x1eb6, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x111a8000*, lpNumberOfBytesRead=0x1128ae18*=0x1eb6, lpOverlapped=0x0) returned 1
	[0268.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0268.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e648 | out: pbBuffer=0x1104e648) returned 1
	[0268.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11232802 | out: pbBuffer=0x11232802) returned 1
	[0268.743] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112328aa | out: pbBuffer=0x112328aa) returned 1
	[0268.743] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112328c7 | out: pbBuffer=0x112328c7) returned 1
	[0268.743] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e680 | out: pbBuffer=0x1104e680) returned 1
	[0268.743] GetFileType (hFile=0x1d4) returned 0x1
	[0268.744] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.744] WriteFile (in: hFile=0x1d4, lpBuffer=0x11246000*, nNumberOfBytesToWrite=0x1eb6, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x11246000*, lpNumberOfBytesWritten=0x1138ddfc*=0x1eb6, lpOverlapped=0x1138de08) returned 1
	[0268.744] GetFileType (hFile=0x1d4) returned 0x1
	[0268.744] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1eb6, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.744] GetFileType (hFile=0x1d4) returned 0x1
	[0268.744] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.745] WriteFile (in: hFile=0x1d4, lpBuffer=0x110d7500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x110d7500*, lpNumberOfBytesWritten=0x1138ddfc*=0x233, lpOverlapped=0x1138de08) returned 1
	[0268.745] GetFileType (hFile=0x1d4) returned 0x1
	[0268.745] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1eb6, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.745] CloseHandle (hObject=0x1d4) returned 1
	[0268.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.tl30z")) returned 0x220
	[0268.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.757] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0268.766] SetEvent (hEvent=0x234) returned 1
	[0268.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x220
	[0268.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF", dwFileAttributes=0x220) returned 1
	[0268.767] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0269.038] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0269.038] ReadFile (in: hFile=0x1d4, lpBuffer=0x112ba300, nNumberOfBytesToRead=0x6a0, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x112ba300*, lpNumberOfBytesRead=0x1128ae18*=0x6a0, lpOverlapped=0x0) returned 1
	[0269.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fb20 | out: pbBuffer=0x1140fb20) returned 1
	[0269.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140fb18 | out: pbBuffer=0x1140fb18) returned 1
	[0269.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bd102 | out: pbBuffer=0x112bd102) returned 1
	[0269.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fb50 | out: pbBuffer=0x1140fb50) returned 1
	[0269.042] GetFileType (hFile=0x1d4) returned 0x1
	[0269.042] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.043] WriteFile (in: hFile=0x1d4, lpBuffer=0x110b9000*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110b9000*, lpNumberOfBytesWritten=0x11031dfc*=0x6a0, lpOverlapped=0x11031e08) returned 1
	[0269.043] GetFileType (hFile=0x1d4) returned 0x1
	[0269.043] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6a0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.043] GetFileType (hFile=0x1d4) returned 0x1
	[0269.043] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.043] WriteFile (in: hFile=0x1d4, lpBuffer=0x112c5180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112c5180*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0269.044] GetFileType (hFile=0x1d4) returned 0x1
	[0269.044] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6a0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.044] CloseHandle (hObject=0x1d4) returned 1
	[0269.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.tl30z")) returned 0x220
	[0269.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.056] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0269.065] SetEvent (hEvent=0x234) returned 1
	[0269.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x220
	[0269.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF", dwFileAttributes=0x220) returned 1
	[0269.066] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0269.223] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0269.223] ReadFile (in: hFile=0x1d4, lpBuffer=0x111cb000, nNumberOfBytesToRead=0xfb8, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x111cb000*, lpNumberOfBytesRead=0x1128ae18*=0xfb8, lpOverlapped=0x0) returned 1
	[0269.227] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296650 | out: pbBuffer=0x11296650) returned 1
	[0269.227] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bde02 | out: pbBuffer=0x110bde02) returned 1
	[0269.227] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bde0b | out: pbBuffer=0x110bde0b) returned 1
	[0269.227] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bde3e | out: pbBuffer=0x110bde3e) returned 1
	[0269.227] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bded7 | out: pbBuffer=0x110bded7) returned 1
	[0269.228] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296680 | out: pbBuffer=0x11296680) returned 1
	[0269.228] GetFileType (hFile=0x1d4) returned 0x1
	[0269.228] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.228] WriteFile (in: hFile=0x1d4, lpBuffer=0x110f2000*, nNumberOfBytesToWrite=0xfb8, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x110f2000*, lpNumberOfBytesWritten=0x1138ddfc*=0xfb8, lpOverlapped=0x1138de08) returned 1
	[0269.229] GetFileType (hFile=0x1d4) returned 0x1
	[0269.229] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xfb8, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.229] GetFileType (hFile=0x1d4) returned 0x1
	[0269.229] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.229] WriteFile (in: hFile=0x1d4, lpBuffer=0x110f4000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x110f4000*, lpNumberOfBytesWritten=0x1138ddfc*=0x230, lpOverlapped=0x1138de08) returned 1
	[0269.229] GetFileType (hFile=0x1d4) returned 0x1
	[0269.230] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xfb8, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.230] CloseHandle (hObject=0x1d4) returned 1
	[0269.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.tl30z")) returned 0x220
	[0269.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.249] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0269.265] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0269.305] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0269.383] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0269.394] SetEvent (hEvent=0x210) returned 1
	[0269.395] SetEvent (hEvent=0x1f0) returned 1
	[0269.395] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0269.398] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0269.398] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0269.400] SetEvent (hEvent=0x118) returned 1
	[0269.400] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0269.405] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0269.405] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.146] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.148] SetEvent (hEvent=0x248) returned 1
	[0270.148] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.158] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.166] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.196] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.229] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.289] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.323] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.359] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.394] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.434] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.474] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.511] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.634] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.687] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.743] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.760] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.800] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.839] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.871] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.906] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.944] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.977] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0270.996] SetEvent (hEvent=0x248) returned 1
	[0270.997] SetEvent (hEvent=0x1f0) returned 1
	[0270.997] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0271.001] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0271.001] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0271.005] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0271.006] SetEvent (hEvent=0x26c) returned 1
	[0271.006] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0271.011] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0271.011] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0272.064] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0272.068] SetEvent (hEvent=0x26c) returned 1
	[0272.068] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0272.071] SetEvent (hEvent=0x26c) returned 1
	[0272.071] SwitchToThread () returned 1
	[0272.079] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0272.083] SetEvent (hEvent=0x1b0) returned 1
	[0272.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x220
	[0272.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF", dwFileAttributes=0x220) returned 1
	[0272.083] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.244] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0272.245] ReadFile (in: hFile=0x1d8, lpBuffer=0x1132a000, nNumberOfBytesToRead=0xb10, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1132a000*, lpNumberOfBytesRead=0x1128ce18*=0xb10, lpOverlapped=0x0) returned 1
	[0272.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0272.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0272.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267e02 | out: pbBuffer=0x11267e02) returned 1
	[0272.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0272.249] GetFileType (hFile=0x1d8) returned 0x1
	[0272.249] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.249] WriteFile (in: hFile=0x1d8, lpBuffer=0x113b6000*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x113b6000*, lpNumberOfBytesWritten=0x112c9dfc*=0xb10, lpOverlapped=0x112c9e08) returned 1
	[0272.250] GetFileType (hFile=0x1d8) returned 0x1
	[0272.250] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb10, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.250] GetFileType (hFile=0x1d8) returned 0x1
	[0272.250] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.250] WriteFile (in: hFile=0x1d8, lpBuffer=0x113d4a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x113d4a80*, lpNumberOfBytesWritten=0x112c9dfc*=0x224, lpOverlapped=0x112c9e08) returned 1
	[0272.250] GetFileType (hFile=0x1d8) returned 0x1
	[0272.250] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb10, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.250] CloseHandle (hObject=0x1d8) returned 1
	[0272.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf.tl30z")) returned 0x220
	[0272.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.292] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0272.310] SetEvent (hEvent=0x1b0) returned 1
	[0272.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x220
	[0272.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF", dwFileAttributes=0x220) returned 1
	[0272.311] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.523] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0272.523] ReadFile (in: hFile=0x1d8, lpBuffer=0x1146c000, nNumberOfBytesToRead=0x1e94, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1146c000*, lpNumberOfBytesRead=0x1128ce18*=0x1e94, lpOverlapped=0x0) returned 1
	[0272.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66d0 | out: pbBuffer=0x113e66d0) returned 1
	[0272.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e3402 | out: pbBuffer=0x113e3402) returned 1
	[0272.529] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6700 | out: pbBuffer=0x113e6700) returned 1
	[0272.529] GetFileType (hFile=0x1d8) returned 0x1
	[0272.529] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.529] WriteFile (in: hFile=0x1d8, lpBuffer=0x111e4000*, nNumberOfBytesToWrite=0x1e94, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x111e4000*, lpNumberOfBytesWritten=0x112c9dfc*=0x1e94, lpOverlapped=0x112c9e08) returned 1
	[0272.530] GetFileType (hFile=0x1d8) returned 0x1
	[0272.530] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1e94, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.530] GetFileType (hFile=0x1d8) returned 0x1
	[0272.530] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.530] WriteFile (in: hFile=0x1d8, lpBuffer=0x111cea80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x111cea80*, lpNumberOfBytesWritten=0x112c9dfc*=0x22d, lpOverlapped=0x112c9e08) returned 1
	[0272.530] GetFileType (hFile=0x1d8) returned 0x1
	[0272.531] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1e94, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.531] CloseHandle (hObject=0x1d8) returned 1
	[0272.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf.tl30z")) returned 0x220
	[0272.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.554] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0272.562] SetEvent (hEvent=0x1b0) returned 1
	[0272.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x220
	[0272.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF", dwFileAttributes=0x220) returned 1
	[0272.562] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.738] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0272.738] ReadFile (in: hFile=0x1d8, lpBuffer=0x112dd800, nNumberOfBytesToRead=0xb88, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112dd800*, lpNumberOfBytesRead=0x1128ce18*=0xb88, lpOverlapped=0x0) returned 1
	[0272.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113325a0 | out: pbBuffer=0x113325a0) returned 1
	[0272.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11164f02 | out: pbBuffer=0x11164f02) returned 1
	[0272.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11164fcf | out: pbBuffer=0x11164fcf) returned 1
	[0272.743] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113325d0 | out: pbBuffer=0x113325d0) returned 1
	[0272.743] SetEvent (hEvent=0x1b0) returned 1
	[0272.743] GetFileType (hFile=0x1d8) returned 0x1
	[0272.743] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.744] WriteFile (in: hFile=0x1d8, lpBuffer=0x111a8000*, nNumberOfBytesToWrite=0xb88, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x111a8000*, lpNumberOfBytesWritten=0x112c5dfc*=0xb88, lpOverlapped=0x112c5e08) returned 1
	[0272.744] GetFileType (hFile=0x1d8) returned 0x1
	[0272.744] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb88, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.744] GetFileType (hFile=0x1d8) returned 0x1
	[0272.744] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.744] WriteFile (in: hFile=0x1d8, lpBuffer=0x11176e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x11176e00*, lpNumberOfBytesWritten=0x112c5dfc*=0x227, lpOverlapped=0x112c5e08) returned 1
	[0272.745] GetFileType (hFile=0x1d8) returned 0x1
	[0272.745] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb88, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.745] CloseHandle (hObject=0x1d8) returned 1
	[0272.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf.tl30z")) returned 0x220
	[0272.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.765] SwitchToThread () returned 1
	[0272.769] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0272.778] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0272.814] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0272.861] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0272.907] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0272.948] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0272.982] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.021] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.048] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.087] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.122] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.155] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.192] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.218] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.260] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.313] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.354] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.390] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.429] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.467] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.518] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.624] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.653] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.689] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.696] SetEvent (hEvent=0x234) returned 1
	[0273.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x220
	[0273.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF", dwFileAttributes=0x220) returned 1
	[0273.697] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.871] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0273.871] ReadFile (in: hFile=0x1d8, lpBuffer=0x1127a800, nNumberOfBytesToRead=0x760, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1127a800*, lpNumberOfBytesRead=0x1128ae18*=0x760, lpOverlapped=0x0) returned 1
	[0273.875] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0273.875] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0273.875] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112eb302 | out: pbBuffer=0x112eb302) returned 1
	[0273.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0273.876] GetFileType (hFile=0x1d8) returned 0x1
	[0273.876] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.876] WriteFile (in: hFile=0x1d8, lpBuffer=0x11205000*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11205000*, lpNumberOfBytesWritten=0x112c9dfc*=0x760, lpOverlapped=0x112c9e08) returned 1
	[0273.876] GetFileType (hFile=0x1d8) returned 0x1
	[0273.877] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x760, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.877] GetFileType (hFile=0x1d8) returned 0x1
	[0273.877] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.877] WriteFile (in: hFile=0x1d8, lpBuffer=0x1142d880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1142d880*, lpNumberOfBytesWritten=0x112c9dfc*=0x227, lpOverlapped=0x112c9e08) returned 1
	[0273.877] GetFileType (hFile=0x1d8) returned 0x1
	[0273.877] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x760, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.877] CloseHandle (hObject=0x1d8) returned 1
	[0273.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf.tl30z")) returned 0x220
	[0273.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.885] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0273.898] SetEvent (hEvent=0x210) returned 1
	[0273.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x220
	[0273.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF", dwFileAttributes=0x220) returned 1
	[0273.899] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.065] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0274.065] ReadFile (in: hFile=0x1d8, lpBuffer=0x11383800, nNumberOfBytesToRead=0xbb4, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11383800*, lpNumberOfBytesRead=0x1128ae18*=0xbb4, lpOverlapped=0x0) returned 1
	[0274.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f020 | out: pbBuffer=0x1140f020) returned 1
	[0274.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111af202 | out: pbBuffer=0x111af202) returned 1
	[0274.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111af226 | out: pbBuffer=0x111af226) returned 1
	[0274.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111af2d7 | out: pbBuffer=0x111af2d7) returned 1
	[0274.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f050 | out: pbBuffer=0x1140f050) returned 1
	[0274.071] GetFileType (hFile=0x1d8) returned 0x1
	[0274.071] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.071] WriteFile (in: hFile=0x1d8, lpBuffer=0x113a0000*, nNumberOfBytesToWrite=0xbb4, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x113a0000*, lpNumberOfBytesWritten=0x112c9dfc*=0xbb4, lpOverlapped=0x112c9e08) returned 1
	[0274.071] GetFileType (hFile=0x1d8) returned 0x1
	[0274.071] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xbb4, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.071] GetFileType (hFile=0x1d8) returned 0x1
	[0274.071] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.072] WriteFile (in: hFile=0x1d8, lpBuffer=0x11396380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11396380*, lpNumberOfBytesWritten=0x112c9dfc*=0x22d, lpOverlapped=0x112c9e08) returned 1
	[0274.072] GetFileType (hFile=0x1d8) returned 0x1
	[0274.072] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xbb4, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.072] CloseHandle (hObject=0x1d8) returned 1
	[0274.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf.tl30z")) returned 0x220
	[0274.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.083] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0274.090] SetEvent (hEvent=0x210) returned 1
	[0274.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x220
	[0274.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF", dwFileAttributes=0x220) returned 1
	[0274.091] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.290] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0274.290] ReadFile (in: hFile=0x1d8, lpBuffer=0x113c2000, nNumberOfBytesToRead=0x9dc, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113c2000*, lpNumberOfBytesRead=0x1128ae18*=0x9dc, lpOverlapped=0x0) returned 1
	[0274.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6860 | out: pbBuffer=0x113e6860) returned 1
	[0274.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6858 | out: pbBuffer=0x113e6858) returned 1
	[0274.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cc402 | out: pbBuffer=0x113cc402) returned 1
	[0274.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cc4eb | out: pbBuffer=0x113cc4eb) returned 1
	[0274.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6890 | out: pbBuffer=0x113e6890) returned 1
	[0274.296] GetFileType (hFile=0x1d8) returned 0x1
	[0274.296] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.296] WriteFile (in: hFile=0x1d8, lpBuffer=0x110dc000*, nNumberOfBytesToWrite=0x9dc, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110dc000*, lpNumberOfBytesWritten=0x1102bdfc*=0x9dc, lpOverlapped=0x1102be08) returned 1
	[0274.296] GetFileType (hFile=0x1d8) returned 0x1
	[0274.296] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9dc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.297] GetFileType (hFile=0x1d8) returned 0x1
	[0274.297] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.297] WriteFile (in: hFile=0x1d8, lpBuffer=0x113fbc00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113fbc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0274.297] GetFileType (hFile=0x1d8) returned 0x1
	[0274.297] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9dc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.297] CloseHandle (hObject=0x1d8) returned 1
	[0274.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf.tl30z")) returned 0x220
	[0274.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.311] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0274.321] SetEvent (hEvent=0x210) returned 1
	[0274.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x220
	[0274.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF", dwFileAttributes=0x220) returned 1
	[0274.322] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.535] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0274.535] ReadFile (in: hFile=0x1d8, lpBuffer=0x112a3680, nNumberOfBytesToRead=0x228, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x112a3680*, lpNumberOfBytesRead=0x1128ae18*=0x228, lpOverlapped=0x0) returned 1
	[0274.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f850 | out: pbBuffer=0x1140f850) returned 1
	[0274.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f848 | out: pbBuffer=0x1140f848) returned 1
	[0274.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112be802 | out: pbBuffer=0x112be802) returned 1
	[0274.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112be831 | out: pbBuffer=0x112be831) returned 1
	[0274.537] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112be887 | out: pbBuffer=0x112be887) returned 1
	[0274.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f880 | out: pbBuffer=0x1140f880) returned 1
	[0274.538] GetFileType (hFile=0x1d8) returned 0x1
	[0274.538] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.538] WriteFile (in: hFile=0x1d8, lpBuffer=0x110ed800*, nNumberOfBytesToWrite=0x228, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x110ed800*, lpNumberOfBytesWritten=0x112c9dfc*=0x228, lpOverlapped=0x112c9e08) returned 1
	[0274.538] GetFileType (hFile=0x1d8) returned 0x1
	[0274.539] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.539] GetFileType (hFile=0x1d8) returned 0x1
	[0274.539] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.539] WriteFile (in: hFile=0x1d8, lpBuffer=0x11098a80*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11098a80*, lpNumberOfBytesWritten=0x112c9dfc*=0x221, lpOverlapped=0x112c9e08) returned 1
	[0274.545] GetFileType (hFile=0x1d8) returned 0x1
	[0274.545] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.545] CloseHandle (hObject=0x1d8) returned 1
	[0274.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf.tl30z")) returned 0x220
	[0274.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.554] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0274.566] SetEvent (hEvent=0x210) returned 1
	[0274.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x220
	[0274.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF", dwFileAttributes=0x220) returned 1
	[0274.566] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.855] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0274.855] ReadFile (in: hFile=0x1d8, lpBuffer=0x11102000, nNumberOfBytesToRead=0x566, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11102000*, lpNumberOfBytesRead=0x1128ae18*=0x566, lpOverlapped=0x0) returned 1
	[0274.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6fa0 | out: pbBuffer=0x113e6fa0) returned 1
	[0274.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ab802 | out: pbBuffer=0x110ab802) returned 1
	[0274.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110ab83f | out: pbBuffer=0x110ab83f) returned 1
	[0274.870] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110ab87f | out: pbBuffer=0x110ab87f) returned 1
	[0274.871] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6fd0 | out: pbBuffer=0x113e6fd0) returned 1
	[0274.871] GetFileType (hFile=0x1d8) returned 0x1
	[0274.871] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.871] WriteFile (in: hFile=0x1d8, lpBuffer=0x1110b000*, nNumberOfBytesToWrite=0x566, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1110b000*, lpNumberOfBytesWritten=0x1102bdfc*=0x566, lpOverlapped=0x1102be08) returned 1
	[0274.871] GetFileType (hFile=0x1d8) returned 0x1
	[0274.871] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x566, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.872] GetFileType (hFile=0x1d8) returned 0x1
	[0274.872] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.872] WriteFile (in: hFile=0x1d8, lpBuffer=0x11114380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11114380*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0274.872] GetFileType (hFile=0x1d8) returned 0x1
	[0274.872] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x566, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.872] CloseHandle (hObject=0x1d8) returned 1
	[0274.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf.tl30z")) returned 0x220
	[0274.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.882] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0274.896] SetEvent (hEvent=0x210) returned 1
	[0274.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf")) returned 0x220
	[0274.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF", dwFileAttributes=0x220) returned 1
	[0274.897] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0275.138] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0275.138] ReadFile (in: hFile=0x1d8, lpBuffer=0x1119c000, nNumberOfBytesToRead=0x1b1a, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x1128ae18*=0x1b1a, lpOverlapped=0x0) returned 1
	[0275.148] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0275.148] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0275.148] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11260802 | out: pbBuffer=0x11260802) returned 1
	[0275.148] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126085b | out: pbBuffer=0x1126085b) returned 1
	[0275.149] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0275.149] GetFileType (hFile=0x1d8) returned 0x1
	[0275.149] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.149] WriteFile (in: hFile=0x1d8, lpBuffer=0x113aa000*, nNumberOfBytesToWrite=0x1b1a, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x113aa000*, lpNumberOfBytesWritten=0x113f3dfc*=0x1b1a, lpOverlapped=0x113f3e08) returned 1
	[0275.150] GetFileType (hFile=0x1d8) returned 0x1
	[0275.150] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b1a, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.150] GetFileType (hFile=0x1d8) returned 0x1
	[0275.150] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.150] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bf2e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x11bf2e00*, lpNumberOfBytesWritten=0x113f3dfc*=0x22d, lpOverlapped=0x113f3e08) returned 1
	[0275.150] GetFileType (hFile=0x1d8) returned 0x1
	[0275.150] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b1a, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.150] CloseHandle (hObject=0x1d8) returned 1
	[0275.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf.tl30z")) returned 0x220
	[0275.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.167] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0275.175] SetEvent (hEvent=0x26c) returned 1
	[0275.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf")) returned 0x220
	[0275.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF", dwFileAttributes=0x220) returned 1
	[0275.176] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0275.465] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0275.465] ReadFile (in: hFile=0x224, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x439c, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x1128ae18*=0x439c, lpOverlapped=0x0) returned 1
	[0275.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0275.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bc6702 | out: pbBuffer=0x11bc6702) returned 1
	[0275.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65a0 | out: pbBuffer=0x113e65a0) returned 1
	[0275.477] GetFileType (hFile=0x224) returned 0x1
	[0275.477] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.477] WriteFile (in: hFile=0x224, lpBuffer=0x112f8000*, nNumberOfBytesToWrite=0x439c, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x112f8000*, lpNumberOfBytesWritten=0x113f3dfc*=0x439c, lpOverlapped=0x113f3e08) returned 1
	[0275.478] GetFileType (hFile=0x224) returned 0x1
	[0275.478] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x439c, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.478] GetFileType (hFile=0x224) returned 0x1
	[0275.478] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.478] WriteFile (in: hFile=0x224, lpBuffer=0x111b9880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x111b9880*, lpNumberOfBytesWritten=0x113f3dfc*=0x22d, lpOverlapped=0x113f3e08) returned 1
	[0275.479] GetFileType (hFile=0x224) returned 0x1
	[0275.479] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x439c, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.479] CloseHandle (hObject=0x224) returned 1
	[0275.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf.tl30z")) returned 0x220
	[0275.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.494] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0275.506] SetEvent (hEvent=0x26c) returned 1
	[0275.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x220
	[0275.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF", dwFileAttributes=0x220) returned 1
	[0275.507] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0275.756] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0275.756] ReadFile (in: hFile=0x224, lpBuffer=0x113b1000, nNumberOfBytesToRead=0x2eda, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113b1000*, lpNumberOfBytesRead=0x1128ae18*=0x2eda, lpOverlapped=0x0) returned 1
	[0275.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f030 | out: pbBuffer=0x1140f030) returned 1
	[0275.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d1102 | out: pbBuffer=0x111d1102) returned 1
	[0275.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d1181 | out: pbBuffer=0x111d1181) returned 1
	[0275.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d11ab | out: pbBuffer=0x111d11ab) returned 1
	[0275.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f060 | out: pbBuffer=0x1140f060) returned 1
	[0275.763] GetFileType (hFile=0x224) returned 0x1
	[0275.763] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.763] WriteFile (in: hFile=0x224, lpBuffer=0x11188000*, nNumberOfBytesToWrite=0x2eda, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x11188000*, lpNumberOfBytesWritten=0x113efdfc*=0x2eda, lpOverlapped=0x113efe08) returned 1
	[0275.763] GetFileType (hFile=0x224) returned 0x1
	[0275.763] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2eda, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.764] GetFileType (hFile=0x224) returned 0x1
	[0275.764] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.764] WriteFile (in: hFile=0x224, lpBuffer=0x11178380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x11178380*, lpNumberOfBytesWritten=0x113efdfc*=0x233, lpOverlapped=0x113efe08) returned 1
	[0275.764] GetFileType (hFile=0x224) returned 0x1
	[0275.764] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2eda, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.764] CloseHandle (hObject=0x224) returned 1
	[0275.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf.tl30z")) returned 0x220
	[0275.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.789] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0275.817] SetEvent (hEvent=0x26c) returned 1
	[0275.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x220
	[0275.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF", dwFileAttributes=0x220) returned 1
	[0275.818] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.065] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0276.065] ReadFile (in: hFile=0x224, lpBuffer=0x11100000, nNumberOfBytesToRead=0x3df0, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11100000*, lpNumberOfBytesRead=0x1128ae18*=0x3df0, lpOverlapped=0x0) returned 1
	[0276.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6ca0 | out: pbBuffer=0x113e6ca0) returned 1
	[0276.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11091d02 | out: pbBuffer=0x11091d02) returned 1
	[0276.071] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11091d04 | out: pbBuffer=0x11091d04) returned 1
	[0276.071] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11091d34 | out: pbBuffer=0x11091d34) returned 1
	[0276.071] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6cd0 | out: pbBuffer=0x113e6cd0) returned 1
	[0276.071] SetEvent (hEvent=0x118) returned 1
	[0276.072] GetFileType (hFile=0x224) returned 0x1
	[0276.072] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.072] WriteFile (in: hFile=0x224, lpBuffer=0x1112e000*, nNumberOfBytesToWrite=0x3df0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1112e000*, lpNumberOfBytesWritten=0x11031dfc*=0x3df0, lpOverlapped=0x11031e08) returned 1
	[0276.073] GetFileType (hFile=0x224) returned 0x1
	[0276.073] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3df0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.073] GetFileType (hFile=0x224) returned 0x1
	[0276.073] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.073] WriteFile (in: hFile=0x224, lpBuffer=0x11136000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11136000*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0276.073] GetFileType (hFile=0x224) returned 0x1
	[0276.073] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3df0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.074] CloseHandle (hObject=0x224) returned 1
	[0276.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf.tl30z")) returned 0x220
	[0276.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.086] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.093] SetEvent (hEvent=0x118) returned 1
	[0276.093] SetEvent (hEvent=0x210) returned 1
	[0276.093] SwitchToThread () returned 1
	[0276.096] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.141] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.191] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.226] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.279] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.325] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.363] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.402] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.499] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.541] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.587] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.617] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.647] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.677] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.709] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.770] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.799] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.817] SetEvent (hEvent=0x118) returned 1
	[0276.817] SetEvent (hEvent=0x1f0) returned 1
	[0276.817] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0276.820] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.820] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0276.826] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.826] SetEvent (hEvent=0x118) returned 1
	[0276.826] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0276.828] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0276.829] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0277.627] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0277.633] SetEvent (hEvent=0x248) returned 1
	[0277.633] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0277.638] SetEvent (hEvent=0x248) returned 1
	[0277.638] SwitchToThread () returned 1
	[0277.640] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0277.647] SetEvent (hEvent=0x26c) returned 1
	[0277.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf")) returned 0x220
	[0277.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF", dwFileAttributes=0x220) returned 1
	[0277.648] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0277.831] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0277.831] ReadFile (in: hFile=0x1fc, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x112c, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x11022e18*=0x112c, lpOverlapped=0x0) returned 1
	[0277.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0277.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4c8 | out: pbBuffer=0x1104e4c8) returned 1
	[0277.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f8802 | out: pbBuffer=0x111f8802) returned 1
	[0277.836] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0277.840] GetFileType (hFile=0x1fc) returned 0x1
	[0277.840] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.840] WriteFile (in: hFile=0x1fc, lpBuffer=0x11376000*, nNumberOfBytesToWrite=0x112c, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11376000*, lpNumberOfBytesWritten=0x113a1dfc*=0x112c, lpOverlapped=0x113a1e08) returned 1
	[0277.841] GetFileType (hFile=0x1fc) returned 0x1
	[0277.841] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x112c, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.841] GetFileType (hFile=0x1fc) returned 0x1
	[0277.841] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.841] WriteFile (in: hFile=0x1fc, lpBuffer=0x112e5500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x112e5500*, lpNumberOfBytesWritten=0x113a1dfc*=0x227, lpOverlapped=0x113a1e08) returned 1
	[0277.842] GetFileType (hFile=0x1fc) returned 0x1
	[0277.842] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x112c, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.842] CloseHandle (hObject=0x1fc) returned 1
	[0277.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf.tl30z")) returned 0x220
	[0277.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.859] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0277.879] SetEvent (hEvent=0x26c) returned 1
	[0277.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf")) returned 0x220
	[0277.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF", dwFileAttributes=0x220) returned 1
	[0277.879] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.207] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0278.208] ReadFile (in: hFile=0x224, lpBuffer=0x11330000, nNumberOfBytesToRead=0xa4c, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11330000*, lpNumberOfBytesRead=0x11022e18*=0xa4c, lpOverlapped=0x0) returned 1
	[0278.211] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0278.211] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0278.211] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113de802 | out: pbBuffer=0x113de802) returned 1
	[0278.212] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0278.212] GetFileType (hFile=0x224) returned 0x1
	[0278.212] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.212] WriteFile (in: hFile=0x224, lpBuffer=0x11112000*, nNumberOfBytesToWrite=0xa4c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11112000*, lpNumberOfBytesWritten=0x1102bdfc*=0xa4c, lpOverlapped=0x1102be08) returned 1
	[0278.212] GetFileType (hFile=0x224) returned 0x1
	[0278.213] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa4c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.213] GetFileType (hFile=0x224) returned 0x1
	[0278.213] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.213] WriteFile (in: hFile=0x224, lpBuffer=0x111e8a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111e8a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0278.213] GetFileType (hFile=0x224) returned 0x1
	[0278.213] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa4c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.213] CloseHandle (hObject=0x224) returned 1
	[0278.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf.tl30z")) returned 0x220
	[0278.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.227] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0278.234] SetEvent (hEvent=0x26c) returned 1
	[0278.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid")) returned 0x220
	[0278.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID", dwFileAttributes=0x220) returned 1
	[0278.234] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid.tl30z"), dwFlags=0x1) returned 1
	[0278.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.438] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0278.438] ReadFile (in: hFile=0x224, lpBuffer=0x112d6500, nNumberOfBytesToRead=0x2466, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x112d6500*, lpNumberOfBytesRead=0x11022e18*=0x2466, lpOverlapped=0x0) returned 1
	[0278.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202700 | out: pbBuffer=0x11202700) returned 1
	[0278.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112026f8 | out: pbBuffer=0x112026f8) returned 1
	[0278.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111af102 | out: pbBuffer=0x111af102) returned 1
	[0278.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111af1c2 | out: pbBuffer=0x111af1c2) returned 1
	[0278.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202730 | out: pbBuffer=0x11202730) returned 1
	[0278.528] GetFileType (hFile=0x224) returned 0x1
	[0278.528] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.528] WriteFile (in: hFile=0x224, lpBuffer=0x1129c000*, nNumberOfBytesToWrite=0x2466, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x1129c000*, lpNumberOfBytesWritten=0x1139fdfc*=0x2466, lpOverlapped=0x1139fe08) returned 1
	[0278.529] GetFileType (hFile=0x224) returned 0x1
	[0278.529] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2466, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.529] GetFileType (hFile=0x224) returned 0x1
	[0278.529] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.529] WriteFile (in: hFile=0x224, lpBuffer=0x11304380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x11304380*, lpNumberOfBytesWritten=0x1139fdfc*=0x22a, lpOverlapped=0x1139fe08) returned 1
	[0278.530] GetFileType (hFile=0x224) returned 0x1
	[0278.530] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2466, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.530] CloseHandle (hObject=0x224) returned 1
	[0278.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid.tl30z")) returned 0x220
	[0278.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0278.541] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0278.551] SetEvent (hEvent=0x26c) returned 1
	[0278.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf")) returned 0x220
	[0278.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF", dwFileAttributes=0x220) returned 1
	[0278.551] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.723] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0278.723] ReadFile (in: hFile=0x224, lpBuffer=0x11330a80, nNumberOfBytesToRead=0x9a8, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11330a80*, lpNumberOfBytesRead=0x11022e18*=0x9a8, lpOverlapped=0x0) returned 1
	[0278.727] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332800 | out: pbBuffer=0x11332800) returned 1
	[0278.728] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327f8 | out: pbBuffer=0x113327f8) returned 1
	[0278.728] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e5102 | out: pbBuffer=0x110e5102) returned 1
	[0278.728] SetEvent (hEvent=0x26c) returned 1
	[0278.729] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332830 | out: pbBuffer=0x11332830) returned 1
	[0278.729] GetFileType (hFile=0x224) returned 0x1
	[0278.729] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.730] WriteFile (in: hFile=0x224, lpBuffer=0x11454000*, nNumberOfBytesToWrite=0x9a8, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11454000*, lpNumberOfBytesWritten=0x113a1dfc*=0x9a8, lpOverlapped=0x113a1e08) returned 1
	[0278.730] GetFileType (hFile=0x224) returned 0x1
	[0278.730] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x9a8, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.730] GetFileType (hFile=0x224) returned 0x1
	[0278.730] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.731] WriteFile (in: hFile=0x224, lpBuffer=0x11452380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11452380*, lpNumberOfBytesWritten=0x113a1dfc*=0x227, lpOverlapped=0x113a1e08) returned 1
	[0278.731] GetFileType (hFile=0x224) returned 0x1
	[0278.731] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x9a8, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.731] CloseHandle (hObject=0x224) returned 1
	[0278.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf.tl30z")) returned 0x220
	[0278.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.746] SwitchToThread () returned 1
	[0278.748] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0279.584] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0279.586] SetEvent (hEvent=0x26c) returned 1
	[0279.586] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0279.595] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0279.605] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0279.643] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0279.690] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0279.848] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0279.903] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0279.950] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0279.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf")) returned 0x220
	[0279.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF", dwFileAttributes=0x220) returned 1
	[0279.968] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0280.132] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0280.132] ReadFile (in: hFile=0x224, lpBuffer=0x1146a000, nNumberOfBytesToRead=0x3dbe, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1146a000*, lpNumberOfBytesRead=0x11023e18*=0x3dbe, lpOverlapped=0x0) returned 1
	[0280.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0280.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110dc802 | out: pbBuffer=0x110dc802) returned 1
	[0280.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110dc871 | out: pbBuffer=0x110dc871) returned 1
	[0280.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110dc8a5 | out: pbBuffer=0x110dc8a5) returned 1
	[0280.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0280.140] GetFileType (hFile=0x224) returned 0x1
	[0280.140] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110d3de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.140] WriteFile (in: hFile=0x224, lpBuffer=0x11116000*, nNumberOfBytesToWrite=0x3dbe, lpNumberOfBytesWritten=0x110d3dfc, lpOverlapped=0x110d3e08 | out: lpBuffer=0x11116000*, lpNumberOfBytesWritten=0x110d3dfc*=0x3dbe, lpOverlapped=0x110d3e08) returned 1
	[0280.141] GetFileType (hFile=0x224) returned 0x1
	[0280.141] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3dbe, lpNewFilePointer=0x0, dwMoveMethod=0x110d3de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.141] GetFileType (hFile=0x224) returned 0x1
	[0280.141] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110d3de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.141] WriteFile (in: hFile=0x224, lpBuffer=0x113aca80*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x110d3dfc, lpOverlapped=0x110d3e08 | out: lpBuffer=0x113aca80*, lpNumberOfBytesWritten=0x110d3dfc*=0x239, lpOverlapped=0x110d3e08) returned 1
	[0280.141] GetFileType (hFile=0x224) returned 0x1
	[0280.141] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3dbe, lpNewFilePointer=0x0, dwMoveMethod=0x110d3de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.141] CloseHandle (hObject=0x224) returned 1
	[0280.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf.tl30z")) returned 0x220
	[0280.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.150] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0280.161] SetEvent (hEvent=0x210) returned 1
	[0280.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf")) returned 0x220
	[0280.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF", dwFileAttributes=0x220) returned 1
	[0280.162] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0280.353] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0280.353] ReadFile (in: hFile=0x224, lpBuffer=0x1115e000, nNumberOfBytesToRead=0xa38, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1115e000*, lpNumberOfBytesRead=0x11023e18*=0xa38, lpOverlapped=0x0) returned 1
	[0280.385] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112026c0 | out: pbBuffer=0x112026c0) returned 1
	[0280.385] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112026b8 | out: pbBuffer=0x112026b8) returned 1
	[0280.391] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a3102 | out: pbBuffer=0x111a3102) returned 1
	[0280.405] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112026f0 | out: pbBuffer=0x112026f0) returned 1
	[0280.405] GetFileType (hFile=0x224) returned 0x1
	[0280.405] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.405] WriteFile (in: hFile=0x224, lpBuffer=0x11172000*, nNumberOfBytesToWrite=0xa38, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x11172000*, lpNumberOfBytesWritten=0x11219dfc*=0xa38, lpOverlapped=0x11219e08) returned 1
	[0280.405] GetFileType (hFile=0x224) returned 0x1
	[0280.405] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa38, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.406] GetFileType (hFile=0x224) returned 0x1
	[0280.406] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.406] WriteFile (in: hFile=0x224, lpBuffer=0x11170380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x11170380*, lpNumberOfBytesWritten=0x11219dfc*=0x227, lpOverlapped=0x11219e08) returned 1
	[0280.406] GetFileType (hFile=0x224) returned 0x1
	[0280.406] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa38, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.406] CloseHandle (hObject=0x224) returned 1
	[0280.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf.tl30z")) returned 0x220
	[0280.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.416] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0280.420] SetEvent (hEvent=0x210) returned 1
	[0280.420] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf")) returned 0x220
	[0280.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF", dwFileAttributes=0x220) returned 1
	[0280.420] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0280.674] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0280.675] ReadFile (in: hFile=0x1d8, lpBuffer=0x11246000, nNumberOfBytesToRead=0x15b0, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11246000*, lpNumberOfBytesRead=0x11023e18*=0x15b0, lpOverlapped=0x0) returned 1
	[0280.678] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0280.678] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a2802 | out: pbBuffer=0x111a2802) returned 1
	[0280.679] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0280.679] GetFileType (hFile=0x1d8) returned 0x1
	[0280.679] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.680] WriteFile (in: hFile=0x1d8, lpBuffer=0x1127a000*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1127a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x15b0, lpOverlapped=0x1102be08) returned 1
	[0280.680] GetFileType (hFile=0x1d8) returned 0x1
	[0280.680] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x15b0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.680] GetFileType (hFile=0x1d8) returned 0x1
	[0280.680] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.681] WriteFile (in: hFile=0x1d8, lpBuffer=0x11170a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11170a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0280.682] GetFileType (hFile=0x1d8) returned 0x1
	[0280.682] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x15b0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.682] CloseHandle (hObject=0x1d8) returned 1
	[0280.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf.tl30z")) returned 0x220
	[0280.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.693] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0280.704] SetEvent (hEvent=0x1b0) returned 1
	[0280.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf")) returned 0x220
	[0280.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF", dwFileAttributes=0x220) returned 1
	[0280.705] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0280.890] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0280.890] ReadFile (in: hFile=0x1d8, lpBuffer=0x11250000, nNumberOfBytesToRead=0x3dec, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11250000*, lpNumberOfBytesRead=0x11023e18*=0x3dec, lpOverlapped=0x0) returned 1
	[0280.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0280.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0280.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11190802 | out: pbBuffer=0x11190802) returned 1
	[0280.895] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0280.895] GetFileType (hFile=0x1d8) returned 0x1
	[0280.895] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.896] WriteFile (in: hFile=0x1d8, lpBuffer=0x113d8000*, nNumberOfBytesToWrite=0x3dec, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d8000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3dec, lpOverlapped=0x1102be08) returned 1
	[0280.896] GetFileType (hFile=0x1d8) returned 0x1
	[0280.896] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3dec, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.896] GetFileType (hFile=0x1d8) returned 0x1
	[0280.896] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.896] WriteFile (in: hFile=0x1d8, lpBuffer=0x11090a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11090a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0280.897] GetFileType (hFile=0x1d8) returned 0x1
	[0280.897] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3dec, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.897] CloseHandle (hObject=0x1d8) returned 1
	[0280.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf.tl30z")) returned 0x220
	[0280.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.908] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0280.913] SetEvent (hEvent=0x248) returned 1
	[0280.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf")) returned 0x220
	[0280.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF", dwFileAttributes=0x220) returned 1
	[0280.914] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.151] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0281.151] ReadFile (in: hFile=0x1d8, lpBuffer=0x1137d500, nNumberOfBytesToRead=0x318, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1137d500*, lpNumberOfBytesRead=0x11023e18*=0x318, lpOverlapped=0x0) returned 1
	[0281.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332650 | out: pbBuffer=0x11332650) returned 1
	[0281.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a0a02 | out: pbBuffer=0x113a0a02) returned 1
	[0281.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a0a2a | out: pbBuffer=0x113a0a2a) returned 1
	[0281.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332680 | out: pbBuffer=0x11332680) returned 1
	[0281.155] GetFileType (hFile=0x1d8) returned 0x1
	[0281.155] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.155] WriteFile (in: hFile=0x1d8, lpBuffer=0x112f9000*, nNumberOfBytesToWrite=0x318, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112f9000*, lpNumberOfBytesWritten=0x11031dfc*=0x318, lpOverlapped=0x11031e08) returned 1
	[0281.156] GetFileType (hFile=0x1d8) returned 0x1
	[0281.156] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.156] GetFileType (hFile=0x1d8) returned 0x1
	[0281.156] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.156] WriteFile (in: hFile=0x1d8, lpBuffer=0x112fe380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112fe380*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0281.156] GetFileType (hFile=0x1d8) returned 0x1
	[0281.157] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x318, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.157] CloseHandle (hObject=0x1d8) returned 1
	[0281.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf.tl30z")) returned 0x220
	[0281.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.164] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0281.174] SetEvent (hEvent=0x248) returned 1
	[0281.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf")) returned 0x220
	[0281.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF", dwFileAttributes=0x220) returned 1
	[0281.175] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.340] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0281.340] ReadFile (in: hFile=0x1d8, lpBuffer=0x1108e000, nNumberOfBytesToRead=0x2b8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesRead=0x11023e18*=0x2b8, lpOverlapped=0x0) returned 1
	[0281.346] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332c60 | out: pbBuffer=0x11332c60) returned 1
	[0281.346] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332c58 | out: pbBuffer=0x11332c58) returned 1
	[0281.346] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11227502 | out: pbBuffer=0x11227502) returned 1
	[0281.346] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11227530 | out: pbBuffer=0x11227530) returned 1
	[0281.346] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11227536 | out: pbBuffer=0x11227536) returned 1
	[0281.346] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1122758a | out: pbBuffer=0x1122758a) returned 1
	[0281.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332c90 | out: pbBuffer=0x11332c90) returned 1
	[0281.347] GetFileType (hFile=0x1d8) returned 0x1
	[0281.347] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.347] WriteFile (in: hFile=0x1d8, lpBuffer=0x1111c000*, nNumberOfBytesToWrite=0x2b8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1111c000*, lpNumberOfBytesWritten=0x11031dfc*=0x2b8, lpOverlapped=0x11031e08) returned 1
	[0281.347] GetFileType (hFile=0x1d8) returned 0x1
	[0281.347] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.348] GetFileType (hFile=0x1d8) returned 0x1
	[0281.348] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.348] WriteFile (in: hFile=0x1d8, lpBuffer=0x1122dc00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1122dc00*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0281.348] GetFileType (hFile=0x1d8) returned 0x1
	[0281.348] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0281.348] CloseHandle (hObject=0x1d8) returned 1
	[0281.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf.tl30z")) returned 0x220
	[0281.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.357] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0281.365] SetEvent (hEvent=0x248) returned 1
	[0281.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf")) returned 0x220
	[0281.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF", dwFileAttributes=0x220) returned 1
	[0281.365] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0282.000] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0282.000] ReadFile (in: hFile=0x1d8, lpBuffer=0x11162000, nNumberOfBytesToRead=0x4e8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11162000*, lpNumberOfBytesRead=0x11023e18*=0x4e8, lpOverlapped=0x0) returned 1
	[0282.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0282.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107be02 | out: pbBuffer=0x1107be02) returned 1
	[0282.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107be68 | out: pbBuffer=0x1107be68) returned 1
	[0282.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0282.006] GetFileType (hFile=0x1d8) returned 0x1
	[0282.006] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.006] WriteFile (in: hFile=0x1d8, lpBuffer=0x11374000*, nNumberOfBytesToWrite=0x4e8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11374000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4e8, lpOverlapped=0x1102be08) returned 1
	[0282.006] GetFileType (hFile=0x1d8) returned 0x1
	[0282.006] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4e8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.006] GetFileType (hFile=0x1d8) returned 0x1
	[0282.006] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.007] WriteFile (in: hFile=0x1d8, lpBuffer=0x11168a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11168a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0282.007] GetFileType (hFile=0x1d8) returned 0x1
	[0282.007] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4e8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.007] CloseHandle (hObject=0x1d8) returned 1
	[0282.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf.tl30z")) returned 0x220
	[0282.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.015] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0282.027] SetEvent (hEvent=0x1b0) returned 1
	[0282.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf")) returned 0x220
	[0282.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF", dwFileAttributes=0x220) returned 1
	[0282.027] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0282.157] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0282.157] ReadFile (in: hFile=0x1d8, lpBuffer=0x11430000, nNumberOfBytesToRead=0x257c, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11023e18*=0x257c, lpOverlapped=0x0) returned 1
	[0282.169] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202270 | out: pbBuffer=0x11202270) returned 1
	[0282.169] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202268 | out: pbBuffer=0x11202268) returned 1
	[0282.169] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111cf202 | out: pbBuffer=0x111cf202) returned 1
	[0282.169] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112022a0 | out: pbBuffer=0x112022a0) returned 1
	[0282.170] GetFileType (hFile=0x1d8) returned 0x1
	[0282.170] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.170] WriteFile (in: hFile=0x1d8, lpBuffer=0x1144c000*, nNumberOfBytesToWrite=0x257c, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x1144c000*, lpNumberOfBytesWritten=0x111c7dfc*=0x257c, lpOverlapped=0x111c7e08) returned 1
	[0282.170] GetFileType (hFile=0x1d8) returned 0x1
	[0282.170] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x257c, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.170] GetFileType (hFile=0x1d8) returned 0x1
	[0282.170] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.171] WriteFile (in: hFile=0x1d8, lpBuffer=0x112e3880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x112e3880*, lpNumberOfBytesWritten=0x111c7dfc*=0x230, lpOverlapped=0x111c7e08) returned 1
	[0282.171] GetFileType (hFile=0x1d8) returned 0x1
	[0282.171] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x257c, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.171] CloseHandle (hObject=0x1d8) returned 1
	[0282.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf.tl30z")) returned 0x220
	[0282.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.178] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0282.190] SetEvent (hEvent=0x1b0) returned 1
	[0282.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf")) returned 0x220
	[0282.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF", dwFileAttributes=0x220) returned 1
	[0282.191] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0282.537] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0282.537] ReadFile (in: hFile=0x1d8, lpBuffer=0x11246000, nNumberOfBytesToRead=0x375e, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11246000*, lpNumberOfBytesRead=0x11023e18*=0x375e, lpOverlapped=0x0) returned 1
	[0282.546] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6490 | out: pbBuffer=0x113e6490) returned 1
	[0282.546] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11455202 | out: pbBuffer=0x11455202) returned 1
	[0282.546] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114552bb | out: pbBuffer=0x114552bb) returned 1
	[0282.547] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e64c0 | out: pbBuffer=0x113e64c0) returned 1
	[0282.548] GetFileType (hFile=0x1d8) returned 0x1
	[0282.548] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.548] WriteFile (in: hFile=0x1d8, lpBuffer=0x11180000*, nNumberOfBytesToWrite=0x375e, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11180000*, lpNumberOfBytesWritten=0x1102bdfc*=0x375e, lpOverlapped=0x1102be08) returned 1
	[0282.548] GetFileType (hFile=0x1d8) returned 0x1
	[0282.549] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x375e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.549] GetFileType (hFile=0x1d8) returned 0x1
	[0282.549] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.549] WriteFile (in: hFile=0x1d8, lpBuffer=0x113b9180*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113b9180*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0282.549] GetFileType (hFile=0x1d8) returned 0x1
	[0282.549] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x375e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.549] CloseHandle (hObject=0x1d8) returned 1
	[0282.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf.tl30z")) returned 0x220
	[0282.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.556] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0282.580] SetEvent (hEvent=0x1b0) returned 1
	[0282.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf")) returned 0x220
	[0282.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF", dwFileAttributes=0x220) returned 1
	[0282.581] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0282.891] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0282.891] ReadFile (in: hFile=0x288, lpBuffer=0x1139e000, nNumberOfBytesToRead=0x3d90, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1139e000*, lpNumberOfBytesRead=0x11023e18*=0x3d90, lpOverlapped=0x0) returned 1
	[0282.897] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332220 | out: pbBuffer=0x11332220) returned 1
	[0282.897] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11440802 | out: pbBuffer=0x11440802) returned 1
	[0282.897] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11440854 | out: pbBuffer=0x11440854) returned 1
	[0282.897] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114408ab | out: pbBuffer=0x114408ab) returned 1
	[0282.898] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332250 | out: pbBuffer=0x11332250) returned 1
	[0282.898] GetFileType (hFile=0x288) returned 0x1
	[0282.898] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111afde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.898] WriteFile (in: hFile=0x288, lpBuffer=0x1114e000*, nNumberOfBytesToWrite=0x3d90, lpNumberOfBytesWritten=0x111afdfc, lpOverlapped=0x111afe08 | out: lpBuffer=0x1114e000*, lpNumberOfBytesWritten=0x111afdfc*=0x3d90, lpOverlapped=0x111afe08) returned 1
	[0282.899] GetFileType (hFile=0x288) returned 0x1
	[0282.899] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x3d90, lpNewFilePointer=0x0, dwMoveMethod=0x111afde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.899] GetFileType (hFile=0x288) returned 0x1
	[0282.899] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111afde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.899] WriteFile (in: hFile=0x288, lpBuffer=0x113d4a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x111afdfc, lpOverlapped=0x111afe08 | out: lpBuffer=0x113d4a80*, lpNumberOfBytesWritten=0x111afdfc*=0x22d, lpOverlapped=0x111afe08) returned 1
	[0282.900] GetFileType (hFile=0x288) returned 0x1
	[0282.900] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x3d90, lpNewFilePointer=0x0, dwMoveMethod=0x111afde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.900] CloseHandle (hObject=0x288) returned 1
	[0282.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf.tl30z")) returned 0x220
	[0282.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.917] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0282.924] SetEvent (hEvent=0x210) returned 1
	[0282.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf")) returned 0x220
	[0282.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF", dwFileAttributes=0x220) returned 1
	[0282.924] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf.tl30z"), dwFlags=0x1) returned 1
	[0283.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.066] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0283.066] ReadFile (in: hFile=0x288, lpBuffer=0x112b4000, nNumberOfBytesToRead=0x14c2, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x112b4000*, lpNumberOfBytesRead=0x11023e18*=0x14c2, lpOverlapped=0x0) returned 1
	[0283.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202540 | out: pbBuffer=0x11202540) returned 1
	[0283.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112aea02 | out: pbBuffer=0x112aea02) returned 1
	[0283.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112aea79 | out: pbBuffer=0x112aea79) returned 1
	[0283.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202570 | out: pbBuffer=0x11202570) returned 1
	[0283.079] GetFileType (hFile=0x288) returned 0x1
	[0283.080] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.080] WriteFile (in: hFile=0x288, lpBuffer=0x112ca000*, nNumberOfBytesToWrite=0x14c2, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112ca000*, lpNumberOfBytesWritten=0x1102bdfc*=0x14c2, lpOverlapped=0x1102be08) returned 1
	[0283.080] GetFileType (hFile=0x288) returned 0x1
	[0283.080] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x14c2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.080] GetFileType (hFile=0x288) returned 0x1
	[0283.080] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.080] WriteFile (in: hFile=0x288, lpBuffer=0x112a1880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112a1880*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0283.081] GetFileType (hFile=0x288) returned 0x1
	[0283.081] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x14c2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.081] CloseHandle (hObject=0x288) returned 1
	[0283.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf.tl30z")) returned 0x220
	[0283.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0283.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 0x220
	[0283.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF", dwFileAttributes=0x220) returned 1
	[0283.087] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.tl30z"), dwFlags=0x1) returned 1
	[0283.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.299] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0283.300] ReadFile (in: hFile=0x288, lpBuffer=0x112f4000, nNumberOfBytesToRead=0x40d4, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x112f4000*, lpNumberOfBytesRead=0x11023e18*=0x40d4, lpOverlapped=0x0) returned 1
	[0283.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0283.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0283.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d5202 | out: pbBuffer=0x111d5202) returned 1
	[0283.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d52db | out: pbBuffer=0x111d52db) returned 1
	[0283.312] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0283.313] GetFileType (hFile=0x288) returned 0x1
	[0283.313] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.313] WriteFile (in: hFile=0x288, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x40d4, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x1133fdfc*=0x40d4, lpOverlapped=0x1133fe08) returned 1
	[0283.336] GetFileType (hFile=0x288) returned 0x1
	[0283.336] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x40d4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.336] GetFileType (hFile=0x288) returned 0x1
	[0283.336] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.336] WriteFile (in: hFile=0x288, lpBuffer=0x1116ea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1116ea80*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0283.336] GetFileType (hFile=0x288) returned 0x1
	[0283.336] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x40d4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.336] CloseHandle (hObject=0x288) returned 1
	[0283.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.tl30z")) returned 0x220
	[0283.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0283.354] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0283.370] SetEvent (hEvent=0x26c) returned 1
	[0283.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 0x220
	[0283.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF", dwFileAttributes=0x220) returned 1
	[0283.371] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.tl30z"), dwFlags=0x1) returned 1
	[0283.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.541] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0283.542] ReadFile (in: hFile=0x288, lpBuffer=0x11234a80, nNumberOfBytesToRead=0x65e6, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11234a80*, lpNumberOfBytesRead=0x11023e18*=0x65e6, lpOverlapped=0x0) returned 1
	[0283.548] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0283.548] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c0702 | out: pbBuffer=0x113c0702) returned 1
	[0283.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0283.550] GetFileType (hFile=0x288) returned 0x1
	[0283.550] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.550] WriteFile (in: hFile=0x288, lpBuffer=0x11204000*, nNumberOfBytesToWrite=0x65e6, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11204000*, lpNumberOfBytesWritten=0x11031dfc*=0x65e6, lpOverlapped=0x11031e08) returned 1
	[0283.550] GetFileType (hFile=0x288) returned 0x1
	[0283.550] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x65e6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.551] GetFileType (hFile=0x288) returned 0x1
	[0283.551] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.551] WriteFile (in: hFile=0x288, lpBuffer=0x1130ee00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1130ee00*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0283.551] GetFileType (hFile=0x288) returned 0x1
	[0283.551] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x65e6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.551] CloseHandle (hObject=0x288) returned 1
	[0283.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.tl30z")) returned 0x220
	[0283.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0283.564] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0283.569] SetEvent (hEvent=0x26c) returned 1
	[0283.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 0x220
	[0283.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG", dwFileAttributes=0x220) returned 1
	[0283.570] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.tl30z"), dwFlags=0x1) returned 1
	[0283.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0283.783] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0283.783] ReadFile (in: hFile=0x1d4, lpBuffer=0x112a8000, nNumberOfBytesToRead=0x3682, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x112a8000*, lpNumberOfBytesRead=0x11023e18*=0x3682, lpOverlapped=0x0) returned 1
	[0283.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332800 | out: pbBuffer=0x11332800) returned 1
	[0283.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c1d02 | out: pbBuffer=0x113c1d02) returned 1
	[0283.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332830 | out: pbBuffer=0x11332830) returned 1
	[0283.788] GetFileType (hFile=0x1d4) returned 0x1
	[0283.788] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.788] WriteFile (in: hFile=0x1d4, lpBuffer=0x11192000*, nNumberOfBytesToWrite=0x3682, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11192000*, lpNumberOfBytesWritten=0x11031dfc*=0x3682, lpOverlapped=0x11031e08) returned 1
	[0283.789] GetFileType (hFile=0x1d4) returned 0x1
	[0283.789] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3682, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.789] GetFileType (hFile=0x1d4) returned 0x1
	[0283.789] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.789] WriteFile (in: hFile=0x1d4, lpBuffer=0x112bea80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112bea80*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0283.789] GetFileType (hFile=0x1d4) returned 0x1
	[0283.789] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3682, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.789] CloseHandle (hObject=0x1d4) returned 1
	[0283.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.tl30z")) returned 0x220
	[0283.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0283.806] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0283.810] SetEvent (hEvent=0x26c) returned 1
	[0283.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 0x220
	[0283.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG", dwFileAttributes=0x220) returned 1
	[0283.811] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.tl30z"), dwFlags=0x1) returned 1
	[0283.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0283.987] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0283.987] ReadFile (in: hFile=0x1d4, lpBuffer=0x11470000, nNumberOfBytesToRead=0x1bf2, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11470000*, lpNumberOfBytesRead=0x11023e18*=0x1bf2, lpOverlapped=0x0) returned 1
	[0283.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0283.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267302 | out: pbBuffer=0x11267302) returned 1
	[0283.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112673c3 | out: pbBuffer=0x112673c3) returned 1
	[0283.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112673ce | out: pbBuffer=0x112673ce) returned 1
	[0283.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112673d0 | out: pbBuffer=0x112673d0) returned 1
	[0283.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112673dd | out: pbBuffer=0x112673dd) returned 1
	[0283.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0283.994] GetFileType (hFile=0x1d4) returned 0x1
	[0283.994] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.994] WriteFile (in: hFile=0x1d4, lpBuffer=0x112da000*, nNumberOfBytesToWrite=0x1bf2, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112da000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1bf2, lpOverlapped=0x1102be08) returned 1
	[0283.995] GetFileType (hFile=0x1d4) returned 0x1
	[0283.995] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1bf2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.995] GetFileType (hFile=0x1d4) returned 0x1
	[0283.995] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.995] WriteFile (in: hFile=0x1d4, lpBuffer=0x112bfc00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112bfc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0283.995] GetFileType (hFile=0x1d4) returned 0x1
	[0283.995] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1bf2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.995] CloseHandle (hObject=0x1d4) returned 1
	[0283.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.tl30z")) returned 0x220
	[0283.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0284.005] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0284.009] SetEvent (hEvent=0x210) returned 1
	[0284.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 0x220
	[0284.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG", dwFileAttributes=0x220) returned 1
	[0284.010] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.tl30z"), dwFlags=0x1) returned 1
	[0284.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.146] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0284.147] ReadFile (in: hFile=0x1d4, lpBuffer=0x1129e000, nNumberOfBytesToRead=0xfcff, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1129e000*, lpNumberOfBytesRead=0x11023e18*=0xfcff, lpOverlapped=0x0) returned 1
	[0284.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0284.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e638 | out: pbBuffer=0x1104e638) returned 1
	[0284.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ae802 | out: pbBuffer=0x112ae802) returned 1
	[0284.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ae81e | out: pbBuffer=0x112ae81e) returned 1
	[0284.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ae837 | out: pbBuffer=0x112ae837) returned 1
	[0284.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ae87d | out: pbBuffer=0x112ae87d) returned 1
	[0284.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ae8a1 | out: pbBuffer=0x112ae8a1) returned 1
	[0284.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0284.156] GetFileType (hFile=0x1d4) returned 0x1
	[0284.156] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.156] WriteFile (in: hFile=0x1d4, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0xfcff, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x1138fdfc*=0xfcff, lpOverlapped=0x1138fe08) returned 1
	[0284.156] GetFileType (hFile=0x1d4) returned 0x1
	[0284.157] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xfcff, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.157] GetFileType (hFile=0x1d4) returned 0x1
	[0284.157] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.157] WriteFile (in: hFile=0x1d4, lpBuffer=0x110db500*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x110db500*, lpNumberOfBytesWritten=0x1138fdfc*=0x245, lpOverlapped=0x1138fe08) returned 1
	[0284.157] GetFileType (hFile=0x1d4) returned 0x1
	[0284.157] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xfcff, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.157] CloseHandle (hObject=0x1d4) returned 1
	[0284.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.tl30z")) returned 0x220
	[0284.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0284.182] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0284.189] SetEvent (hEvent=0x210) returned 1
	[0284.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 0x220
	[0284.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF", dwFileAttributes=0x220) returned 1
	[0284.190] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.384] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0284.384] ReadFile (in: hFile=0x1d4, lpBuffer=0x11206500, nNumberOfBytesToRead=0x2232, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11206500*, lpNumberOfBytesRead=0x11023e18*=0x2232, lpOverlapped=0x0) returned 1
	[0284.388] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202410 | out: pbBuffer=0x11202410) returned 1
	[0284.388] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202408 | out: pbBuffer=0x11202408) returned 1
	[0284.388] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261d02 | out: pbBuffer=0x11261d02) returned 1
	[0284.388] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202440 | out: pbBuffer=0x11202440) returned 1
	[0284.389] GetFileType (hFile=0x1d4) returned 0x1
	[0284.389] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.389] WriteFile (in: hFile=0x1d4, lpBuffer=0x11370000*, nNumberOfBytesToWrite=0x2232, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11370000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2232, lpOverlapped=0x1102be08) returned 1
	[0284.389] GetFileType (hFile=0x1d4) returned 0x1
	[0284.389] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2232, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.389] GetFileType (hFile=0x1d4) returned 0x1
	[0284.389] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.389] WriteFile (in: hFile=0x1d4, lpBuffer=0x11350a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11350a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0284.390] GetFileType (hFile=0x1d4) returned 0x1
	[0284.390] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2232, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.390] CloseHandle (hObject=0x1d4) returned 1
	[0284.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.tl30z")) returned 0x220
	[0284.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.396] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0284.413] SetEvent (hEvent=0x234) returned 1
	[0284.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf")) returned 0x220
	[0284.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF", dwFileAttributes=0x220) returned 1
	[0284.414] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.645] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0284.645] ReadFile (in: hFile=0x1d4, lpBuffer=0x111d4000, nNumberOfBytesToRead=0x9b8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111d4000*, lpNumberOfBytesRead=0x11023e18*=0x9b8, lpOverlapped=0x0) returned 1
	[0284.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0284.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0284.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e2802 | out: pbBuffer=0x111e2802) returned 1
	[0284.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0284.653] GetFileType (hFile=0x1d4) returned 0x1
	[0284.653] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.653] WriteFile (in: hFile=0x1d4, lpBuffer=0x1109e000*, nNumberOfBytesToWrite=0x9b8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1109e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x9b8, lpOverlapped=0x1102be08) returned 1
	[0284.653] GetFileType (hFile=0x1d4) returned 0x1
	[0284.653] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x9b8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.653] GetFileType (hFile=0x1d4) returned 0x1
	[0284.654] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.654] WriteFile (in: hFile=0x1d4, lpBuffer=0x111f4a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111f4a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0284.654] GetFileType (hFile=0x1d4) returned 0x1
	[0284.654] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x9b8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.654] CloseHandle (hObject=0x1d4) returned 1
	[0284.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.tl30z")) returned 0x220
	[0284.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.685] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0284.699] SetEvent (hEvent=0x118) returned 1
	[0284.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf")) returned 0x220
	[0284.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF", dwFileAttributes=0x220) returned 1
	[0284.700] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.955] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0284.955] ReadFile (in: hFile=0x1d4, lpBuffer=0x1113c000, nNumberOfBytesToRead=0x4ae, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1113c000*, lpNumberOfBytesRead=0x11023e18*=0x4ae, lpOverlapped=0x0) returned 1
	[0284.965] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6050 | out: pbBuffer=0x113e6050) returned 1
	[0284.965] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bf302 | out: pbBuffer=0x112bf302) returned 1
	[0284.965] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112bf375 | out: pbBuffer=0x112bf375) returned 1
	[0284.966] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6080 | out: pbBuffer=0x113e6080) returned 1
	[0284.966] GetFileType (hFile=0x1d4) returned 0x1
	[0284.966] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.966] WriteFile (in: hFile=0x1d4, lpBuffer=0x1118a000*, nNumberOfBytesToWrite=0x4ae, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1118a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4ae, lpOverlapped=0x1102be08) returned 1
	[0284.966] GetFileType (hFile=0x1d4) returned 0x1
	[0284.966] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4ae, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.967] GetFileType (hFile=0x1d4) returned 0x1
	[0284.967] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.967] WriteFile (in: hFile=0x1d4, lpBuffer=0x11188380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11188380*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0284.967] GetFileType (hFile=0x1d4) returned 0x1
	[0284.967] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4ae, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.967] CloseHandle (hObject=0x1d4) returned 1
	[0284.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.tl30z")) returned 0x220
	[0284.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.985] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0284.995] SetEvent (hEvent=0x118) returned 1
	[0284.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg")) returned 0x220
	[0284.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG", dwFileAttributes=0x220) returned 1
	[0284.996] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.tl30z"), dwFlags=0x1) returned 1
	[0285.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.155] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0285.155] ReadFile (in: hFile=0x1d4, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x4162, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x11023e18*=0x4162, lpOverlapped=0x0) returned 1
	[0285.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0285.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0285.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11355202 | out: pbBuffer=0x11355202) returned 1
	[0285.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1135529c | out: pbBuffer=0x1135529c) returned 1
	[0285.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113552b7 | out: pbBuffer=0x113552b7) returned 1
	[0285.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113552c7 | out: pbBuffer=0x113552c7) returned 1
	[0285.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0285.161] GetFileType (hFile=0x1d4) returned 0x1
	[0285.161] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.161] WriteFile (in: hFile=0x1d4, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x4162, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x110ebdfc*=0x4162, lpOverlapped=0x110ebe08) returned 1
	[0285.161] GetFileType (hFile=0x1d4) returned 0x1
	[0285.162] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4162, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.162] GetFileType (hFile=0x1d4) returned 0x1
	[0285.162] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.162] WriteFile (in: hFile=0x1d4, lpBuffer=0x11236380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x11236380*, lpNumberOfBytesWritten=0x110ebdfc*=0x227, lpOverlapped=0x110ebe08) returned 1
	[0285.162] GetFileType (hFile=0x1d4) returned 0x1
	[0285.162] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4162, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.162] CloseHandle (hObject=0x1d4) returned 1
	[0285.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.tl30z")) returned 0x220
	[0285.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0285.177] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0285.188] SetEvent (hEvent=0x210) returned 1
	[0285.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg")) returned 0x220
	[0285.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG", dwFileAttributes=0x220) returned 1
	[0285.189] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg.tl30z"), dwFlags=0x1) returned 1
	[0285.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.389] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0285.389] ReadFile (in: hFile=0x1d4, lpBuffer=0x11430000, nNumberOfBytesToRead=0xf39f, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11023e18*=0xf39f, lpOverlapped=0x0) returned 1
	[0285.399] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332940 | out: pbBuffer=0x11332940) returned 1
	[0285.399] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11377e02 | out: pbBuffer=0x11377e02) returned 1
	[0285.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332970 | out: pbBuffer=0x11332970) returned 1
	[0285.401] GetFileType (hFile=0x1d4) returned 0x1
	[0285.401] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.401] WriteFile (in: hFile=0x1d4, lpBuffer=0x112a0000*, nNumberOfBytesToWrite=0xf39f, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112a0000*, lpNumberOfBytesWritten=0x1102bdfc*=0xf39f, lpOverlapped=0x1102be08) returned 1
	[0285.402] GetFileType (hFile=0x1d4) returned 0x1
	[0285.402] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xf39f, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.402] GetFileType (hFile=0x1d4) returned 0x1
	[0285.402] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.402] WriteFile (in: hFile=0x1d4, lpBuffer=0x11446700*, nNumberOfBytesToWrite=0x23f, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11446700*, lpNumberOfBytesWritten=0x1102bdfc*=0x23f, lpOverlapped=0x1102be08) returned 1
	[0285.403] GetFileType (hFile=0x1d4) returned 0x1
	[0285.403] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xf39f, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.403] CloseHandle (hObject=0x1d4) returned 1
	[0285.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg.tl30z")) returned 0x220
	[0285.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0285.418] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0285.428] SetEvent (hEvent=0x210) returned 1
	[0285.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif")) returned 0x220
	[0285.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF", dwFileAttributes=0x220) returned 1
	[0285.429] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif.tl30z"), dwFlags=0x1) returned 1
	[0285.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.647] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0285.647] ReadFile (in: hFile=0x1d4, lpBuffer=0x111b4000, nNumberOfBytesToRead=0x3801, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111b4000*, lpNumberOfBytesRead=0x11023e18*=0x3801, lpOverlapped=0x0) returned 1
	[0285.659] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0285.675] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130a802 | out: pbBuffer=0x1130a802) returned 1
	[0285.676] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0285.676] GetFileType (hFile=0x1d4) returned 0x1
	[0285.676] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.676] WriteFile (in: hFile=0x1d4, lpBuffer=0x1138a000*, nNumberOfBytesToWrite=0x3801, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1138a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3801, lpOverlapped=0x1102be08) returned 1
	[0285.677] GetFileType (hFile=0x1d4) returned 0x1
	[0285.677] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3801, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.677] GetFileType (hFile=0x1d4) returned 0x1
	[0285.677] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.677] WriteFile (in: hFile=0x1d4, lpBuffer=0x11200e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11200e00*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0285.678] GetFileType (hFile=0x1d4) returned 0x1
	[0285.678] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3801, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.678] CloseHandle (hObject=0x1d4) returned 1
	[0285.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif.tl30z")) returned 0x220
	[0285.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.695] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0285.709] SetEvent (hEvent=0x210) returned 1
	[0285.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif")) returned 0x220
	[0285.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF", dwFileAttributes=0x220) returned 1
	[0285.710] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif.tl30z"), dwFlags=0x1) returned 1
	[0285.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.919] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0285.919] ReadFile (in: hFile=0x1d4, lpBuffer=0x113aa000, nNumberOfBytesToRead=0xc8c9, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11023e18*=0xc8c9, lpOverlapped=0x0) returned 1
	[0285.925] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0285.925] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c4802 | out: pbBuffer=0x113c4802) returned 1
	[0285.925] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c4802 | out: pbBuffer=0x113c4802) returned 1
	[0285.925] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0285.927] GetFileType (hFile=0x1d4) returned 0x1
	[0285.927] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.927] WriteFile (in: hFile=0x1d4, lpBuffer=0x11442000*, nNumberOfBytesToWrite=0xc8c9, lpNumberOfBytesWritten=0x113bddfc, lpOverlapped=0x113bde08 | out: lpBuffer=0x11442000*, lpNumberOfBytesWritten=0x113bddfc*=0xc8c9, lpOverlapped=0x113bde08) returned 1
	[0285.928] GetFileType (hFile=0x1d4) returned 0x1
	[0285.928] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xc8c9, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.929] GetFileType (hFile=0x1d4) returned 0x1
	[0285.929] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.929] WriteFile (in: hFile=0x1d4, lpBuffer=0x11462a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113bddfc, lpOverlapped=0x113bde08 | out: lpBuffer=0x11462a80*, lpNumberOfBytesWritten=0x113bddfc*=0x230, lpOverlapped=0x113bde08) returned 1
	[0285.929] GetFileType (hFile=0x1d4) returned 0x1
	[0285.929] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xc8c9, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.929] CloseHandle (hObject=0x1d4) returned 1
	[0285.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif.tl30z")) returned 0x220
	[0285.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.946] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0285.959] SetEvent (hEvent=0x210) returned 1
	[0285.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp")) returned 0x220
	[0285.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP", dwFileAttributes=0x220) returned 1
	[0285.959] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp.tl30z"), dwFlags=0x1) returned 1
	[0286.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.296] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0286.296] ReadFile (in: hFile=0x1d4, lpBuffer=0x11164000, nNumberOfBytesToRead=0x7b30, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11164000*, lpNumberOfBytesRead=0x11023e18*=0x7b30, lpOverlapped=0x0) returned 1
	[0286.301] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0286.302] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d1e02 | out: pbBuffer=0x111d1e02) returned 1
	[0286.302] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332560 | out: pbBuffer=0x11332560) returned 1
	[0286.303] GetFileType (hFile=0x1d4) returned 0x1
	[0286.303] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.304] WriteFile (in: hFile=0x1d4, lpBuffer=0x110f8000*, nNumberOfBytesToWrite=0x7b30, lpNumberOfBytesWritten=0x113bddfc, lpOverlapped=0x113bde08 | out: lpBuffer=0x110f8000*, lpNumberOfBytesWritten=0x113bddfc*=0x7b30, lpOverlapped=0x113bde08) returned 1
	[0286.304] GetFileType (hFile=0x1d4) returned 0x1
	[0286.304] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7b30, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.304] GetFileType (hFile=0x1d4) returned 0x1
	[0286.305] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.305] WriteFile (in: hFile=0x1d4, lpBuffer=0x11176700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113bddfc, lpOverlapped=0x113bde08 | out: lpBuffer=0x11176700*, lpNumberOfBytesWritten=0x113bddfc*=0x230, lpOverlapped=0x113bde08) returned 1
	[0286.305] GetFileType (hFile=0x1d4) returned 0x1
	[0286.305] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7b30, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.306] CloseHandle (hObject=0x1d4) returned 1
	[0286.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp.tl30z")) returned 0x220
	[0286.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0286.321] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0286.338] SetEvent (hEvent=0x210) returned 1
	[0286.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp")) returned 0x220
	[0286.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP", dwFileAttributes=0x220) returned 1
	[0286.339] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp.tl30z"), dwFlags=0x1) returned 1
	[0286.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.560] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0286.561] ReadFile (in: hFile=0x1d4, lpBuffer=0x11296000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11296000*, lpNumberOfBytesRead=0x11023e18*=0x7db8, lpOverlapped=0x0) returned 1
	[0286.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0286.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e638 | out: pbBuffer=0x1104e638) returned 1
	[0286.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119c902 | out: pbBuffer=0x1119c902) returned 1
	[0286.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119c9a3 | out: pbBuffer=0x1119c9a3) returned 1
	[0286.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0286.572] GetFileType (hFile=0x1d4) returned 0x1
	[0286.572] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.572] WriteFile (in: hFile=0x1d4, lpBuffer=0x110de000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110de000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7db8, lpOverlapped=0x1102be08) returned 1
	[0286.573] GetFileType (hFile=0x1d4) returned 0x1
	[0286.573] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.573] GetFileType (hFile=0x1d4) returned 0x1
	[0286.573] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.573] WriteFile (in: hFile=0x1d4, lpBuffer=0x1134d880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1134d880*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0286.573] GetFileType (hFile=0x1d4) returned 0x1
	[0286.574] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.574] CloseHandle (hObject=0x1d4) returned 1
	[0286.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp.tl30z")) returned 0x220
	[0286.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0286.585] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0286.597] SetEvent (hEvent=0x234) returned 1
	[0286.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp")) returned 0x220
	[0286.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP", dwFileAttributes=0x220) returned 1
	[0286.597] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp.tl30z"), dwFlags=0x1) returned 1
	[0286.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.796] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0286.797] ReadFile (in: hFile=0x1d4, lpBuffer=0x11250000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11250000*, lpNumberOfBytesRead=0x11023e18*=0x7db8, lpOverlapped=0x0) returned 1
	[0286.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0286.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0286.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116bd02 | out: pbBuffer=0x1116bd02) returned 1
	[0286.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116bd3d | out: pbBuffer=0x1116bd3d) returned 1
	[0286.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116bddf | out: pbBuffer=0x1116bddf) returned 1
	[0286.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0286.805] GetFileType (hFile=0x1d4) returned 0x1
	[0286.805] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.805] WriteFile (in: hFile=0x1d4, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x113bbdfc, lpOverlapped=0x113bbe08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x113bbdfc*=0x7db8, lpOverlapped=0x113bbe08) returned 1
	[0286.806] GetFileType (hFile=0x1d4) returned 0x1
	[0286.806] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x113bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.806] GetFileType (hFile=0x1d4) returned 0x1
	[0286.806] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.806] WriteFile (in: hFile=0x1d4, lpBuffer=0x111c8700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x113bbdfc, lpOverlapped=0x113bbe08 | out: lpBuffer=0x111c8700*, lpNumberOfBytesWritten=0x113bbdfc*=0x236, lpOverlapped=0x113bbe08) returned 1
	[0286.806] GetFileType (hFile=0x1d4) returned 0x1
	[0286.806] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x113bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.806] CloseHandle (hObject=0x1d4) returned 1
	[0286.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp.tl30z")) returned 0x220
	[0286.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0286.831] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0286.846] SetEvent (hEvent=0x234) returned 1
	[0286.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf")) returned 0x220
	[0286.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF", dwFileAttributes=0x220) returned 1
	[0286.847] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.088] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0287.088] ReadFile (in: hFile=0x1d4, lpBuffer=0x1138e000, nNumberOfBytesToRead=0x2bd0, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1138e000*, lpNumberOfBytesRead=0x11023e18*=0x2bd0, lpOverlapped=0x0) returned 1
	[0287.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327f0 | out: pbBuffer=0x113327f0) returned 1
	[0287.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327e8 | out: pbBuffer=0x113327e8) returned 1
	[0287.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136f202 | out: pbBuffer=0x1136f202) returned 1
	[0287.097] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136f2af | out: pbBuffer=0x1136f2af) returned 1
	[0287.097] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136f2c7 | out: pbBuffer=0x1136f2c7) returned 1
	[0287.097] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332820 | out: pbBuffer=0x11332820) returned 1
	[0287.098] GetFileType (hFile=0x1d4) returned 0x1
	[0287.098] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.098] WriteFile (in: hFile=0x1d4, lpBuffer=0x113dc000*, nNumberOfBytesToWrite=0x2bd0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113dc000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2bd0, lpOverlapped=0x1102be08) returned 1
	[0287.099] GetFileType (hFile=0x1d4) returned 0x1
	[0287.099] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2bd0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.099] GetFileType (hFile=0x1d4) returned 0x1
	[0287.099] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.099] WriteFile (in: hFile=0x1d4, lpBuffer=0x11256380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11256380*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0287.099] GetFileType (hFile=0x1d4) returned 0x1
	[0287.099] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2bd0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.099] CloseHandle (hObject=0x1d4) returned 1
	[0287.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf.tl30z")) returned 0x220
	[0287.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.116] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0287.127] SetEvent (hEvent=0x1b0) returned 1
	[0287.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf")) returned 0x220
	[0287.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF", dwFileAttributes=0x220) returned 1
	[0287.128] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.512] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0287.512] ReadFile (in: hFile=0x1d4, lpBuffer=0x112c2000, nNumberOfBytesToRead=0x1714, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x112c2000*, lpNumberOfBytesRead=0x11023e18*=0x1714, lpOverlapped=0x0) returned 1
	[0287.518] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0287.518] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e358 | out: pbBuffer=0x1104e358) returned 1
	[0287.518] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bdf302 | out: pbBuffer=0x11bdf302) returned 1
	[0287.519] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0287.519] GetFileType (hFile=0x1d4) returned 0x1
	[0287.519] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.519] WriteFile (in: hFile=0x1d4, lpBuffer=0x111d6000*, nNumberOfBytesToWrite=0x1714, lpNumberOfBytesWritten=0x1121bdfc, lpOverlapped=0x1121be08 | out: lpBuffer=0x111d6000*, lpNumberOfBytesWritten=0x1121bdfc*=0x1714, lpOverlapped=0x1121be08) returned 1
	[0287.520] GetFileType (hFile=0x1d4) returned 0x1
	[0287.520] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1714, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.520] GetFileType (hFile=0x1d4) returned 0x1
	[0287.520] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.520] WriteFile (in: hFile=0x1d4, lpBuffer=0x112fb880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1121bdfc, lpOverlapped=0x1121be08 | out: lpBuffer=0x112fb880*, lpNumberOfBytesWritten=0x1121bdfc*=0x22a, lpOverlapped=0x1121be08) returned 1
	[0287.520] GetFileType (hFile=0x1d4) returned 0x1
	[0287.520] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1714, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.520] CloseHandle (hObject=0x1d4) returned 1
	[0287.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf.tl30z")) returned 0x220
	[0287.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.525] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0287.534] SetEvent (hEvent=0x1b0) returned 1
	[0287.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf")) returned 0x220
	[0287.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF", dwFileAttributes=0x220) returned 1
	[0287.535] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.702] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0287.702] ReadFile (in: hFile=0x1d4, lpBuffer=0x11138000, nNumberOfBytesToRead=0x4314, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11138000*, lpNumberOfBytesRead=0x11023e18*=0x4314, lpOverlapped=0x0) returned 1
	[0287.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0287.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0287.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11222802 | out: pbBuffer=0x11222802) returned 1
	[0287.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112228b1 | out: pbBuffer=0x112228b1) returned 1
	[0287.709] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0287.709] GetFileType (hFile=0x1d4) returned 0x1
	[0287.709] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.709] WriteFile (in: hFile=0x1d4, lpBuffer=0x1105a000*, nNumberOfBytesToWrite=0x4314, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1105a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4314, lpOverlapped=0x1102be08) returned 1
	[0287.710] GetFileType (hFile=0x1d4) returned 0x1
	[0287.710] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4314, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.710] GetFileType (hFile=0x1d4) returned 0x1
	[0287.710] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.710] WriteFile (in: hFile=0x1d4, lpBuffer=0x11123880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11123880*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0287.711] GetFileType (hFile=0x1d4) returned 0x1
	[0287.711] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4314, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.711] CloseHandle (hObject=0x1d4) returned 1
	[0287.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf.tl30z")) returned 0x220
	[0287.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.725] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0287.732] SetEvent (hEvent=0x234) returned 1
	[0287.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf")) returned 0x220
	[0287.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF", dwFileAttributes=0x220) returned 1
	[0287.733] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0287.962] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0287.962] ReadFile (in: hFile=0x250, lpBuffer=0x11468000, nNumberOfBytesToRead=0x1714, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11468000*, lpNumberOfBytesRead=0x11023e18*=0x1714, lpOverlapped=0x0) returned 1
	[0287.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0287.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11325d02 | out: pbBuffer=0x11325d02) returned 1
	[0287.972] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0287.972] GetFileType (hFile=0x250) returned 0x1
	[0287.972] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.972] WriteFile (in: hFile=0x250, lpBuffer=0x113c2000*, nNumberOfBytesToWrite=0x1714, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113c2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1714, lpOverlapped=0x1102be08) returned 1
	[0287.973] GetFileType (hFile=0x250) returned 0x1
	[0287.973] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1714, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.973] GetFileType (hFile=0x250) returned 0x1
	[0287.973] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.974] WriteFile (in: hFile=0x250, lpBuffer=0x113b2700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113b2700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0287.974] GetFileType (hFile=0x250) returned 0x1
	[0287.974] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1714, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.974] CloseHandle (hObject=0x250) returned 1
	[0287.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf.tl30z")) returned 0x220
	[0287.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.991] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0288.003] SetEvent (hEvent=0x118) returned 1
	[0288.004] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf")) returned 0x220
	[0288.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF", dwFileAttributes=0x220) returned 1
	[0288.004] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.170] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0288.170] ReadFile (in: hFile=0x250, lpBuffer=0x1117fa80, nNumberOfBytesToRead=0x19a8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1117fa80*, lpNumberOfBytesRead=0x11023e18*=0x19a8, lpOverlapped=0x0) returned 1
	[0288.181] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1a0 | out: pbBuffer=0x1140f1a0) returned 1
	[0288.181] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c7e02 | out: pbBuffer=0x113c7e02) returned 1
	[0288.181] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1d0 | out: pbBuffer=0x1140f1d0) returned 1
	[0288.182] GetFileType (hFile=0x250) returned 0x1
	[0288.182] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.182] WriteFile (in: hFile=0x250, lpBuffer=0x11198000*, nNumberOfBytesToWrite=0x19a8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11198000*, lpNumberOfBytesWritten=0x1102bdfc*=0x19a8, lpOverlapped=0x1102be08) returned 1
	[0288.182] GetFileType (hFile=0x250) returned 0x1
	[0288.183] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x19a8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.183] GetFileType (hFile=0x250) returned 0x1
	[0288.183] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.183] WriteFile (in: hFile=0x250, lpBuffer=0x112ef180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112ef180*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0288.183] GetFileType (hFile=0x250) returned 0x1
	[0288.183] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x19a8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.183] CloseHandle (hObject=0x250) returned 1
	[0288.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf.tl30z")) returned 0x220
	[0288.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.196] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0288.207] SetEvent (hEvent=0x118) returned 1
	[0288.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf")) returned 0x220
	[0288.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF", dwFileAttributes=0x220) returned 1
	[0288.208] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.481] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0288.481] ReadFile (in: hFile=0x250, lpBuffer=0x11be6600, nNumberOfBytesToRead=0x10e0, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11be6600*, lpNumberOfBytesRead=0x11023e18*=0x10e0, lpOverlapped=0x0) returned 1
	[0288.485] SetEvent (hEvent=0x118) returned 1
	[0288.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332960 | out: pbBuffer=0x11332960) returned 1
	[0288.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bfe02 | out: pbBuffer=0x112bfe02) returned 1
	[0288.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112bfed8 | out: pbBuffer=0x112bfed8) returned 1
	[0288.487] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332990 | out: pbBuffer=0x11332990) returned 1
	[0288.489] GetFileType (hFile=0x250) returned 0x1
	[0288.489] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.489] WriteFile (in: hFile=0x250, lpBuffer=0x111da000*, nNumberOfBytesToWrite=0x10e0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111da000*, lpNumberOfBytesWritten=0x11031dfc*=0x10e0, lpOverlapped=0x11031e08) returned 1
	[0288.490] GetFileType (hFile=0x250) returned 0x1
	[0288.490] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x10e0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.490] GetFileType (hFile=0x250) returned 0x1
	[0288.490] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.490] WriteFile (in: hFile=0x250, lpBuffer=0x111dc000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111dc000*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0288.490] GetFileType (hFile=0x250) returned 0x1
	[0288.490] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x10e0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.491] CloseHandle (hObject=0x250) returned 1
	[0288.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf.tl30z")) returned 0x220
	[0288.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.499] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0288.501] SetEvent (hEvent=0x118) returned 1
	[0288.501] SetEvent (hEvent=0x1b0) returned 1
	[0288.501] SwitchToThread () returned 1
	[0288.507] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0288.517] SetEvent (hEvent=0x1b0) returned 1
	[0288.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf")) returned 0x220
	[0288.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF", dwFileAttributes=0x220) returned 1
	[0288.517] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.688] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0288.688] ReadFile (in: hFile=0x250, lpBuffer=0x1118e000, nNumberOfBytesToRead=0x2d40, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1118e000*, lpNumberOfBytesRead=0x1128ae18*=0x2d40, lpOverlapped=0x0) returned 1
	[0288.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324e0 | out: pbBuffer=0x113324e0) returned 1
	[0288.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324d8 | out: pbBuffer=0x113324d8) returned 1
	[0288.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11062602 | out: pbBuffer=0x11062602) returned 1
	[0288.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0288.694] GetFileType (hFile=0x250) returned 0x1
	[0288.694] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.695] WriteFile (in: hFile=0x250, lpBuffer=0x1135e000*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1135e000*, lpNumberOfBytesWritten=0x11031dfc*=0x2d40, lpOverlapped=0x11031e08) returned 1
	[0288.695] GetFileType (hFile=0x250) returned 0x1
	[0288.695] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2d40, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.695] GetFileType (hFile=0x250) returned 0x1
	[0288.695] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.695] WriteFile (in: hFile=0x250, lpBuffer=0x11340e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11340e00*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0288.696] GetFileType (hFile=0x250) returned 0x1
	[0288.696] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2d40, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.696] CloseHandle (hObject=0x250) returned 1
	[0288.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf.tl30z")) returned 0x220
	[0288.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.719] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0288.732] SetEvent (hEvent=0x1b0) returned 1
	[0288.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf")) returned 0x220
	[0288.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF", dwFileAttributes=0x220) returned 1
	[0288.733] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.961] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0288.961] ReadFile (in: hFile=0x250, lpBuffer=0x1146e000, nNumberOfBytesToRead=0x1364, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1146e000*, lpNumberOfBytesRead=0x1128ae18*=0x1364, lpOverlapped=0x0) returned 1
	[0288.969] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f050 | out: pbBuffer=0x1140f050) returned 1
	[0288.969] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1131f202 | out: pbBuffer=0x1131f202) returned 1
	[0288.969] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1131f266 | out: pbBuffer=0x1131f266) returned 1
	[0288.969] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1131f280 | out: pbBuffer=0x1131f280) returned 1
	[0288.970] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f080 | out: pbBuffer=0x1140f080) returned 1
	[0288.970] GetFileType (hFile=0x250) returned 0x1
	[0288.970] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.970] WriteFile (in: hFile=0x250, lpBuffer=0x11bda000*, nNumberOfBytesToWrite=0x1364, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11bda000*, lpNumberOfBytesWritten=0x1124bdfc*=0x1364, lpOverlapped=0x1124be08) returned 1
	[0288.971] GetFileType (hFile=0x250) returned 0x1
	[0288.971] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1364, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.971] GetFileType (hFile=0x250) returned 0x1
	[0288.971] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.971] WriteFile (in: hFile=0x250, lpBuffer=0x11bd2700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11bd2700*, lpNumberOfBytesWritten=0x1124bdfc*=0x22a, lpOverlapped=0x1124be08) returned 1
	[0288.972] GetFileType (hFile=0x250) returned 0x1
	[0288.972] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1364, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.972] CloseHandle (hObject=0x250) returned 1
	[0288.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf.tl30z")) returned 0x220
	[0288.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.995] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0289.009] SetEvent (hEvent=0x1b0) returned 1
	[0289.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf")) returned 0x220
	[0289.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF", dwFileAttributes=0x220) returned 1
	[0289.010] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.183] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0289.183] ReadFile (in: hFile=0x250, lpBuffer=0x11bf1500, nNumberOfBytesToRead=0x1350, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11bf1500*, lpNumberOfBytesRead=0x1128ae18*=0x1350, lpOverlapped=0x0) returned 1
	[0289.188] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332d30 | out: pbBuffer=0x11332d30) returned 1
	[0289.188] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11be1b02 | out: pbBuffer=0x11be1b02) returned 1
	[0289.188] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332d60 | out: pbBuffer=0x11332d60) returned 1
	[0289.189] GetFileType (hFile=0x250) returned 0x1
	[0289.189] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.189] WriteFile (in: hFile=0x250, lpBuffer=0x11312000*, nNumberOfBytesToWrite=0x1350, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11312000*, lpNumberOfBytesWritten=0x11031dfc*=0x1350, lpOverlapped=0x11031e08) returned 1
	[0289.189] GetFileType (hFile=0x250) returned 0x1
	[0289.190] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1350, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.190] GetFileType (hFile=0x250) returned 0x1
	[0289.190] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.190] WriteFile (in: hFile=0x250, lpBuffer=0x1143d500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1143d500*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0289.190] GetFileType (hFile=0x250) returned 0x1
	[0289.190] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1350, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.190] CloseHandle (hObject=0x250) returned 1
	[0289.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf.tl30z")) returned 0x220
	[0289.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.196] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0289.207] SetEvent (hEvent=0x1b0) returned 1
	[0289.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf")) returned 0x220
	[0289.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF", dwFileAttributes=0x220) returned 1
	[0289.208] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.433] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0289.433] ReadFile (in: hFile=0x250, lpBuffer=0x11112000, nNumberOfBytesToRead=0x1864, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11112000*, lpNumberOfBytesRead=0x1128ae18*=0x1864, lpOverlapped=0x0) returned 1
	[0289.438] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f7a0 | out: pbBuffer=0x1140f7a0) returned 1
	[0289.438] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1111c702 | out: pbBuffer=0x1111c702) returned 1
	[0289.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f7d0 | out: pbBuffer=0x1140f7d0) returned 1
	[0289.439] GetFileType (hFile=0x250) returned 0x1
	[0289.439] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.439] WriteFile (in: hFile=0x250, lpBuffer=0x11136000*, nNumberOfBytesToWrite=0x1864, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11136000*, lpNumberOfBytesWritten=0x1124bdfc*=0x1864, lpOverlapped=0x1124be08) returned 1
	[0289.440] GetFileType (hFile=0x250) returned 0x1
	[0289.440] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1864, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.440] GetFileType (hFile=0x250) returned 0x1
	[0289.440] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.440] WriteFile (in: hFile=0x250, lpBuffer=0x11220e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11220e00*, lpNumberOfBytesWritten=0x1124bdfc*=0x227, lpOverlapped=0x1124be08) returned 1
	[0289.441] GetFileType (hFile=0x250) returned 0x1
	[0289.441] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1864, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.441] CloseHandle (hObject=0x250) returned 1
	[0289.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf.tl30z")) returned 0x220
	[0289.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.453] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0289.464] SetEvent (hEvent=0x1b0) returned 1
	[0289.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf")) returned 0x220
	[0289.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF", dwFileAttributes=0x220) returned 1
	[0289.464] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0289.702] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0289.702] ReadFile (in: hFile=0x1d4, lpBuffer=0x11360000, nNumberOfBytesToRead=0xb60, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11360000*, lpNumberOfBytesRead=0x1128ae18*=0xb60, lpOverlapped=0x0) returned 1
	[0289.706] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0289.706] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f268 | out: pbBuffer=0x1140f268) returned 1
	[0289.706] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133d202 | out: pbBuffer=0x1133d202) returned 1
	[0289.707] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0289.707] GetFileType (hFile=0x1d4) returned 0x1
	[0289.707] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.707] WriteFile (in: hFile=0x1d4, lpBuffer=0x11296000*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11296000*, lpNumberOfBytesWritten=0x11031dfc*=0xb60, lpOverlapped=0x11031e08) returned 1
	[0289.708] GetFileType (hFile=0x1d4) returned 0x1
	[0289.708] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xb60, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.708] GetFileType (hFile=0x1d4) returned 0x1
	[0289.708] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.708] WriteFile (in: hFile=0x1d4, lpBuffer=0x1105d880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1105d880*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0289.709] GetFileType (hFile=0x1d4) returned 0x1
	[0289.709] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xb60, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.709] CloseHandle (hObject=0x1d4) returned 1
	[0289.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf.tl30z")) returned 0x220
	[0289.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.732] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0289.755] SetEvent (hEvent=0x248) returned 1
	[0289.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf")) returned 0x220
	[0289.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF", dwFileAttributes=0x220) returned 1
	[0289.756] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.054] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0290.054] ReadFile (in: hFile=0x1d4, lpBuffer=0x1143c000, nNumberOfBytesToRead=0x21e8, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1143c000*, lpNumberOfBytesRead=0x1128ae18*=0x21e8, lpOverlapped=0x0) returned 1
	[0290.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0290.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144a702 | out: pbBuffer=0x1144a702) returned 1
	[0290.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144a74e | out: pbBuffer=0x1144a74e) returned 1
	[0290.060] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0290.060] GetFileType (hFile=0x1d4) returned 0x1
	[0290.060] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.061] WriteFile (in: hFile=0x1d4, lpBuffer=0x112f4000*, nNumberOfBytesToWrite=0x21e8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112f4000*, lpNumberOfBytesWritten=0x11031dfc*=0x21e8, lpOverlapped=0x11031e08) returned 1
	[0290.061] GetFileType (hFile=0x1d4) returned 0x1
	[0290.062] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x21e8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.062] GetFileType (hFile=0x1d4) returned 0x1
	[0290.062] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.062] WriteFile (in: hFile=0x1d4, lpBuffer=0x11257880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11257880*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0290.062] GetFileType (hFile=0x1d4) returned 0x1
	[0290.062] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x21e8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.063] CloseHandle (hObject=0x1d4) returned 1
	[0290.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf.tl30z")) returned 0x220
	[0290.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.090] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0290.116] SetEvent (hEvent=0x248) returned 1
	[0290.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf")) returned 0x220
	[0290.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF", dwFileAttributes=0x220) returned 1
	[0290.117] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.335] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0290.335] ReadFile (in: hFile=0x1d4, lpBuffer=0x11070600, nNumberOfBytesToRead=0x1204, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11070600*, lpNumberOfBytesRead=0x1128ae18*=0x1204, lpOverlapped=0x0) returned 1
	[0290.340] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327f0 | out: pbBuffer=0x113327f0) returned 1
	[0290.340] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327e8 | out: pbBuffer=0x113327e8) returned 1
	[0290.340] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112fbc02 | out: pbBuffer=0x112fbc02) returned 1
	[0290.340] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112fbc3f | out: pbBuffer=0x112fbc3f) returned 1
	[0290.341] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332820 | out: pbBuffer=0x11332820) returned 1
	[0290.341] GetFileType (hFile=0x1d4) returned 0x1
	[0290.341] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.341] WriteFile (in: hFile=0x1d4, lpBuffer=0x11be6000*, nNumberOfBytesToWrite=0x1204, lpNumberOfBytesWritten=0x1145fdfc, lpOverlapped=0x1145fe08 | out: lpBuffer=0x11be6000*, lpNumberOfBytesWritten=0x1145fdfc*=0x1204, lpOverlapped=0x1145fe08) returned 1
	[0290.341] GetFileType (hFile=0x1d4) returned 0x1
	[0290.342] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1204, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.342] GetFileType (hFile=0x1d4) returned 0x1
	[0290.342] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.342] WriteFile (in: hFile=0x1d4, lpBuffer=0x112aee00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1145fdfc, lpOverlapped=0x1145fe08 | out: lpBuffer=0x112aee00*, lpNumberOfBytesWritten=0x1145fdfc*=0x221, lpOverlapped=0x1145fe08) returned 1
	[0290.342] GetFileType (hFile=0x1d4) returned 0x1
	[0290.342] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1204, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.342] CloseHandle (hObject=0x1d4) returned 1
	[0290.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf.tl30z")) returned 0x220
	[0290.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.356] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0290.368] SetEvent (hEvent=0x248) returned 1
	[0290.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf")) returned 0x220
	[0290.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF", dwFileAttributes=0x220) returned 1
	[0290.368] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.590] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0290.590] ReadFile (in: hFile=0x1d4, lpBuffer=0x112b2000, nNumberOfBytesToRead=0x4c90, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x112b2000*, lpNumberOfBytesRead=0x1128ae18*=0x4c90, lpOverlapped=0x0) returned 1
	[0290.596] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0290.596] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1105e802 | out: pbBuffer=0x1105e802) returned 1
	[0290.596] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105e86b | out: pbBuffer=0x1105e86b) returned 1
	[0290.596] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105e8bb | out: pbBuffer=0x1105e8bb) returned 1
	[0290.596] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105e8e1 | out: pbBuffer=0x1105e8e1) returned 1
	[0290.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0290.598] GetFileType (hFile=0x1d4) returned 0x1
	[0290.598] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11455de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.598] WriteFile (in: hFile=0x1d4, lpBuffer=0x113f0000*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x11455dfc, lpOverlapped=0x11455e08 | out: lpBuffer=0x113f0000*, lpNumberOfBytesWritten=0x11455dfc*=0x4c90, lpOverlapped=0x11455e08) returned 1
	[0290.599] GetFileType (hFile=0x1d4) returned 0x1
	[0290.599] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4c90, lpNewFilePointer=0x0, dwMoveMethod=0x11455de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.599] GetFileType (hFile=0x1d4) returned 0x1
	[0290.599] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11455de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.601] WriteFile (in: hFile=0x1d4, lpBuffer=0x11360a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11455dfc, lpOverlapped=0x11455e08 | out: lpBuffer=0x11360a80*, lpNumberOfBytesWritten=0x11455dfc*=0x227, lpOverlapped=0x11455e08) returned 1
	[0290.601] GetFileType (hFile=0x1d4) returned 0x1
	[0290.601] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4c90, lpNewFilePointer=0x0, dwMoveMethod=0x11455de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.601] CloseHandle (hObject=0x1d4) returned 1
	[0290.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf.tl30z")) returned 0x220
	[0290.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.612] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0290.628] SetEvent (hEvent=0x248) returned 1
	[0290.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf")) returned 0x220
	[0290.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF", dwFileAttributes=0x220) returned 1
	[0290.629] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.891] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0290.891] ReadFile (in: hFile=0x1d4, lpBuffer=0x113cc000, nNumberOfBytesToRead=0x1dd0, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113cc000*, lpNumberOfBytesRead=0x1128ae18*=0x1dd0, lpOverlapped=0x0) returned 1
	[0290.901] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0290.901] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11302802 | out: pbBuffer=0x11302802) returned 1
	[0290.901] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11302802 | out: pbBuffer=0x11302802) returned 1
	[0290.901] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130283f | out: pbBuffer=0x1130283f) returned 1
	[0290.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0290.902] GetFileType (hFile=0x1d4) returned 0x1
	[0290.902] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.902] WriteFile (in: hFile=0x1d4, lpBuffer=0x11be6000*, nNumberOfBytesToWrite=0x1dd0, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x11be6000*, lpNumberOfBytesWritten=0x112fddfc*=0x1dd0, lpOverlapped=0x112fde08) returned 1
	[0290.903] GetFileType (hFile=0x1d4) returned 0x1
	[0290.903] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1dd0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.903] GetFileType (hFile=0x1d4) returned 0x1
	[0290.903] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.903] WriteFile (in: hFile=0x1d4, lpBuffer=0x11314a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x11314a80*, lpNumberOfBytesWritten=0x112fddfc*=0x22d, lpOverlapped=0x112fde08) returned 1
	[0290.923] GetFileType (hFile=0x1d4) returned 0x1
	[0290.923] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1dd0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0290.923] CloseHandle (hObject=0x1d4) returned 1
	[0290.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf.tl30z")) returned 0x220
	[0290.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.928] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0290.945] SetEvent (hEvent=0x234) returned 1
	[0290.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf")) returned 0x220
	[0290.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF", dwFileAttributes=0x220) returned 1
	[0290.946] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.123] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0291.124] ReadFile (in: hFile=0x1d4, lpBuffer=0x11112000, nNumberOfBytesToRead=0xbd04, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11112000*, lpNumberOfBytesRead=0x1128ae18*=0xbd04, lpOverlapped=0x0) returned 1
	[0291.129] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6a10 | out: pbBuffer=0x113e6a10) returned 1
	[0291.129] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6a08 | out: pbBuffer=0x113e6a08) returned 1
	[0291.129] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11248802 | out: pbBuffer=0x11248802) returned 1
	[0291.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6a40 | out: pbBuffer=0x113e6a40) returned 1
	[0291.131] SetEvent (hEvent=0x234) returned 1
	[0291.133] GetFileType (hFile=0x1d4) returned 0x1
	[0291.133] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.133] WriteFile (in: hFile=0x1d4, lpBuffer=0x1115a000*, nNumberOfBytesToWrite=0xbd04, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x1115a000*, lpNumberOfBytesWritten=0x112fddfc*=0xbd04, lpOverlapped=0x112fde08) returned 1
	[0291.134] GetFileType (hFile=0x1d4) returned 0x1
	[0291.134] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xbd04, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.134] GetFileType (hFile=0x1d4) returned 0x1
	[0291.134] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.134] WriteFile (in: hFile=0x1d4, lpBuffer=0x11126380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x11126380*, lpNumberOfBytesWritten=0x112fddfc*=0x230, lpOverlapped=0x112fde08) returned 1
	[0291.135] GetFileType (hFile=0x1d4) returned 0x1
	[0291.135] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xbd04, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.135] CloseHandle (hObject=0x1d4) returned 1
	[0291.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf.tl30z")) returned 0x220
	[0291.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.150] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0291.152] SetEvent (hEvent=0x234) returned 1
	[0291.152] SetEvent (hEvent=0x118) returned 1
	[0291.152] SwitchToThread () returned 1
	[0291.189] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0291.556] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0291.558] SetEvent (hEvent=0x234) returned 1
	[0291.558] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0291.562] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf")) returned 0x220
	[0291.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF", dwFileAttributes=0x220) returned 1
	[0291.562] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0291.628] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0291.628] ReadFile (in: hFile=0x1d8, lpBuffer=0x1133f000, nNumberOfBytesToRead=0x2b64, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1133f000*, lpNumberOfBytesRead=0x11423e18*=0x2b64, lpOverlapped=0x0) returned 1
	[0291.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0291.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1121fd02 | out: pbBuffer=0x1121fd02) returned 1
	[0291.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e520 | out: pbBuffer=0x1104e520) returned 1
	[0291.633] GetFileType (hFile=0x1d8) returned 0x1
	[0291.634] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.634] WriteFile (in: hFile=0x1d8, lpBuffer=0x11328000*, nNumberOfBytesToWrite=0x2b64, lpNumberOfBytesWritten=0x110f5dfc, lpOverlapped=0x110f5e08 | out: lpBuffer=0x11328000*, lpNumberOfBytesWritten=0x110f5dfc*=0x2b64, lpOverlapped=0x110f5e08) returned 1
	[0291.634] GetFileType (hFile=0x1d8) returned 0x1
	[0291.634] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2b64, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.634] GetFileType (hFile=0x1d8) returned 0x1
	[0291.634] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.635] WriteFile (in: hFile=0x1d8, lpBuffer=0x113f6700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x110f5dfc, lpOverlapped=0x110f5e08 | out: lpBuffer=0x113f6700*, lpNumberOfBytesWritten=0x110f5dfc*=0x22d, lpOverlapped=0x110f5e08) returned 1
	[0291.635] GetFileType (hFile=0x1d8) returned 0x1
	[0291.635] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2b64, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.635] CloseHandle (hObject=0x1d8) returned 1
	[0291.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf.tl30z")) returned 0x220
	[0291.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.638] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0291.640] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0291.642] SetEvent (hEvent=0x1b0) returned 1
	[0291.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf")) returned 0x220
	[0291.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF", dwFileAttributes=0x220) returned 1
	[0291.643] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.705] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0291.705] ReadFile (in: hFile=0x1d4, lpBuffer=0x11071900, nNumberOfBytesToRead=0x1028, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11071900*, lpNumberOfBytesRead=0x1128ce18*=0x1028, lpOverlapped=0x0) returned 1
	[0291.710] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0291.710] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f6802 | out: pbBuffer=0x111f6802) returned 1
	[0291.711] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e680 | out: pbBuffer=0x1104e680) returned 1
	[0291.711] GetFileType (hFile=0x1d4) returned 0x1
	[0291.711] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.711] WriteFile (in: hFile=0x1d4, lpBuffer=0x1109e000*, nNumberOfBytesToWrite=0x1028, lpNumberOfBytesWritten=0x110f5dfc, lpOverlapped=0x110f5e08 | out: lpBuffer=0x1109e000*, lpNumberOfBytesWritten=0x110f5dfc*=0x1028, lpOverlapped=0x110f5e08) returned 1
	[0291.711] GetFileType (hFile=0x1d4) returned 0x1
	[0291.712] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1028, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.712] GetFileType (hFile=0x1d4) returned 0x1
	[0291.712] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.712] WriteFile (in: hFile=0x1d4, lpBuffer=0x113f7500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x110f5dfc, lpOverlapped=0x110f5e08 | out: lpBuffer=0x113f7500*, lpNumberOfBytesWritten=0x110f5dfc*=0x221, lpOverlapped=0x110f5e08) returned 1
	[0291.712] GetFileType (hFile=0x1d4) returned 0x1
	[0291.712] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1028, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.712] CloseHandle (hObject=0x1d4) returned 1
	[0291.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf.tl30z")) returned 0x220
	[0291.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.715] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0291.716] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0291.717] SetEvent (hEvent=0x1b0) returned 1
	[0291.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf")) returned 0x220
	[0291.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF", dwFileAttributes=0x220) returned 1
	[0291.718] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0291.803] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0291.804] ReadFile (in: hFile=0x1d8, lpBuffer=0x11112000, nNumberOfBytesToRead=0x1094, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11112000*, lpNumberOfBytesRead=0x11319e18*=0x1094, lpOverlapped=0x0) returned 1
	[0291.811] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0291.811] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f568 | out: pbBuffer=0x1140f568) returned 1
	[0291.811] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1111a702 | out: pbBuffer=0x1111a702) returned 1
	[0291.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1111a712 | out: pbBuffer=0x1111a712) returned 1
	[0291.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0291.812] GetFileType (hFile=0x1d8) returned 0x1
	[0291.812] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.813] WriteFile (in: hFile=0x1d8, lpBuffer=0x1112e000*, nNumberOfBytesToWrite=0x1094, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x1112e000*, lpNumberOfBytesWritten=0x112f5dfc*=0x1094, lpOverlapped=0x112f5e08) returned 1
	[0291.813] GetFileType (hFile=0x1d8) returned 0x1
	[0291.813] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1094, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.813] GetFileType (hFile=0x1d8) returned 0x1
	[0291.813] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.814] WriteFile (in: hFile=0x1d8, lpBuffer=0x1129b500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x1129b500*, lpNumberOfBytesWritten=0x112f5dfc*=0x224, lpOverlapped=0x112f5e08) returned 1
	[0291.814] GetFileType (hFile=0x1d8) returned 0x1
	[0291.815] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1094, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.815] CloseHandle (hObject=0x1d8) returned 1
	[0291.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf.tl30z")) returned 0x220
	[0291.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.818] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0291.821] SetEvent (hEvent=0x1b0) returned 1
	[0291.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf")) returned 0x220
	[0291.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF", dwFileAttributes=0x220) returned 1
	[0291.822] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.971] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0291.971] ReadFile (in: hFile=0x1d4, lpBuffer=0x11385000, nNumberOfBytesToRead=0x2ce4, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11385000*, lpNumberOfBytesRead=0x11319e18*=0x2ce4, lpOverlapped=0x0) returned 1
	[0291.979] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0291.979] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6408 | out: pbBuffer=0x113e6408) returned 1
	[0291.979] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267d02 | out: pbBuffer=0x11267d02) returned 1
	[0291.980] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6440 | out: pbBuffer=0x113e6440) returned 1
	[0291.981] GetFileType (hFile=0x1d4) returned 0x1
	[0291.981] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.981] WriteFile (in: hFile=0x1d4, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0x2ce4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2ce4, lpOverlapped=0x1102be08) returned 1
	[0291.982] GetFileType (hFile=0x1d4) returned 0x1
	[0291.982] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2ce4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.982] GetFileType (hFile=0x1d4) returned 0x1
	[0291.982] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.982] WriteFile (in: hFile=0x1d4, lpBuffer=0x112d4a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112d4a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0291.982] GetFileType (hFile=0x1d4) returned 0x1
	[0291.982] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2ce4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.983] CloseHandle (hObject=0x1d4) returned 1
	[0291.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf.tl30z")) returned 0x220
	[0291.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.985] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0291.988] SetEvent (hEvent=0x248) returned 1
	[0291.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf")) returned 0x220
	[0291.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF", dwFileAttributes=0x220) returned 1
	[0291.990] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0292.103] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0292.103] ReadFile (in: hFile=0x1d8, lpBuffer=0x110a6000, nNumberOfBytesToRead=0xdf0, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x110a6000*, lpNumberOfBytesRead=0x11319e18*=0xdf0, lpOverlapped=0x0) returned 1
	[0292.116] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0292.116] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b2802 | out: pbBuffer=0x110b2802) returned 1
	[0292.116] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b28d6 | out: pbBuffer=0x110b28d6) returned 1
	[0292.117] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0292.117] GetFileType (hFile=0x1d8) returned 0x1
	[0292.117] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.117] WriteFile (in: hFile=0x1d8, lpBuffer=0x112b6000*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x112b6000*, lpNumberOfBytesWritten=0x1136fdfc*=0xdf0, lpOverlapped=0x1136fe08) returned 1
	[0292.117] GetFileType (hFile=0x1d8) returned 0x1
	[0292.118] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xdf0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.118] GetFileType (hFile=0x1d8) returned 0x1
	[0292.118] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.118] WriteFile (in: hFile=0x1d8, lpBuffer=0x110c6a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x110c6a80*, lpNumberOfBytesWritten=0x1136fdfc*=0x22d, lpOverlapped=0x1136fe08) returned 1
	[0292.118] GetFileType (hFile=0x1d8) returned 0x1
	[0292.118] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xdf0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.119] CloseHandle (hObject=0x1d8) returned 1
	[0292.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf.tl30z")) returned 0x220
	[0292.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.135] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0292.144] SetEvent (hEvent=0x118) returned 1
	[0292.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf")) returned 0x220
	[0292.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF", dwFileAttributes=0x220) returned 1
	[0292.145] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0292.223] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0292.223] ReadFile (in: hFile=0x1d8, lpBuffer=0x1121c000, nNumberOfBytesToRead=0x1f40, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1121c000*, lpNumberOfBytesRead=0x11319e18*=0x1f40, lpOverlapped=0x0) returned 1
	[0292.228] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e620 | out: pbBuffer=0x1104e620) returned 1
	[0292.228] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e618 | out: pbBuffer=0x1104e618) returned 1
	[0292.228] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11222602 | out: pbBuffer=0x11222602) returned 1
	[0292.228] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11222691 | out: pbBuffer=0x11222691) returned 1
	[0292.229] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0292.230] GetFileType (hFile=0x1d8) returned 0x1
	[0292.230] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.230] WriteFile (in: hFile=0x1d8, lpBuffer=0x11240000*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x11240000*, lpNumberOfBytesWritten=0x11373dfc*=0x1f40, lpOverlapped=0x11373e08) returned 1
	[0292.230] GetFileType (hFile=0x1d8) returned 0x1
	[0292.230] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1f40, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.230] GetFileType (hFile=0x1d8) returned 0x1
	[0292.231] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.231] WriteFile (in: hFile=0x1d8, lpBuffer=0x11443500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x11443500*, lpNumberOfBytesWritten=0x11373dfc*=0x22a, lpOverlapped=0x11373e08) returned 1
	[0292.231] GetFileType (hFile=0x1d8) returned 0x1
	[0292.231] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1f40, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.231] CloseHandle (hObject=0x1d8) returned 1
	[0292.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf.tl30z")) returned 0x220
	[0292.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.235] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0292.238] SetEvent (hEvent=0x248) returned 1
	[0292.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf")) returned 0x220
	[0292.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF", dwFileAttributes=0x220) returned 1
	[0292.238] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0292.326] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0292.326] ReadFile (in: hFile=0x250, lpBuffer=0x11071900, nNumberOfBytesToRead=0x1068, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11071900*, lpNumberOfBytesRead=0x11319e18*=0x1068, lpOverlapped=0x0) returned 1
	[0292.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0292.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11450502 | out: pbBuffer=0x11450502) returned 1
	[0292.332] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0292.332] GetFileType (hFile=0x250) returned 0x1
	[0292.332] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.332] WriteFile (in: hFile=0x250, lpBuffer=0x11254000*, nNumberOfBytesToWrite=0x1068, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11254000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1068, lpOverlapped=0x1102be08) returned 1
	[0292.333] GetFileType (hFile=0x250) returned 0x1
	[0292.333] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1068, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.333] GetFileType (hFile=0x250) returned 0x1
	[0292.333] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.334] WriteFile (in: hFile=0x250, lpBuffer=0x113d6a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d6a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0292.334] GetFileType (hFile=0x250) returned 0x1
	[0292.334] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1068, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.334] CloseHandle (hObject=0x250) returned 1
	[0292.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf.tl30z")) returned 0x220
	[0292.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.337] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0292.343] SetEvent (hEvent=0x1b0) returned 1
	[0292.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf")) returned 0x220
	[0292.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF", dwFileAttributes=0x220) returned 1
	[0292.344] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0293.055] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0293.056] ReadFile (in: hFile=0x224, lpBuffer=0x1145e000, nNumberOfBytesToRead=0x1f0c, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1145e000*, lpNumberOfBytesRead=0x11319e18*=0x1f0c, lpOverlapped=0x0) returned 1
	[0293.061] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e60c0 | out: pbBuffer=0x113e60c0) returned 1
	[0293.061] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60b8 | out: pbBuffer=0x113e60b8) returned 1
	[0293.061] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11451902 | out: pbBuffer=0x11451902) returned 1
	[0293.061] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1145195f | out: pbBuffer=0x1145195f) returned 1
	[0293.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e60f0 | out: pbBuffer=0x113e60f0) returned 1
	[0293.063] GetFileType (hFile=0x224) returned 0x1
	[0293.063] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.063] WriteFile (in: hFile=0x224, lpBuffer=0x112a2000*, nNumberOfBytesToWrite=0x1f0c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112a2000*, lpNumberOfBytesWritten=0x11031dfc*=0x1f0c, lpOverlapped=0x11031e08) returned 1
	[0293.063] GetFileType (hFile=0x224) returned 0x1
	[0293.063] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1f0c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.064] GetFileType (hFile=0x224) returned 0x1
	[0293.064] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.064] WriteFile (in: hFile=0x224, lpBuffer=0x11470700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11470700*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0293.064] GetFileType (hFile=0x224) returned 0x1
	[0293.064] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1f0c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.064] CloseHandle (hObject=0x224) returned 1
	[0293.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf.tl30z")) returned 0x220
	[0293.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.068] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.070] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.072] SetEvent (hEvent=0x210) returned 1
	[0293.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf")) returned 0x220
	[0293.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF", dwFileAttributes=0x220) returned 1
	[0293.073] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0293.150] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0293.150] ReadFile (in: hFile=0x288, lpBuffer=0x111fe600, nNumberOfBytesToRead=0x121c, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x111fe600*, lpNumberOfBytesRead=0x11288e18*=0x121c, lpOverlapped=0x0) returned 1
	[0293.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332980 | out: pbBuffer=0x11332980) returned 1
	[0293.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332978 | out: pbBuffer=0x11332978) returned 1
	[0293.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110afb02 | out: pbBuffer=0x110afb02) returned 1
	[0293.158] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113329b0 | out: pbBuffer=0x113329b0) returned 1
	[0293.158] GetFileType (hFile=0x288) returned 0x1
	[0293.158] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.159] WriteFile (in: hFile=0x288, lpBuffer=0x11104000*, nNumberOfBytesToWrite=0x121c, lpNumberOfBytesWritten=0x113addfc, lpOverlapped=0x113ade08 | out: lpBuffer=0x11104000*, lpNumberOfBytesWritten=0x113addfc*=0x121c, lpOverlapped=0x113ade08) returned 1
	[0293.159] GetFileType (hFile=0x288) returned 0x1
	[0293.159] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x121c, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.159] GetFileType (hFile=0x288) returned 0x1
	[0293.159] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.160] WriteFile (in: hFile=0x288, lpBuffer=0x11211180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113addfc, lpOverlapped=0x113ade08 | out: lpBuffer=0x11211180*, lpNumberOfBytesWritten=0x113addfc*=0x227, lpOverlapped=0x113ade08) returned 1
	[0293.160] GetFileType (hFile=0x288) returned 0x1
	[0293.160] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x121c, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.160] CloseHandle (hObject=0x288) returned 1
	[0293.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf.tl30z")) returned 0x220
	[0293.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.165] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.167] SetEvent (hEvent=0x210) returned 1
	[0293.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf")) returned 0x220
	[0293.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF", dwFileAttributes=0x220) returned 1
	[0293.168] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0293.265] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0293.265] ReadFile (in: hFile=0x288, lpBuffer=0x11258000, nNumberOfBytesToRead=0xbf4, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11258000*, lpNumberOfBytesRead=0x11288e18*=0xbf4, lpOverlapped=0x0) returned 1
	[0293.273] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0293.273] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0293.273] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11154802 | out: pbBuffer=0x11154802) returned 1
	[0293.274] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0293.274] GetFileType (hFile=0x288) returned 0x1
	[0293.274] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.275] WriteFile (in: hFile=0x288, lpBuffer=0x1126c000*, nNumberOfBytesToWrite=0xbf4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1126c000*, lpNumberOfBytesWritten=0x1102bdfc*=0xbf4, lpOverlapped=0x1102be08) returned 1
	[0293.275] GetFileType (hFile=0x288) returned 0x1
	[0293.275] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xbf4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.275] GetFileType (hFile=0x288) returned 0x1
	[0293.276] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.276] WriteFile (in: hFile=0x288, lpBuffer=0x1118d880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1118d880*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0293.276] GetFileType (hFile=0x288) returned 0x1
	[0293.276] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xbf4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.276] CloseHandle (hObject=0x288) returned 1
	[0293.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf.tl30z")) returned 0x220
	[0293.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.304] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.313] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.333] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.353] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.373] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.396] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.413] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.428] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.447] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.470] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.492] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.520] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.533] SetEvent (hEvent=0x210) returned 1
	[0293.533] SetEvent (hEvent=0x1f0) returned 1
	[0293.533] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0293.537] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.537] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0293.539] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.539] SetEvent (hEvent=0x1b0) returned 1
	[0293.539] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0293.542] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.833] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.836] SetEvent (hEvent=0x210) returned 1
	[0293.836] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.843] SetEvent (hEvent=0x1f0) returned 1
	[0293.843] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0293.863] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.012] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.094] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.095] SetEvent (hEvent=0x210) returned 1
	[0294.095] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf")) returned 0x220
	[0294.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF", dwFileAttributes=0x220) returned 1
	[0294.121] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0294.196] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0294.196] ReadFile (in: hFile=0x288, lpBuffer=0x110bea80, nNumberOfBytesToRead=0x2a00, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110bea80*, lpNumberOfBytesRead=0x1128ce18*=0x2a00, lpOverlapped=0x0) returned 1
	[0294.201] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0294.201] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324f8 | out: pbBuffer=0x113324f8) returned 1
	[0294.201] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11351d02 | out: pbBuffer=0x11351d02) returned 1
	[0294.202] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11351d6e | out: pbBuffer=0x11351d6e) returned 1
	[0294.202] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0294.202] GetFileType (hFile=0x288) returned 0x1
	[0294.202] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.203] WriteFile (in: hFile=0x288, lpBuffer=0x113f8000*, nNumberOfBytesToWrite=0x2a00, lpNumberOfBytesWritten=0x112d9dfc, lpOverlapped=0x112d9e08 | out: lpBuffer=0x113f8000*, lpNumberOfBytesWritten=0x112d9dfc*=0x2a00, lpOverlapped=0x112d9e08) returned 1
	[0294.203] GetFileType (hFile=0x288) returned 0x1
	[0294.203] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x2a00, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.203] GetFileType (hFile=0x288) returned 0x1
	[0294.203] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.203] WriteFile (in: hFile=0x288, lpBuffer=0x11292e00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x112d9dfc, lpOverlapped=0x112d9e08 | out: lpBuffer=0x11292e00*, lpNumberOfBytesWritten=0x112d9dfc*=0x221, lpOverlapped=0x112d9e08) returned 1
	[0294.204] GetFileType (hFile=0x288) returned 0x1
	[0294.204] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x2a00, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.204] CloseHandle (hObject=0x288) returned 1
	[0294.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf.tl30z")) returned 0x220
	[0294.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.210] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.212] SetEvent (hEvent=0x234) returned 1
	[0294.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf")) returned 0x220
	[0294.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF", dwFileAttributes=0x220) returned 1
	[0294.213] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0294.300] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0294.300] ReadFile (in: hFile=0x250, lpBuffer=0x110d5000, nNumberOfBytesToRead=0x4030, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110d5000*, lpNumberOfBytesRead=0x1128ce18*=0x4030, lpOverlapped=0x0) returned 1
	[0294.305] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0294.305] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e1c02 | out: pbBuffer=0x110e1c02) returned 1
	[0294.306] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0294.306] GetFileType (hFile=0x250) returned 0x1
	[0294.306] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.306] WriteFile (in: hFile=0x250, lpBuffer=0x113b4000*, nNumberOfBytesToWrite=0x4030, lpNumberOfBytesWritten=0x112d5dfc, lpOverlapped=0x112d5e08 | out: lpBuffer=0x113b4000*, lpNumberOfBytesWritten=0x112d5dfc*=0x4030, lpOverlapped=0x112d5e08) returned 1
	[0294.307] GetFileType (hFile=0x250) returned 0x1
	[0294.307] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4030, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.307] GetFileType (hFile=0x250) returned 0x1
	[0294.307] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.308] WriteFile (in: hFile=0x250, lpBuffer=0x110b2700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x112d5dfc, lpOverlapped=0x112d5e08 | out: lpBuffer=0x110b2700*, lpNumberOfBytesWritten=0x112d5dfc*=0x221, lpOverlapped=0x112d5e08) returned 1
	[0294.308] GetFileType (hFile=0x250) returned 0x1
	[0294.308] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4030, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.308] CloseHandle (hObject=0x250) returned 1
	[0294.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf.tl30z")) returned 0x220
	[0294.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.312] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.315] SetEvent (hEvent=0x234) returned 1
	[0294.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf")) returned 0x220
	[0294.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF", dwFileAttributes=0x220) returned 1
	[0294.316] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.408] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0294.409] ReadFile (in: hFile=0x1fc, lpBuffer=0x11140000, nNumberOfBytesToRead=0x2ab4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11140000*, lpNumberOfBytesRead=0x1128ce18*=0x2ab4, lpOverlapped=0x0) returned 1
	[0294.413] SetEvent (hEvent=0x234) returned 1
	[0294.414] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0294.414] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0294.415] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1115c802 | out: pbBuffer=0x1115c802) returned 1
	[0294.415] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0294.415] GetFileType (hFile=0x1fc) returned 0x1
	[0294.416] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11153de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.416] WriteFile (in: hFile=0x1fc, lpBuffer=0x11bfe000*, nNumberOfBytesToWrite=0x2ab4, lpNumberOfBytesWritten=0x11153dfc, lpOverlapped=0x11153e08 | out: lpBuffer=0x11bfe000*, lpNumberOfBytesWritten=0x11153dfc*=0x2ab4, lpOverlapped=0x11153e08) returned 1
	[0294.416] GetFileType (hFile=0x1fc) returned 0x1
	[0294.416] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2ab4, lpNewFilePointer=0x0, dwMoveMethod=0x11153de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.416] GetFileType (hFile=0x1fc) returned 0x1
	[0294.417] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11153de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.417] WriteFile (in: hFile=0x1fc, lpBuffer=0x11bd0a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11153dfc, lpOverlapped=0x11153e08 | out: lpBuffer=0x11bd0a80*, lpNumberOfBytesWritten=0x11153dfc*=0x22d, lpOverlapped=0x11153e08) returned 1
	[0294.417] GetFileType (hFile=0x1fc) returned 0x1
	[0294.417] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2ab4, lpNewFilePointer=0x0, dwMoveMethod=0x11153de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.417] CloseHandle (hObject=0x1fc) returned 1
	[0294.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf.tl30z")) returned 0x220
	[0294.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.426] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.428] SetEvent (hEvent=0x234) returned 1
	[0294.428] SetEvent (hEvent=0x210) returned 1
	[0294.428] SwitchToThread () returned 1
	[0294.465] SwitchToThread () returned 1
	[0294.472] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.492] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.514] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.533] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.548] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.565] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.580] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.600] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.617] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.634] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.654] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.678] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.683] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.693] SetEvent (hEvent=0x234) returned 1
	[0294.694] SetEvent (hEvent=0x1b0) returned 1
	[0294.694] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0294.698] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.698] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0294.699] SetEvent (hEvent=0x118) returned 1
	[0294.699] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0294.702] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0294.773] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.180] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.181] SetEvent (hEvent=0x26c) returned 1
	[0295.181] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.185] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.191] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.210] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.225] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.251] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.261] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.274] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.304] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.326] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.344] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.362] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.381] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.401] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.408] SetEvent (hEvent=0x26c) returned 1
	[0295.409] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0295.415] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.415] SetEvent (hEvent=0x26c) returned 1
	[0295.415] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0295.418] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.418] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.512] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.643] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.644] SetEvent (hEvent=0x118) returned 1
	[0295.644] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.648] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.653] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.669] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.676] SetEvent (hEvent=0x26c) returned 1
	[0295.676] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.678] SetEvent (hEvent=0x234) returned 1
	[0295.678] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf")) returned 0x220
	[0295.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF", dwFileAttributes=0x220) returned 1
	[0295.685] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0295.776] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0295.776] ReadFile (in: hFile=0x250, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x2608, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11023e18*=0x2608, lpOverlapped=0x0) returned 1
	[0295.783] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0295.783] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0295.783] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110afe02 | out: pbBuffer=0x110afe02) returned 1
	[0295.783] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110afe14 | out: pbBuffer=0x110afe14) returned 1
	[0295.783] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110afe49 | out: pbBuffer=0x110afe49) returned 1
	[0295.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0295.784] GetFileType (hFile=0x250) returned 0x1
	[0295.784] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.784] WriteFile (in: hFile=0x250, lpBuffer=0x11182000*, nNumberOfBytesToWrite=0x2608, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11182000*, lpNumberOfBytesWritten=0x11031dfc*=0x2608, lpOverlapped=0x11031e08) returned 1
	[0295.785] GetFileType (hFile=0x250) returned 0x1
	[0295.785] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2608, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.785] GetFileType (hFile=0x250) returned 0x1
	[0295.785] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.785] WriteFile (in: hFile=0x250, lpBuffer=0x113baa80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113baa80*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0295.785] GetFileType (hFile=0x250) returned 0x1
	[0295.786] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2608, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.786] CloseHandle (hObject=0x250) returned 1
	[0295.788] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf.tl30z")) returned 0x220
	[0295.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.800] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.808] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.827] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.865] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.884] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.897] SetEvent (hEvent=0x118) returned 1
	[0295.897] SetEvent (hEvent=0x1b0) returned 1
	[0295.897] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0295.900] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0295.900] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0295.902] SetEvent (hEvent=0x210) returned 1
	[0295.902] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0295.903] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0296.228] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0296.230] SetEvent (hEvent=0x118) returned 1
	[0296.230] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0296.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf")) returned 0x220
	[0296.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF", dwFileAttributes=0x220) returned 1
	[0296.268] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0296.366] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0296.366] ReadFile (in: hFile=0x250, lpBuffer=0x11396000, nNumberOfBytesToRead=0x745c, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x11316e18*=0x745c, lpOverlapped=0x0) returned 1
	[0296.373] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f060 | out: pbBuffer=0x1140f060) returned 1
	[0296.373] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1105b202 | out: pbBuffer=0x1105b202) returned 1
	[0296.373] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f090 | out: pbBuffer=0x1140f090) returned 1
	[0296.374] GetFileType (hFile=0x250) returned 0x1
	[0296.374] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.374] WriteFile (in: hFile=0x250, lpBuffer=0x113b8000*, nNumberOfBytesToWrite=0x745c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113b8000*, lpNumberOfBytesWritten=0x11031dfc*=0x745c, lpOverlapped=0x11031e08) returned 1
	[0296.375] GetFileType (hFile=0x250) returned 0x1
	[0296.375] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x745c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.375] GetFileType (hFile=0x250) returned 0x1
	[0296.375] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.376] WriteFile (in: hFile=0x250, lpBuffer=0x113a2700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113a2700*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0296.376] GetFileType (hFile=0x250) returned 0x1
	[0296.376] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x745c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.376] CloseHandle (hObject=0x250) returned 1
	[0296.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf.tl30z")) returned 0x220
	[0296.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.380] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0296.383] SetEvent (hEvent=0x210) returned 1
	[0296.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf")) returned 0x220
	[0296.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF", dwFileAttributes=0x220) returned 1
	[0296.384] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0296.464] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0296.464] ReadFile (in: hFile=0x250, lpBuffer=0x11445000, nNumberOfBytesToRead=0x4e46, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11445000*, lpNumberOfBytesRead=0x11316e18*=0x4e46, lpOverlapped=0x0) returned 1
	[0296.469] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0296.469] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11305e02 | out: pbBuffer=0x11305e02) returned 1
	[0296.469] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11305e3e | out: pbBuffer=0x11305e3e) returned 1
	[0296.469] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11305e9a | out: pbBuffer=0x11305e9a) returned 1
	[0296.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11305eb4 | out: pbBuffer=0x11305eb4) returned 1
	[0296.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0296.471] GetFileType (hFile=0x250) returned 0x1
	[0296.471] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.471] WriteFile (in: hFile=0x250, lpBuffer=0x1113e000*, nNumberOfBytesToWrite=0x4e46, lpNumberOfBytesWritten=0x11301dfc, lpOverlapped=0x11301e08 | out: lpBuffer=0x1113e000*, lpNumberOfBytesWritten=0x11301dfc*=0x4e46, lpOverlapped=0x11301e08) returned 1
	[0296.471] GetFileType (hFile=0x250) returned 0x1
	[0296.472] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4e46, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.472] GetFileType (hFile=0x250) returned 0x1
	[0296.472] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.472] WriteFile (in: hFile=0x250, lpBuffer=0x1111e700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11301dfc, lpOverlapped=0x11301e08 | out: lpBuffer=0x1111e700*, lpNumberOfBytesWritten=0x11301dfc*=0x22d, lpOverlapped=0x11301e08) returned 1
	[0296.472] GetFileType (hFile=0x250) returned 0x1
	[0296.472] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4e46, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.473] CloseHandle (hObject=0x250) returned 1
	[0296.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf.tl30z")) returned 0x220
	[0296.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.494] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0296.498] SetEvent (hEvent=0x210) returned 1
	[0296.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf")) returned 0x220
	[0296.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF", dwFileAttributes=0x220) returned 1
	[0296.499] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.574] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0296.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0296.579] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x112a5e08 | out: lpMode=0x112a5e08) returned 0
	[0296.579] ReadFile (in: hFile=0x1d8, lpBuffer=0x1113a000, nNumberOfBytesToRead=0x50b6, lpNumberOfBytesRead=0x112a5e18, lpOverlapped=0x0 | out: lpBuffer=0x1113a000*, lpNumberOfBytesRead=0x112a5e18*=0x50b6, lpOverlapped=0x0) returned 1
	[0296.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0296.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0296.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137c802 | out: pbBuffer=0x1137c802) returned 1
	[0296.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0296.586] GetFileType (hFile=0x1d8) returned 0x1
	[0296.586] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.586] WriteFile (in: hFile=0x1d8, lpBuffer=0x11418000*, nNumberOfBytesToWrite=0x50b6, lpNumberOfBytesWritten=0x112a5dfc, lpOverlapped=0x112a5e08 | out: lpBuffer=0x11418000*, lpNumberOfBytesWritten=0x112a5dfc*=0x50b6, lpOverlapped=0x112a5e08) returned 1
	[0296.587] GetFileType (hFile=0x1d8) returned 0x1
	[0296.587] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x50b6, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.587] GetFileType (hFile=0x1d8) returned 0x1
	[0296.587] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.587] WriteFile (in: hFile=0x1d8, lpBuffer=0x11386a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112a5dfc, lpOverlapped=0x112a5e08 | out: lpBuffer=0x11386a80*, lpNumberOfBytesWritten=0x112a5dfc*=0x22d, lpOverlapped=0x112a5e08) returned 1
	[0296.589] GetFileType (hFile=0x1d8) returned 0x1
	[0296.589] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x50b6, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.589] CloseHandle (hObject=0x1d8) returned 1
	[0296.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf.tl30z")) returned 0x220
	[0296.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.592] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0296.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf")) returned 0x220
	[0296.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF", dwFileAttributes=0x220) returned 1
	[0296.594] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0296.695] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0296.696] ReadFile (in: hFile=0x224, lpBuffer=0x11460000, nNumberOfBytesToRead=0x8b8e, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11460000*, lpNumberOfBytesRead=0x11316e18*=0x8b8e, lpOverlapped=0x0) returned 1
	[0296.709] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f560 | out: pbBuffer=0x1140f560) returned 1
	[0296.709] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1146c802 | out: pbBuffer=0x1146c802) returned 1
	[0296.710] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f590 | out: pbBuffer=0x1140f590) returned 1
	[0296.710] GetFileType (hFile=0x224) returned 0x1
	[0296.710] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.711] WriteFile (in: hFile=0x224, lpBuffer=0x1117c000*, nNumberOfBytesToWrite=0x8b8e, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x1117c000*, lpNumberOfBytesWritten=0x112a1dfc*=0x8b8e, lpOverlapped=0x112a1e08) returned 1
	[0296.711] GetFileType (hFile=0x224) returned 0x1
	[0296.711] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x8b8e, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.711] GetFileType (hFile=0x224) returned 0x1
	[0296.711] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.712] WriteFile (in: hFile=0x224, lpBuffer=0x11171500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x11171500*, lpNumberOfBytesWritten=0x112a1dfc*=0x233, lpOverlapped=0x112a1e08) returned 1
	[0296.712] GetFileType (hFile=0x224) returned 0x1
	[0296.712] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x8b8e, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.712] CloseHandle (hObject=0x224) returned 1
	[0296.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf.tl30z")) returned 0x220
	[0296.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.719] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0296.725] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0296.741] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0296.756] SetEvent (hEvent=0x210) returned 1
	[0296.757] SetEvent (hEvent=0x1b0) returned 1
	[0296.757] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0296.760] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0296.760] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0296.762] SetEvent (hEvent=0x234) returned 1
	[0296.762] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0296.764] SetEvent (hEvent=0x118) returned 1
	[0296.764] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.123] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.125] SetEvent (hEvent=0x234) returned 1
	[0297.125] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf")) returned 0x220
	[0297.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF", dwFileAttributes=0x220) returned 1
	[0297.163] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0297.241] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11169e08 | out: lpMode=0x11169e08) returned 0
	[0297.241] ReadFile (in: hFile=0x1fc, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x834, lpNumberOfBytesRead=0x11169e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11169e18*=0x834, lpOverlapped=0x0) returned 1
	[0297.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0297.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0297.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1135a802 | out: pbBuffer=0x1135a802) returned 1
	[0297.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1135a85e | out: pbBuffer=0x1135a85e) returned 1
	[0297.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0297.248] GetFileType (hFile=0x1fc) returned 0x1
	[0297.248] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.249] WriteFile (in: hFile=0x1fc, lpBuffer=0x113a4000*, nNumberOfBytesToWrite=0x834, lpNumberOfBytesWritten=0x11169dfc, lpOverlapped=0x11169e08 | out: lpBuffer=0x113a4000*, lpNumberOfBytesWritten=0x11169dfc*=0x834, lpOverlapped=0x11169e08) returned 1
	[0297.249] GetFileType (hFile=0x1fc) returned 0x1
	[0297.249] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x834, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.249] GetFileType (hFile=0x1fc) returned 0x1
	[0297.249] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.249] WriteFile (in: hFile=0x1fc, lpBuffer=0x11060a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11169dfc, lpOverlapped=0x11169e08 | out: lpBuffer=0x11060a80*, lpNumberOfBytesWritten=0x11169dfc*=0x224, lpOverlapped=0x11169e08) returned 1
	[0297.250] GetFileType (hFile=0x1fc) returned 0x1
	[0297.250] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x834, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.250] CloseHandle (hObject=0x1fc) returned 1
	[0297.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf.tl30z")) returned 0x220
	[0297.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.260] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.267] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.350] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.371] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.392] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.411] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.444] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.471] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.495] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.526] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.558] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.582] SetEvent (hEvent=0x118) returned 1
	[0297.586] SetEvent (hEvent=0x1b0) returned 1
	[0297.587] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0297.591] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.591] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0297.593] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.593] SetEvent (hEvent=0x210) returned 1
	[0297.593] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0297.597] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.635] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.655] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.675] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.698] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.717] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.743] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.767] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.789] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.812] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.831] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.853] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.871] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.895] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.969] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0297.992] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.005] SetEvent (hEvent=0x210) returned 1
	[0298.006] SetEvent (hEvent=0x1b0) returned 1
	[0298.006] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0298.012] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.012] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0298.015] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.015] SetEvent (hEvent=0x118) returned 1
	[0298.015] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0298.018] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.019] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.072] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.164] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.212] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.220] SetEvent (hEvent=0x118) returned 1
	[0298.220] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.223] SetEvent (hEvent=0x118) returned 1
	[0298.223] SwitchToThread () returned 1
	[0298.225] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.230] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.253] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.274] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.302] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.342] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.363] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.383] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.405] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.430] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.435] SetEvent (hEvent=0x118) returned 1
	[0298.436] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0298.443] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.444] SetEvent (hEvent=0x118) returned 1
	[0298.444] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0298.445] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.445] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.745] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.811] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.813] SetEvent (hEvent=0x234) returned 1
	[0298.813] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.818] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.832] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.853] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.870] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.887] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0298.903] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0299.105] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0299.119] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0299.121] SetEvent (hEvent=0x118) returned 1
	[0299.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf")) returned 0x220
	[0299.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF", dwFileAttributes=0x220) returned 1
	[0299.122] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0299.201] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0299.201] ReadFile (in: hFile=0x224, lpBuffer=0x11142000, nNumberOfBytesToRead=0x6e74, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11142000*, lpNumberOfBytesRead=0x11425e18*=0x6e74, lpOverlapped=0x0) returned 1
	[0299.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0299.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6558 | out: pbBuffer=0x113e6558) returned 1
	[0299.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11156602 | out: pbBuffer=0x11156602) returned 1
	[0299.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0299.209] GetFileType (hFile=0x224) returned 0x1
	[0299.209] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.209] WriteFile (in: hFile=0x224, lpBuffer=0x1117e000*, nNumberOfBytesToWrite=0x6e74, lpNumberOfBytesWritten=0x110c7dfc, lpOverlapped=0x110c7e08 | out: lpBuffer=0x1117e000*, lpNumberOfBytesWritten=0x110c7dfc*=0x6e74, lpOverlapped=0x110c7e08) returned 1
	[0299.210] GetFileType (hFile=0x224) returned 0x1
	[0299.210] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6e74, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.210] GetFileType (hFile=0x224) returned 0x1
	[0299.210] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.211] WriteFile (in: hFile=0x224, lpBuffer=0x113f7500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x110c7dfc, lpOverlapped=0x110c7e08 | out: lpBuffer=0x113f7500*, lpNumberOfBytesWritten=0x110c7dfc*=0x233, lpOverlapped=0x110c7e08) returned 1
	[0299.211] GetFileType (hFile=0x224) returned 0x1
	[0299.211] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6e74, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.211] CloseHandle (hObject=0x224) returned 1
	[0299.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf.tl30z")) returned 0x220
	[0299.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.214] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0299.217] SetEvent (hEvent=0x118) returned 1
	[0299.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf")) returned 0x220
	[0299.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF", dwFileAttributes=0x220) returned 1
	[0299.218] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0299.331] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0299.331] ReadFile (in: hFile=0x1d4, lpBuffer=0x110c8000, nNumberOfBytesToRead=0x1d4a, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x110c8000*, lpNumberOfBytesRead=0x11425e18*=0x1d4a, lpOverlapped=0x0) returned 1
	[0299.336] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0299.336] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141c802 | out: pbBuffer=0x1141c802) returned 1
	[0299.336] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1141c825 | out: pbBuffer=0x1141c825) returned 1
	[0299.336] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0299.337] GetFileType (hFile=0x1d4) returned 0x1
	[0299.337] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.337] WriteFile (in: hFile=0x1d4, lpBuffer=0x1105c000*, nNumberOfBytesToWrite=0x1d4a, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x1105c000*, lpNumberOfBytesWritten=0x1138fdfc*=0x1d4a, lpOverlapped=0x1138fe08) returned 1
	[0299.337] GetFileType (hFile=0x1d4) returned 0x1
	[0299.337] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1d4a, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.337] GetFileType (hFile=0x1d4) returned 0x1
	[0299.338] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.338] WriteFile (in: hFile=0x1d4, lpBuffer=0x11374a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x11374a80*, lpNumberOfBytesWritten=0x1138fdfc*=0x22d, lpOverlapped=0x1138fe08) returned 1
	[0299.338] GetFileType (hFile=0x1d4) returned 0x1
	[0299.338] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1d4a, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.338] CloseHandle (hObject=0x1d4) returned 1
	[0299.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf.tl30z")) returned 0x220
	[0299.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.341] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0299.345] SetEvent (hEvent=0x234) returned 1
	[0299.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf")) returned 0x220
	[0299.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF", dwFileAttributes=0x220) returned 1
	[0299.346] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.422] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0299.422] ReadFile (in: hFile=0x250, lpBuffer=0x111b7000, nNumberOfBytesToRead=0x2d6c, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x111b7000*, lpNumberOfBytesRead=0x11425e18*=0x2d6c, lpOverlapped=0x0) returned 1
	[0299.426] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0299.426] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141dd02 | out: pbBuffer=0x1141dd02) returned 1
	[0299.427] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0299.427] GetFileType (hFile=0x250) returned 0x1
	[0299.428] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.428] WriteFile (in: hFile=0x250, lpBuffer=0x11122000*, nNumberOfBytesToWrite=0x2d6c, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x11122000*, lpNumberOfBytesWritten=0x1138fdfc*=0x2d6c, lpOverlapped=0x1138fe08) returned 1
	[0299.428] GetFileType (hFile=0x250) returned 0x1
	[0299.428] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2d6c, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.428] GetFileType (hFile=0x250) returned 0x1
	[0299.429] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.429] WriteFile (in: hFile=0x250, lpBuffer=0x11468700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x11468700*, lpNumberOfBytesWritten=0x1138fdfc*=0x230, lpOverlapped=0x1138fe08) returned 1
	[0299.429] GetFileType (hFile=0x250) returned 0x1
	[0299.429] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2d6c, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.429] CloseHandle (hObject=0x250) returned 1
	[0299.430] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf.tl30z")) returned 0x220
	[0299.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.432] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0299.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf")) returned 0x220
	[0299.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF", dwFileAttributes=0x220) returned 1
	[0299.435] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.519] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0299.519] ReadFile (in: hFile=0x250, lpBuffer=0x11058000, nNumberOfBytesToRead=0x15f2, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11425e18*=0x15f2, lpOverlapped=0x0) returned 1
	[0299.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0299.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0299.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11266802 | out: pbBuffer=0x11266802) returned 1
	[0299.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0299.525] GetFileType (hFile=0x250) returned 0x1
	[0299.526] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.526] WriteFile (in: hFile=0x250, lpBuffer=0x11368000*, nNumberOfBytesToWrite=0x15f2, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11368000*, lpNumberOfBytesWritten=0x11031dfc*=0x15f2, lpOverlapped=0x11031e08) returned 1
	[0299.526] GetFileType (hFile=0x250) returned 0x1
	[0299.527] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x15f2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.527] GetFileType (hFile=0x250) returned 0x1
	[0299.527] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.527] WriteFile (in: hFile=0x250, lpBuffer=0x11230e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11230e00*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0299.527] GetFileType (hFile=0x250) returned 0x1
	[0299.527] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x15f2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.527] CloseHandle (hObject=0x250) returned 1
	[0299.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf.tl30z")) returned 0x220
	[0299.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.531] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0299.535] SetEvent (hEvent=0x118) returned 1
	[0299.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf")) returned 0x220
	[0299.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF", dwFileAttributes=0x220) returned 1
	[0299.536] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.741] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0299.742] ReadFile (in: hFile=0x250, lpBuffer=0x11440000, nNumberOfBytesToRead=0x1f46, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11440000*, lpNumberOfBytesRead=0x11425e18*=0x1f46, lpOverlapped=0x0) returned 1
	[0299.746] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0299.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4a8 | out: pbBuffer=0x1104e4a8) returned 1
	[0299.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11351d02 | out: pbBuffer=0x11351d02) returned 1
	[0299.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11351d65 | out: pbBuffer=0x11351d65) returned 1
	[0299.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0299.748] GetFileType (hFile=0x250) returned 0x1
	[0299.748] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.748] WriteFile (in: hFile=0x250, lpBuffer=0x1146a000*, nNumberOfBytesToWrite=0x1f46, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x1146a000*, lpNumberOfBytesWritten=0x1141fdfc*=0x1f46, lpOverlapped=0x1141fe08) returned 1
	[0299.748] GetFileType (hFile=0x250) returned 0x1
	[0299.749] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1f46, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.749] GetFileType (hFile=0x250) returned 0x1
	[0299.749] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.749] WriteFile (in: hFile=0x250, lpBuffer=0x11450700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x11450700*, lpNumberOfBytesWritten=0x1141fdfc*=0x230, lpOverlapped=0x1141fe08) returned 1
	[0299.749] GetFileType (hFile=0x250) returned 0x1
	[0299.750] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1f46, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.750] CloseHandle (hObject=0x250) returned 1
	[0299.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf.tl30z")) returned 0x220
	[0299.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.753] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0299.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf")) returned 0x220
	[0299.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF", dwFileAttributes=0x220) returned 1
	[0299.757] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.840] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0299.841] ReadFile (in: hFile=0x250, lpBuffer=0x1122c000, nNumberOfBytesToRead=0x1ca8, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1122c000*, lpNumberOfBytesRead=0x11022e18*=0x1ca8, lpOverlapped=0x0) returned 1
	[0299.844] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158020 | out: pbBuffer=0x11158020) returned 1
	[0299.844] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158018 | out: pbBuffer=0x11158018) returned 1
	[0299.845] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f5202 | out: pbBuffer=0x111f5202) returned 1
	[0299.845] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f5261 | out: pbBuffer=0x111f5261) returned 1
	[0299.845] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158050 | out: pbBuffer=0x11158050) returned 1
	[0299.845] GetFileType (hFile=0x250) returned 0x1
	[0299.845] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.846] WriteFile (in: hFile=0x250, lpBuffer=0x11166000*, nNumberOfBytesToWrite=0x1ca8, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x11166000*, lpNumberOfBytesWritten=0x1141fdfc*=0x1ca8, lpOverlapped=0x1141fe08) returned 1
	[0299.846] GetFileType (hFile=0x250) returned 0x1
	[0299.846] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1ca8, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.846] GetFileType (hFile=0x250) returned 0x1
	[0299.846] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.847] WriteFile (in: hFile=0x250, lpBuffer=0x11160380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x11160380*, lpNumberOfBytesWritten=0x1141fdfc*=0x22a, lpOverlapped=0x1141fe08) returned 1
	[0299.847] GetFileType (hFile=0x250) returned 0x1
	[0299.847] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1ca8, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.847] CloseHandle (hObject=0x250) returned 1
	[0299.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf.tl30z")) returned 0x220
	[0299.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.850] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0299.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf")) returned 0x220
	[0299.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF", dwFileAttributes=0x220) returned 1
	[0299.852] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.977] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0299.977] ReadFile (in: hFile=0x250, lpBuffer=0x1110a000, nNumberOfBytesToRead=0x1daa, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1110a000*, lpNumberOfBytesRead=0x1131ae18*=0x1daa, lpOverlapped=0x0) returned 1
	[0299.982] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0299.982] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0299.982] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b7302 | out: pbBuffer=0x112b7302) returned 1
	[0299.983] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b7383 | out: pbBuffer=0x112b7383) returned 1
	[0299.983] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b73e2 | out: pbBuffer=0x112b73e2) returned 1
	[0299.983] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0299.983] GetFileType (hFile=0x250) returned 0x1
	[0299.984] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.984] WriteFile (in: hFile=0x250, lpBuffer=0x112d6000*, nNumberOfBytesToWrite=0x1daa, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112d6000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1daa, lpOverlapped=0x1133de08) returned 1
	[0299.984] GetFileType (hFile=0x250) returned 0x1
	[0299.984] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1daa, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.984] GetFileType (hFile=0x250) returned 0x1
	[0299.984] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.985] WriteFile (in: hFile=0x250, lpBuffer=0x110c3880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110c3880*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0299.985] GetFileType (hFile=0x250) returned 0x1
	[0299.985] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1daa, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.985] CloseHandle (hObject=0x250) returned 1
	[0299.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf.tl30z")) returned 0x220
	[0299.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.989] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0299.993] SetEvent (hEvent=0x234) returned 1
	[0299.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf")) returned 0x220
	[0299.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF", dwFileAttributes=0x220) returned 1
	[0299.994] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0300.071] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0300.071] ReadFile (in: hFile=0x1d8, lpBuffer=0x11094000, nNumberOfBytesToRead=0x380a, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11094000*, lpNumberOfBytesRead=0x1131ae18*=0x380a, lpOverlapped=0x0) returned 1
	[0300.348] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0300.349] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e648 | out: pbBuffer=0x1104e648) returned 1
	[0300.349] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ea902 | out: pbBuffer=0x110ea902) returned 1
	[0300.349] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e680 | out: pbBuffer=0x1104e680) returned 1
	[0300.350] GetFileType (hFile=0x1d8) returned 0x1
	[0300.350] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.350] WriteFile (in: hFile=0x1d8, lpBuffer=0x11c42000*, nNumberOfBytesToWrite=0x380a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11c42000*, lpNumberOfBytesWritten=0x1133ddfc*=0x380a, lpOverlapped=0x1133de08) returned 1
	[0300.351] GetFileType (hFile=0x1d8) returned 0x1
	[0300.351] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x380a, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.351] GetFileType (hFile=0x1d8) returned 0x1
	[0300.351] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.351] WriteFile (in: hFile=0x1d8, lpBuffer=0x110e5500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110e5500*, lpNumberOfBytesWritten=0x1133ddfc*=0x227, lpOverlapped=0x1133de08) returned 1
	[0300.351] GetFileType (hFile=0x1d8) returned 0x1
	[0300.352] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x380a, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.352] CloseHandle (hObject=0x1d8) returned 1
	[0300.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf.tl30z")) returned 0x220
	[0300.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.359] SwitchToThread () returned 1
	[0300.403] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998)) returned 1
	[0300.404] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1
	[0300.404] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8)) returned 1
	[0300.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf")) returned 0x220
	[0300.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF", dwFileAttributes=0x220) returned 1
	[0300.405] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0300.410] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0300.410] ReadFile (in: hFile=0x288, lpBuffer=0x11ccc000, nNumberOfBytesToRead=0x1c40, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11ccc000*, lpNumberOfBytesRead=0x11288e18*=0x1c40, lpOverlapped=0x0) returned 1
	[0300.999] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0301.019] SetEvent (hEvent=0x248) returned 1
	[0301.019] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0301.118] SetEvent (hEvent=0x1bc) returned 1
	[0301.118] SetEvent (hEvent=0x174) returned 1
	[0301.119] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0308.707] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0308.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid")) returned 0x220
	[0308.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID", dwFileAttributes=0x220) returned 1
	[0308.717] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0308.769] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x110aee08 | out: lpMode=0x110aee08) returned 0
	[0308.769] ReadFile (in: hFile=0x298, lpBuffer=0x1121c000, nNumberOfBytesToRead=0x195b, lpNumberOfBytesRead=0x110aee18, lpOverlapped=0x0 | out: lpBuffer=0x1121c000*, lpNumberOfBytesRead=0x110aee18*=0x195b, lpOverlapped=0x0) returned 1
	[0308.881] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0309.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2e0 | out: pbBuffer=0x1140f2e0) returned 1
	[0309.154] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f2d8 | out: pbBuffer=0x1140f2d8) returned 1
	[0309.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11305802 | out: pbBuffer=0x11305802) returned 1
	[0309.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11305817 | out: pbBuffer=0x11305817) returned 1
	[0309.155] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f310 | out: pbBuffer=0x1140f310) returned 1
	[0309.155] GetFileType (hFile=0x298) returned 0x1
	[0309.156] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.156] WriteFile (in: hFile=0x298, lpBuffer=0x11260000*, nNumberOfBytesToWrite=0x195b, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11260000*, lpNumberOfBytesWritten=0x11339dfc*=0x195b, lpOverlapped=0x11339e08) returned 1
	[0309.156] GetFileType (hFile=0x298) returned 0x1
	[0309.156] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x195b, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.156] GetFileType (hFile=0x298) returned 0x1
	[0309.156] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.157] WriteFile (in: hFile=0x298, lpBuffer=0x11c0e700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11c0e700*, lpNumberOfBytesWritten=0x11339dfc*=0x230, lpOverlapped=0x11339e08) returned 1
	[0309.157] GetFileType (hFile=0x298) returned 0x1
	[0309.157] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x195b, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.157] CloseHandle (hObject=0x298) returned 1
	[0309.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid.tl30z")) returned 0x220
	[0309.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0309.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1928)) returned 1
	[0309.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x11339a18 | out: lpFileInformation=0x11339a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cea)) returned 1
	[0309.281] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0309.295] SetEvent (hEvent=0x1b0) returned 1
	[0309.295] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0309.298] SetEvent (hEvent=0x1b0) returned 1
	[0309.298] SetEvent (hEvent=0x1e0) returned 1
	[0309.298] SetEvent (hEvent=0x12c) returned 1
	[0309.298] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0309.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf")) returned 0x220
	[0309.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF", dwFileAttributes=0x220) returned 1
	[0309.304] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0309.464] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11097e08 | out: lpMode=0x11097e08) returned 0
	[0309.464] ReadFile (in: hFile=0x224, lpBuffer=0x110f0000, nNumberOfBytesToRead=0x4cea, lpNumberOfBytesRead=0x11097e18, lpOverlapped=0x0 | out: lpBuffer=0x110f0000*, lpNumberOfBytesRead=0x11097e18*=0x4cea, lpOverlapped=0x0) returned 1
	[0309.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327e0 | out: pbBuffer=0x113327e0) returned 1
	[0309.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327d8 | out: pbBuffer=0x113327d8) returned 1
	[0309.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11309302 | out: pbBuffer=0x11309302) returned 1
	[0309.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11309344 | out: pbBuffer=0x11309344) returned 1
	[0309.472] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0309.472] GetFileType (hFile=0x224) returned 0x1
	[0309.472] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.473] WriteFile (in: hFile=0x224, lpBuffer=0x11c32000*, nNumberOfBytesToWrite=0x4cea, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11c32000*, lpNumberOfBytesWritten=0x1133bdfc*=0x4cea, lpOverlapped=0x1133be08) returned 1
	[0309.473] GetFileType (hFile=0x224) returned 0x1
	[0309.473] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4cea, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.473] GetFileType (hFile=0x224) returned 0x1
	[0309.473] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.474] WriteFile (in: hFile=0x224, lpBuffer=0x11c16700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11c16700*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0309.474] GetFileType (hFile=0x224) returned 0x1
	[0309.474] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4cea, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.474] CloseHandle (hObject=0x224) returned 1
	[0309.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf.tl30z")) returned 0x220
	[0309.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf")) returned 0x220
	[0309.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF", dwFileAttributes=0x220) returned 1
	[0309.478] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0309.565] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11097e08 | out: lpMode=0x11097e08) returned 0
	[0309.565] ReadFile (in: hFile=0x1b4, lpBuffer=0x1131f300, nNumberOfBytesToRead=0x1138, lpNumberOfBytesRead=0x11097e18, lpOverlapped=0x0 | out: lpBuffer=0x1131f300*, lpNumberOfBytesRead=0x11097e18*=0x1138, lpOverlapped=0x0) returned 1
	[0309.569] SetEvent (hEvent=0x1b0) returned 1
	[0309.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332950 | out: pbBuffer=0x11332950) returned 1
	[0309.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332948 | out: pbBuffer=0x11332948) returned 1
	[0309.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11309d02 | out: pbBuffer=0x11309d02) returned 1
	[0309.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11309d2d | out: pbBuffer=0x11309d2d) returned 1
	[0309.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332980 | out: pbBuffer=0x11332980) returned 1
	[0309.572] GetFileType (hFile=0x1b4) returned 0x1
	[0309.572] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.572] WriteFile (in: hFile=0x1b4, lpBuffer=0x11be4000*, nNumberOfBytesToWrite=0x1138, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11be4000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1138, lpOverlapped=0x1133be08) returned 1
	[0309.572] GetFileType (hFile=0x1b4) returned 0x1
	[0309.572] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1138, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.572] GetFileType (hFile=0x1b4) returned 0x1
	[0309.572] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.573] WriteFile (in: hFile=0x1b4, lpBuffer=0x11c17500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11c17500*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0309.573] GetFileType (hFile=0x1b4) returned 0x1
	[0309.573] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1138, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.573] CloseHandle (hObject=0x1b4) returned 1
	[0309.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf.tl30z")) returned 0x220
	[0309.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.580] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0309.583] SetEvent (hEvent=0x1b0) returned 1
	[0309.583] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0309.585] SetEvent (hEvent=0x1b0) returned 1
	[0309.585] SetEvent (hEvent=0x118) returned 1
	[0309.585] SwitchToThread () returned 1
	[0309.587] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0309.602] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0309.622] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0309.639] SetEvent (hEvent=0x118) returned 1
	[0309.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf")) returned 0x220
	[0309.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF", dwFileAttributes=0x220) returned 1
	[0309.640] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0309.727] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11096e08 | out: lpMode=0x11096e08) returned 0
	[0309.727] ReadFile (in: hFile=0x1b4, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x2904, lpNumberOfBytesRead=0x11096e18, lpOverlapped=0x0 | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x11096e18*=0x2904, lpOverlapped=0x0) returned 1
	[0309.891] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63c0 | out: pbBuffer=0x113e63c0) returned 1
	[0309.891] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63b8 | out: pbBuffer=0x113e63b8) returned 1
	[0309.891] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125bd02 | out: pbBuffer=0x1125bd02) returned 1
	[0309.893] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0309.893] GetFileType (hFile=0x1b4) returned 0x1
	[0309.893] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.894] WriteFile (in: hFile=0x1b4, lpBuffer=0x11434000*, nNumberOfBytesToWrite=0x2904, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x11434000*, lpNumberOfBytesWritten=0x11251dfc*=0x2904, lpOverlapped=0x11251e08) returned 1
	[0309.894] GetFileType (hFile=0x1b4) returned 0x1
	[0309.894] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2904, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.894] GetFileType (hFile=0x1b4) returned 0x1
	[0309.894] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.894] WriteFile (in: hFile=0x1b4, lpBuffer=0x11114700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x11114700*, lpNumberOfBytesWritten=0x11251dfc*=0x224, lpOverlapped=0x11251e08) returned 1
	[0309.895] GetFileType (hFile=0x1b4) returned 0x1
	[0309.895] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2904, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.895] CloseHandle (hObject=0x1b4) returned 1
	[0309.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf.tl30z")) returned 0x220
	[0309.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0310.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf")) returned 0x220
	[0310.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF", dwFileAttributes=0x220) returned 1
	[0310.091] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0310.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0310.949] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11091e08 | out: lpMode=0x11091e08) returned 0
	[0310.949] ReadFile (in: hFile=0x1b4, lpBuffer=0x11204000, nNumberOfBytesToRead=0xdda, lpNumberOfBytesRead=0x11091e18, lpOverlapped=0x0 | out: lpBuffer=0x11204000*, lpNumberOfBytesRead=0x11091e18*=0xdda, lpOverlapped=0x0) returned 1
	[0310.954] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0310.954] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138d302 | out: pbBuffer=0x1138d302) returned 1
	[0310.954] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138d364 | out: pbBuffer=0x1138d364) returned 1
	[0310.954] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138d3a4 | out: pbBuffer=0x1138d3a4) returned 1
	[0310.954] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138d3be | out: pbBuffer=0x1138d3be) returned 1
	[0310.954] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0310.955] GetFileType (hFile=0x1b4) returned 0x1
	[0310.955] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0310.955] WriteFile (in: hFile=0x1b4, lpBuffer=0x1122a000*, nNumberOfBytesToWrite=0xdda, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1122a000*, lpNumberOfBytesWritten=0x1102ddfc*=0xdda, lpOverlapped=0x1102de08) returned 1
	[0310.955] GetFileType (hFile=0x1b4) returned 0x1
	[0310.955] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xdda, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0310.955] GetFileType (hFile=0x1b4) returned 0x1
	[0310.956] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0310.956] WriteFile (in: hFile=0x1b4, lpBuffer=0x113b5880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x113b5880*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0310.957] GetFileType (hFile=0x1b4) returned 0x1
	[0310.957] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xdda, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0310.957] CloseHandle (hObject=0x1b4) returned 1
	[0310.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf.tl30z")) returned 0x220
	[0310.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0310.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf")) returned 0x220
	[0310.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF", dwFileAttributes=0x220) returned 1
	[0310.960] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0311.090] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x1102be08 | out: lpMode=0x1102be08) returned 0
	[0311.090] ReadFile (in: hFile=0x290, lpBuffer=0x1143c000, nNumberOfBytesToRead=0x62b2, lpNumberOfBytesRead=0x1102be18, lpOverlapped=0x0 | out: lpBuffer=0x1143c000*, lpNumberOfBytesRead=0x1102be18*=0x62b2, lpOverlapped=0x0) returned 1
	[0311.097] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0311.097] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0311.097] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11252802 | out: pbBuffer=0x11252802) returned 1
	[0311.097] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112528cf | out: pbBuffer=0x112528cf) returned 1
	[0311.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0311.099] GetFileType (hFile=0x290) returned 0x1
	[0311.099] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.099] WriteFile (in: hFile=0x290, lpBuffer=0x11358000*, nNumberOfBytesToWrite=0x62b2, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11358000*, lpNumberOfBytesWritten=0x1102bdfc*=0x62b2, lpOverlapped=0x1102be08) returned 1
	[0311.099] GetFileType (hFile=0x290) returned 0x1
	[0311.099] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x62b2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.100] GetFileType (hFile=0x290) returned 0x1
	[0311.100] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.100] WriteFile (in: hFile=0x290, lpBuffer=0x1139ca80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1139ca80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0311.100] GetFileType (hFile=0x290) returned 0x1
	[0311.100] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x62b2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.100] CloseHandle (hObject=0x290) returned 1
	[0311.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf.tl30z")) returned 0x220
	[0311.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf")) returned 0x220
	[0311.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF", dwFileAttributes=0x220) returned 1
	[0311.104] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0311.663] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x110ace08 | out: lpMode=0x110ace08) returned 0
	[0311.663] ReadFile (in: hFile=0x1b4, lpBuffer=0x11bee000, nNumberOfBytesToRead=0x7400, lpNumberOfBytesRead=0x110ace18, lpOverlapped=0x0 | out: lpBuffer=0x11bee000*, lpNumberOfBytesRead=0x110ace18*=0x7400, lpOverlapped=0x0) returned 1
	[0311.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0311.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11253202 | out: pbBuffer=0x11253202) returned 1
	[0311.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11253209 | out: pbBuffer=0x11253209) returned 1
	[0311.669] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0311.669] GetFileType (hFile=0x1b4) returned 0x1
	[0311.669] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.670] WriteFile (in: hFile=0x1b4, lpBuffer=0x1120e000*, nNumberOfBytesToWrite=0x7400, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1120e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7400, lpOverlapped=0x1102be08) returned 1
	[0311.670] GetFileType (hFile=0x1b4) returned 0x1
	[0311.670] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7400, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.670] GetFileType (hFile=0x1b4) returned 0x1
	[0311.670] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.671] WriteFile (in: hFile=0x1b4, lpBuffer=0x1139d880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1139d880*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0311.671] GetFileType (hFile=0x1b4) returned 0x1
	[0311.671] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7400, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.671] CloseHandle (hObject=0x1b4) returned 1
	[0311.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf.tl30z")) returned 0x220
	[0311.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf")) returned 0x220
	[0311.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF", dwFileAttributes=0x220) returned 1
	[0311.673] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0311.749] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0311.749] ReadFile (in: hFile=0x184, lpBuffer=0x110d6000, nNumberOfBytesToRead=0x5328, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110d6000*, lpNumberOfBytesRead=0x11287e18*=0x5328, lpOverlapped=0x0) returned 1
	[0311.754] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0311.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0311.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11143202 | out: pbBuffer=0x11143202) returned 1
	[0311.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11143220 | out: pbBuffer=0x11143220) returned 1
	[0311.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0311.756] GetFileType (hFile=0x184) returned 0x1
	[0311.756] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.756] WriteFile (in: hFile=0x184, lpBuffer=0x11456000*, nNumberOfBytesToWrite=0x5328, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11456000*, lpNumberOfBytesWritten=0x1133bdfc*=0x5328, lpOverlapped=0x1133be08) returned 1
	[0311.756] GetFileType (hFile=0x184) returned 0x1
	[0311.757] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x5328, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.757] GetFileType (hFile=0x184) returned 0x1
	[0311.757] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.757] WriteFile (in: hFile=0x184, lpBuffer=0x113e9880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113e9880*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0311.757] GetFileType (hFile=0x184) returned 0x1
	[0311.757] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x5328, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.757] CloseHandle (hObject=0x184) returned 1
	[0311.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf.tl30z")) returned 0x220
	[0311.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.763] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0311.775] SetEvent (hEvent=0x1e8) returned 1
	[0311.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf")) returned 0x220
	[0311.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF", dwFileAttributes=0x220) returned 1
	[0311.776] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0311.852] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0311.852] ReadFile (in: hFile=0x184, lpBuffer=0x112d8000, nNumberOfBytesToRead=0x8b4, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x112d8000*, lpNumberOfBytesRead=0x11286e18*=0x8b4, lpOverlapped=0x0) returned 1
	[0311.857] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332930 | out: pbBuffer=0x11332930) returned 1
	[0311.857] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332928 | out: pbBuffer=0x11332928) returned 1
	[0311.857] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e6502 | out: pbBuffer=0x112e6502) returned 1
	[0311.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332960 | out: pbBuffer=0x11332960) returned 1
	[0311.858] GetFileType (hFile=0x184) returned 0x1
	[0311.858] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.858] WriteFile (in: hFile=0x184, lpBuffer=0x112e9000*, nNumberOfBytesToWrite=0x8b4, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112e9000*, lpNumberOfBytesWritten=0x1133bdfc*=0x8b4, lpOverlapped=0x1133be08) returned 1
	[0311.858] GetFileType (hFile=0x184) returned 0x1
	[0311.858] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x8b4, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.859] GetFileType (hFile=0x184) returned 0x1
	[0311.859] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.859] WriteFile (in: hFile=0x184, lpBuffer=0x11128700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11128700*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0311.859] GetFileType (hFile=0x184) returned 0x1
	[0311.859] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x8b4, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.859] CloseHandle (hObject=0x184) returned 1
	[0311.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf.tl30z")) returned 0x220
	[0311.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.863] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0311.865] SetEvent (hEvent=0x22c) returned 1
	[0311.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf")) returned 0x220
	[0311.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF", dwFileAttributes=0x220) returned 1
	[0311.866] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0311.948] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0311.949] ReadFile (in: hFile=0x1b4, lpBuffer=0x11170000, nNumberOfBytesToRead=0x1f24, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11170000*, lpNumberOfBytesRead=0x11286e18*=0x1f24, lpOverlapped=0x0) returned 1
	[0311.953] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66b0 | out: pbBuffer=0x113e66b0) returned 1
	[0311.953] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66a8 | out: pbBuffer=0x113e66a8) returned 1
	[0311.954] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144d402 | out: pbBuffer=0x1144d402) returned 1
	[0311.954] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144d439 | out: pbBuffer=0x1144d439) returned 1
	[0311.954] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66e0 | out: pbBuffer=0x113e66e0) returned 1
	[0311.954] GetFileType (hFile=0x1b4) returned 0x1
	[0311.955] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.955] WriteFile (in: hFile=0x1b4, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x1f24, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x11031dfc*=0x1f24, lpOverlapped=0x11031e08) returned 1
	[0311.955] GetFileType (hFile=0x1b4) returned 0x1
	[0311.955] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1f24, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.955] GetFileType (hFile=0x1b4) returned 0x1
	[0311.956] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.956] WriteFile (in: hFile=0x1b4, lpBuffer=0x11453c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11453c00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0311.956] GetFileType (hFile=0x1b4) returned 0x1
	[0311.957] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1f24, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.957] CloseHandle (hObject=0x1b4) returned 1
	[0311.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf.tl30z")) returned 0x220
	[0311.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.960] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0311.963] SetEvent (hEvent=0x22c) returned 1
	[0311.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf")) returned 0x220
	[0311.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF", dwFileAttributes=0x220) returned 1
	[0311.964] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0312.075] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0312.075] ReadFile (in: hFile=0x290, lpBuffer=0x11476000, nNumberOfBytesToRead=0xec4, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11476000*, lpNumberOfBytesRead=0x11286e18*=0xec4, lpOverlapped=0x0) returned 1
	[0312.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126100 | out: pbBuffer=0x11126100) returned 1
	[0312.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111260f8 | out: pbBuffer=0x111260f8) returned 1
	[0312.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137e802 | out: pbBuffer=0x1137e802) returned 1
	[0312.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137e82e | out: pbBuffer=0x1137e82e) returned 1
	[0312.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137e84e | out: pbBuffer=0x1137e84e) returned 1
	[0312.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137e898 | out: pbBuffer=0x1137e898) returned 1
	[0312.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126130 | out: pbBuffer=0x11126130) returned 1
	[0312.082] GetFileType (hFile=0x290) returned 0x1
	[0312.082] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.082] WriteFile (in: hFile=0x290, lpBuffer=0x1135e000*, nNumberOfBytesToWrite=0xec4, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1135e000*, lpNumberOfBytesWritten=0x1133fdfc*=0xec4, lpOverlapped=0x1133fe08) returned 1
	[0312.082] GetFileType (hFile=0x290) returned 0x1
	[0312.082] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0xec4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.082] GetFileType (hFile=0x290) returned 0x1
	[0312.082] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.083] WriteFile (in: hFile=0x290, lpBuffer=0x110bca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110bca80*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0312.083] GetFileType (hFile=0x290) returned 0x1
	[0312.083] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0xec4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.083] CloseHandle (hObject=0x290) returned 1
	[0312.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf.tl30z")) returned 0x220
	[0312.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.086] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0312.088] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0312.089] SetEvent (hEvent=0x234) returned 1
	[0312.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf")) returned 0x220
	[0312.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF", dwFileAttributes=0x220) returned 1
	[0312.090] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0312.157] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11096e08 | out: lpMode=0x11096e08) returned 0
	[0312.157] ReadFile (in: hFile=0x1f4, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x37f8, lpNumberOfBytesRead=0x11096e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11096e18*=0x37f8, lpOverlapped=0x0) returned 1
	[0312.162] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126260 | out: pbBuffer=0x11126260) returned 1
	[0312.162] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126258 | out: pbBuffer=0x11126258) returned 1
	[0312.162] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137f202 | out: pbBuffer=0x1137f202) returned 1
	[0312.162] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126290 | out: pbBuffer=0x11126290) returned 1
	[0312.163] GetFileType (hFile=0x1f4) returned 0x1
	[0312.163] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.163] WriteFile (in: hFile=0x1f4, lpBuffer=0x110e6000*, nNumberOfBytesToWrite=0x37f8, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110e6000*, lpNumberOfBytesWritten=0x1133fdfc*=0x37f8, lpOverlapped=0x1133fe08) returned 1
	[0312.164] GetFileType (hFile=0x1f4) returned 0x1
	[0312.164] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x37f8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.164] GetFileType (hFile=0x1f4) returned 0x1
	[0312.164] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.164] WriteFile (in: hFile=0x1f4, lpBuffer=0x110bd880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110bd880*, lpNumberOfBytesWritten=0x1133fdfc*=0x236, lpOverlapped=0x1133fe08) returned 1
	[0312.164] GetFileType (hFile=0x1f4) returned 0x1
	[0312.164] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x37f8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.164] CloseHandle (hObject=0x1f4) returned 1
	[0312.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf.tl30z")) returned 0x220
	[0312.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.167] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0312.169] SetEvent (hEvent=0x118) returned 1
	[0312.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf")) returned 0x220
	[0312.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF", dwFileAttributes=0x220) returned 1
	[0312.170] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0312.243] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11096e08 | out: lpMode=0x11096e08) returned 0
	[0312.243] ReadFile (in: hFile=0x290, lpBuffer=0x111e0000, nNumberOfBytesToRead=0x121c, lpNumberOfBytesRead=0x11096e18, lpOverlapped=0x0 | out: lpBuffer=0x111e0000*, lpNumberOfBytesRead=0x11096e18*=0x121c, lpOverlapped=0x0) returned 1
	[0312.251] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0312.257] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263e0 | out: pbBuffer=0x111263e0) returned 1
	[0312.257] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137fd02 | out: pbBuffer=0x1137fd02) returned 1
	[0312.258] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126410 | out: pbBuffer=0x11126410) returned 1
	[0312.258] GetFileType (hFile=0x290) returned 0x1
	[0312.258] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.258] WriteFile (in: hFile=0x290, lpBuffer=0x11122000*, nNumberOfBytesToWrite=0x121c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11122000*, lpNumberOfBytesWritten=0x1133fdfc*=0x121c, lpOverlapped=0x1133fe08) returned 1
	[0312.259] GetFileType (hFile=0x290) returned 0x1
	[0312.259] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x121c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.259] GetFileType (hFile=0x290) returned 0x1
	[0312.259] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.259] WriteFile (in: hFile=0x290, lpBuffer=0x1110e700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1110e700*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0312.259] GetFileType (hFile=0x290) returned 0x1
	[0312.260] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x121c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.260] CloseHandle (hObject=0x290) returned 1
	[0312.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf.tl30z")) returned 0x220
	[0312.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.269] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0312.276] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0312.306] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0312.330] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0312.342] SetEvent (hEvent=0x22c) returned 1
	[0312.342] SetEvent (hEvent=0x1b0) returned 1
	[0312.343] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0312.346] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0312.346] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0312.348] SetEvent (hEvent=0x164) returned 1
	[0312.348] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0312.351] SetEvent (hEvent=0x118) returned 1
	[0312.351] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0313.638] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0313.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp")) returned 0x220
	[0313.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP", dwFileAttributes=0x220) returned 1
	[0313.641] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0313.679] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0313.679] ReadFile (in: hFile=0x204, lpBuffer=0x11358000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11358000*, lpNumberOfBytesRead=0x11286e18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0313.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0313.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0313.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11150802 | out: pbBuffer=0x11150802) returned 1
	[0313.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0313.805] SetEvent (hEvent=0x27c) returned 1
	[0313.805] GetFileType (hFile=0x204) returned 0x1
	[0313.806] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11147de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.806] WriteFile (in: hFile=0x204, lpBuffer=0x11bd4000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x11147dfc, lpOverlapped=0x11147e08 | out: lpBuffer=0x11bd4000*, lpNumberOfBytesWritten=0x11147dfc*=0x7ce0, lpOverlapped=0x11147e08) returned 1
	[0313.806] GetFileType (hFile=0x204) returned 0x1
	[0313.806] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x11147de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.806] GetFileType (hFile=0x204) returned 0x1
	[0313.813] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11147de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.813] WriteFile (in: hFile=0x204, lpBuffer=0x11164a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11147dfc, lpOverlapped=0x11147e08 | out: lpBuffer=0x11164a80*, lpNumberOfBytesWritten=0x11147dfc*=0x230, lpOverlapped=0x11147e08) returned 1
	[0313.814] GetFileType (hFile=0x204) returned 0x1
	[0313.814] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x11147de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.814] CloseHandle (hObject=0x204) returned 1
	[0313.831] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0313.882] SetEvent (hEvent=0x150) returned 1
	[0313.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp.tl30z")) returned 0x220
	[0313.882] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.069] SetEvent (hEvent=0x1b0) returned 1
	[0314.069] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.321] SetEvent (hEvent=0x134) returned 1
	[0314.321] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0314.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6558 | out: pbBuffer=0x113e6558) returned 1
	[0314.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d6702 | out: pbBuffer=0x111d6702) returned 1
	[0314.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d6749 | out: pbBuffer=0x111d6749) returned 1
	[0314.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d67b8 | out: pbBuffer=0x111d67b8) returned 1
	[0314.359] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0314.360] GetFileType (hFile=0x254) returned 0x1
	[0314.360] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135fde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.360] WriteFile (in: hFile=0x254, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x1135fdfc, lpOverlapped=0x1135fe08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x1135fdfc*=0x7db8, lpOverlapped=0x1135fe08) returned 1
	[0314.410] GetFileType (hFile=0x254) returned 0x1
	[0314.410] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1135fde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.411] GetFileType (hFile=0x254) returned 0x1
	[0314.411] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135fde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.411] WriteFile (in: hFile=0x254, lpBuffer=0x1142c700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1135fdfc, lpOverlapped=0x1135fe08 | out: lpBuffer=0x1142c700*, lpNumberOfBytesWritten=0x1135fdfc*=0x236, lpOverlapped=0x1135fe08) returned 1
	[0314.422] GetFileType (hFile=0x254) returned 0x1
	[0314.422] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1135fde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.422] CloseHandle (hObject=0x254) returned 1
	[0314.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp.tl30z")) returned 0x220
	[0314.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.431] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.509] SetEvent (hEvent=0x134) returned 1
	[0314.509] SetEvent (hEvent=0x1c4) returned 1
	[0314.509] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.513] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.515] SetEvent (hEvent=0x134) returned 1
	[0314.515] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.518] SetEvent (hEvent=0x134) returned 1
	[0314.518] SetEvent (hEvent=0x1e8) returned 1
	[0314.519] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111260f0 | out: pbBuffer=0x111260f0) returned 1
	[0314.519] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11150802 | out: pbBuffer=0x11150802) returned 1
	[0314.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11150843 | out: pbBuffer=0x11150843) returned 1
	[0314.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126120 | out: pbBuffer=0x11126120) returned 1
	[0314.521] GetFileType (hFile=0x184) returned 0x1
	[0314.521] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.522] WriteFile (in: hFile=0x184, lpBuffer=0x1131e000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1131e000*, lpNumberOfBytesWritten=0x1133ddfc*=0x7db8, lpOverlapped=0x1133de08) returned 1
	[0314.522] GetFileType (hFile=0x184) returned 0x1
	[0314.522] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.522] GetFileType (hFile=0x184) returned 0x1
	[0314.522] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.523] WriteFile (in: hFile=0x184, lpBuffer=0x112e8a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112e8a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x236, lpOverlapped=0x1133de08) returned 1
	[0314.523] GetFileType (hFile=0x184) returned 0x1
	[0314.523] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.523] CloseHandle (hObject=0x184) returned 1
	[0314.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp.tl30z")) returned 0x220
	[0314.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.533] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg")) returned 0x220
	[0314.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG", dwFileAttributes=0x220) returned 1
	[0314.539] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg.tl30z"), dwFlags=0x1) returned 1
	[0314.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0314.787] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11093e08 | out: lpMode=0x11093e08) returned 0
	[0314.787] ReadFile (in: hFile=0x1c8, lpBuffer=0x112f6000, nNumberOfBytesToRead=0x8499, lpNumberOfBytesRead=0x11093e18, lpOverlapped=0x0 | out: lpBuffer=0x112f6000*, lpNumberOfBytesRead=0x11093e18*=0x8499, lpOverlapped=0x0) returned 1
	[0314.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0314.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0314.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d0802 | out: pbBuffer=0x111d0802) returned 1
	[0314.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d08cd | out: pbBuffer=0x111d08cd) returned 1
	[0314.814] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0314.815] GetFileType (hFile=0x1c8) returned 0x1
	[0314.815] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.815] WriteFile (in: hFile=0x1c8, lpBuffer=0x1110a000*, nNumberOfBytesToWrite=0x8499, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x1110a000*, lpNumberOfBytesWritten=0x111c7dfc*=0x8499, lpOverlapped=0x111c7e08) returned 1
	[0314.816] GetFileType (hFile=0x1c8) returned 0x1
	[0314.816] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8499, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.816] GetFileType (hFile=0x1c8) returned 0x1
	[0314.816] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.816] WriteFile (in: hFile=0x1c8, lpBuffer=0x111e4a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x111e4a80*, lpNumberOfBytesWritten=0x111c7dfc*=0x22d, lpOverlapped=0x111c7e08) returned 1
	[0314.817] GetFileType (hFile=0x1c8) returned 0x1
	[0314.817] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8499, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.817] CloseHandle (hObject=0x1c8) returned 1
	[0314.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg.tl30z")) returned 0x220
	[0314.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0314.820] SetEvent (hEvent=0x27c) returned 1
	[0314.820] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.824] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.840] SetEvent (hEvent=0x1e8) returned 1
	[0314.840] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.843] SetEvent (hEvent=0x1e8) returned 1
	[0314.843] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.851] SetEvent (hEvent=0x1c4) returned 1
	[0314.851] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0314.855] SetEvent (hEvent=0x160) returned 1
	[0314.855] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0314.860] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.860] SetEvent (hEvent=0x160) returned 1
	[0314.860] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0314.892] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.892] SwitchToThread () returned 1
	[0314.894] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0314.896] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.897] SetEvent (hEvent=0x150) returned 1
	[0314.897] SetEvent (hEvent=0x160) returned 1
	[0314.897] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0314.907] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0314.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp")) returned 0x220
	[0314.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP", dwFileAttributes=0x220) returned 1
	[0314.908] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0314.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0314.982] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0314.982] ReadFile (in: hFile=0x290, lpBuffer=0x11438000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11438000*, lpNumberOfBytesRead=0x11023e18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0314.988] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126260 | out: pbBuffer=0x11126260) returned 1
	[0314.988] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126258 | out: pbBuffer=0x11126258) returned 1
	[0314.988] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c19202 | out: pbBuffer=0x11c19202) returned 1
	[0314.988] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c192c3 | out: pbBuffer=0x11c192c3) returned 1
	[0314.988] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126290 | out: pbBuffer=0x11126290) returned 1
	[0314.989] GetFileType (hFile=0x290) returned 0x1
	[0314.989] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.990] WriteFile (in: hFile=0x290, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7ce0, lpOverlapped=0x1102be08) returned 1
	[0314.990] GetFileType (hFile=0x290) returned 0x1
	[0314.990] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.990] GetFileType (hFile=0x290) returned 0x1
	[0314.991] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.991] WriteFile (in: hFile=0x290, lpBuffer=0x11325880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11325880*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0314.991] GetFileType (hFile=0x290) returned 0x1
	[0314.991] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.991] CloseHandle (hObject=0x290) returned 1
	[0314.996] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp.tl30z")) returned 0x220
	[0314.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0315.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp")) returned 0x220
	[0315.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP", dwFileAttributes=0x220) returned 1
	[0315.039] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0315.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0315.149] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0315.149] ReadFile (in: hFile=0x1c8, lpBuffer=0x11c4a000, nNumberOfBytesToRead=0x7e90, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11c4a000*, lpNumberOfBytesRead=0x1131ae18*=0x7e90, lpOverlapped=0x0) returned 1
	[0315.156] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f550 | out: pbBuffer=0x1140f550) returned 1
	[0315.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f548 | out: pbBuffer=0x1140f548) returned 1
	[0315.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11314902 | out: pbBuffer=0x11314902) returned 1
	[0315.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11314908 | out: pbBuffer=0x11314908) returned 1
	[0315.157] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0315.159] SetEvent (hEvent=0x150) returned 1
	[0315.159] SetEvent (hEvent=0x134) returned 1
	[0315.159] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f580 | out: pbBuffer=0x1140f580) returned 1
	[0315.160] GetFileType (hFile=0x1c8) returned 0x1
	[0315.160] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.160] WriteFile (in: hFile=0x1c8, lpBuffer=0x112a2000*, nNumberOfBytesToWrite=0x7e90, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112a2000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7e90, lpOverlapped=0x1102de08) returned 1
	[0315.161] GetFileType (hFile=0x1c8) returned 0x1
	[0315.161] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x7e90, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.161] GetFileType (hFile=0x1c8) returned 0x1
	[0315.161] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.161] WriteFile (in: hFile=0x1c8, lpBuffer=0x112fd500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112fd500*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0315.161] GetFileType (hFile=0x1c8) returned 0x1
	[0315.162] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x7e90, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.162] CloseHandle (hObject=0x1c8) returned 1
	[0315.165] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0315.167] SetEvent (hEvent=0x134) returned 1
	[0315.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp.tl30z")) returned 0x220
	[0315.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0315.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif")) returned 0x220
	[0315.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF", dwFileAttributes=0x220) returned 1
	[0315.209] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif.tl30z"), dwFlags=0x1) returned 1
	[0315.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0315.466] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0315.466] ReadFile (in: hFile=0x1b4, lpBuffer=0x1121a000, nNumberOfBytesToRead=0xc382, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x1121a000*, lpNumberOfBytesRead=0x11286e18*=0xc382, lpOverlapped=0x0) returned 1
	[0315.489] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0315.489] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0315.489] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11361202 | out: pbBuffer=0x11361202) returned 1
	[0315.490] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0315.491] GetFileType (hFile=0x1b4) returned 0x1
	[0315.491] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.491] WriteFile (in: hFile=0x1b4, lpBuffer=0x111c4000*, nNumberOfBytesToWrite=0xc382, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111c4000*, lpNumberOfBytesWritten=0x1102ddfc*=0xc382, lpOverlapped=0x1102de08) returned 1
	[0315.492] GetFileType (hFile=0x1b4) returned 0x1
	[0315.492] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xc382, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.492] GetFileType (hFile=0x1b4) returned 0x1
	[0315.493] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.493] WriteFile (in: hFile=0x1b4, lpBuffer=0x11065880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11065880*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0315.493] GetFileType (hFile=0x1b4) returned 0x1
	[0315.493] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xc382, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.493] CloseHandle (hObject=0x1b4) returned 1
	[0315.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif.tl30z")) returned 0x220
	[0315.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0315.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp")) returned 0x220
	[0315.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP", dwFileAttributes=0x220) returned 1
	[0315.622] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0315.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0315.900] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0315.904] ReadFile (in: hFile=0x1c8, lpBuffer=0x11058000, nNumberOfBytesToRead=0xe79c, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11319e18*=0xe79c, lpOverlapped=0x0) returned 1
	[0315.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126110 | out: pbBuffer=0x11126110) returned 1
	[0315.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141a802 | out: pbBuffer=0x1141a802) returned 1
	[0315.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1141a850 | out: pbBuffer=0x1141a850) returned 1
	[0315.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126140 | out: pbBuffer=0x11126140) returned 1
	[0316.031] GetFileType (hFile=0x1c8) returned 0x1
	[0316.031] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.031] WriteFile (in: hFile=0x1c8, lpBuffer=0x1131e000*, nNumberOfBytesToWrite=0xe79c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1131e000*, lpNumberOfBytesWritten=0x1102bdfc*=0xe79c, lpOverlapped=0x1102be08) returned 1
	[0316.134] GetFileType (hFile=0x1c8) returned 0x1
	[0316.134] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xe79c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.134] GetFileType (hFile=0x1c8) returned 0x1
	[0316.134] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.134] WriteFile (in: hFile=0x1c8, lpBuffer=0x111b2a80*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111b2a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x239, lpOverlapped=0x1102be08) returned 1
	[0316.145] GetFileType (hFile=0x1c8) returned 0x1
	[0316.145] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xe79c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.145] CloseHandle (hObject=0x1c8) returned 1
	[0316.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp.tl30z")) returned 0x220
	[0316.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0316.163] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0316.166] SetEvent (hEvent=0x1e0) returned 1
	[0316.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg")) returned 0x220
	[0316.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG", dwFileAttributes=0x220) returned 1
	[0316.166] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg.tl30z"), dwFlags=0x1) returned 1
	[0316.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0316.254] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0316.254] ReadFile (in: hFile=0x1b4, lpBuffer=0x1117e000, nNumberOfBytesToRead=0xf438, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1117e000*, lpNumberOfBytesRead=0x11319e18*=0xf438, lpOverlapped=0x0) returned 1
	[0316.261] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x102
	[0316.264] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0316.264] SetEvent (hEvent=0x150) returned 1
	[0316.264] SetEvent (hEvent=0x27c) returned 1
	[0316.264] SetEvent (hEvent=0x1e8) returned 1
	[0316.265] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0316.265] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11275302 | out: pbBuffer=0x11275302) returned 1
	[0316.265] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0316.267] GetFileType (hFile=0x1b4) returned 0x1
	[0316.268] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.268] WriteFile (in: hFile=0x1b4, lpBuffer=0x11c1e000*, nNumberOfBytesToWrite=0xf438, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11c1e000*, lpNumberOfBytesWritten=0x1133bdfc*=0xf438, lpOverlapped=0x1133be08) returned 1
	[0316.268] GetFileType (hFile=0x1b4) returned 0x1
	[0316.268] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xf438, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.269] GetFileType (hFile=0x1b4) returned 0x1
	[0316.269] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.269] WriteFile (in: hFile=0x1b4, lpBuffer=0x110d5c00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110d5c00*, lpNumberOfBytesWritten=0x1133bdfc*=0x233, lpOverlapped=0x1133be08) returned 1
	[0316.269] GetFileType (hFile=0x1b4) returned 0x1
	[0316.269] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xf438, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.269] CloseHandle (hObject=0x1b4) returned 1
	[0316.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg.tl30z")) returned 0x220
	[0316.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0316.279] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0316.549] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0316.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg")) returned 0x220
	[0316.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG", dwFileAttributes=0x220) returned 1
	[0316.557] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg.tl30z"), dwFlags=0x1) returned 1
	[0316.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0316.875] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0316.875] ReadFile (in: hFile=0x184, lpBuffer=0x112df500, nNumberOfBytesToRead=0x321f, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x112df500*, lpNumberOfBytesRead=0x1131ae18*=0x321f, lpOverlapped=0x0) returned 1
	[0316.937] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0x1) returned 0x0
	[0316.940] SetEvent (hEvent=0x150) returned 1
	[0316.940] SetEvent (hEvent=0x24c) returned 1
	[0316.970] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0316.970] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6548 | out: pbBuffer=0x113e6548) returned 1
	[0316.970] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111fa702 | out: pbBuffer=0x111fa702) returned 1
	[0316.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111fa7df | out: pbBuffer=0x111fa7df) returned 1
	[0316.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0316.971] GetFileType (hFile=0x184) returned 0x1
	[0316.971] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.972] WriteFile (in: hFile=0x184, lpBuffer=0x11214000*, nNumberOfBytesToWrite=0x321f, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11214000*, lpNumberOfBytesWritten=0x1102ddfc*=0x321f, lpOverlapped=0x1102de08) returned 1
	[0316.972] GetFileType (hFile=0x184) returned 0x1
	[0316.972] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x321f, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.972] GetFileType (hFile=0x184) returned 0x1
	[0316.972] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.972] WriteFile (in: hFile=0x184, lpBuffer=0x11206380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11206380*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0316.973] GetFileType (hFile=0x184) returned 0x1
	[0316.973] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x321f, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.973] CloseHandle (hObject=0x184) returned 1
	[0316.975] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0316.978] SetEvent (hEvent=0x24c) returned 1
	[0316.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg.tl30z")) returned 0x220
	[0316.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0316.980] SwitchToThread () returned 1
	[0316.984] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0316.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf")) returned 0x220
	[0316.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF", dwFileAttributes=0x220) returned 1
	[0316.991] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0317.191] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0317.192] ReadFile (in: hFile=0x184, lpBuffer=0x113ab000, nNumberOfBytesToRead=0x776, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x113ab000*, lpNumberOfBytesRead=0x11022e18*=0x776, lpOverlapped=0x0) returned 1
	[0317.223] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0317.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0317.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b8502 | out: pbBuffer=0x113b8502) returned 1
	[0317.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b850c | out: pbBuffer=0x113b850c) returned 1
	[0317.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b8524 | out: pbBuffer=0x113b8524) returned 1
	[0317.224] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0317.224] GetFileType (hFile=0x184) returned 0x1
	[0317.225] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.225] WriteFile (in: hFile=0x184, lpBuffer=0x113c9000*, nNumberOfBytesToWrite=0x776, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x113c9000*, lpNumberOfBytesWritten=0x1133ddfc*=0x776, lpOverlapped=0x1133de08) returned 1
	[0317.225] GetFileType (hFile=0x184) returned 0x1
	[0317.225] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x776, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.225] GetFileType (hFile=0x184) returned 0x1
	[0317.225] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.225] WriteFile (in: hFile=0x184, lpBuffer=0x11462e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11462e00*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0317.226] GetFileType (hFile=0x184) returned 0x1
	[0317.226] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x776, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.226] CloseHandle (hObject=0x184) returned 1
	[0317.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf.tl30z")) returned 0x220
	[0317.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.231] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0317.234] SetEvent (hEvent=0x234) returned 1
	[0317.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid")) returned 0x220
	[0317.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID", dwFileAttributes=0x220) returned 1
	[0317.235] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0317.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0317.477] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0317.477] ReadFile (in: hFile=0x21c, lpBuffer=0x110b4000, nNumberOfBytesToRead=0x18f8, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x110b4000*, lpNumberOfBytesRead=0x11022e18*=0x18f8, lpOverlapped=0x0) returned 1
	[0317.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126590 | out: pbBuffer=0x11126590) returned 1
	[0317.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144e902 | out: pbBuffer=0x1144e902) returned 1
	[0317.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144e903 | out: pbBuffer=0x1144e903) returned 1
	[0317.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111265c0 | out: pbBuffer=0x111265c0) returned 1
	[0317.529] GetFileType (hFile=0x21c) returned 0x1
	[0317.529] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.529] WriteFile (in: hFile=0x21c, lpBuffer=0x11124000*, nNumberOfBytesToWrite=0x18f8, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11124000*, lpNumberOfBytesWritten=0x1133bdfc*=0x18f8, lpOverlapped=0x1133be08) returned 1
	[0317.529] GetFileType (hFile=0x21c) returned 0x1
	[0317.529] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x18f8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.529] GetFileType (hFile=0x21c) returned 0x1
	[0317.529] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.530] WriteFile (in: hFile=0x21c, lpBuffer=0x11441500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11441500*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0317.530] GetFileType (hFile=0x21c) returned 0x1
	[0317.530] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x18f8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.530] CloseHandle (hObject=0x21c) returned 1
	[0317.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid.tl30z")) returned 0x220
	[0317.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0317.538] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) returned 0x0
	[0317.540] SetEvent (hEvent=0x1e0) returned 1
	[0317.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf")) returned 0x220
	[0317.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF", dwFileAttributes=0x220) returned 1
	[0317.540] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x29c
	[0317.583] GetConsoleMode (in: hConsoleHandle=0x29c, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0317.583] ReadFile (in: hFile=0x29c, lpBuffer=0x110ad300, nNumberOfBytesToRead=0x1268, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x110ad300*, lpNumberOfBytesRead=0x11022e18*=0x1268, lpOverlapped=0x0) returned 1
	[0317.684] WaitForSingleObject (hHandle=0x218, dwMilliseconds=0xffffffff) 

Thread:
	id = 37
	os_tid = 0xff8

	[0212.765] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3283ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3283ff30*=0x220) returned 1
	[0212.765] VirtualQuery (in: lpAddress=0x3283ff40, lpBuffer=0x3283ff40, dwLength=0x1c | out: lpBuffer=0x3283ff40*(BaseAddress=0x3283f000, AllocationBase=0x32740000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0212.765] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 0x20
	[0212.766] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0212.766] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0220.282] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0220.743] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x11556e08 | out: lpMode=0x11556e08) returned 0
	[0220.743] ReadFile (in: hFile=0x21c, lpBuffer=0x111a0000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11556e18, lpOverlapped=0x0 | out: lpBuffer=0x111a0000*, lpNumberOfBytesRead=0x11556e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0220.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0220.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113640f8 | out: pbBuffer=0x113640f8) returned 1
	[0220.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1158c802 | out: pbBuffer=0x1158c802) returned 1
	[0220.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1158c8e0 | out: pbBuffer=0x1158c8e0) returned 1
	[0220.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0220.835] GetFileType (hFile=0x21c) returned 0x1
	[0220.835] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0220.835] WriteFile (in: hFile=0x21c, lpBuffer=0x113b0000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x113b0000*, lpNumberOfBytesWritten=0x1102ddfc*=0x6ccc, lpOverlapped=0x1102de08) returned 1
	[0220.836] GetFileType (hFile=0x21c) returned 0x1
	[0220.836] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0220.836] GetFileType (hFile=0x21c) returned 0x1
	[0220.836] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0220.836] WriteFile (in: hFile=0x21c, lpBuffer=0x11576a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11576a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0220.837] GetFileType (hFile=0x21c) returned 0x1
	[0220.837] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0220.837] CloseHandle (hObject=0x21c) returned 1
	[0220.983] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.tl30z")) returned 0x20
	[0220.984] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0221.217] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x248
	[0221.217] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0242.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar")) returned 0x20
	[0242.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", dwFileAttributes=0x20) returned 1
	[0242.259] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.tl30z"), dwFlags=0x1) returned 1
	[0245.331] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0245.601] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0245.601] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0245.601] VirtualAlloc (lpAddress=0x11d4a000, dwSize=0x100000, flAllocationType=0x1000, flProtect=0x4) returned 0x11d4a000
	[0245.635] ReadFile (in: hFile=0x1f4, lpBuffer=0x11d4a000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11d4a000*, lpNumberOfBytesRead=0x1128be18*=0x100000, lpOverlapped=0x0) returned 1
	[0245.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0245.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11382802 | out: pbBuffer=0x11382802) returned 1
	[0245.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113828b3 | out: pbBuffer=0x113828b3) returned 1
	[0245.756] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0245.761] SetEvent (hEvent=0x1b0) returned 1
	[0245.771] VirtualAlloc (lpAddress=0x11e4a000, dwSize=0x102000, flAllocationType=0x1000, flProtect=0x4) returned 0x11e4a000
	[0245.874] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0245.882] SetEvent (hEvent=0x134) returned 1
	[0245.882] SetEvent (hEvent=0x1b0) returned 1
	[0245.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.tl30z")) returned 0x20
	[0245.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0245.883] ReadFile (in: hFile=0x1d0, lpBuffer=0x113f0000, nNumberOfBytesToRead=0xb6dd, lpNumberOfBytesRead=0x113b0e18, lpOverlapped=0x0 | out: lpBuffer=0x113f0000*, lpNumberOfBytesRead=0x113b0e18*=0xb6dd, lpOverlapped=0x0) returned 1
	[0245.912] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0245.937] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0245.989] SetEvent (hEvent=0x1b0) returned 1
	[0245.989] SetEvent (hEvent=0x26c) returned 1
	[0245.990] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0245.990] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bc802 | out: pbBuffer=0x111bc802) returned 1
	[0245.991] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0245.994] VirtualAlloc (lpAddress=0x11f84000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0x11f84000
	[0246.022] GetFileType (hFile=0x288) returned 0x1
	[0246.022] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0246.022] WriteFile (in: hFile=0x288, lpBuffer=0x111ca000*, nNumberOfBytesToWrite=0x25ade, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111ca000*, lpNumberOfBytesWritten=0x11031dfc*=0x25ade, lpOverlapped=0x11031e08) returned 1
	[0246.024] GetFileType (hFile=0x288) returned 0x1
	[0246.024] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x25ade, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0246.024] GetFileType (hFile=0x288) returned 0x1
	[0246.024] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0246.025] WriteFile (in: hFile=0x288, lpBuffer=0x11082800*, nNumberOfBytesToWrite=0x24e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11082800*, lpNumberOfBytesWritten=0x11031dfc*=0x24e, lpOverlapped=0x11031e08) returned 1
	[0246.043] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0246.135] GetFileType (hFile=0x288) returned 0x1
	[0246.135] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x25ade, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0246.135] CloseHandle (hObject=0x288) returned 1
	[0246.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.tl30z")) returned 0x20
	[0246.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0246.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e130 | out: pbBuffer=0x1142e130) returned 1
	[0246.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e128 | out: pbBuffer=0x1142e128) returned 1
	[0246.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113eb302 | out: pbBuffer=0x113eb302) returned 1
	[0246.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113eb3bc | out: pbBuffer=0x113eb3bc) returned 1
	[0246.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113eb3c8 | out: pbBuffer=0x113eb3c8) returned 1
	[0246.626] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e170 | out: pbBuffer=0x1142e170) returned 1
	[0246.627] VirtualAlloc (lpAddress=0x11fca000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0x11fca000
	[0246.631] GetFileType (hFile=0x1d0) returned 0x1
	[0246.632] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0246.632] WriteFile (in: hFile=0x1d0, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0xb6dd, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x11031dfc*=0xb6dd, lpOverlapped=0x11031e08) returned 1
	[0246.633] GetFileType (hFile=0x1d0) returned 0x1
	[0246.633] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xb6dd, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0246.633] GetFileType (hFile=0x1d0) returned 0x1
	[0246.634] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0246.634] WriteFile (in: hFile=0x1d0, lpBuffer=0x11391880*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11391880*, lpNumberOfBytesWritten=0x11031dfc*=0x23c, lpOverlapped=0x11031e08) returned 1
	[0246.636] GetFileType (hFile=0x1d0) returned 0x1
	[0246.636] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xb6dd, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0246.636] CloseHandle (hObject=0x1d0) returned 1
	[0246.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.tl30z")) returned 0x20
	[0246.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.tl30z", dwFileAttributes=0x21) returned 1
	[0246.654] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0246.654] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x112efe08 | out: lpMode=0x112efe08) returned 0
	[0246.654] ReadFile (in: hFile=0x1d0, lpBuffer=0x112d4000, nNumberOfBytesToRead=0xbd9c, lpNumberOfBytesRead=0x112efe18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x112efe18*=0xbd9c, lpOverlapped=0x0) returned 1
	[0246.674] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2c0 | out: pbBuffer=0x1142e2c0) returned 1
	[0246.674] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e2b8 | out: pbBuffer=0x1142e2b8) returned 1
	[0246.675] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ebd02 | out: pbBuffer=0x113ebd02) returned 1
	[0246.675] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2f0 | out: pbBuffer=0x1142e2f0) returned 1
	[0246.676] GetFileType (hFile=0x1d0) returned 0x1
	[0246.676] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0246.677] WriteFile (in: hFile=0x1d0, lpBuffer=0x112f6000*, nNumberOfBytesToWrite=0xbd9c, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x112f6000*, lpNumberOfBytesWritten=0x112efdfc*=0xbd9c, lpOverlapped=0x112efe08) returned 1
	[0246.678] GetFileType (hFile=0x1d0) returned 0x1
	[0246.678] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xbd9c, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0246.678] GetFileType (hFile=0x1d0) returned 0x1
	[0246.709] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0246.710] WriteFile (in: hFile=0x1d0, lpBuffer=0x1135e700*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x1135e700*, lpNumberOfBytesWritten=0x112efdfc*=0x239, lpOverlapped=0x112efe08) returned 1
	[0246.711] GetFileType (hFile=0x1d0) returned 0x1
	[0246.711] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xbd9c, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0246.712] CloseHandle (hObject=0x1d0) returned 1
	[0246.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.tl30z")) returned 0x20
	[0246.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.tl30z", dwFileAttributes=0x21) returned 1
	[0246.733] VirtualAlloc (lpAddress=0x11fd8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11fd8000
	[0246.734] VirtualAlloc (lpAddress=0x11fdc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11fdc000
	[0246.735] VirtualAlloc (lpAddress=0x11fe0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11fe0000
	[0246.737] VirtualAlloc (lpAddress=0x11fe4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11fe4000
	[0246.739] VirtualAlloc (lpAddress=0x11fe8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11fe8000
	[0246.740] VirtualAlloc (lpAddress=0x11fec000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11fec000
	[0246.741] VirtualAlloc (lpAddress=0x11ff0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x11ff0000
	[0246.743] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0246.753] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0246.753] SetEvent (hEvent=0x150) returned 1
	[0246.753] SetEvent (hEvent=0x210) returned 1
	[0246.753] SetEvent (hEvent=0x218) returned 1
	[0246.753] SetEvent (hEvent=0x234) returned 1
	[0246.753] VirtualAlloc (lpAddress=0x11ff8000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x11ff8000
	[0246.756] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0246.772] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0246.772] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0246.811] SetEvent (hEvent=0x26c) returned 1
	[0246.811] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0246.953] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0246.954] VirtualAlloc (lpAddress=0x114aa000, dwSize=0x200000, flAllocationType=0x1000, flProtect=0x4) returned 0x114aa000
	[0247.206] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0247.245] SetEvent (hEvent=0x1e8) returned 1
	[0247.245] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0247.313] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0247.541] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0248.076] SetEvent (hEvent=0x24c) returned 1
	[0248.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20
	[0248.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x20) returned 1
	[0248.077] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.tl30z"), dwFlags=0x1) returned 1
	[0248.831] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0248.831] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0248.831] ReadFile (in: hFile=0x250, lpBuffer=0x111b8500, nNumberOfBytesToRead=0x99, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x111b8500*, lpNumberOfBytesRead=0x1131ae18*=0x99, lpOverlapped=0x0) returned 1
	[0248.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e6e0 | out: pbBuffer=0x1142e6e0) returned 1
	[0248.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e6d8 | out: pbBuffer=0x1142e6d8) returned 1
	[0248.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d7002 | out: pbBuffer=0x110d7002) returned 1
	[0248.836] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d708a | out: pbBuffer=0x110d708a) returned 1
	[0248.836] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e710 | out: pbBuffer=0x1142e710) returned 1
	[0248.836] GetFileType (hFile=0x250) returned 0x1
	[0248.836] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.836] WriteFile (in: hFile=0x250, lpBuffer=0x110d1800*, nNumberOfBytesToWrite=0x99, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x110d1800*, lpNumberOfBytesWritten=0x112fddfc*=0x99, lpOverlapped=0x112fde08) returned 1
	[0248.837] GetFileType (hFile=0x250) returned 0x1
	[0248.837] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x99, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.837] GetFileType (hFile=0x250) returned 0x1
	[0248.837] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.837] WriteFile (in: hFile=0x250, lpBuffer=0x110e7500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x110e7500*, lpNumberOfBytesWritten=0x112fddfc*=0x224, lpOverlapped=0x112fde08) returned 1
	[0248.843] GetFileType (hFile=0x250) returned 0x1
	[0248.843] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x99, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.843] CloseHandle (hObject=0x250) returned 1
	[0248.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.tl30z")) returned 0x20
	[0248.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.tl30z", dwFileAttributes=0x21) returned 1
	[0248.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 0x20
	[0248.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", dwFileAttributes=0x20) returned 1
	[0248.850] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.tl30z"), dwFlags=0x1) returned 1
	[0249.205] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0249.211] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0249.211] ReadFile (in: hFile=0x1d4, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x8875, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11287e18*=0x8875, lpOverlapped=0x0) returned 1
	[0249.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e8a0 | out: pbBuffer=0x1142e8a0) returned 1
	[0249.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e898 | out: pbBuffer=0x1142e898) returned 1
	[0249.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d7c02 | out: pbBuffer=0x110d7c02) returned 1
	[0249.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e8d0 | out: pbBuffer=0x1142e8d0) returned 1
	[0249.227] GetFileType (hFile=0x1d4) returned 0x1
	[0249.227] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0249.227] WriteFile (in: hFile=0x1d4, lpBuffer=0x1125c000*, nNumberOfBytesToWrite=0x8875, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1125c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x8875, lpOverlapped=0x1102be08) returned 1
	[0249.228] GetFileType (hFile=0x1d4) returned 0x1
	[0249.228] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8875, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0249.228] GetFileType (hFile=0x1d4) returned 0x1
	[0249.228] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0249.229] WriteFile (in: hFile=0x1d4, lpBuffer=0x113c2380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113c2380*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0249.229] GetFileType (hFile=0x1d4) returned 0x1
	[0249.229] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8875, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0249.229] CloseHandle (hObject=0x1d4) returned 1
	[0249.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.tl30z")) returned 0x20
	[0249.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0249.238] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0249.337] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0249.369] SetEvent (hEvent=0x210) returned 1
	[0249.369] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0249.371] SetEvent (hEvent=0x210) returned 1
	[0249.371] SetEvent (hEvent=0x234) returned 1
	[0249.371] SwitchToThread () returned 1
	[0249.374] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0249.610] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0249.635] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0249.693] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0249.705] SetEvent (hEvent=0x234) returned 1
	[0249.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0x20
	[0249.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", dwFileAttributes=0x20) returned 1
	[0249.706] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.tl30z"), dwFlags=0x1) returned 1
	[0250.087] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0250.117] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0250.117] ReadFile (in: hFile=0x1d4, lpBuffer=0x11430000, nNumberOfBytesToRead=0xe459, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11287e18*=0xe459, lpOverlapped=0x0) returned 1
	[0250.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e6a0 | out: pbBuffer=0x1104e6a0) returned 1
	[0250.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e698 | out: pbBuffer=0x1104e698) returned 1
	[0250.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137fe02 | out: pbBuffer=0x1137fe02) returned 1
	[0250.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e6d0 | out: pbBuffer=0x1104e6d0) returned 1
	[0250.140] GetFileType (hFile=0x1d4) returned 0x1
	[0250.140] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.141] WriteFile (in: hFile=0x1d4, lpBuffer=0x111dc000*, nNumberOfBytesToWrite=0xe459, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x111dc000*, lpNumberOfBytesWritten=0x112f5dfc*=0xe459, lpOverlapped=0x112f5e08) returned 1
	[0250.142] GetFileType (hFile=0x1d4) returned 0x1
	[0250.142] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xe459, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.142] GetFileType (hFile=0x1d4) returned 0x1
	[0250.142] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.142] WriteFile (in: hFile=0x1d4, lpBuffer=0x110c8700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x110c8700*, lpNumberOfBytesWritten=0x112f5dfc*=0x233, lpOverlapped=0x112f5e08) returned 1
	[0250.154] GetFileType (hFile=0x1d4) returned 0x1
	[0250.154] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xe459, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0250.154] CloseHandle (hObject=0x1d4) returned 1
	[0250.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.tl30z")) returned 0x20
	[0250.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0250.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 0x20
	[0250.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template", dwFileAttributes=0x20) returned 1
	[0250.322] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.tl30z"), dwFlags=0x1) returned 1
	[0250.609] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0250.614] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x110fde08 | out: lpMode=0x110fde08) returned 0
	[0250.615] ReadFile (in: hFile=0x1d4, lpBuffer=0x11108000, nNumberOfBytesToRead=0xb28, lpNumberOfBytesRead=0x110fde18, lpOverlapped=0x0 | out: lpBuffer=0x11108000*, lpNumberOfBytesRead=0x110fde18*=0xb28, lpOverlapped=0x0) returned 1
	[0250.621] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0250.621] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1111c802 | out: pbBuffer=0x1111c802) returned 1
	[0250.621] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1111c82a | out: pbBuffer=0x1111c82a) returned 1
	[0250.621] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1111c8cc | out: pbBuffer=0x1111c8cc) returned 1
	[0250.621] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0250.622] GetFileType (hFile=0x1d4) returned 0x1
	[0250.622] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.622] WriteFile (in: hFile=0x1d4, lpBuffer=0x11144000*, nNumberOfBytesToWrite=0xb28, lpNumberOfBytesWritten=0x110fddfc, lpOverlapped=0x110fde08 | out: lpBuffer=0x11144000*, lpNumberOfBytesWritten=0x110fddfc*=0xb28, lpOverlapped=0x110fde08) returned 1
	[0250.622] GetFileType (hFile=0x1d4) returned 0x1
	[0250.623] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xb28, lpNewFilePointer=0x0, dwMoveMethod=0x110fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.623] GetFileType (hFile=0x1d4) returned 0x1
	[0250.623] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.623] WriteFile (in: hFile=0x1d4, lpBuffer=0x1112ea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x110fddfc, lpOverlapped=0x110fde08 | out: lpBuffer=0x1112ea80*, lpNumberOfBytesWritten=0x110fddfc*=0x227, lpOverlapped=0x110fde08) returned 1
	[0250.623] GetFileType (hFile=0x1d4) returned 0x1
	[0250.623] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xb28, lpNewFilePointer=0x0, dwMoveMethod=0x110fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.623] CloseHandle (hObject=0x1d4) returned 1
	[0250.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.tl30z")) returned 0x20
	[0250.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.tl30z", dwFileAttributes=0x21) returned 1
	[0250.729] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0250.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar")) returned 0x20
	[0250.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", dwFileAttributes=0x20) returned 1
	[0250.803] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.tl30z"), dwFlags=0x1) returned 1
	[0251.420] SetEvent (hEvent=0x150) returned 1
	[0251.420] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0251.445] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0251.446] ReadFile (in: hFile=0x1fc, lpBuffer=0x11262000, nNumberOfBytesToRead=0x20de0, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11262000*, lpNumberOfBytesRead=0x11288e18*=0x20de0, lpOverlapped=0x0) returned 1
	[0251.504] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332400 | out: pbBuffer=0x11332400) returned 1
	[0251.505] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113323f8 | out: pbBuffer=0x113323f8) returned 1
	[0251.505] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11479302 | out: pbBuffer=0x11479302) returned 1
	[0251.506] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11479366 | out: pbBuffer=0x11479366) returned 1
	[0251.506] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332430 | out: pbBuffer=0x11332430) returned 1
	[0251.512] GetFileType (hFile=0x1fc) returned 0x1
	[0251.513] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0251.513] WriteFile (in: hFile=0x1fc, lpBuffer=0x11c28000*, nNumberOfBytesToWrite=0x20de0, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11c28000*, lpNumberOfBytesWritten=0x112f5dfc*=0x20de0, lpOverlapped=0x112f5e08) returned 1
	[0251.514] GetFileType (hFile=0x1fc) returned 0x1
	[0251.515] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x20de0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0251.515] GetFileType (hFile=0x1fc) returned 0x1
	[0251.515] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0251.515] WriteFile (in: hFile=0x1fc, lpBuffer=0x112d7880*, nNumberOfBytesToWrite=0x242, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x112d7880*, lpNumberOfBytesWritten=0x112f5dfc*=0x242, lpOverlapped=0x112f5e08) returned 1
	[0251.519] GetFileType (hFile=0x1fc) returned 0x1
	[0251.519] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x20de0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0251.519] CloseHandle (hObject=0x1fc) returned 1
	[0251.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.tl30z")) returned 0x20
	[0251.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0251.621] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0251.636] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0251.661] SetEvent (hEvent=0x1f0) returned 1
	[0251.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 0x20
	[0251.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist", dwFileAttributes=0x20) returned 1
	[0251.662] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.tl30z"), dwFlags=0x1) returned 1
	[0251.994] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0252.022] SetEvent (hEvent=0x24c) returned 1
	[0252.022] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0252.145] SwitchToThread () returned 1
	[0252.330] SwitchToThread () returned 1
	[0252.372] SetEvent (hEvent=0x118) returned 1
	[0252.372] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0252.378] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0252.378] SetEvent (hEvent=0x118) returned 1
	[0252.378] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0252.392] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0252.392] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0252.399] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x112f1e08 | out: lpMode=0x112f1e08) returned 0
	[0252.399] ReadFile (in: hFile=0x1fc, lpBuffer=0x1105e000, nNumberOfBytesToRead=0xfd6, lpNumberOfBytesRead=0x112f1e18, lpOverlapped=0x0 | out: lpBuffer=0x1105e000*, lpNumberOfBytesRead=0x112f1e18*=0xfd6, lpOverlapped=0x0) returned 1
	[0252.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0252.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e3b8 | out: pbBuffer=0x1104e3b8) returned 1
	[0252.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136e902 | out: pbBuffer=0x1136e902) returned 1
	[0252.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136e9a0 | out: pbBuffer=0x1136e9a0) returned 1
	[0252.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0252.412] GetFileType (hFile=0x1fc) returned 0x1
	[0252.412] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0252.412] WriteFile (in: hFile=0x1fc, lpBuffer=0x112e4000*, nNumberOfBytesToWrite=0xfd6, lpNumberOfBytesWritten=0x112f1dfc, lpOverlapped=0x112f1e08 | out: lpBuffer=0x112e4000*, lpNumberOfBytesWritten=0x112f1dfc*=0xfd6, lpOverlapped=0x112f1e08) returned 1
	[0252.412] GetFileType (hFile=0x1fc) returned 0x1
	[0252.412] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xfd6, lpNewFilePointer=0x0, dwMoveMethod=0x112f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0252.412] GetFileType (hFile=0x1fc) returned 0x1
	[0252.413] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0252.413] WriteFile (in: hFile=0x1fc, lpBuffer=0x112d4a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112f1dfc, lpOverlapped=0x112f1e08 | out: lpBuffer=0x112d4a80*, lpNumberOfBytesWritten=0x112f1dfc*=0x233, lpOverlapped=0x112f1e08) returned 1
	[0252.413] GetFileType (hFile=0x1fc) returned 0x1
	[0252.413] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xfd6, lpNewFilePointer=0x0, dwMoveMethod=0x112f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0252.413] CloseHandle (hObject=0x1fc) returned 1
	[0252.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.tl30z")) returned 0x20
	[0252.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.tl30z", dwFileAttributes=0x21) returned 1
	[0252.472] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0252.487] SetEvent (hEvent=0x134) returned 1
	[0252.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 0x20
	[0252.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security", dwFileAttributes=0x20) returned 1
	[0252.488] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.tl30z"), dwFlags=0x1) returned 1
	[0252.824] SetEvent (hEvent=0x150) returned 1
	[0252.824] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0252.827] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0252.827] ReadFile (in: hFile=0x1d8, lpBuffer=0x1136e000, nNumberOfBytesToRead=0x8eac, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x1128ae18*=0x8eac, lpOverlapped=0x0) returned 1
	[0252.834] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0252.834] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138b302 | out: pbBuffer=0x1138b302) returned 1
	[0252.834] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138b34a | out: pbBuffer=0x1138b34a) returned 1
	[0252.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332550 | out: pbBuffer=0x11332550) returned 1
	[0252.836] GetFileType (hFile=0x1d8) returned 0x1
	[0252.836] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.836] WriteFile (in: hFile=0x1d8, lpBuffer=0x1120a000*, nNumberOfBytesToWrite=0x8eac, lpNumberOfBytesWritten=0x113ebdfc, lpOverlapped=0x113ebe08 | out: lpBuffer=0x1120a000*, lpNumberOfBytesWritten=0x113ebdfc*=0x8eac, lpOverlapped=0x113ebe08) returned 1
	[0252.836] GetFileType (hFile=0x1d8) returned 0x1
	[0252.837] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8eac, lpNewFilePointer=0x0, dwMoveMethod=0x113ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.837] GetFileType (hFile=0x1d8) returned 0x1
	[0252.837] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.837] WriteFile (in: hFile=0x1d8, lpBuffer=0x1137f880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x113ebdfc, lpOverlapped=0x113ebe08 | out: lpBuffer=0x1137f880*, lpNumberOfBytesWritten=0x113ebdfc*=0x233, lpOverlapped=0x113ebe08) returned 1
	[0252.837] GetFileType (hFile=0x1d8) returned 0x1
	[0252.837] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8eac, lpNewFilePointer=0x0, dwMoveMethod=0x113ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.838] CloseHandle (hObject=0x1d8) returned 1
	[0252.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.tl30z")) returned 0x20
	[0252.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.tl30z", dwFileAttributes=0x21) returned 1
	[0252.848] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0252.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 0x20
	[0252.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", dwFileAttributes=0x20) returned 1
	[0252.987] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.tl30z"), dwFlags=0x1) returned 1
	[0253.263] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0253.318] SetEvent (hEvent=0x118) returned 1
	[0253.318] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0253.860] SwitchToThread () returned 1
	[0253.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0253.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0253.876] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0254.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0254.653] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x110a9e08 | out: lpMode=0x110a9e08) returned 0
	[0254.653] ReadFile (in: hFile=0x1f4, lpBuffer=0x1127e000, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x110a9e18, lpOverlapped=0x0 | out: lpBuffer=0x1127e000*, lpNumberOfBytesRead=0x110a9e18*=0x4ed, lpOverlapped=0x0) returned 1
	[0254.665] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0254.665] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0254.665] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11362802 | out: pbBuffer=0x11362802) returned 1
	[0254.665] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11362822 | out: pbBuffer=0x11362822) returned 1
	[0254.666] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11362872 | out: pbBuffer=0x11362872) returned 1
	[0254.666] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0254.666] GetFileType (hFile=0x1f4) returned 0x1
	[0254.666] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0254.666] WriteFile (in: hFile=0x1f4, lpBuffer=0x11374000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x110a9dfc, lpOverlapped=0x110a9e08 | out: lpBuffer=0x11374000*, lpNumberOfBytesWritten=0x110a9dfc*=0x4ed, lpOverlapped=0x110a9e08) returned 1
	[0254.667] GetFileType (hFile=0x1f4) returned 0x1
	[0254.667] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0254.667] GetFileType (hFile=0x1f4) returned 0x1
	[0254.667] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0254.667] WriteFile (in: hFile=0x1f4, lpBuffer=0x11338a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x110a9dfc, lpOverlapped=0x110a9e08 | out: lpBuffer=0x11338a80*, lpNumberOfBytesWritten=0x110a9dfc*=0x22d, lpOverlapped=0x110a9e08) returned 1
	[0254.667] GetFileType (hFile=0x1f4) returned 0x1
	[0254.668] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0254.668] CloseHandle (hObject=0x1f4) returned 1
	[0254.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0254.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0254.789] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0261.027] SetEvent (hEvent=0x118) returned 1
	[0261.027] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0261.045] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0261.138] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0261.176] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0261.310] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0261.344] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0261.374] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0261.495] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0261.626] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0261.666] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0261.911] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0261.952] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0262.277] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0262.283] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0262.313] SetEvent (hEvent=0x1b0) returned 1
	[0262.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 0x220
	[0262.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", dwFileAttributes=0x220) returned 1
	[0262.314] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0262.668] SetEvent (hEvent=0x150) returned 1
	[0262.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0262.673] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0262.673] ReadFile (in: hFile=0x224, lpBuffer=0x11136000, nNumberOfBytesToRead=0x1634, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11136000*, lpNumberOfBytesRead=0x1131ae18*=0x1634, lpOverlapped=0x0) returned 1
	[0262.683] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332980 | out: pbBuffer=0x11332980) returned 1
	[0262.683] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332978 | out: pbBuffer=0x11332978) returned 1
	[0262.683] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130fe02 | out: pbBuffer=0x1130fe02) returned 1
	[0262.683] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113329b0 | out: pbBuffer=0x113329b0) returned 1
	[0262.684] GetFileType (hFile=0x224) returned 0x1
	[0262.684] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11225de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.684] WriteFile (in: hFile=0x224, lpBuffer=0x11160000*, nNumberOfBytesToWrite=0x1634, lpNumberOfBytesWritten=0x11225dfc, lpOverlapped=0x11225e08 | out: lpBuffer=0x11160000*, lpNumberOfBytesWritten=0x11225dfc*=0x1634, lpOverlapped=0x11225e08) returned 1
	[0262.684] GetFileType (hFile=0x224) returned 0x1
	[0262.684] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1634, lpNewFilePointer=0x0, dwMoveMethod=0x11225de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.696] GetFileType (hFile=0x224) returned 0x1
	[0262.696] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11225de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.696] WriteFile (in: hFile=0x224, lpBuffer=0x1145f180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11225dfc, lpOverlapped=0x11225e08 | out: lpBuffer=0x1145f180*, lpNumberOfBytesWritten=0x11225dfc*=0x22a, lpOverlapped=0x11225e08) returned 1
	[0262.697] GetFileType (hFile=0x224) returned 0x1
	[0262.697] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1634, lpNewFilePointer=0x0, dwMoveMethod=0x11225de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.697] CloseHandle (hObject=0x224) returned 1
	[0262.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.tl30z")) returned 0x220
	[0262.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0262.706] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0262.712] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0262.734] SetEvent (hEvent=0x210) returned 1
	[0262.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 0x220
	[0262.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", dwFileAttributes=0x220) returned 1
	[0262.735] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0263.367] SetEvent (hEvent=0x150) returned 1
	[0263.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0263.371] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0263.371] ReadFile (in: hFile=0x1d4, lpBuffer=0x112c0000, nNumberOfBytesToRead=0xd10, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x112c0000*, lpNumberOfBytesRead=0x11319e18*=0xd10, lpOverlapped=0x0) returned 1
	[0263.389] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0263.389] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122d302 | out: pbBuffer=0x1122d302) returned 1
	[0263.389] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0263.390] GetFileType (hFile=0x1d4) returned 0x1
	[0263.390] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.390] WriteFile (in: hFile=0x1d4, lpBuffer=0x11392000*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11392000*, lpNumberOfBytesWritten=0x112bddfc*=0xd10, lpOverlapped=0x112bde08) returned 1
	[0263.390] GetFileType (hFile=0x1d4) returned 0x1
	[0263.391] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xd10, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.391] GetFileType (hFile=0x1d4) returned 0x1
	[0263.391] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.391] WriteFile (in: hFile=0x1d4, lpBuffer=0x1133d880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x1133d880*, lpNumberOfBytesWritten=0x112bddfc*=0x224, lpOverlapped=0x112bde08) returned 1
	[0263.391] GetFileType (hFile=0x1d4) returned 0x1
	[0263.391] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xd10, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.392] CloseHandle (hObject=0x1d4) returned 1
	[0263.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.tl30z")) returned 0x220
	[0263.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0263.474] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0263.493] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0263.517] SetEvent (hEvent=0x218) returned 1
	[0263.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 0x220
	[0263.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", dwFileAttributes=0x220) returned 1
	[0263.519] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0263.861] SetEvent (hEvent=0x150) returned 1
	[0263.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0263.926] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0263.926] ReadFile (in: hFile=0x1d4, lpBuffer=0x11298000, nNumberOfBytesToRead=0x6cd2, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11298000*, lpNumberOfBytesRead=0x11287e18*=0x6cd2, lpOverlapped=0x0) returned 1
	[0263.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6540 | out: pbBuffer=0x113e6540) returned 1
	[0263.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6538 | out: pbBuffer=0x113e6538) returned 1
	[0263.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11326902 | out: pbBuffer=0x11326902) returned 1
	[0263.932] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0263.933] GetFileType (hFile=0x1d4) returned 0x1
	[0263.933] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.933] WriteFile (in: hFile=0x1d4, lpBuffer=0x111e0000*, nNumberOfBytesToWrite=0x6cd2, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x111e0000*, lpNumberOfBytesWritten=0x112bddfc*=0x6cd2, lpOverlapped=0x112bde08) returned 1
	[0263.934] GetFileType (hFile=0x1d4) returned 0x1
	[0263.934] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6cd2, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.934] GetFileType (hFile=0x1d4) returned 0x1
	[0263.934] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.934] WriteFile (in: hFile=0x1d4, lpBuffer=0x11323500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11323500*, lpNumberOfBytesWritten=0x112bddfc*=0x230, lpOverlapped=0x112bde08) returned 1
	[0263.934] GetFileType (hFile=0x1d4) returned 0x1
	[0263.934] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6cd2, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.935] CloseHandle (hObject=0x1d4) returned 1
	[0263.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.tl30z")) returned 0x220
	[0263.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0263.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 0x220
	[0263.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", dwFileAttributes=0x220) returned 1
	[0263.958] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0264.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0264.285] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0264.285] ReadFile (in: hFile=0x288, lpBuffer=0x111b2000, nNumberOfBytesToRead=0xac4, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x111b2000*, lpNumberOfBytesRead=0x1131ce18*=0xac4, lpOverlapped=0x0) returned 1
	[0264.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f880 | out: pbBuffer=0x1140f880) returned 1
	[0264.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f878 | out: pbBuffer=0x1140f878) returned 1
	[0264.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b5002 | out: pbBuffer=0x113b5002) returned 1
	[0264.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b5018 | out: pbBuffer=0x113b5018) returned 1
	[0264.328] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f8b0 | out: pbBuffer=0x1140f8b0) returned 1
	[0264.328] GetFileType (hFile=0x288) returned 0x1
	[0264.328] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.328] WriteFile (in: hFile=0x288, lpBuffer=0x111f6000*, nNumberOfBytesToWrite=0xac4, lpNumberOfBytesWritten=0x1110bdfc, lpOverlapped=0x1110be08 | out: lpBuffer=0x111f6000*, lpNumberOfBytesWritten=0x1110bdfc*=0xac4, lpOverlapped=0x1110be08) returned 1
	[0264.328] GetFileType (hFile=0x288) returned 0x1
	[0264.328] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xac4, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.329] GetFileType (hFile=0x288) returned 0x1
	[0264.329] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.329] WriteFile (in: hFile=0x288, lpBuffer=0x111eca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1110bdfc, lpOverlapped=0x1110be08 | out: lpBuffer=0x111eca80*, lpNumberOfBytesWritten=0x1110bdfc*=0x227, lpOverlapped=0x1110be08) returned 1
	[0264.329] GetFileType (hFile=0x288) returned 0x1
	[0264.329] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xac4, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.329] CloseHandle (hObject=0x288) returned 1
	[0264.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.tl30z")) returned 0x220
	[0264.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0264.358] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0264.397] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0264.581] SetEvent (hEvent=0x210) returned 1
	[0264.581] SetEvent (hEvent=0x1f0) returned 1
	[0264.581] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0264.588] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0264.588] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0264.598] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0264.598] SetEvent (hEvent=0x210) returned 1
	[0264.599] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0264.608] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0264.608] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0264.641] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0264.778] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0264.809] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0264.907] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0264.924] SetEvent (hEvent=0x1b0) returned 1
	[0264.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 0x220
	[0264.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", dwFileAttributes=0x220) returned 1
	[0264.925] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0265.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0265.821] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0265.821] ReadFile (in: hFile=0x1d8, lpBuffer=0x113c2000, nNumberOfBytesToRead=0x19ec, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113c2000*, lpNumberOfBytesRead=0x11423e18*=0x19ec, lpOverlapped=0x0) returned 1
	[0265.828] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296280 | out: pbBuffer=0x11296280) returned 1
	[0265.829] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a3202 | out: pbBuffer=0x112a3202) returned 1
	[0265.829] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a324a | out: pbBuffer=0x112a324a) returned 1
	[0265.829] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a3297 | out: pbBuffer=0x112a3297) returned 1
	[0265.829] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112962b0 | out: pbBuffer=0x112962b0) returned 1
	[0265.829] GetFileType (hFile=0x1d8) returned 0x1
	[0265.830] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.830] WriteFile (in: hFile=0x1d8, lpBuffer=0x1130a000*, nNumberOfBytesToWrite=0x19ec, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x1130a000*, lpNumberOfBytesWritten=0x112b9dfc*=0x19ec, lpOverlapped=0x112b9e08) returned 1
	[0265.830] GetFileType (hFile=0x1d8) returned 0x1
	[0265.830] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x19ec, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.830] GetFileType (hFile=0x1d8) returned 0x1
	[0265.831] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.831] WriteFile (in: hFile=0x1d8, lpBuffer=0x112b5880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x112b5880*, lpNumberOfBytesWritten=0x112b9dfc*=0x230, lpOverlapped=0x112b9e08) returned 1
	[0265.831] GetFileType (hFile=0x1d8) returned 0x1
	[0265.831] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x19ec, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.831] CloseHandle (hObject=0x1d8) returned 1
	[0265.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.tl30z")) returned 0x220
	[0265.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0265.848] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0265.856] SetEvent (hEvent=0x1b0) returned 1
	[0265.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 0x220
	[0265.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", dwFileAttributes=0x220) returned 1
	[0265.857] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0266.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.172] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0266.172] ReadFile (in: hFile=0x1d8, lpBuffer=0x1110e000, nNumberOfBytesToRead=0x1e7c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1110e000*, lpNumberOfBytesRead=0x11423e18*=0x1e7c, lpOverlapped=0x0) returned 1
	[0266.178] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296820 | out: pbBuffer=0x11296820) returned 1
	[0266.178] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bfc02 | out: pbBuffer=0x110bfc02) returned 1
	[0266.178] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296850 | out: pbBuffer=0x11296850) returned 1
	[0266.179] GetFileType (hFile=0x1d8) returned 0x1
	[0266.179] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.179] WriteFile (in: hFile=0x1d8, lpBuffer=0x11128000*, nNumberOfBytesToWrite=0x1e7c, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11128000*, lpNumberOfBytesWritten=0x112b9dfc*=0x1e7c, lpOverlapped=0x112b9e08) returned 1
	[0266.179] GetFileType (hFile=0x1d8) returned 0x1
	[0266.180] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1e7c, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.180] GetFileType (hFile=0x1d8) returned 0x1
	[0266.180] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.180] WriteFile (in: hFile=0x1d8, lpBuffer=0x11103180*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11103180*, lpNumberOfBytesWritten=0x112b9dfc*=0x233, lpOverlapped=0x112b9e08) returned 1
	[0266.180] GetFileType (hFile=0x1d8) returned 0x1
	[0266.180] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1e7c, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.180] CloseHandle (hObject=0x1d8) returned 1
	[0266.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.tl30z")) returned 0x220
	[0266.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0266.193] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0266.199] SetEvent (hEvent=0x1b0) returned 1
	[0266.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 0x220
	[0266.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", dwFileAttributes=0x220) returned 1
	[0266.200] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0266.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.400] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0266.400] ReadFile (in: hFile=0x1d8, lpBuffer=0x11143300, nNumberOfBytesToRead=0x10c8, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11143300*, lpNumberOfBytesRead=0x11423e18*=0x10c8, lpOverlapped=0x0) returned 1
	[0266.406] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6850 | out: pbBuffer=0x113e6850) returned 1
	[0266.406] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6848 | out: pbBuffer=0x113e6848) returned 1
	[0266.406] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11159d02 | out: pbBuffer=0x11159d02) returned 1
	[0266.407] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6880 | out: pbBuffer=0x113e6880) returned 1
	[0266.407] GetFileType (hFile=0x1d8) returned 0x1
	[0266.408] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.408] WriteFile (in: hFile=0x1d8, lpBuffer=0x11202000*, nNumberOfBytesToWrite=0x10c8, lpNumberOfBytesWritten=0x11193dfc, lpOverlapped=0x11193e08 | out: lpBuffer=0x11202000*, lpNumberOfBytesWritten=0x11193dfc*=0x10c8, lpOverlapped=0x11193e08) returned 1
	[0266.408] GetFileType (hFile=0x1d8) returned 0x1
	[0266.408] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x10c8, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.408] GetFileType (hFile=0x1d8) returned 0x1
	[0266.408] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.409] WriteFile (in: hFile=0x1d8, lpBuffer=0x111c7180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11193dfc, lpOverlapped=0x11193e08 | out: lpBuffer=0x111c7180*, lpNumberOfBytesWritten=0x11193dfc*=0x224, lpOverlapped=0x11193e08) returned 1
	[0266.409] GetFileType (hFile=0x1d8) returned 0x1
	[0266.409] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x10c8, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.409] CloseHandle (hObject=0x1d8) returned 1
	[0266.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.tl30z")) returned 0x220
	[0266.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0266.552] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0266.581] SetEvent (hEvent=0x1b0) returned 1
	[0266.581] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 0x220
	[0266.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", dwFileAttributes=0x220) returned 1
	[0266.582] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0266.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.983] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0266.984] ReadFile (in: hFile=0x1d8, lpBuffer=0x1137c000, nNumberOfBytesToRead=0x1cd8, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1137c000*, lpNumberOfBytesRead=0x11423e18*=0x1cd8, lpOverlapped=0x0) returned 1
	[0266.997] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0266.997] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134c802 | out: pbBuffer=0x1134c802) returned 1
	[0266.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0266.998] GetFileType (hFile=0x1d8) returned 0x1
	[0266.998] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.998] WriteFile (in: hFile=0x1d8, lpBuffer=0x111ac000*, nNumberOfBytesToWrite=0x1cd8, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x111ac000*, lpNumberOfBytesWritten=0x11373dfc*=0x1cd8, lpOverlapped=0x11373e08) returned 1
	[0266.999] GetFileType (hFile=0x1d8) returned 0x1
	[0266.999] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1cd8, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.999] GetFileType (hFile=0x1d8) returned 0x1
	[0266.999] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.000] WriteFile (in: hFile=0x1d8, lpBuffer=0x11246a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x11246a80*, lpNumberOfBytesWritten=0x11373dfc*=0x22d, lpOverlapped=0x11373e08) returned 1
	[0267.000] GetFileType (hFile=0x1d8) returned 0x1
	[0267.000] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1cd8, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.000] CloseHandle (hObject=0x1d8) returned 1
	[0267.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.tl30z")) returned 0x220
	[0267.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0267.022] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0267.135] SetEvent (hEvent=0x118) returned 1
	[0267.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x220
	[0267.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", dwFileAttributes=0x220) returned 1
	[0267.137] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.501] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0267.501] ReadFile (in: hFile=0x1d8, lpBuffer=0x11308000, nNumberOfBytesToRead=0x57f4, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11308000*, lpNumberOfBytesRead=0x11023e18*=0x57f4, lpOverlapped=0x0) returned 1
	[0267.507] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0267.507] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0267.507] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134d202 | out: pbBuffer=0x1134d202) returned 1
	[0267.507] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134d298 | out: pbBuffer=0x1134d298) returned 1
	[0267.508] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0267.508] GetFileType (hFile=0x1d8) returned 0x1
	[0267.509] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.509] WriteFile (in: hFile=0x1d8, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x57f4, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x11373dfc*=0x57f4, lpOverlapped=0x11373e08) returned 1
	[0267.509] GetFileType (hFile=0x1d8) returned 0x1
	[0267.509] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x57f4, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.509] GetFileType (hFile=0x1d8) returned 0x1
	[0267.510] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.510] WriteFile (in: hFile=0x1d8, lpBuffer=0x11247880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x11247880*, lpNumberOfBytesWritten=0x11373dfc*=0x236, lpOverlapped=0x11373e08) returned 1
	[0267.510] GetFileType (hFile=0x1d8) returned 0x1
	[0267.510] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x57f4, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.510] CloseHandle (hObject=0x1d8) returned 1
	[0267.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.tl30z")) returned 0x220
	[0267.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.527] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0267.539] SetEvent (hEvent=0x26c) returned 1
	[0267.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x220
	[0267.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", dwFileAttributes=0x220) returned 1
	[0267.540] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.779] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0267.779] ReadFile (in: hFile=0x1d8, lpBuffer=0x1111e000, nNumberOfBytesToRead=0x687c, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1111e000*, lpNumberOfBytesRead=0x11023e18*=0x687c, lpOverlapped=0x0) returned 1
	[0267.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66f0 | out: pbBuffer=0x113e66f0) returned 1
	[0267.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66e8 | out: pbBuffer=0x113e66e8) returned 1
	[0267.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a5302 | out: pbBuffer=0x110a5302) returned 1
	[0267.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110a5344 | out: pbBuffer=0x110a5344) returned 1
	[0267.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6720 | out: pbBuffer=0x113e6720) returned 1
	[0267.788] GetFileType (hFile=0x1d8) returned 0x1
	[0267.788] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.788] WriteFile (in: hFile=0x1d8, lpBuffer=0x1116c000*, nNumberOfBytesToWrite=0x687c, lpNumberOfBytesWritten=0x11375dfc, lpOverlapped=0x11375e08 | out: lpBuffer=0x1116c000*, lpNumberOfBytesWritten=0x11375dfc*=0x687c, lpOverlapped=0x11375e08) returned 1
	[0267.789] GetFileType (hFile=0x1d8) returned 0x1
	[0267.789] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x687c, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.789] GetFileType (hFile=0x1d8) returned 0x1
	[0267.789] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.790] WriteFile (in: hFile=0x1d8, lpBuffer=0x11140380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11375dfc, lpOverlapped=0x11375e08 | out: lpBuffer=0x11140380*, lpNumberOfBytesWritten=0x11375dfc*=0x230, lpOverlapped=0x11375e08) returned 1
	[0267.790] GetFileType (hFile=0x1d8) returned 0x1
	[0267.790] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x687c, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.790] CloseHandle (hObject=0x1d8) returned 1
	[0267.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.tl30z")) returned 0x220
	[0267.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.799] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0267.805] SetEvent (hEvent=0x26c) returned 1
	[0267.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x220
	[0267.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", dwFileAttributes=0x220) returned 1
	[0267.806] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0268.008] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0268.008] ReadFile (in: hFile=0x1d8, lpBuffer=0x11398000, nNumberOfBytesToRead=0xbb7c, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11398000*, lpNumberOfBytesRead=0x11023e18*=0xbb7c, lpOverlapped=0x0) returned 1
	[0268.016] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0268.016] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137d202 | out: pbBuffer=0x1137d202) returned 1
	[0268.017] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0268.018] GetFileType (hFile=0x1d8) returned 0x1
	[0268.018] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.018] WriteFile (in: hFile=0x1d8, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0xbb7c, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1138ddfc*=0xbb7c, lpOverlapped=0x1138de08) returned 1
	[0268.019] GetFileType (hFile=0x1d8) returned 0x1
	[0268.019] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xbb7c, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.019] GetFileType (hFile=0x1d8) returned 0x1
	[0268.019] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.020] WriteFile (in: hFile=0x1d8, lpBuffer=0x11373880*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x11373880*, lpNumberOfBytesWritten=0x1138ddfc*=0x23c, lpOverlapped=0x1138de08) returned 1
	[0268.020] GetFileType (hFile=0x1d8) returned 0x1
	[0268.020] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xbb7c, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.020] CloseHandle (hObject=0x1d8) returned 1
	[0268.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.tl30z")) returned 0x220
	[0268.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.033] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0268.039] SetEvent (hEvent=0x210) returned 1
	[0268.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x220
	[0268.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", dwFileAttributes=0x220) returned 1
	[0268.040] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.212] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0268.212] ReadFile (in: hFile=0x1d4, lpBuffer=0x1124c000, nNumberOfBytesToRead=0x1f1e, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1124c000*, lpNumberOfBytesRead=0x11023e18*=0x1f1e, lpOverlapped=0x0) returned 1
	[0268.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0268.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f568 | out: pbBuffer=0x1140f568) returned 1
	[0268.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1145a902 | out: pbBuffer=0x1145a902) returned 1
	[0268.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1145a952 | out: pbBuffer=0x1145a952) returned 1
	[0268.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1145a983 | out: pbBuffer=0x1145a983) returned 1
	[0268.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0268.223] GetFileType (hFile=0x1d4) returned 0x1
	[0268.223] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.223] WriteFile (in: hFile=0x1d4, lpBuffer=0x111ce000*, nNumberOfBytesToWrite=0x1f1e, lpNumberOfBytesWritten=0x11391dfc, lpOverlapped=0x11391e08 | out: lpBuffer=0x111ce000*, lpNumberOfBytesWritten=0x11391dfc*=0x1f1e, lpOverlapped=0x11391e08) returned 1
	[0268.223] GetFileType (hFile=0x1d4) returned 0x1
	[0268.223] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1f1e, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.224] GetFileType (hFile=0x1d4) returned 0x1
	[0268.224] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.224] WriteFile (in: hFile=0x1d4, lpBuffer=0x1144d880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11391dfc, lpOverlapped=0x11391e08 | out: lpBuffer=0x1144d880*, lpNumberOfBytesWritten=0x11391dfc*=0x233, lpOverlapped=0x11391e08) returned 1
	[0268.224] GetFileType (hFile=0x1d4) returned 0x1
	[0268.224] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1f1e, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.224] CloseHandle (hObject=0x1d4) returned 1
	[0268.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.tl30z")) returned 0x220
	[0268.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.229] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0268.235] SetEvent (hEvent=0x210) returned 1
	[0268.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x220
	[0268.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", dwFileAttributes=0x220) returned 1
	[0268.236] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.421] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0268.421] ReadFile (in: hFile=0x1d4, lpBuffer=0x11220000, nNumberOfBytesToRead=0x32b6, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11220000*, lpNumberOfBytesRead=0x11023e18*=0x32b6, lpOverlapped=0x0) returned 1
	[0268.429] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0268.429] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0268.429] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11266802 | out: pbBuffer=0x11266802) returned 1
	[0268.429] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126682f | out: pbBuffer=0x1126682f) returned 1
	[0268.429] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11266850 | out: pbBuffer=0x11266850) returned 1
	[0268.430] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0268.430] GetFileType (hFile=0x1d4) returned 0x1
	[0268.430] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.431] WriteFile (in: hFile=0x1d4, lpBuffer=0x11368000*, nNumberOfBytesToWrite=0x32b6, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11368000*, lpNumberOfBytesWritten=0x11031dfc*=0x32b6, lpOverlapped=0x11031e08) returned 1
	[0268.431] GetFileType (hFile=0x1d4) returned 0x1
	[0268.431] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x32b6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.431] GetFileType (hFile=0x1d4) returned 0x1
	[0268.431] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.431] WriteFile (in: hFile=0x1d4, lpBuffer=0x1121ea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1121ea80*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0268.435] GetFileType (hFile=0x1d4) returned 0x1
	[0268.436] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x32b6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.436] CloseHandle (hObject=0x1d4) returned 1
	[0268.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.tl30z")) returned 0x220
	[0268.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.446] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0268.455] SetEvent (hEvent=0x234) returned 1
	[0268.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x220
	[0268.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", dwFileAttributes=0x220) returned 1
	[0268.456] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.597] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0268.597] ReadFile (in: hFile=0x1d4, lpBuffer=0x113c4000, nNumberOfBytesToRead=0x2b32, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x113c4000*, lpNumberOfBytesRead=0x11023e18*=0x2b32, lpOverlapped=0x0) returned 1
	[0268.602] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0268.602] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11351d02 | out: pbBuffer=0x11351d02) returned 1
	[0268.602] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e510 | out: pbBuffer=0x1104e510) returned 1
	[0268.602] GetFileType (hFile=0x1d4) returned 0x1
	[0268.602] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.603] WriteFile (in: hFile=0x1d4, lpBuffer=0x110ea000*, nNumberOfBytesToWrite=0x2b32, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x110ea000*, lpNumberOfBytesWritten=0x1138ddfc*=0x2b32, lpOverlapped=0x1138de08) returned 1
	[0268.603] GetFileType (hFile=0x1d4) returned 0x1
	[0268.603] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2b32, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.603] GetFileType (hFile=0x1d4) returned 0x1
	[0268.603] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.603] WriteFile (in: hFile=0x1d4, lpBuffer=0x110d6700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x110d6700*, lpNumberOfBytesWritten=0x1138ddfc*=0x22d, lpOverlapped=0x1138de08) returned 1
	[0268.604] GetFileType (hFile=0x1d4) returned 0x1
	[0268.604] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2b32, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.604] CloseHandle (hObject=0x1d4) returned 1
	[0268.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.tl30z")) returned 0x220
	[0268.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.627] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0268.632] SetEvent (hEvent=0x234) returned 1
	[0268.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x220
	[0268.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF", dwFileAttributes=0x220) returned 1
	[0268.633] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.925] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0268.925] ReadFile (in: hFile=0x1d4, lpBuffer=0x110d7880, nNumberOfBytesToRead=0x370, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x110d7880*, lpNumberOfBytesRead=0x11023e18*=0x370, lpOverlapped=0x0) returned 1
	[0268.930] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296070 | out: pbBuffer=0x11296070) returned 1
	[0268.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11233202 | out: pbBuffer=0x11233202) returned 1
	[0268.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1123324a | out: pbBuffer=0x1123324a) returned 1
	[0268.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112960a0 | out: pbBuffer=0x112960a0) returned 1
	[0268.931] GetFileType (hFile=0x1d4) returned 0x1
	[0268.931] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.931] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ae000*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x112ae000*, lpNumberOfBytesWritten=0x1138ddfc*=0x370, lpOverlapped=0x1138de08) returned 1
	[0268.932] GetFileType (hFile=0x1d4) returned 0x1
	[0268.932] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.932] GetFileType (hFile=0x1d4) returned 0x1
	[0268.932] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.933] WriteFile (in: hFile=0x1d4, lpBuffer=0x112a6700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x112a6700*, lpNumberOfBytesWritten=0x1138ddfc*=0x227, lpOverlapped=0x1138de08) returned 1
	[0268.933] GetFileType (hFile=0x1d4) returned 0x1
	[0268.933] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x370, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.933] CloseHandle (hObject=0x1d4) returned 1
	[0268.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.tl30z")) returned 0x220
	[0268.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.941] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0268.954] SetEvent (hEvent=0x234) returned 1
	[0268.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x220
	[0268.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF", dwFileAttributes=0x220) returned 1
	[0268.955] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0269.118] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0269.119] ReadFile (in: hFile=0x1d4, lpBuffer=0x1143c000, nNumberOfBytesToRead=0xf92, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1143c000*, lpNumberOfBytesRead=0x11023e18*=0xf92, lpOverlapped=0x0) returned 1
	[0269.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fc80 | out: pbBuffer=0x1140fc80) returned 1
	[0269.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bdb02 | out: pbBuffer=0x112bdb02) returned 1
	[0269.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112bdb2f | out: pbBuffer=0x112bdb2f) returned 1
	[0269.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fcb0 | out: pbBuffer=0x1140fcb0) returned 1
	[0269.126] GetFileType (hFile=0x1d4) returned 0x1
	[0269.126] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.126] WriteFile (in: hFile=0x1d4, lpBuffer=0x11462000*, nNumberOfBytesToWrite=0xf92, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11462000*, lpNumberOfBytesWritten=0x11031dfc*=0xf92, lpOverlapped=0x11031e08) returned 1
	[0269.126] GetFileType (hFile=0x1d4) returned 0x1
	[0269.126] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xf92, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.127] GetFileType (hFile=0x1d4) returned 0x1
	[0269.127] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.127] WriteFile (in: hFile=0x1d4, lpBuffer=0x11464000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11464000*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0269.127] GetFileType (hFile=0x1d4) returned 0x1
	[0269.127] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xf92, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.127] CloseHandle (hObject=0x1d4) returned 1
	[0269.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.tl30z")) returned 0x220
	[0269.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.140] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0269.144] SetEvent (hEvent=0x234) returned 1
	[0269.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x220
	[0269.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF", dwFileAttributes=0x220) returned 1
	[0269.145] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0269.306] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0269.307] ReadFile (in: hFile=0x1d4, lpBuffer=0x11116000, nNumberOfBytesToRead=0x600, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11116000*, lpNumberOfBytesRead=0x11023e18*=0x600, lpOverlapped=0x0) returned 1
	[0269.310] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112967d0 | out: pbBuffer=0x112967d0) returned 1
	[0269.310] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112967c8 | out: pbBuffer=0x112967c8) returned 1
	[0269.310] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1121a902 | out: pbBuffer=0x1121a902) returned 1
	[0269.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121a910 | out: pbBuffer=0x1121a910) returned 1
	[0269.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121a995 | out: pbBuffer=0x1121a995) returned 1
	[0269.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296800 | out: pbBuffer=0x11296800) returned 1
	[0269.311] GetFileType (hFile=0x1d4) returned 0x1
	[0269.311] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.312] WriteFile (in: hFile=0x1d4, lpBuffer=0x1112c000*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x1112c000*, lpNumberOfBytesWritten=0x1138fdfc*=0x600, lpOverlapped=0x1138fe08) returned 1
	[0269.312] GetFileType (hFile=0x1d4) returned 0x1
	[0269.312] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x600, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.312] GetFileType (hFile=0x1d4) returned 0x1
	[0269.312] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.313] WriteFile (in: hFile=0x1d4, lpBuffer=0x110f4e00*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x110f4e00*, lpNumberOfBytesWritten=0x1138fdfc*=0x21e, lpOverlapped=0x1138fe08) returned 1
	[0269.313] GetFileType (hFile=0x1d4) returned 0x1
	[0269.313] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x600, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.313] CloseHandle (hObject=0x1d4) returned 1
	[0269.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.tl30z")) returned 0x220
	[0269.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.350] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0269.376] SetEvent (hEvent=0x218) returned 1
	[0269.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x220
	[0269.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", dwFileAttributes=0x220) returned 1
	[0269.377] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.523] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0269.523] ReadFile (in: hFile=0x1d8, lpBuffer=0x1133a000, nNumberOfBytesToRead=0x1678, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1133a000*, lpNumberOfBytesRead=0x11023e18*=0x1678, lpOverlapped=0x0) returned 1
	[0269.526] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0269.526] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11345202 | out: pbBuffer=0x11345202) returned 1
	[0269.526] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113452cf | out: pbBuffer=0x113452cf) returned 1
	[0269.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0269.527] GetFileType (hFile=0x1d8) returned 0x1
	[0269.527] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.527] WriteFile (in: hFile=0x1d8, lpBuffer=0x11362000*, nNumberOfBytesToWrite=0x1678, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x11362000*, lpNumberOfBytesWritten=0x113afdfc*=0x1678, lpOverlapped=0x113afe08) returned 1
	[0269.527] GetFileType (hFile=0x1d8) returned 0x1
	[0269.528] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1678, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.528] GetFileType (hFile=0x1d8) returned 0x1
	[0269.528] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.528] WriteFile (in: hFile=0x1d8, lpBuffer=0x11419880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x11419880*, lpNumberOfBytesWritten=0x113afdfc*=0x22d, lpOverlapped=0x113afe08) returned 1
	[0269.528] GetFileType (hFile=0x1d8) returned 0x1
	[0269.528] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1678, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.529] CloseHandle (hObject=0x1d8) returned 1
	[0269.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.tl30z")) returned 0x220
	[0269.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.541] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0269.553] SetEvent (hEvent=0x210) returned 1
	[0269.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x220
	[0269.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", dwFileAttributes=0x220) returned 1
	[0269.554] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.690] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0269.691] ReadFile (in: hFile=0x1d8, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x1044, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x11023e18*=0x1044, lpOverlapped=0x0) returned 1
	[0269.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61a0 | out: pbBuffer=0x113e61a0) returned 1
	[0269.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6198 | out: pbBuffer=0x113e6198) returned 1
	[0269.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e3c02 | out: pbBuffer=0x113e3c02) returned 1
	[0269.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e3c0c | out: pbBuffer=0x113e3c0c) returned 1
	[0269.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e3cab | out: pbBuffer=0x113e3cab) returned 1
	[0269.695] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61d0 | out: pbBuffer=0x113e61d0) returned 1
	[0269.695] GetFileType (hFile=0x1d8) returned 0x1
	[0269.695] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.695] WriteFile (in: hFile=0x1d8, lpBuffer=0x1132c000*, nNumberOfBytesToWrite=0x1044, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1132c000*, lpNumberOfBytesWritten=0x11031dfc*=0x1044, lpOverlapped=0x11031e08) returned 1
	[0269.696] GetFileType (hFile=0x1d8) returned 0x1
	[0269.696] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1044, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.696] GetFileType (hFile=0x1d8) returned 0x1
	[0269.696] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.696] WriteFile (in: hFile=0x1d8, lpBuffer=0x113f7180*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113f7180*, lpNumberOfBytesWritten=0x11031dfc*=0x221, lpOverlapped=0x11031e08) returned 1
	[0269.697] GetFileType (hFile=0x1d8) returned 0x1
	[0269.697] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1044, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.697] CloseHandle (hObject=0x1d8) returned 1
	[0269.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf.tl30z")) returned 0x220
	[0269.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.742] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0269.751] SetEvent (hEvent=0x210) returned 1
	[0269.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x220
	[0269.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", dwFileAttributes=0x220) returned 1
	[0269.752] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.899] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0269.899] ReadFile (in: hFile=0x1d8, lpBuffer=0x111ce000, nNumberOfBytesToRead=0x2576, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111ce000*, lpNumberOfBytesRead=0x11023e18*=0x2576, lpOverlapped=0x0) returned 1
	[0269.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f9a0 | out: pbBuffer=0x1140f9a0) returned 1
	[0269.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111de602 | out: pbBuffer=0x111de602) returned 1
	[0269.905] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f9d0 | out: pbBuffer=0x1140f9d0) returned 1
	[0269.905] GetFileType (hFile=0x1d8) returned 0x1
	[0269.905] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.905] WriteFile (in: hFile=0x1d8, lpBuffer=0x11156000*, nNumberOfBytesToWrite=0x2576, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x11156000*, lpNumberOfBytesWritten=0x113afdfc*=0x2576, lpOverlapped=0x113afe08) returned 1
	[0269.906] GetFileType (hFile=0x1d8) returned 0x1
	[0269.906] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2576, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.907] GetFileType (hFile=0x1d8) returned 0x1
	[0269.907] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.907] WriteFile (in: hFile=0x1d8, lpBuffer=0x1145a380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x1145a380*, lpNumberOfBytesWritten=0x113afdfc*=0x230, lpOverlapped=0x113afe08) returned 1
	[0269.910] GetFileType (hFile=0x1d8) returned 0x1
	[0269.910] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2576, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.910] CloseHandle (hObject=0x1d8) returned 1
	[0269.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf.tl30z")) returned 0x220
	[0269.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.927] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0269.943] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0269.975] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0270.066] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0270.102] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0270.133] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0270.144] SetEvent (hEvent=0x218) returned 1
	[0270.144] SetEvent (hEvent=0x1f0) returned 1
	[0270.144] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0270.147] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0270.147] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0270.150] SetEvent (hEvent=0x210) returned 1
	[0270.150] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0270.155] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0270.155] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0271.000] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0271.003] SetEvent (hEvent=0x218) returned 1
	[0271.003] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0271.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x220
	[0271.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF", dwFileAttributes=0x220) returned 1
	[0271.014] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.296] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0271.296] ReadFile (in: hFile=0x1d8, lpBuffer=0x11260a80, nNumberOfBytesToRead=0x984, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11260a80*, lpNumberOfBytesRead=0x11287e18*=0x984, lpOverlapped=0x0) returned 1
	[0271.305] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66e0 | out: pbBuffer=0x113e66e0) returned 1
	[0271.305] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66d8 | out: pbBuffer=0x113e66d8) returned 1
	[0271.305] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11187302 | out: pbBuffer=0x11187302) returned 1
	[0271.305] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118735f | out: pbBuffer=0x1118735f) returned 1
	[0271.305] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6710 | out: pbBuffer=0x113e6710) returned 1
	[0271.305] GetFileType (hFile=0x1d8) returned 0x1
	[0271.306] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.306] WriteFile (in: hFile=0x1d8, lpBuffer=0x11360000*, nNumberOfBytesToWrite=0x984, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11360000*, lpNumberOfBytesWritten=0x11031dfc*=0x984, lpOverlapped=0x11031e08) returned 1
	[0271.306] GetFileType (hFile=0x1d8) returned 0x1
	[0271.306] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x984, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.306] GetFileType (hFile=0x1d8) returned 0x1
	[0271.306] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.306] WriteFile (in: hFile=0x1d8, lpBuffer=0x1138e700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1138e700*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0271.307] GetFileType (hFile=0x1d8) returned 0x1
	[0271.307] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x984, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.307] CloseHandle (hObject=0x1d8) returned 1
	[0271.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf.tl30z")) returned 0x220
	[0271.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.315] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0271.324] SetEvent (hEvent=0x26c) returned 1
	[0271.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x220
	[0271.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF", dwFileAttributes=0x220) returned 1
	[0271.325] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.565] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0271.565] ReadFile (in: hFile=0x1d8, lpBuffer=0x111b3000, nNumberOfBytesToRead=0x752, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x111b3000*, lpNumberOfBytesRead=0x11287e18*=0x752, lpOverlapped=0x0) returned 1
	[0271.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0271.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11063d02 | out: pbBuffer=0x11063d02) returned 1
	[0271.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11063d80 | out: pbBuffer=0x11063d80) returned 1
	[0271.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11063de0 | out: pbBuffer=0x11063de0) returned 1
	[0271.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0271.572] GetFileType (hFile=0x1d8) returned 0x1
	[0271.572] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.572] WriteFile (in: hFile=0x1d8, lpBuffer=0x11462000*, nNumberOfBytesToWrite=0x752, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x11462000*, lpNumberOfBytesWritten=0x1105ddfc*=0x752, lpOverlapped=0x1105de08) returned 1
	[0271.573] GetFileType (hFile=0x1d8) returned 0x1
	[0271.573] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x752, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.573] GetFileType (hFile=0x1d8) returned 0x1
	[0271.573] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.573] WriteFile (in: hFile=0x1d8, lpBuffer=0x1145c700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x1145c700*, lpNumberOfBytesWritten=0x1105ddfc*=0x22a, lpOverlapped=0x1105de08) returned 1
	[0271.573] GetFileType (hFile=0x1d8) returned 0x1
	[0271.573] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x752, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.573] CloseHandle (hObject=0x1d8) returned 1
	[0271.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf.tl30z")) returned 0x220
	[0271.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.586] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0271.591] SetEvent (hEvent=0x26c) returned 1
	[0271.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf")) returned 0x220
	[0271.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF", dwFileAttributes=0x220) returned 1
	[0271.591] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.787] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0271.787] ReadFile (in: hFile=0x1d8, lpBuffer=0x11163000, nNumberOfBytesToRead=0xdec, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11163000*, lpNumberOfBytesRead=0x11287e18*=0xdec, lpOverlapped=0x0) returned 1
	[0271.790] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6e00 | out: pbBuffer=0x113e6e00) returned 1
	[0271.790] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1128e702 | out: pbBuffer=0x1128e702) returned 1
	[0271.790] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1128e72c | out: pbBuffer=0x1128e72c) returned 1
	[0271.791] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1128e78c | out: pbBuffer=0x1128e78c) returned 1
	[0271.791] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6e30 | out: pbBuffer=0x113e6e30) returned 1
	[0271.791] GetFileType (hFile=0x1d8) returned 0x1
	[0271.791] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.792] WriteFile (in: hFile=0x1d8, lpBuffer=0x112a4000*, nNumberOfBytesToWrite=0xdec, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112a4000*, lpNumberOfBytesWritten=0x11031dfc*=0xdec, lpOverlapped=0x11031e08) returned 1
	[0271.792] GetFileType (hFile=0x1d8) returned 0x1
	[0271.792] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xdec, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.792] GetFileType (hFile=0x1d8) returned 0x1
	[0271.792] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.792] WriteFile (in: hFile=0x1d8, lpBuffer=0x11166e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11166e00*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0271.793] GetFileType (hFile=0x1d8) returned 0x1
	[0271.793] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xdec, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.793] CloseHandle (hObject=0x1d8) returned 1
	[0271.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf.tl30z")) returned 0x220
	[0271.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.802] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0271.814] SetEvent (hEvent=0x26c) returned 1
	[0271.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf")) returned 0x220
	[0271.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", dwFileAttributes=0x220) returned 1
	[0271.814] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.945] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0271.945] ReadFile (in: hFile=0x1d8, lpBuffer=0x110fa000, nNumberOfBytesToRead=0x1496, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110fa000*, lpNumberOfBytesRead=0x11287e18*=0x1496, lpOverlapped=0x0) returned 1
	[0271.949] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113325e0 | out: pbBuffer=0x113325e0) returned 1
	[0271.950] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113325d8 | out: pbBuffer=0x113325d8) returned 1
	[0271.950] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bd302 | out: pbBuffer=0x112bd302) returned 1
	[0271.950] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332610 | out: pbBuffer=0x11332610) returned 1
	[0271.950] GetFileType (hFile=0x1d8) returned 0x1
	[0271.950] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.951] WriteFile (in: hFile=0x1d8, lpBuffer=0x1111a000*, nNumberOfBytesToWrite=0x1496, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x1111a000*, lpNumberOfBytesWritten=0x1105ddfc*=0x1496, lpOverlapped=0x1105de08) returned 1
	[0271.951] GetFileType (hFile=0x1d8) returned 0x1
	[0271.951] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1496, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.951] GetFileType (hFile=0x1d8) returned 0x1
	[0271.951] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.952] WriteFile (in: hFile=0x1d8, lpBuffer=0x110b4e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x110b4e00*, lpNumberOfBytesWritten=0x1105ddfc*=0x22a, lpOverlapped=0x1105de08) returned 1
	[0271.952] GetFileType (hFile=0x1d8) returned 0x1
	[0271.952] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1496, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.952] CloseHandle (hObject=0x1d8) returned 1
	[0271.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf.tl30z")) returned 0x220
	[0271.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.965] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0271.973] SetEvent (hEvent=0x26c) returned 1
	[0271.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x220
	[0271.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF", dwFileAttributes=0x220) returned 1
	[0271.974] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.118] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0272.118] ReadFile (in: hFile=0x1d8, lpBuffer=0x111c0000, nNumberOfBytesToRead=0x2040, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x11287e18*=0x2040, lpOverlapped=0x0) returned 1
	[0272.129] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0272.129] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11250802 | out: pbBuffer=0x11250802) returned 1
	[0272.129] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0272.130] GetFileType (hFile=0x1d8) returned 0x1
	[0272.130] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.130] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bc6000*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesWritten=0x112c5dfc*=0x2040, lpOverlapped=0x112c5e08) returned 1
	[0272.130] GetFileType (hFile=0x1d8) returned 0x1
	[0272.130] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2040, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.130] GetFileType (hFile=0x1d8) returned 0x1
	[0272.131] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.131] WriteFile (in: hFile=0x1d8, lpBuffer=0x11386a80*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x11386a80*, lpNumberOfBytesWritten=0x112c5dfc*=0x21e, lpOverlapped=0x112c5e08) returned 1
	[0272.131] GetFileType (hFile=0x1d8) returned 0x1
	[0272.131] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2040, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.131] CloseHandle (hObject=0x1d8) returned 1
	[0272.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf.tl30z")) returned 0x220
	[0272.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.144] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0272.151] SetEvent (hEvent=0x1b0) returned 1
	[0272.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x220
	[0272.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF", dwFileAttributes=0x220) returned 1
	[0272.152] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.420] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0272.420] ReadFile (in: hFile=0x1d8, lpBuffer=0x1129e000, nNumberOfBytesToRead=0x9c5e, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1129e000*, lpNumberOfBytesRead=0x11287e18*=0x9c5e, lpOverlapped=0x0) returned 1
	[0272.424] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e620 | out: pbBuffer=0x1104e620) returned 1
	[0272.424] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112aa602 | out: pbBuffer=0x112aa602) returned 1
	[0272.424] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112aa60b | out: pbBuffer=0x112aa60b) returned 1
	[0272.425] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0272.425] GetFileType (hFile=0x1d8) returned 0x1
	[0272.426] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.426] WriteFile (in: hFile=0x1d8, lpBuffer=0x110ae000*, nNumberOfBytesToWrite=0x9c5e, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x110ae000*, lpNumberOfBytesWritten=0x112c5dfc*=0x9c5e, lpOverlapped=0x112c5e08) returned 1
	[0272.426] GetFileType (hFile=0x1d8) returned 0x1
	[0272.426] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9c5e, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.426] GetFileType (hFile=0x1d8) returned 0x1
	[0272.426] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.426] WriteFile (in: hFile=0x1d8, lpBuffer=0x110d3500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x110d3500*, lpNumberOfBytesWritten=0x112c5dfc*=0x236, lpOverlapped=0x112c5e08) returned 1
	[0272.427] GetFileType (hFile=0x1d8) returned 0x1
	[0272.427] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9c5e, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.427] CloseHandle (hObject=0x1d8) returned 1
	[0272.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf.tl30z")) returned 0x220
	[0272.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.432] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0272.444] SetEvent (hEvent=0x1b0) returned 1
	[0272.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x220
	[0272.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF", dwFileAttributes=0x220) returned 1
	[0272.444] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.604] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0272.604] ReadFile (in: hFile=0x1d8, lpBuffer=0x11102000, nNumberOfBytesToRead=0xa79c, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11102000*, lpNumberOfBytesRead=0x11287e18*=0xa79c, lpOverlapped=0x0) returned 1
	[0272.612] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6840 | out: pbBuffer=0x113e6840) returned 1
	[0272.612] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e3e02 | out: pbBuffer=0x113e3e02) returned 1
	[0272.612] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e3e46 | out: pbBuffer=0x113e3e46) returned 1
	[0272.612] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6870 | out: pbBuffer=0x113e6870) returned 1
	[0272.614] GetFileType (hFile=0x1d8) returned 0x1
	[0272.614] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.614] WriteFile (in: hFile=0x1d8, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0xa79c, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x112c9dfc*=0xa79c, lpOverlapped=0x112c9e08) returned 1
	[0272.615] GetFileType (hFile=0x1d8) returned 0x1
	[0272.615] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa79c, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.615] GetFileType (hFile=0x1d8) returned 0x1
	[0272.615] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.615] WriteFile (in: hFile=0x1d8, lpBuffer=0x111cf880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x111cf880*, lpNumberOfBytesWritten=0x112c9dfc*=0x236, lpOverlapped=0x112c9e08) returned 1
	[0272.615] GetFileType (hFile=0x1d8) returned 0x1
	[0272.615] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa79c, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.615] CloseHandle (hObject=0x1d8) returned 1
	[0272.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf.tl30z")) returned 0x220
	[0272.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.630] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0272.638] SetEvent (hEvent=0x1b0) returned 1
	[0272.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x220
	[0272.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF", dwFileAttributes=0x220) returned 1
	[0272.639] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.816] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0272.816] ReadFile (in: hFile=0x1d8, lpBuffer=0x11058000, nNumberOfBytesToRead=0x5130, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11287e18*=0x5130, lpOverlapped=0x0) returned 1
	[0272.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0272.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136a802 | out: pbBuffer=0x1136a802) returned 1
	[0272.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0272.833] GetFileType (hFile=0x1d8) returned 0x1
	[0272.833] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.833] WriteFile (in: hFile=0x1d8, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x112c9dfc*=0x5130, lpOverlapped=0x112c9e08) returned 1
	[0272.834] GetFileType (hFile=0x1d8) returned 0x1
	[0272.834] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5130, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.834] GetFileType (hFile=0x1d8) returned 0x1
	[0272.834] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.834] WriteFile (in: hFile=0x1d8, lpBuffer=0x1133ca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1133ca80*, lpNumberOfBytesWritten=0x112c9dfc*=0x227, lpOverlapped=0x112c9e08) returned 1
	[0272.835] GetFileType (hFile=0x1d8) returned 0x1
	[0272.835] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5130, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.835] CloseHandle (hObject=0x1d8) returned 1
	[0272.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf.tl30z")) returned 0x220
	[0272.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.846] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0272.858] SetEvent (hEvent=0x218) returned 1
	[0272.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x220
	[0272.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF", dwFileAttributes=0x220) returned 1
	[0272.858] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.022] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0273.022] ReadFile (in: hFile=0x1d8, lpBuffer=0x1117b000, nNumberOfBytesToRead=0xe30, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1117b000*, lpNumberOfBytesRead=0x11287e18*=0xe30, lpOverlapped=0x0) returned 1
	[0273.026] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0273.026] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332658 | out: pbBuffer=0x11332658) returned 1
	[0273.026] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c6802 | out: pbBuffer=0x113c6802) returned 1
	[0273.026] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c683f | out: pbBuffer=0x113c683f) returned 1
	[0273.027] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c6846 | out: pbBuffer=0x113c6846) returned 1
	[0273.027] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0273.027] GetFileType (hFile=0x1d8) returned 0x1
	[0273.027] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.027] WriteFile (in: hFile=0x1d8, lpBuffer=0x112a8000*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112a8000*, lpNumberOfBytesWritten=0x1102bdfc*=0xe30, lpOverlapped=0x1102be08) returned 1
	[0273.028] GetFileType (hFile=0x1d8) returned 0x1
	[0273.028] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xe30, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.028] GetFileType (hFile=0x1d8) returned 0x1
	[0273.028] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.028] WriteFile (in: hFile=0x1d8, lpBuffer=0x11301880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11301880*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0273.028] GetFileType (hFile=0x1d8) returned 0x1
	[0273.028] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xe30, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.028] CloseHandle (hObject=0x1d8) returned 1
	[0273.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf.tl30z")) returned 0x220
	[0273.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.032] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0273.045] SetEvent (hEvent=0x218) returned 1
	[0273.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x220
	[0273.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF", dwFileAttributes=0x220) returned 1
	[0273.045] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.193] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0273.193] ReadFile (in: hFile=0x1d8, lpBuffer=0x112f5c00, nNumberOfBytesToRead=0xb90, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x112f5c00*, lpNumberOfBytesRead=0x11287e18*=0xb90, lpOverlapped=0x0) returned 1
	[0273.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61b0 | out: pbBuffer=0x113e61b0) returned 1
	[0273.201] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112adb02 | out: pbBuffer=0x112adb02) returned 1
	[0273.201] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112adb2b | out: pbBuffer=0x112adb2b) returned 1
	[0273.201] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61e0 | out: pbBuffer=0x113e61e0) returned 1
	[0273.201] GetFileType (hFile=0x1d8) returned 0x1
	[0273.202] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.202] WriteFile (in: hFile=0x1d8, lpBuffer=0x11452000*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11452000*, lpNumberOfBytesWritten=0x112c9dfc*=0xb90, lpOverlapped=0x112c9e08) returned 1
	[0273.202] GetFileType (hFile=0x1d8) returned 0x1
	[0273.202] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb90, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.202] GetFileType (hFile=0x1d8) returned 0x1
	[0273.202] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.203] WriteFile (in: hFile=0x1d8, lpBuffer=0x110b3180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x110b3180*, lpNumberOfBytesWritten=0x112c9dfc*=0x227, lpOverlapped=0x112c9e08) returned 1
	[0273.203] GetFileType (hFile=0x1d8) returned 0x1
	[0273.203] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb90, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.203] CloseHandle (hObject=0x1d8) returned 1
	[0273.209] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf.tl30z")) returned 0x220
	[0273.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.211] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0273.214] SetEvent (hEvent=0x218) returned 1
	[0273.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x220
	[0273.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF", dwFileAttributes=0x220) returned 1
	[0273.215] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.393] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0273.393] ReadFile (in: hFile=0x1d8, lpBuffer=0x11091200, nNumberOfBytesToRead=0x8fc, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11091200*, lpNumberOfBytesRead=0x11287e18*=0x8fc, lpOverlapped=0x0) returned 1
	[0273.401] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332dc0 | out: pbBuffer=0x11332dc0) returned 1
	[0273.401] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332db8 | out: pbBuffer=0x11332db8) returned 1
	[0273.401] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11461b02 | out: pbBuffer=0x11461b02) returned 1
	[0273.402] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332df0 | out: pbBuffer=0x11332df0) returned 1
	[0273.402] GetFileType (hFile=0x1d8) returned 0x1
	[0273.402] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.402] WriteFile (in: hFile=0x1d8, lpBuffer=0x1113d000*, nNumberOfBytesToWrite=0x8fc, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1113d000*, lpNumberOfBytesWritten=0x1102bdfc*=0x8fc, lpOverlapped=0x1102be08) returned 1
	[0273.402] GetFileType (hFile=0x1d8) returned 0x1
	[0273.402] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8fc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.403] GetFileType (hFile=0x1d8) returned 0x1
	[0273.403] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.403] WriteFile (in: hFile=0x1d8, lpBuffer=0x11146000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11146000*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0273.403] GetFileType (hFile=0x1d8) returned 0x1
	[0273.403] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8fc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.403] CloseHandle (hObject=0x1d8) returned 1
	[0273.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf.tl30z")) returned 0x220
	[0273.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.409] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0273.422] SetEvent (hEvent=0x218) returned 1
	[0273.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x220
	[0273.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF", dwFileAttributes=0x220) returned 1
	[0273.423] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.723] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0273.723] ReadFile (in: hFile=0x1d8, lpBuffer=0x1121c000, nNumberOfBytesToRead=0x964, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1121c000*, lpNumberOfBytesRead=0x11287e18*=0x964, lpOverlapped=0x0) returned 1
	[0273.734] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0273.735] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f7302 | out: pbBuffer=0x111f7302) returned 1
	[0273.735] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f731e | out: pbBuffer=0x111f731e) returned 1
	[0273.735] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f733d | out: pbBuffer=0x111f733d) returned 1
	[0273.735] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0273.735] GetFileType (hFile=0x1d8) returned 0x1
	[0273.735] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.736] WriteFile (in: hFile=0x1d8, lpBuffer=0x11236000*, nNumberOfBytesToWrite=0x964, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x11236000*, lpNumberOfBytesWritten=0x112c5dfc*=0x964, lpOverlapped=0x112c5e08) returned 1
	[0273.736] GetFileType (hFile=0x1d8) returned 0x1
	[0273.736] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x964, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.736] GetFileType (hFile=0x1d8) returned 0x1
	[0273.736] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.736] WriteFile (in: hFile=0x1d8, lpBuffer=0x11209880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x11209880*, lpNumberOfBytesWritten=0x112c5dfc*=0x227, lpOverlapped=0x112c5e08) returned 1
	[0273.737] GetFileType (hFile=0x1d8) returned 0x1
	[0273.737] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x964, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.737] CloseHandle (hObject=0x1d8) returned 1
	[0273.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf.tl30z")) returned 0x220
	[0273.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.742] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0273.747] SetEvent (hEvent=0x234) returned 1
	[0273.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x220
	[0273.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF", dwFileAttributes=0x220) returned 1
	[0273.747] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.929] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0273.929] ReadFile (in: hFile=0x1d8, lpBuffer=0x11206000, nNumberOfBytesToRead=0xed4, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11206000*, lpNumberOfBytesRead=0x11287e18*=0xed4, lpOverlapped=0x0) returned 1
	[0273.933] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0273.934] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4a8 | out: pbBuffer=0x1104e4a8) returned 1
	[0273.934] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ebe02 | out: pbBuffer=0x112ebe02) returned 1
	[0273.934] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0273.934] GetFileType (hFile=0x1d8) returned 0x1
	[0273.934] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.935] WriteFile (in: hFile=0x1d8, lpBuffer=0x1123c000*, nNumberOfBytesToWrite=0xed4, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1123c000*, lpNumberOfBytesWritten=0x112c9dfc*=0xed4, lpOverlapped=0x112c9e08) returned 1
	[0273.935] GetFileType (hFile=0x1d8) returned 0x1
	[0273.935] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xed4, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.935] GetFileType (hFile=0x1d8) returned 0x1
	[0273.935] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.935] WriteFile (in: hFile=0x1d8, lpBuffer=0x1133c700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1133c700*, lpNumberOfBytesWritten=0x112c9dfc*=0x22d, lpOverlapped=0x112c9e08) returned 1
	[0273.936] GetFileType (hFile=0x1d8) returned 0x1
	[0273.936] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xed4, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.936] CloseHandle (hObject=0x1d8) returned 1
	[0273.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf.tl30z")) returned 0x220
	[0273.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.944] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0273.950] SetEvent (hEvent=0x210) returned 1
	[0273.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x220
	[0273.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF", dwFileAttributes=0x220) returned 1
	[0273.951] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.101] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0274.101] ReadFile (in: hFile=0x1d8, lpBuffer=0x1107d200, nNumberOfBytesToRead=0x8f8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1107d200*, lpNumberOfBytesRead=0x11287e18*=0x8f8, lpOverlapped=0x0) returned 1
	[0274.105] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0274.105] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6558 | out: pbBuffer=0x113e6558) returned 1
	[0274.105] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11217002 | out: pbBuffer=0x11217002) returned 1
	[0274.105] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11217005 | out: pbBuffer=0x11217005) returned 1
	[0274.106] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121700d | out: pbBuffer=0x1121700d) returned 1
	[0274.106] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121708e | out: pbBuffer=0x1121708e) returned 1
	[0274.106] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112170cb | out: pbBuffer=0x112170cb) returned 1
	[0274.106] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112170d9 | out: pbBuffer=0x112170d9) returned 1
	[0274.106] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0274.106] GetFileType (hFile=0x1d8) returned 0x1
	[0274.106] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.107] WriteFile (in: hFile=0x1d8, lpBuffer=0x113f1000*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113f1000*, lpNumberOfBytesWritten=0x1102bdfc*=0x8f8, lpOverlapped=0x1102be08) returned 1
	[0274.107] GetFileType (hFile=0x1d8) returned 0x1
	[0274.107] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8f8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.107] GetFileType (hFile=0x1d8) returned 0x1
	[0274.107] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.107] WriteFile (in: hFile=0x1d8, lpBuffer=0x113fa000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113fa000*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0274.108] GetFileType (hFile=0x1d8) returned 0x1
	[0274.108] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8f8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.108] CloseHandle (hObject=0x1d8) returned 1
	[0274.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf.tl30z")) returned 0x220
	[0274.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.120] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0274.130] SetEvent (hEvent=0x210) returned 1
	[0274.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x220
	[0274.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF", dwFileAttributes=0x220) returned 1
	[0274.130] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.340] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0274.340] ReadFile (in: hFile=0x1d8, lpBuffer=0x110de000, nNumberOfBytesToRead=0x914, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110de000*, lpNumberOfBytesRead=0x11287e18*=0x914, lpOverlapped=0x0) returned 1
	[0274.391] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f580 | out: pbBuffer=0x1140f580) returned 1
	[0274.391] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e5302 | out: pbBuffer=0x113e5302) returned 1
	[0274.391] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5b0 | out: pbBuffer=0x1140f5b0) returned 1
	[0274.391] GetFileType (hFile=0x1d8) returned 0x1
	[0274.391] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.391] WriteFile (in: hFile=0x1d8, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x914, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x112c9dfc*=0x914, lpOverlapped=0x112c9e08) returned 1
	[0274.392] GetFileType (hFile=0x1d8) returned 0x1
	[0274.392] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x914, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.392] GetFileType (hFile=0x1d8) returned 0x1
	[0274.392] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.392] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c0e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x113c0e00*, lpNumberOfBytesWritten=0x112c9dfc*=0x224, lpOverlapped=0x112c9e08) returned 1
	[0274.392] GetFileType (hFile=0x1d8) returned 0x1
	[0274.392] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x914, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.392] CloseHandle (hObject=0x1d8) returned 1
	[0274.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf.tl30z")) returned 0x220
	[0274.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.410] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0274.419] SetEvent (hEvent=0x210) returned 1
	[0274.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x220
	[0274.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF", dwFileAttributes=0x220) returned 1
	[0274.420] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.572] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0274.572] ReadFile (in: hFile=0x1d8, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x1034, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x11287e18*=0x1034, lpOverlapped=0x0) returned 1
	[0274.578] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6cc0 | out: pbBuffer=0x113e6cc0) returned 1
	[0274.578] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6cb8 | out: pbBuffer=0x113e6cb8) returned 1
	[0274.578] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110aa402 | out: pbBuffer=0x110aa402) returned 1
	[0274.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6cf0 | out: pbBuffer=0x113e6cf0) returned 1
	[0274.579] GetFileType (hFile=0x1d8) returned 0x1
	[0274.579] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.579] WriteFile (in: hFile=0x1d8, lpBuffer=0x110b6000*, nNumberOfBytesToWrite=0x1034, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110b6000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1034, lpOverlapped=0x1102be08) returned 1
	[0274.579] GetFileType (hFile=0x1d8) returned 0x1
	[0274.579] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1034, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.580] GetFileType (hFile=0x1d8) returned 0x1
	[0274.580] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.580] WriteFile (in: hFile=0x1d8, lpBuffer=0x110ae700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110ae700*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0274.580] GetFileType (hFile=0x1d8) returned 0x1
	[0274.580] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1034, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.580] CloseHandle (hObject=0x1d8) returned 1
	[0274.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf.tl30z")) returned 0x220
	[0274.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.594] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0274.605] SetEvent (hEvent=0x210) returned 1
	[0274.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x220
	[0274.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF", dwFileAttributes=0x220) returned 1
	[0274.606] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.903] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0274.903] ReadFile (in: hFile=0x1d8, lpBuffer=0x11116000, nNumberOfBytesToRead=0x32f2, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11116000*, lpNumberOfBytesRead=0x11287e18*=0x32f2, lpOverlapped=0x0) returned 1
	[0274.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fca0 | out: pbBuffer=0x1140fca0) returned 1
	[0274.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140fc98 | out: pbBuffer=0x1140fc98) returned 1
	[0274.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11126602 | out: pbBuffer=0x11126602) returned 1
	[0274.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fcd0 | out: pbBuffer=0x1140fcd0) returned 1
	[0274.911] GetFileType (hFile=0x1d8) returned 0x1
	[0274.911] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.911] WriteFile (in: hFile=0x1d8, lpBuffer=0x11140000*, nNumberOfBytesToWrite=0x32f2, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11140000*, lpNumberOfBytesWritten=0x112c9dfc*=0x32f2, lpOverlapped=0x112c9e08) returned 1
	[0274.912] GetFileType (hFile=0x1d8) returned 0x1
	[0274.912] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x32f2, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.912] GetFileType (hFile=0x1d8) returned 0x1
	[0274.912] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.912] WriteFile (in: hFile=0x1d8, lpBuffer=0x1146d500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1146d500*, lpNumberOfBytesWritten=0x112c9dfc*=0x230, lpOverlapped=0x112c9e08) returned 1
	[0274.912] GetFileType (hFile=0x1d8) returned 0x1
	[0274.912] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x32f2, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.912] CloseHandle (hObject=0x1d8) returned 1
	[0274.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf.tl30z")) returned 0x220
	[0274.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.937] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0274.952] SetEvent (hEvent=0x210) returned 1
	[0274.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf")) returned 0x220
	[0274.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF", dwFileAttributes=0x220) returned 1
	[0274.953] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0275.181] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0275.181] ReadFile (in: hFile=0x1d8, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x3044, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x11287e18*=0x3044, lpOverlapped=0x0) returned 1
	[0275.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0275.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0275.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11368802 | out: pbBuffer=0x11368802) returned 1
	[0275.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11368868 | out: pbBuffer=0x11368868) returned 1
	[0275.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0275.186] GetFileType (hFile=0x1d8) returned 0x1
	[0275.186] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.186] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bdc000*, nNumberOfBytesToWrite=0x3044, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x11bdc000*, lpNumberOfBytesWritten=0x113efdfc*=0x3044, lpOverlapped=0x113efe08) returned 1
	[0275.186] GetFileType (hFile=0x1d8) returned 0x1
	[0275.186] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3044, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.186] GetFileType (hFile=0x1d8) returned 0x1
	[0275.186] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.186] WriteFile (in: hFile=0x1d8, lpBuffer=0x1134ca80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x1134ca80*, lpNumberOfBytesWritten=0x113efdfc*=0x224, lpOverlapped=0x113efe08) returned 1
	[0275.187] GetFileType (hFile=0x1d8) returned 0x1
	[0275.187] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3044, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.187] CloseHandle (hObject=0x1d8) returned 1
	[0275.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf.tl30z")) returned 0x220
	[0275.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.204] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0275.217] SetEvent (hEvent=0x26c) returned 1
	[0275.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf")) returned 0x220
	[0275.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF", dwFileAttributes=0x220) returned 1
	[0275.218] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0275.521] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0275.521] ReadFile (in: hFile=0x224, lpBuffer=0x11300000, nNumberOfBytesToRead=0x1f08, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11300000*, lpNumberOfBytesRead=0x11287e18*=0x1f08, lpOverlapped=0x0) returned 1
	[0275.529] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4a0 | out: pbBuffer=0x1104e4a0) returned 1
	[0275.529] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e498 | out: pbBuffer=0x1104e498) returned 1
	[0275.529] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11369c02 | out: pbBuffer=0x11369c02) returned 1
	[0275.529] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11369c18 | out: pbBuffer=0x11369c18) returned 1
	[0275.530] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0275.530] GetFileType (hFile=0x224) returned 0x1
	[0275.530] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.530] WriteFile (in: hFile=0x224, lpBuffer=0x113ba000*, nNumberOfBytesToWrite=0x1f08, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x113ba000*, lpNumberOfBytesWritten=0x113efdfc*=0x1f08, lpOverlapped=0x113efe08) returned 1
	[0275.531] GetFileType (hFile=0x224) returned 0x1
	[0275.531] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1f08, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.531] GetFileType (hFile=0x224) returned 0x1
	[0275.531] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.531] WriteFile (in: hFile=0x224, lpBuffer=0x11310700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x11310700*, lpNumberOfBytesWritten=0x113efdfc*=0x22a, lpOverlapped=0x113efe08) returned 1
	[0275.532] GetFileType (hFile=0x224) returned 0x1
	[0275.532] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1f08, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.536] CloseHandle (hObject=0x224) returned 1
	[0275.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf.tl30z")) returned 0x220
	[0275.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.558] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0275.569] SetEvent (hEvent=0x26c) returned 1
	[0275.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x220
	[0275.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF", dwFileAttributes=0x220) returned 1
	[0275.570] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0275.841] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0275.841] ReadFile (in: hFile=0x224, lpBuffer=0x1118c000, nNumberOfBytesToRead=0x7620, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1118c000*, lpNumberOfBytesRead=0x11287e18*=0x7620, lpOverlapped=0x0) returned 1
	[0275.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69d0 | out: pbBuffer=0x113e69d0) returned 1
	[0275.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e69c8 | out: pbBuffer=0x113e69c8) returned 1
	[0275.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11090802 | out: pbBuffer=0x11090802) returned 1
	[0275.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6a00 | out: pbBuffer=0x113e6a00) returned 1
	[0275.851] GetFileType (hFile=0x224) returned 0x1
	[0275.851] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.851] WriteFile (in: hFile=0x224, lpBuffer=0x11292000*, nNumberOfBytesToWrite=0x7620, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x11292000*, lpNumberOfBytesWritten=0x113f3dfc*=0x7620, lpOverlapped=0x113f3e08) returned 1
	[0275.852] GetFileType (hFile=0x224) returned 0x1
	[0275.852] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7620, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.852] GetFileType (hFile=0x224) returned 0x1
	[0275.852] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.852] WriteFile (in: hFile=0x224, lpBuffer=0x110a0380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x110a0380*, lpNumberOfBytesWritten=0x113f3dfc*=0x22a, lpOverlapped=0x113f3e08) returned 1
	[0275.853] GetFileType (hFile=0x224) returned 0x1
	[0275.853] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7620, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.853] CloseHandle (hObject=0x224) returned 1
	[0275.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf.tl30z")) returned 0x220
	[0275.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.859] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0275.864] SetEvent (hEvent=0x26c) returned 1
	[0275.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x220
	[0275.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF", dwFileAttributes=0x220) returned 1
	[0275.865] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.100] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0276.101] ReadFile (in: hFile=0x224, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x4712, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11287e18*=0x4712, lpOverlapped=0x0) returned 1
	[0276.104] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0276.105] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0276.105] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11090802 | out: pbBuffer=0x11090802) returned 1
	[0276.105] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0276.105] GetFileType (hFile=0x224) returned 0x1
	[0276.106] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.106] WriteFile (in: hFile=0x224, lpBuffer=0x1111e000*, nNumberOfBytesToWrite=0x4712, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1111e000*, lpNumberOfBytesWritten=0x11031dfc*=0x4712, lpOverlapped=0x11031e08) returned 1
	[0276.106] GetFileType (hFile=0x224) returned 0x1
	[0276.107] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4712, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.107] GetFileType (hFile=0x224) returned 0x1
	[0276.107] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.107] WriteFile (in: hFile=0x224, lpBuffer=0x11136e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11136e00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0276.107] GetFileType (hFile=0x224) returned 0x1
	[0276.108] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4712, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.108] CloseHandle (hObject=0x224) returned 1
	[0276.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf.tl30z")) returned 0x220
	[0276.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.123] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0276.138] SetEvent (hEvent=0x218) returned 1
	[0276.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x220
	[0276.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF", dwFileAttributes=0x220) returned 1
	[0276.139] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.328] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0276.328] ReadFile (in: hFile=0x224, lpBuffer=0x111d8000, nNumberOfBytesToRead=0x20e8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x111d8000*, lpNumberOfBytesRead=0x11287e18*=0x20e8, lpOverlapped=0x0) returned 1
	[0276.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0276.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bca802 | out: pbBuffer=0x11bca802) returned 1
	[0276.334] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0276.334] GetFileType (hFile=0x224) returned 0x1
	[0276.335] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.335] WriteFile (in: hFile=0x224, lpBuffer=0x1124e000*, nNumberOfBytesToWrite=0x20e8, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x1124e000*, lpNumberOfBytesWritten=0x113a3dfc*=0x20e8, lpOverlapped=0x113a3e08) returned 1
	[0276.335] GetFileType (hFile=0x224) returned 0x1
	[0276.335] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x20e8, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.336] GetFileType (hFile=0x224) returned 0x1
	[0276.336] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.336] WriteFile (in: hFile=0x224, lpBuffer=0x113f4a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x113f4a80*, lpNumberOfBytesWritten=0x113a3dfc*=0x227, lpOverlapped=0x113a3e08) returned 1
	[0276.336] GetFileType (hFile=0x224) returned 0x1
	[0276.336] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x20e8, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.336] CloseHandle (hObject=0x224) returned 1
	[0276.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf.tl30z")) returned 0x220
	[0276.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.349] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0276.359] SetEvent (hEvent=0x218) returned 1
	[0276.359] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x220
	[0276.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF", dwFileAttributes=0x220) returned 1
	[0276.360] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.588] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0276.588] ReadFile (in: hFile=0x224, lpBuffer=0x1144c000, nNumberOfBytesToRead=0x12bc, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1144c000*, lpNumberOfBytesRead=0x11287e18*=0x12bc, lpOverlapped=0x0) returned 1
	[0276.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0276.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bcb202 | out: pbBuffer=0x11bcb202) returned 1
	[0276.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0276.594] GetFileType (hFile=0x224) returned 0x1
	[0276.594] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.594] WriteFile (in: hFile=0x224, lpBuffer=0x1146e000*, nNumberOfBytesToWrite=0x12bc, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x1146e000*, lpNumberOfBytesWritten=0x113a3dfc*=0x12bc, lpOverlapped=0x113a3e08) returned 1
	[0276.594] GetFileType (hFile=0x224) returned 0x1
	[0276.594] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x12bc, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.595] GetFileType (hFile=0x224) returned 0x1
	[0276.595] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.595] WriteFile (in: hFile=0x224, lpBuffer=0x113f5880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x113f5880*, lpNumberOfBytesWritten=0x113a3dfc*=0x22d, lpOverlapped=0x113a3e08) returned 1
	[0276.595] GetFileType (hFile=0x224) returned 0x1
	[0276.595] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x12bc, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.595] CloseHandle (hObject=0x224) returned 1
	[0276.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf.tl30z")) returned 0x220
	[0276.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.606] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0276.612] SetEvent (hEvent=0x218) returned 1
	[0276.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x220
	[0276.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF", dwFileAttributes=0x220) returned 1
	[0276.613] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.774] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0276.774] ReadFile (in: hFile=0x224, lpBuffer=0x1121cc00, nNumberOfBytesToRead=0x5c0, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1121cc00*, lpNumberOfBytesRead=0x11287e18*=0x5c0, lpOverlapped=0x0) returned 1
	[0276.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332460 | out: pbBuffer=0x11332460) returned 1
	[0276.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332458 | out: pbBuffer=0x11332458) returned 1
	[0276.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11178402 | out: pbBuffer=0x11178402) returned 1
	[0276.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11178449 | out: pbBuffer=0x11178449) returned 1
	[0276.779] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332490 | out: pbBuffer=0x11332490) returned 1
	[0276.779] GetFileType (hFile=0x224) returned 0x1
	[0276.779] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.779] WriteFile (in: hFile=0x224, lpBuffer=0x11184000*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x11184000*, lpNumberOfBytesWritten=0x1139fdfc*=0x5c0, lpOverlapped=0x1139fe08) returned 1
	[0276.779] GetFileType (hFile=0x224) returned 0x1
	[0276.780] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5c0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.780] GetFileType (hFile=0x224) returned 0x1
	[0276.780] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.780] WriteFile (in: hFile=0x224, lpBuffer=0x11186000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x11186000*, lpNumberOfBytesWritten=0x1139fdfc*=0x224, lpOverlapped=0x1139fe08) returned 1
	[0276.780] GetFileType (hFile=0x224) returned 0x1
	[0276.780] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5c0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.780] CloseHandle (hObject=0x224) returned 1
	[0276.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf.tl30z")) returned 0x220
	[0276.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.785] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0276.796] SetEvent (hEvent=0x218) returned 1
	[0276.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf")) returned 0x220
	[0276.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF", dwFileAttributes=0x220) returned 1
	[0276.797] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.934] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0276.934] ReadFile (in: hFile=0x224, lpBuffer=0x11058000, nNumberOfBytesToRead=0x2332, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11287e18*=0x2332, lpOverlapped=0x0) returned 1
	[0276.939] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0276.939] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0276.939] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137d202 | out: pbBuffer=0x1137d202) returned 1
	[0276.939] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0276.940] GetFileType (hFile=0x224) returned 0x1
	[0276.940] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.940] WriteFile (in: hFile=0x224, lpBuffer=0x11bcc000*, nNumberOfBytesToWrite=0x2332, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11bcc000*, lpNumberOfBytesWritten=0x113a1dfc*=0x2332, lpOverlapped=0x113a1e08) returned 1
	[0276.940] GetFileType (hFile=0x224) returned 0x1
	[0276.940] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2332, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.940] GetFileType (hFile=0x224) returned 0x1
	[0276.940] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.940] WriteFile (in: hFile=0x224, lpBuffer=0x11351880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11351880*, lpNumberOfBytesWritten=0x113a1dfc*=0x22a, lpOverlapped=0x113a1e08) returned 1
	[0276.941] GetFileType (hFile=0x224) returned 0x1
	[0276.941] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2332, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.941] CloseHandle (hObject=0x224) returned 1
	[0276.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf.tl30z")) returned 0x220
	[0276.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.947] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0277.009] SetEvent (hEvent=0x1b0) returned 1
	[0277.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf")) returned 0x220
	[0277.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF", dwFileAttributes=0x220) returned 1
	[0277.010] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0277.351] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0277.351] ReadFile (in: hFile=0x224, lpBuffer=0x1122c000, nNumberOfBytesToRead=0x96c, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1122c000*, lpNumberOfBytesRead=0x11287e18*=0x96c, lpOverlapped=0x0) returned 1
	[0277.355] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0277.355] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0277.355] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123c802 | out: pbBuffer=0x1123c802) returned 1
	[0277.356] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0277.357] GetFileType (hFile=0x224) returned 0x1
	[0277.357] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.357] WriteFile (in: hFile=0x224, lpBuffer=0x112a2000*, nNumberOfBytesToWrite=0x96c, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x112a2000*, lpNumberOfBytesWritten=0x113b7dfc*=0x96c, lpOverlapped=0x113b7e08) returned 1
	[0277.357] GetFileType (hFile=0x224) returned 0x1
	[0277.357] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x96c, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.358] GetFileType (hFile=0x224) returned 0x1
	[0277.358] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.358] WriteFile (in: hFile=0x224, lpBuffer=0x11250a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x11250a80*, lpNumberOfBytesWritten=0x113b7dfc*=0x22a, lpOverlapped=0x113b7e08) returned 1
	[0277.358] GetFileType (hFile=0x224) returned 0x1
	[0277.358] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x96c, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.358] CloseHandle (hObject=0x224) returned 1
	[0277.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf.tl30z")) returned 0x220
	[0277.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.368] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0277.378] SetEvent (hEvent=0x234) returned 1
	[0277.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf")) returned 0x220
	[0277.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF", dwFileAttributes=0x220) returned 1
	[0277.379] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0277.521] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0277.521] ReadFile (in: hFile=0x1fc, lpBuffer=0x111a6a80, nNumberOfBytesToRead=0x284c, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x111a6a80*, lpNumberOfBytesRead=0x11287e18*=0x284c, lpOverlapped=0x0) returned 1
	[0277.525] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0277.525] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111dd302 | out: pbBuffer=0x111dd302) returned 1
	[0277.525] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111dd318 | out: pbBuffer=0x111dd318) returned 1
	[0277.525] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111dd3c9 | out: pbBuffer=0x111dd3c9) returned 1
	[0277.526] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332840 | out: pbBuffer=0x11332840) returned 1
	[0277.526] GetFileType (hFile=0x1fc) returned 0x1
	[0277.527] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.527] WriteFile (in: hFile=0x1fc, lpBuffer=0x11122000*, nNumberOfBytesToWrite=0x284c, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x11122000*, lpNumberOfBytesWritten=0x113b7dfc*=0x284c, lpOverlapped=0x113b7e08) returned 1
	[0277.527] GetFileType (hFile=0x1fc) returned 0x1
	[0277.527] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x284c, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.528] GetFileType (hFile=0x1fc) returned 0x1
	[0277.528] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.528] WriteFile (in: hFile=0x1fc, lpBuffer=0x11102380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x11102380*, lpNumberOfBytesWritten=0x113b7dfc*=0x227, lpOverlapped=0x113b7e08) returned 1
	[0277.528] GetFileType (hFile=0x1fc) returned 0x1
	[0277.528] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x284c, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.528] CloseHandle (hObject=0x1fc) returned 1
	[0277.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf.tl30z")) returned 0x220
	[0277.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.563] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0277.577] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0277.612] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0277.624] SetEvent (hEvent=0x218) returned 1
	[0277.624] SetEvent (hEvent=0x1f0) returned 1
	[0277.624] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0277.629] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0277.629] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0277.634] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0277.634] SetEvent (hEvent=0x218) returned 1
	[0277.634] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0277.638] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0277.639] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0278.740] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0278.743] SetEvent (hEvent=0x26c) returned 1
	[0278.743] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0278.747] SetEvent (hEvent=0x26c) returned 1
	[0278.747] SwitchToThread () returned 1
	[0278.753] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0278.759] SetEvent (hEvent=0x26c) returned 1
	[0278.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf")) returned 0x220
	[0278.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF", dwFileAttributes=0x220) returned 1
	[0278.760] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.975] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0278.975] ReadFile (in: hFile=0x224, lpBuffer=0x11376000, nNumberOfBytesToRead=0xe4e, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11376000*, lpNumberOfBytesRead=0x1128ce18*=0xe4e, lpOverlapped=0x0) returned 1
	[0278.982] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0278.982] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0278.982] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f6802 | out: pbBuffer=0x111f6802) returned 1
	[0278.982] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f68d8 | out: pbBuffer=0x111f68d8) returned 1
	[0278.982] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0278.983] GetFileType (hFile=0x224) returned 0x1
	[0278.983] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.983] WriteFile (in: hFile=0x224, lpBuffer=0x110c8000*, nNumberOfBytesToWrite=0xe4e, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110c8000*, lpNumberOfBytesWritten=0x1102bdfc*=0xe4e, lpOverlapped=0x1102be08) returned 1
	[0278.983] GetFileType (hFile=0x224) returned 0x1
	[0278.984] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe4e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.984] GetFileType (hFile=0x224) returned 0x1
	[0278.984] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.984] WriteFile (in: hFile=0x224, lpBuffer=0x11362a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11362a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0278.984] GetFileType (hFile=0x224) returned 0x1
	[0278.984] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe4e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.984] CloseHandle (hObject=0x224) returned 1
	[0278.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf.tl30z")) returned 0x220
	[0278.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.993] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0278.997] SetEvent (hEvent=0x26c) returned 1
	[0278.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf")) returned 0x220
	[0278.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF", dwFileAttributes=0x220) returned 1
	[0278.998] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.149] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0279.149] ReadFile (in: hFile=0x224, lpBuffer=0x113fa000, nNumberOfBytesToRead=0x3960, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x113fa000*, lpNumberOfBytesRead=0x1128ce18*=0x3960, lpOverlapped=0x0) returned 1
	[0279.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0279.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11437202 | out: pbBuffer=0x11437202) returned 1
	[0279.158] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113328a0 | out: pbBuffer=0x113328a0) returned 1
	[0279.159] GetFileType (hFile=0x224) returned 0x1
	[0279.159] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.159] WriteFile (in: hFile=0x224, lpBuffer=0x1130e000*, nNumberOfBytesToWrite=0x3960, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1130e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3960, lpOverlapped=0x1102be08) returned 1
	[0279.160] GetFileType (hFile=0x224) returned 0x1
	[0279.160] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3960, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.160] GetFileType (hFile=0x224) returned 0x1
	[0279.160] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.160] WriteFile (in: hFile=0x224, lpBuffer=0x112e2380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112e2380*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0279.160] GetFileType (hFile=0x224) returned 0x1
	[0279.160] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3960, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.160] CloseHandle (hObject=0x224) returned 1
	[0279.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf.tl30z")) returned 0x220
	[0279.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.166] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0279.172] SetEvent (hEvent=0x26c) returned 1
	[0279.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf")) returned 0x220
	[0279.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF", dwFileAttributes=0x220) returned 1
	[0279.172] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.348] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0279.348] ReadFile (in: hFile=0x224, lpBuffer=0x1119a000, nNumberOfBytesToRead=0x578, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1119a000*, lpNumberOfBytesRead=0x1128ce18*=0x578, lpOverlapped=0x0) returned 1
	[0279.360] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0279.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6568 | out: pbBuffer=0x113e6568) returned 1
	[0279.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a0802 | out: pbBuffer=0x111a0802) returned 1
	[0279.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111a0896 | out: pbBuffer=0x111a0896) returned 1
	[0279.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65a0 | out: pbBuffer=0x113e65a0) returned 1
	[0279.361] GetFileType (hFile=0x224) returned 0x1
	[0279.361] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.362] WriteFile (in: hFile=0x224, lpBuffer=0x111b0000*, nNumberOfBytesToWrite=0x578, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x111b0000*, lpNumberOfBytesWritten=0x113a1dfc*=0x578, lpOverlapped=0x113a1e08) returned 1
	[0279.362] GetFileType (hFile=0x224) returned 0x1
	[0279.362] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x578, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.362] GetFileType (hFile=0x224) returned 0x1
	[0279.362] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.362] WriteFile (in: hFile=0x224, lpBuffer=0x11413c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11413c00*, lpNumberOfBytesWritten=0x113a1dfc*=0x22a, lpOverlapped=0x113a1e08) returned 1
	[0279.363] GetFileType (hFile=0x224) returned 0x1
	[0279.363] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x578, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.363] CloseHandle (hObject=0x224) returned 1
	[0279.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf.tl30z")) returned 0x220
	[0279.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.372] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0279.383] SetEvent (hEvent=0x26c) returned 1
	[0279.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf")) returned 0x220
	[0279.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF", dwFileAttributes=0x220) returned 1
	[0279.383] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.539] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0279.539] ReadFile (in: hFile=0x224, lpBuffer=0x1114a000, nNumberOfBytesToRead=0x2ce2, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1114a000*, lpNumberOfBytesRead=0x1128ce18*=0x2ce2, lpOverlapped=0x0) returned 1
	[0279.544] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1a0 | out: pbBuffer=0x1140f1a0) returned 1
	[0279.544] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11235d02 | out: pbBuffer=0x11235d02) returned 1
	[0279.545] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1d0 | out: pbBuffer=0x1140f1d0) returned 1
	[0279.545] GetFileType (hFile=0x224) returned 0x1
	[0279.545] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.545] WriteFile (in: hFile=0x224, lpBuffer=0x1116e000*, nNumberOfBytesToWrite=0x2ce2, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x1116e000*, lpNumberOfBytesWritten=0x113a3dfc*=0x2ce2, lpOverlapped=0x113a3e08) returned 1
	[0279.546] GetFileType (hFile=0x224) returned 0x1
	[0279.546] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2ce2, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.546] GetFileType (hFile=0x224) returned 0x1
	[0279.546] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.546] WriteFile (in: hFile=0x224, lpBuffer=0x11123500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x11123500*, lpNumberOfBytesWritten=0x113a3dfc*=0x22d, lpOverlapped=0x113a3e08) returned 1
	[0279.546] GetFileType (hFile=0x224) returned 0x1
	[0279.546] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2ce2, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.546] CloseHandle (hObject=0x224) returned 1
	[0279.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf.tl30z")) returned 0x220
	[0279.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.558] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0279.563] SetEvent (hEvent=0x26c) returned 1
	[0279.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf")) returned 0x220
	[0279.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF", dwFileAttributes=0x220) returned 1
	[0279.563] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.858] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0279.858] ReadFile (in: hFile=0x224, lpBuffer=0x11372000, nNumberOfBytesToRead=0x1bba, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11372000*, lpNumberOfBytesRead=0x1128ce18*=0x1bba, lpOverlapped=0x0) returned 1
	[0279.867] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0279.867] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1142dd02 | out: pbBuffer=0x1142dd02) returned 1
	[0279.867] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142dd99 | out: pbBuffer=0x1142dd99) returned 1
	[0279.869] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0279.869] GetFileType (hFile=0x224) returned 0x1
	[0279.869] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.869] WriteFile (in: hFile=0x224, lpBuffer=0x112d4000*, nNumberOfBytesToWrite=0x1bba, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x112d4000*, lpNumberOfBytesWritten=0x1121ddfc*=0x1bba, lpOverlapped=0x1121de08) returned 1
	[0279.871] GetFileType (hFile=0x224) returned 0x1
	[0279.871] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1bba, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.871] GetFileType (hFile=0x224) returned 0x1
	[0279.871] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.872] WriteFile (in: hFile=0x224, lpBuffer=0x11390700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x11390700*, lpNumberOfBytesWritten=0x1121ddfc*=0x233, lpOverlapped=0x1121de08) returned 1
	[0279.872] GetFileType (hFile=0x224) returned 0x1
	[0279.872] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1bba, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.872] CloseHandle (hObject=0x224) returned 1
	[0279.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf.tl30z")) returned 0x220
	[0279.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.886] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0279.900] SetEvent (hEvent=0x218) returned 1
	[0279.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf")) returned 0x220
	[0279.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF", dwFileAttributes=0x220) returned 1
	[0279.901] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0280.061] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0280.061] ReadFile (in: hFile=0x224, lpBuffer=0x111d6000, nNumberOfBytesToRead=0x1388, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x111d6000*, lpNumberOfBytesRead=0x1128ce18*=0x1388, lpOverlapped=0x0) returned 1
	[0280.066] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112023e0 | out: pbBuffer=0x112023e0) returned 1
	[0280.066] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112023d8 | out: pbBuffer=0x112023d8) returned 1
	[0280.066] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11321c02 | out: pbBuffer=0x11321c02) returned 1
	[0280.067] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202410 | out: pbBuffer=0x11202410) returned 1
	[0280.067] GetFileType (hFile=0x224) returned 0x1
	[0280.068] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.068] WriteFile (in: hFile=0x224, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x1388, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x11219dfc*=0x1388, lpOverlapped=0x11219e08) returned 1
	[0280.068] GetFileType (hFile=0x224) returned 0x1
	[0280.068] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1388, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.069] GetFileType (hFile=0x224) returned 0x1
	[0280.069] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.069] WriteFile (in: hFile=0x224, lpBuffer=0x11106700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x11106700*, lpNumberOfBytesWritten=0x11219dfc*=0x227, lpOverlapped=0x11219e08) returned 1
	[0280.069] GetFileType (hFile=0x224) returned 0x1
	[0280.069] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1388, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0280.069] CloseHandle (hObject=0x224) returned 1
	[0280.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf.tl30z")) returned 0x220
	[0280.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.079] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0280.090] SetEvent (hEvent=0x210) returned 1
	[0280.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf")) returned 0x220
	[0280.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF", dwFileAttributes=0x220) returned 1
	[0280.091] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0280.229] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0280.229] ReadFile (in: hFile=0x224, lpBuffer=0x112f2000, nNumberOfBytesToRead=0x1c80, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112f2000*, lpNumberOfBytesRead=0x1128ce18*=0x1c80, lpOverlapped=0x0) returned 1
	[0280.235] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332440 | out: pbBuffer=0x11332440) returned 1
	[0280.235] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332438 | out: pbBuffer=0x11332438) returned 1
	[0280.235] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f4802 | out: pbBuffer=0x112f4802) returned 1
	[0280.235] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f484b | out: pbBuffer=0x112f484b) returned 1
	[0280.235] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f486b | out: pbBuffer=0x112f486b) returned 1
	[0280.235] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f48c1 | out: pbBuffer=0x112f48c1) returned 1
	[0280.236] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332470 | out: pbBuffer=0x11332470) returned 1
	[0280.236] GetFileType (hFile=0x224) returned 0x1
	[0280.236] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.236] WriteFile (in: hFile=0x224, lpBuffer=0x11310000*, nNumberOfBytesToWrite=0x1c80, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x11310000*, lpNumberOfBytesWritten=0x1121ddfc*=0x1c80, lpOverlapped=0x1121de08) returned 1
	[0280.236] GetFileType (hFile=0x224) returned 0x1
	[0280.236] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1c80, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.237] GetFileType (hFile=0x224) returned 0x1
	[0280.237] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.237] WriteFile (in: hFile=0x224, lpBuffer=0x11314000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x11314000*, lpNumberOfBytesWritten=0x1121ddfc*=0x224, lpOverlapped=0x1121de08) returned 1
	[0280.237] GetFileType (hFile=0x224) returned 0x1
	[0280.237] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1c80, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.237] CloseHandle (hObject=0x224) returned 1
	[0280.239] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf.tl30z")) returned 0x220
	[0280.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.243] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0280.261] SetEvent (hEvent=0x210) returned 1
	[0280.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf")) returned 0x220
	[0280.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF", dwFileAttributes=0x220) returned 1
	[0280.266] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0280.594] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0280.594] ReadFile (in: hFile=0x1d8, lpBuffer=0x11252000, nNumberOfBytesToRead=0x52c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11252000*, lpNumberOfBytesRead=0x1128ce18*=0x52c, lpOverlapped=0x0) returned 1
	[0280.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113328a0 | out: pbBuffer=0x113328a0) returned 1
	[0280.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11258702 | out: pbBuffer=0x11258702) returned 1
	[0280.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11258792 | out: pbBuffer=0x11258792) returned 1
	[0280.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125879e | out: pbBuffer=0x1125879e) returned 1
	[0280.598] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113328e0 | out: pbBuffer=0x113328e0) returned 1
	[0280.598] GetFileType (hFile=0x1d8) returned 0x1
	[0280.598] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.598] WriteFile (in: hFile=0x1d8, lpBuffer=0x1109c000*, nNumberOfBytesToWrite=0x52c, lpNumberOfBytesWritten=0x1121fdfc, lpOverlapped=0x1121fe08 | out: lpBuffer=0x1109c000*, lpNumberOfBytesWritten=0x1121fdfc*=0x52c, lpOverlapped=0x1121fe08) returned 1
	[0280.599] GetFileType (hFile=0x1d8) returned 0x1
	[0280.599] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x52c, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.599] GetFileType (hFile=0x1d8) returned 0x1
	[0280.599] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.599] WriteFile (in: hFile=0x1d8, lpBuffer=0x1125ca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1121fdfc, lpOverlapped=0x1121fe08 | out: lpBuffer=0x1125ca80*, lpNumberOfBytesWritten=0x1121fdfc*=0x227, lpOverlapped=0x1121fe08) returned 1
	[0280.599] GetFileType (hFile=0x1d8) returned 0x1
	[0280.599] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x52c, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.599] CloseHandle (hObject=0x1d8) returned 1
	[0280.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf.tl30z")) returned 0x220
	[0280.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.607] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0280.617] SetEvent (hEvent=0x234) returned 1
	[0280.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf")) returned 0x220
	[0280.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF", dwFileAttributes=0x220) returned 1
	[0280.618] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0280.778] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0280.778] ReadFile (in: hFile=0x1d8, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x5b04, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x1128ce18*=0x5b04, lpOverlapped=0x0) returned 1
	[0280.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0280.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b3a02 | out: pbBuffer=0x110b3a02) returned 1
	[0280.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b3a13 | out: pbBuffer=0x110b3a13) returned 1
	[0280.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b3ad8 | out: pbBuffer=0x110b3ad8) returned 1
	[0280.785] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0280.785] GetFileType (hFile=0x1d8) returned 0x1
	[0280.785] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1118dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.785] WriteFile (in: hFile=0x1d8, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x5b04, lpNumberOfBytesWritten=0x1118ddfc, lpOverlapped=0x1118de08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x1118ddfc*=0x5b04, lpOverlapped=0x1118de08) returned 1
	[0280.786] GetFileType (hFile=0x1d8) returned 0x1
	[0280.786] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5b04, lpNewFilePointer=0x0, dwMoveMethod=0x1118dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.786] GetFileType (hFile=0x1d8) returned 0x1
	[0280.786] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1118dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.786] WriteFile (in: hFile=0x1d8, lpBuffer=0x110c5c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1118ddfc, lpOverlapped=0x1118de08 | out: lpBuffer=0x110c5c00*, lpNumberOfBytesWritten=0x1118ddfc*=0x22a, lpOverlapped=0x1118de08) returned 1
	[0280.786] GetFileType (hFile=0x1d8) returned 0x1
	[0280.786] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5b04, lpNewFilePointer=0x0, dwMoveMethod=0x1118dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.787] CloseHandle (hObject=0x1d8) returned 1
	[0280.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf.tl30z")) returned 0x220
	[0280.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.827] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0280.839] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0280.868] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0280.888] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0280.918] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.036] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.070] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.110] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.148] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.176] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.208] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.241] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.305] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.339] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.367] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.396] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.411] SetEvent (hEvent=0x234) returned 1
	[0281.411] SetEvent (hEvent=0x1f0) returned 1
	[0281.411] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0281.417] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.417] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0281.420] SetEvent (hEvent=0x118) returned 1
	[0281.420] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0281.425] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.462] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.775] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0281.899] SetEvent (hEvent=0x1b0) returned 1
	[0281.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif")) returned 0x220
	[0281.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF", dwFileAttributes=0x220) returned 1
	[0281.899] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif.tl30z"), dwFlags=0x1) returned 1
	[0282.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0282.088] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0282.089] ReadFile (in: hFile=0x1d8, lpBuffer=0x113f6000, nNumberOfBytesToRead=0x4c4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x113f6000*, lpNumberOfBytesRead=0x1128ce18*=0x4c4, lpOverlapped=0x0) returned 1
	[0282.094] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202110 | out: pbBuffer=0x11202110) returned 1
	[0282.094] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ce802 | out: pbBuffer=0x111ce802) returned 1
	[0282.094] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ce863 | out: pbBuffer=0x111ce863) returned 1
	[0282.094] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ce87a | out: pbBuffer=0x111ce87a) returned 1
	[0282.094] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ce8bb | out: pbBuffer=0x111ce8bb) returned 1
	[0282.094] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ce8ce | out: pbBuffer=0x111ce8ce) returned 1
	[0282.095] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202140 | out: pbBuffer=0x11202140) returned 1
	[0282.095] GetFileType (hFile=0x1d8) returned 0x1
	[0282.095] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.095] WriteFile (in: hFile=0x1d8, lpBuffer=0x11328000*, nNumberOfBytesToWrite=0x4c4, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x11328000*, lpNumberOfBytesWritten=0x111c7dfc*=0x4c4, lpOverlapped=0x111c7e08) returned 1
	[0282.095] GetFileType (hFile=0x1d8) returned 0x1
	[0282.096] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4c4, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.096] GetFileType (hFile=0x1d8) returned 0x1
	[0282.096] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.096] WriteFile (in: hFile=0x1d8, lpBuffer=0x112e2a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x112e2a80*, lpNumberOfBytesWritten=0x111c7dfc*=0x224, lpOverlapped=0x111c7e08) returned 1
	[0282.096] GetFileType (hFile=0x1d8) returned 0x1
	[0282.096] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4c4, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.096] CloseHandle (hObject=0x1d8) returned 1
	[0282.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif.tl30z")) returned 0x220
	[0282.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.103] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0282.114] SetEvent (hEvent=0x1b0) returned 1
	[0282.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf")) returned 0x220
	[0282.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF", dwFileAttributes=0x220) returned 1
	[0282.114] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0282.418] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0282.418] ReadFile (in: hFile=0x1d8, lpBuffer=0x110aa000, nNumberOfBytesToRead=0x8a12, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110aa000*, lpNumberOfBytesRead=0x1128ce18*=0x8a12, lpOverlapped=0x0) returned 1
	[0282.426] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0282.426] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c0802 | out: pbBuffer=0x110c0802) returned 1
	[0282.427] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c0836 | out: pbBuffer=0x110c0836) returned 1
	[0282.427] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c0847 | out: pbBuffer=0x110c0847) returned 1
	[0282.427] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c0884 | out: pbBuffer=0x110c0884) returned 1
	[0282.427] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c0898 | out: pbBuffer=0x110c0898) returned 1
	[0282.427] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c08b3 | out: pbBuffer=0x110c08b3) returned 1
	[0282.427] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0282.428] GetFileType (hFile=0x1d8) returned 0x1
	[0282.428] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.428] WriteFile (in: hFile=0x1d8, lpBuffer=0x11108000*, nNumberOfBytesToWrite=0x8a12, lpNumberOfBytesWritten=0x111c3dfc, lpOverlapped=0x111c3e08 | out: lpBuffer=0x11108000*, lpNumberOfBytesWritten=0x111c3dfc*=0x8a12, lpOverlapped=0x111c3e08) returned 1
	[0282.429] GetFileType (hFile=0x1d8) returned 0x1
	[0282.429] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8a12, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.429] GetFileType (hFile=0x1d8) returned 0x1
	[0282.429] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.429] WriteFile (in: hFile=0x1d8, lpBuffer=0x11298a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x111c3dfc, lpOverlapped=0x111c3e08 | out: lpBuffer=0x11298a80*, lpNumberOfBytesWritten=0x111c3dfc*=0x22a, lpOverlapped=0x111c3e08) returned 1
	[0282.429] GetFileType (hFile=0x1d8) returned 0x1
	[0282.430] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8a12, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.430] CloseHandle (hObject=0x1d8) returned 1
	[0282.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf.tl30z")) returned 0x220
	[0282.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.442] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0282.475] SetEvent (hEvent=0x1b0) returned 1
	[0282.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf")) returned 0x220
	[0282.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF", dwFileAttributes=0x220) returned 1
	[0282.476] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0282.736] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0282.737] ReadFile (in: hFile=0x288, lpBuffer=0x1112a000, nNumberOfBytesToRead=0x5314, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1112a000*, lpNumberOfBytesRead=0x1128ce18*=0x5314, lpOverlapped=0x0) returned 1
	[0282.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202260 | out: pbBuffer=0x11202260) returned 1
	[0282.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202258 | out: pbBuffer=0x11202258) returned 1
	[0282.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11129302 | out: pbBuffer=0x11129302) returned 1
	[0282.788] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202290 | out: pbBuffer=0x11202290) returned 1
	[0282.789] GetFileType (hFile=0x288) returned 0x1
	[0282.789] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.789] WriteFile (in: hFile=0x288, lpBuffer=0x11306000*, nNumberOfBytesToWrite=0x5314, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11306000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5314, lpOverlapped=0x1102be08) returned 1
	[0282.790] GetFileType (hFile=0x288) returned 0x1
	[0282.790] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5314, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.790] GetFileType (hFile=0x288) returned 0x1
	[0282.790] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.790] WriteFile (in: hFile=0x288, lpBuffer=0x1119dc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1119dc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0282.790] GetFileType (hFile=0x288) returned 0x1
	[0282.790] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5314, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.791] CloseHandle (hObject=0x288) returned 1
	[0282.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf.tl30z")) returned 0x220
	[0282.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf")) returned 0x220
	[0282.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF", dwFileAttributes=0x220) returned 1
	[0282.805] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0282.994] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0282.994] ReadFile (in: hFile=0x288, lpBuffer=0x11102000, nNumberOfBytesToRead=0xd04, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11102000*, lpNumberOfBytesRead=0x1128ce18*=0xd04, lpOverlapped=0x0) returned 1
	[0282.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0282.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e1302 | out: pbBuffer=0x112e1302) returned 1
	[0282.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e1311 | out: pbBuffer=0x112e1311) returned 1
	[0282.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0282.999] GetFileType (hFile=0x288) returned 0x1
	[0283.000] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.000] WriteFile (in: hFile=0x288, lpBuffer=0x11122000*, nNumberOfBytesToWrite=0xd04, lpNumberOfBytesWritten=0x111b3dfc, lpOverlapped=0x111b3e08 | out: lpBuffer=0x11122000*, lpNumberOfBytesWritten=0x111b3dfc*=0xd04, lpOverlapped=0x111b3e08) returned 1
	[0283.000] GetFileType (hFile=0x288) returned 0x1
	[0283.000] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xd04, lpNewFilePointer=0x0, dwMoveMethod=0x111b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.000] GetFileType (hFile=0x288) returned 0x1
	[0283.000] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.001] WriteFile (in: hFile=0x288, lpBuffer=0x11061880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x111b3dfc, lpOverlapped=0x111b3e08 | out: lpBuffer=0x11061880*, lpNumberOfBytesWritten=0x111b3dfc*=0x224, lpOverlapped=0x111b3e08) returned 1
	[0283.001] GetFileType (hFile=0x288) returned 0x1
	[0283.001] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xd04, lpNewFilePointer=0x0, dwMoveMethod=0x111b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.001] CloseHandle (hObject=0x288) returned 1
	[0283.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf.tl30z")) returned 0x220
	[0283.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0283.014] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0283.018] SetEvent (hEvent=0x210) returned 1
	[0283.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf")) returned 0x220
	[0283.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF", dwFileAttributes=0x220) returned 1
	[0283.018] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf.tl30z"), dwFlags=0x1) returned 1
	[0283.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.198] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0283.199] ReadFile (in: hFile=0x288, lpBuffer=0x111fc000, nNumberOfBytesToRead=0x136a, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x111fc000*, lpNumberOfBytesRead=0x1128ce18*=0x136a, lpOverlapped=0x0) returned 1
	[0283.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0283.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e1e02 | out: pbBuffer=0x112e1e02) returned 1
	[0283.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e1ebb | out: pbBuffer=0x112e1ebb) returned 1
	[0283.205] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0283.205] GetFileType (hFile=0x288) returned 0x1
	[0283.205] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.205] WriteFile (in: hFile=0x288, lpBuffer=0x1122a000*, nNumberOfBytesToWrite=0x136a, lpNumberOfBytesWritten=0x111b3dfc, lpOverlapped=0x111b3e08 | out: lpBuffer=0x1122a000*, lpNumberOfBytesWritten=0x111b3dfc*=0x136a, lpOverlapped=0x111b3e08) returned 1
	[0283.206] GetFileType (hFile=0x288) returned 0x1
	[0283.206] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x136a, lpNewFilePointer=0x0, dwMoveMethod=0x111b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.206] GetFileType (hFile=0x288) returned 0x1
	[0283.206] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.206] WriteFile (in: hFile=0x288, lpBuffer=0x11210700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x111b3dfc, lpOverlapped=0x111b3e08 | out: lpBuffer=0x11210700*, lpNumberOfBytesWritten=0x111b3dfc*=0x22d, lpOverlapped=0x111b3e08) returned 1
	[0283.207] GetFileType (hFile=0x288) returned 0x1
	[0283.207] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x136a, lpNewFilePointer=0x0, dwMoveMethod=0x111b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.207] CloseHandle (hObject=0x288) returned 1
	[0283.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf.tl30z")) returned 0x220
	[0283.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0283.226] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0283.236] SetEvent (hEvent=0x210) returned 1
	[0283.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf")) returned 0x220
	[0283.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF", dwFileAttributes=0x220) returned 1
	[0283.237] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf.tl30z"), dwFlags=0x1) returned 1
	[0283.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.459] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0283.459] ReadFile (in: hFile=0x288, lpBuffer=0x11396000, nNumberOfBytesToRead=0x7265, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x1128ce18*=0x7265, lpOverlapped=0x0) returned 1
	[0283.468] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202100 | out: pbBuffer=0x11202100) returned 1
	[0283.468] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112020f8 | out: pbBuffer=0x112020f8) returned 1
	[0283.468] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113f0802 | out: pbBuffer=0x113f0802) returned 1
	[0283.469] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202130 | out: pbBuffer=0x11202130) returned 1
	[0283.470] GetFileType (hFile=0x288) returned 0x1
	[0283.470] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.470] WriteFile (in: hFile=0x288, lpBuffer=0x11bd6000*, nNumberOfBytesToWrite=0x7265, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11bd6000*, lpNumberOfBytesWritten=0x1133fdfc*=0x7265, lpOverlapped=0x1133fe08) returned 1
	[0283.470] GetFileType (hFile=0x288) returned 0x1
	[0283.470] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x7265, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.471] GetFileType (hFile=0x288) returned 0x1
	[0283.471] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.471] WriteFile (in: hFile=0x288, lpBuffer=0x11322a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11322a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0283.471] GetFileType (hFile=0x288) returned 0x1
	[0283.471] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x7265, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.471] CloseHandle (hObject=0x288) returned 1
	[0283.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf.tl30z")) returned 0x220
	[0283.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0283.482] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0283.495] SetEvent (hEvent=0x26c) returned 1
	[0283.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 0x220
	[0283.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG", dwFileAttributes=0x220) returned 1
	[0283.496] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.tl30z"), dwFlags=0x1) returned 1
	[0283.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0283.725] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0283.725] ReadFile (in: hFile=0x1d4, lpBuffer=0x110aa000, nNumberOfBytesToRead=0x1b11, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110aa000*, lpNumberOfBytesRead=0x1128ce18*=0x1b11, lpOverlapped=0x0) returned 1
	[0283.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0283.731] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332668 | out: pbBuffer=0x11332668) returned 1
	[0283.731] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c1202 | out: pbBuffer=0x113c1202) returned 1
	[0283.731] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0283.732] GetFileType (hFile=0x1d4) returned 0x1
	[0283.732] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.732] WriteFile (in: hFile=0x1d4, lpBuffer=0x110c6000*, nNumberOfBytesToWrite=0x1b11, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110c6000*, lpNumberOfBytesWritten=0x11031dfc*=0x1b11, lpOverlapped=0x11031e08) returned 1
	[0283.732] GetFileType (hFile=0x1d4) returned 0x1
	[0283.732] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1b11, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.732] GetFileType (hFile=0x1d4) returned 0x1
	[0283.732] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.733] WriteFile (in: hFile=0x1d4, lpBuffer=0x1130fc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1130fc00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0283.733] GetFileType (hFile=0x1d4) returned 0x1
	[0283.733] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1b11, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.733] CloseHandle (hObject=0x1d4) returned 1
	[0283.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.tl30z")) returned 0x220
	[0283.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0283.739] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0283.746] SetEvent (hEvent=0x26c) returned 1
	[0283.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 0x220
	[0283.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF", dwFileAttributes=0x220) returned 1
	[0283.747] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.tl30z"), dwFlags=0x1) returned 1
	[0283.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0283.916] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0283.916] ReadFile (in: hFile=0x1d4, lpBuffer=0x11396000, nNumberOfBytesToRead=0x6b9a, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x1128ce18*=0x6b9a, lpOverlapped=0x0) returned 1
	[0283.921] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0283.921] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0283.922] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11266802 | out: pbBuffer=0x11266802) returned 1
	[0283.922] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112668e8 | out: pbBuffer=0x112668e8) returned 1
	[0283.922] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0283.923] GetFileType (hFile=0x1d4) returned 0x1
	[0283.923] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.923] WriteFile (in: hFile=0x1d4, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x6b9a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1102bdfc*=0x6b9a, lpOverlapped=0x1102be08) returned 1
	[0283.923] GetFileType (hFile=0x1d4) returned 0x1
	[0283.923] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6b9a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.923] GetFileType (hFile=0x1d4) returned 0x1
	[0283.923] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.924] WriteFile (in: hFile=0x1d4, lpBuffer=0x112bea80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112bea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0283.924] GetFileType (hFile=0x1d4) returned 0x1
	[0283.924] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6b9a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.924] CloseHandle (hObject=0x1d4) returned 1
	[0283.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.tl30z")) returned 0x220
	[0283.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0283.943] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0283.952] SetEvent (hEvent=0x210) returned 1
	[0283.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 0x220
	[0283.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF", dwFileAttributes=0x220) returned 1
	[0283.952] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.085] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0284.085] ReadFile (in: hFile=0x1d4, lpBuffer=0x11450000, nNumberOfBytesToRead=0x55ba, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11450000*, lpNumberOfBytesRead=0x1128ce18*=0x55ba, lpOverlapped=0x0) returned 1
	[0284.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0284.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11373d02 | out: pbBuffer=0x11373d02) returned 1
	[0284.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11373d45 | out: pbBuffer=0x11373d45) returned 1
	[0284.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0284.090] GetFileType (hFile=0x1d4) returned 0x1
	[0284.090] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.090] WriteFile (in: hFile=0x1d4, lpBuffer=0x112fc000*, nNumberOfBytesToWrite=0x55ba, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x112fc000*, lpNumberOfBytesWritten=0x1138fdfc*=0x55ba, lpOverlapped=0x1138fe08) returned 1
	[0284.090] GetFileType (hFile=0x1d4) returned 0x1
	[0284.090] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x55ba, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.090] GetFileType (hFile=0x1d4) returned 0x1
	[0284.091] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.091] WriteFile (in: hFile=0x1d4, lpBuffer=0x110da700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x110da700*, lpNumberOfBytesWritten=0x1138fdfc*=0x233, lpOverlapped=0x1138fe08) returned 1
	[0284.091] GetFileType (hFile=0x1d4) returned 0x1
	[0284.091] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x55ba, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.091] CloseHandle (hObject=0x1d4) returned 1
	[0284.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.tl30z")) returned 0x220
	[0284.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.100] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0284.108] SetEvent (hEvent=0x210) returned 1
	[0284.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 0x220
	[0284.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF", dwFileAttributes=0x220) returned 1
	[0284.109] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.322] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0284.322] ReadFile (in: hFile=0x1d4, lpBuffer=0x113ec000, nNumberOfBytesToRead=0x27d0, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x113ec000*, lpNumberOfBytesRead=0x1128ce18*=0x27d0, lpOverlapped=0x0) returned 1
	[0284.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202130 | out: pbBuffer=0x11202130) returned 1
	[0284.332] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202128 | out: pbBuffer=0x11202128) returned 1
	[0284.332] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11260802 | out: pbBuffer=0x11260802) returned 1
	[0284.332] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11260806 | out: pbBuffer=0x11260806) returned 1
	[0284.332] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202160 | out: pbBuffer=0x11202160) returned 1
	[0284.332] GetFileType (hFile=0x1d4) returned 0x1
	[0284.332] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.333] WriteFile (in: hFile=0x1d4, lpBuffer=0x11254000*, nNumberOfBytesToWrite=0x27d0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11254000*, lpNumberOfBytesWritten=0x1102bdfc*=0x27d0, lpOverlapped=0x1102be08) returned 1
	[0284.333] GetFileType (hFile=0x1d4) returned 0x1
	[0284.333] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x27d0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.333] GetFileType (hFile=0x1d4) returned 0x1
	[0284.333] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.333] WriteFile (in: hFile=0x1d4, lpBuffer=0x11252e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11252e00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0284.333] GetFileType (hFile=0x1d4) returned 0x1
	[0284.333] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x27d0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.333] CloseHandle (hObject=0x1d4) returned 1
	[0284.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.tl30z")) returned 0x220
	[0284.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf")) returned 0x220
	[0284.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF", dwFileAttributes=0x220) returned 1
	[0284.338] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.560] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0284.560] ReadFile (in: hFile=0x1d4, lpBuffer=0x1116a000, nNumberOfBytesToRead=0x1846, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1116a000*, lpNumberOfBytesRead=0x11423e18*=0x1846, lpOverlapped=0x0) returned 1
	[0284.564] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202860 | out: pbBuffer=0x11202860) returned 1
	[0284.565] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138bd02 | out: pbBuffer=0x1138bd02) returned 1
	[0284.565] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138bd1f | out: pbBuffer=0x1138bd1f) returned 1
	[0284.565] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202890 | out: pbBuffer=0x11202890) returned 1
	[0284.566] GetFileType (hFile=0x1d4) returned 0x1
	[0284.566] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0284.566] WriteFile (in: hFile=0x1d4, lpBuffer=0x112e4000*, nNumberOfBytesToWrite=0x1846, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112e4000*, lpNumberOfBytesWritten=0x11031dfc*=0x1846, lpOverlapped=0x11031e08) returned 1
	[0284.567] GetFileType (hFile=0x1d4) returned 0x1
	[0284.567] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1846, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0284.567] GetFileType (hFile=0x1d4) returned 0x1
	[0284.567] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0284.567] WriteFile (in: hFile=0x1d4, lpBuffer=0x11397500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11397500*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0284.567] GetFileType (hFile=0x1d4) returned 0x1
	[0284.567] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1846, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0284.567] CloseHandle (hObject=0x1d4) returned 1
	[0284.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.tl30z")) returned 0x220
	[0284.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.583] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0284.599] SetEvent (hEvent=0x118) returned 1
	[0284.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf")) returned 0x220
	[0284.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF", dwFileAttributes=0x220) returned 1
	[0284.600] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.782] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0284.782] ReadFile (in: hFile=0x1d4, lpBuffer=0x112b0000, nNumberOfBytesToRead=0x23c2, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112b0000*, lpNumberOfBytesRead=0x11423e18*=0x23c2, lpOverlapped=0x0) returned 1
	[0284.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0284.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e648 | out: pbBuffer=0x1104e648) returned 1
	[0284.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112be802 | out: pbBuffer=0x112be802) returned 1
	[0284.788] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e680 | out: pbBuffer=0x1104e680) returned 1
	[0284.788] GetFileType (hFile=0x1d4) returned 0x1
	[0284.788] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.788] WriteFile (in: hFile=0x1d4, lpBuffer=0x11118000*, nNumberOfBytesToWrite=0x23c2, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11118000*, lpNumberOfBytesWritten=0x1102bdfc*=0x23c2, lpOverlapped=0x1102be08) returned 1
	[0284.789] GetFileType (hFile=0x1d4) returned 0x1
	[0284.789] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x23c2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.789] GetFileType (hFile=0x1d4) returned 0x1
	[0284.789] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.789] WriteFile (in: hFile=0x1d4, lpBuffer=0x1129d500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1129d500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0284.789] GetFileType (hFile=0x1d4) returned 0x1
	[0284.789] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x23c2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.789] CloseHandle (hObject=0x1d4) returned 1
	[0284.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.tl30z")) returned 0x220
	[0284.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.802] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0284.816] SetEvent (hEvent=0x118) returned 1
	[0284.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf")) returned 0x220
	[0284.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF", dwFileAttributes=0x220) returned 1
	[0284.817] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.tl30z"), dwFlags=0x1) returned 1
	[0285.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.087] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0285.087] ReadFile (in: hFile=0x1d4, lpBuffer=0x110dc000, nNumberOfBytesToRead=0x1016, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110dc000*, lpNumberOfBytesRead=0x11423e18*=0x1016, lpOverlapped=0x0) returned 1
	[0285.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0285.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0285.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11354802 | out: pbBuffer=0x11354802) returned 1
	[0285.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11354852 | out: pbBuffer=0x11354852) returned 1
	[0285.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113548de | out: pbBuffer=0x113548de) returned 1
	[0285.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0285.092] GetFileType (hFile=0x1d4) returned 0x1
	[0285.092] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.092] WriteFile (in: hFile=0x1d4, lpBuffer=0x1137e000*, nNumberOfBytesToWrite=0x1016, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x1137e000*, lpNumberOfBytesWritten=0x110ebdfc*=0x1016, lpOverlapped=0x110ebe08) returned 1
	[0285.093] GetFileType (hFile=0x1d4) returned 0x1
	[0285.093] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1016, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.093] GetFileType (hFile=0x1d4) returned 0x1
	[0285.093] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.093] WriteFile (in: hFile=0x1d4, lpBuffer=0x111a7500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x111a7500*, lpNumberOfBytesWritten=0x110ebdfc*=0x224, lpOverlapped=0x110ebe08) returned 1
	[0285.093] GetFileType (hFile=0x1d4) returned 0x1
	[0285.094] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1016, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.094] CloseHandle (hObject=0x1d4) returned 1
	[0285.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.tl30z")) returned 0x220
	[0285.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.101] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0285.114] SetEvent (hEvent=0x210) returned 1
	[0285.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg")) returned 0x220
	[0285.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG", dwFileAttributes=0x220) returned 1
	[0285.115] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg.tl30z"), dwFlags=0x1) returned 1
	[0285.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.283] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0285.283] ReadFile (in: hFile=0x1d4, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x1f8c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x11423e18*=0x1f8c, lpOverlapped=0x0) returned 1
	[0285.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327d0 | out: pbBuffer=0x113327d0) returned 1
	[0285.312] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11377302 | out: pbBuffer=0x11377302) returned 1
	[0285.312] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332800 | out: pbBuffer=0x11332800) returned 1
	[0285.312] GetFileType (hFile=0x1d4) returned 0x1
	[0285.314] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.314] WriteFile (in: hFile=0x1d4, lpBuffer=0x11168000*, nNumberOfBytesToWrite=0x1f8c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11168000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1f8c, lpOverlapped=0x1102be08) returned 1
	[0285.314] GetFileType (hFile=0x1d4) returned 0x1
	[0285.314] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1f8c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.315] GetFileType (hFile=0x1d4) returned 0x1
	[0285.315] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.315] WriteFile (in: hFile=0x1d4, lpBuffer=0x11391880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11391880*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0285.315] GetFileType (hFile=0x1d4) returned 0x1
	[0285.316] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1f8c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.316] CloseHandle (hObject=0x1d4) returned 1
	[0285.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg.tl30z")) returned 0x220
	[0285.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0285.328] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0285.349] SetEvent (hEvent=0x210) returned 1
	[0285.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif")) returned 0x220
	[0285.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF", dwFileAttributes=0x220) returned 1
	[0285.350] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif.tl30z"), dwFlags=0x1) returned 1
	[0285.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.520] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0285.520] ReadFile (in: hFile=0x1d4, lpBuffer=0x110a4000, nNumberOfBytesToRead=0x62b1, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110a4000*, lpNumberOfBytesRead=0x11423e18*=0x62b1, lpOverlapped=0x0) returned 1
	[0285.531] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112021c0 | out: pbBuffer=0x112021c0) returned 1
	[0285.531] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116fd02 | out: pbBuffer=0x1116fd02) returned 1
	[0285.531] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116fd80 | out: pbBuffer=0x1116fd80) returned 1
	[0285.531] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112021f0 | out: pbBuffer=0x112021f0) returned 1
	[0285.532] GetFileType (hFile=0x1d4) returned 0x1
	[0285.532] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.532] WriteFile (in: hFile=0x1d4, lpBuffer=0x111dc000*, nNumberOfBytesToWrite=0x62b1, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x111dc000*, lpNumberOfBytesWritten=0x110ebdfc*=0x62b1, lpOverlapped=0x110ebe08) returned 1
	[0285.532] GetFileType (hFile=0x1d4) returned 0x1
	[0285.532] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x62b1, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.533] GetFileType (hFile=0x1d4) returned 0x1
	[0285.533] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.533] WriteFile (in: hFile=0x1d4, lpBuffer=0x11157c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x11157c00*, lpNumberOfBytesWritten=0x110ebdfc*=0x22d, lpOverlapped=0x110ebe08) returned 1
	[0285.533] GetFileType (hFile=0x1d4) returned 0x1
	[0285.533] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x62b1, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.533] CloseHandle (hObject=0x1d4) returned 1
	[0285.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif.tl30z")) returned 0x220
	[0285.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.542] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0285.556] SetEvent (hEvent=0x210) returned 1
	[0285.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif")) returned 0x220
	[0285.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF", dwFileAttributes=0x220) returned 1
	[0285.556] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif.tl30z"), dwFlags=0x1) returned 1
	[0285.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.793] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0285.793] ReadFile (in: hFile=0x1d4, lpBuffer=0x1136e000, nNumberOfBytesToRead=0x84b7, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x11423e18*=0x84b7, lpOverlapped=0x0) returned 1
	[0285.798] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e620 | out: pbBuffer=0x1104e620) returned 1
	[0285.799] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e618 | out: pbBuffer=0x1104e618) returned 1
	[0285.799] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133c702 | out: pbBuffer=0x1133c702) returned 1
	[0285.799] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1133c733 | out: pbBuffer=0x1133c733) returned 1
	[0285.799] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0285.801] GetFileType (hFile=0x1d4) returned 0x1
	[0285.801] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.801] WriteFile (in: hFile=0x1d4, lpBuffer=0x11246000*, nNumberOfBytesToWrite=0x84b7, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11246000*, lpNumberOfBytesWritten=0x1102bdfc*=0x84b7, lpOverlapped=0x1102be08) returned 1
	[0285.801] GetFileType (hFile=0x1d4) returned 0x1
	[0285.802] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x84b7, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.802] GetFileType (hFile=0x1d4) returned 0x1
	[0285.802] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.802] WriteFile (in: hFile=0x1d4, lpBuffer=0x113a5880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113a5880*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0285.803] GetFileType (hFile=0x1d4) returned 0x1
	[0285.803] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x84b7, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.803] CloseHandle (hObject=0x1d4) returned 1
	[0285.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif.tl30z")) returned 0x220
	[0285.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.812] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0285.825] SetEvent (hEvent=0x210) returned 1
	[0285.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf")) returned 0x220
	[0285.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF", dwFileAttributes=0x220) returned 1
	[0285.826] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf.tl30z"), dwFlags=0x1) returned 1
	[0286.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.180] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0286.180] ReadFile (in: hFile=0x1d4, lpBuffer=0x11232000, nNumberOfBytesToRead=0x45be, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11232000*, lpNumberOfBytesRead=0x11423e18*=0x45be, lpOverlapped=0x0) returned 1
	[0286.184] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0286.184] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0286.184] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d0802 | out: pbBuffer=0x111d0802) returned 1
	[0286.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0286.185] GetFileType (hFile=0x1d4) returned 0x1
	[0286.185] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.186] WriteFile (in: hFile=0x1d4, lpBuffer=0x11298000*, nNumberOfBytesToWrite=0x45be, lpNumberOfBytesWritten=0x113bddfc, lpOverlapped=0x113bde08 | out: lpBuffer=0x11298000*, lpNumberOfBytesWritten=0x113bddfc*=0x45be, lpOverlapped=0x113bde08) returned 1
	[0286.186] GetFileType (hFile=0x1d4) returned 0x1
	[0286.186] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x45be, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.186] GetFileType (hFile=0x1d4) returned 0x1
	[0286.186] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.187] WriteFile (in: hFile=0x1d4, lpBuffer=0x111e2a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x113bddfc, lpOverlapped=0x113bde08 | out: lpBuffer=0x111e2a80*, lpNumberOfBytesWritten=0x113bddfc*=0x233, lpOverlapped=0x113bde08) returned 1
	[0286.187] GetFileType (hFile=0x1d4) returned 0x1
	[0286.187] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x45be, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.187] CloseHandle (hObject=0x1d4) returned 1
	[0286.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf.tl30z")) returned 0x220
	[0286.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0286.219] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0286.233] SetEvent (hEvent=0x210) returned 1
	[0286.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp")) returned 0x220
	[0286.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP", dwFileAttributes=0x220) returned 1
	[0286.234] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp.tl30z"), dwFlags=0x1) returned 1
	[0286.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.445] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0286.445] ReadFile (in: hFile=0x1d4, lpBuffer=0x11154000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11154000*, lpNumberOfBytesRead=0x11423e18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0286.450] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0286.450] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a3402 | out: pbBuffer=0x111a3402) returned 1
	[0286.450] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111a3430 | out: pbBuffer=0x111a3430) returned 1
	[0286.451] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0286.452] GetFileType (hFile=0x1d4) returned 0x1
	[0286.452] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.452] WriteFile (in: hFile=0x1d4, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7ce0, lpOverlapped=0x1102be08) returned 1
	[0286.453] GetFileType (hFile=0x1d4) returned 0x1
	[0286.453] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.453] GetFileType (hFile=0x1d4) returned 0x1
	[0286.453] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.453] WriteFile (in: hFile=0x1d4, lpBuffer=0x11177c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11177c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0286.454] GetFileType (hFile=0x1d4) returned 0x1
	[0286.454] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.454] CloseHandle (hObject=0x1d4) returned 1
	[0286.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp.tl30z")) returned 0x220
	[0286.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0286.463] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0286.491] SetEvent (hEvent=0x234) returned 1
	[0286.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp")) returned 0x220
	[0286.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP", dwFileAttributes=0x220) returned 1
	[0286.492] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp.tl30z"), dwFlags=0x1) returned 1
	[0286.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.708] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0286.708] ReadFile (in: hFile=0x1d4, lpBuffer=0x11444000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11444000*, lpNumberOfBytesRead=0x11423e18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0286.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0286.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116b302 | out: pbBuffer=0x1116b302) returned 1
	[0286.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116b311 | out: pbBuffer=0x1116b311) returned 1
	[0286.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116b327 | out: pbBuffer=0x1116b327) returned 1
	[0286.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116b3b3 | out: pbBuffer=0x1116b3b3) returned 1
	[0286.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0286.718] GetFileType (hFile=0x1d4) returned 0x1
	[0286.718] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.718] WriteFile (in: hFile=0x1d4, lpBuffer=0x11302000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x113bbdfc, lpOverlapped=0x113bbe08 | out: lpBuffer=0x11302000*, lpNumberOfBytesWritten=0x113bbdfc*=0x7ce0, lpOverlapped=0x113bbe08) returned 1
	[0286.719] GetFileType (hFile=0x1d4) returned 0x1
	[0286.719] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x113bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.719] GetFileType (hFile=0x1d4) returned 0x1
	[0286.719] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.719] WriteFile (in: hFile=0x1d4, lpBuffer=0x11361880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113bbdfc, lpOverlapped=0x113bbe08 | out: lpBuffer=0x11361880*, lpNumberOfBytesWritten=0x113bbdfc*=0x230, lpOverlapped=0x113bbe08) returned 1
	[0286.719] GetFileType (hFile=0x1d4) returned 0x1
	[0286.720] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x113bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.720] CloseHandle (hObject=0x1d4) returned 1
	[0286.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp.tl30z")) returned 0x220
	[0286.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0286.734] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0286.747] SetEvent (hEvent=0x234) returned 1
	[0286.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf")) returned 0x220
	[0286.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF", dwFileAttributes=0x220) returned 1
	[0286.748] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf.tl30z"), dwFlags=0x1) returned 1
	[0286.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.969] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0286.969] ReadFile (in: hFile=0x1d4, lpBuffer=0x113e2000, nNumberOfBytesToRead=0x3e74, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113e2000*, lpNumberOfBytesRead=0x11423e18*=0x3e74, lpOverlapped=0x0) returned 1
	[0286.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0286.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0286.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11219d02 | out: pbBuffer=0x11219d02) returned 1
	[0286.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0286.976] GetFileType (hFile=0x1d4) returned 0x1
	[0286.976] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.976] WriteFile (in: hFile=0x1d4, lpBuffer=0x11be6000*, nNumberOfBytesToWrite=0x3e74, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11be6000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3e74, lpOverlapped=0x1102be08) returned 1
	[0286.976] GetFileType (hFile=0x1d4) returned 0x1
	[0286.976] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3e74, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.977] GetFileType (hFile=0x1d4) returned 0x1
	[0286.977] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.977] WriteFile (in: hFile=0x1d4, lpBuffer=0x110ba700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110ba700*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0286.977] GetFileType (hFile=0x1d4) returned 0x1
	[0286.977] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3e74, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.977] CloseHandle (hObject=0x1d4) returned 1
	[0286.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf.tl30z")) returned 0x220
	[0286.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0286.990] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0287.003] SetEvent (hEvent=0x1b0) returned 1
	[0287.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf")) returned 0x220
	[0287.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF", dwFileAttributes=0x220) returned 1
	[0287.004] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.394] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0287.394] ReadFile (in: hFile=0x1d4, lpBuffer=0x111f6000, nNumberOfBytesToRead=0x3264, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x111f6000*, lpNumberOfBytesRead=0x11423e18*=0x3264, lpOverlapped=0x0) returned 1
	[0287.404] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0287.404] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6258 | out: pbBuffer=0x113e6258) returned 1
	[0287.404] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11223302 | out: pbBuffer=0x11223302) returned 1
	[0287.404] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0287.405] GetFileType (hFile=0x1d4) returned 0x1
	[0287.405] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.405] WriteFile (in: hFile=0x1d4, lpBuffer=0x113c4000*, nNumberOfBytesToWrite=0x3264, lpNumberOfBytesWritten=0x1121fdfc, lpOverlapped=0x1121fe08 | out: lpBuffer=0x113c4000*, lpNumberOfBytesWritten=0x1121fdfc*=0x3264, lpOverlapped=0x1121fe08) returned 1
	[0287.406] GetFileType (hFile=0x1d4) returned 0x1
	[0287.406] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3264, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.406] GetFileType (hFile=0x1d4) returned 0x1
	[0287.406] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.406] WriteFile (in: hFile=0x1d4, lpBuffer=0x11239880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1121fdfc, lpOverlapped=0x1121fe08 | out: lpBuffer=0x11239880*, lpNumberOfBytesWritten=0x1121fdfc*=0x22a, lpOverlapped=0x1121fe08) returned 1
	[0287.406] GetFileType (hFile=0x1d4) returned 0x1
	[0287.406] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3264, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.406] CloseHandle (hObject=0x1d4) returned 1
	[0287.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf.tl30z")) returned 0x220
	[0287.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.425] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0287.440] SetEvent (hEvent=0x1b0) returned 1
	[0287.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf")) returned 0x220
	[0287.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF", dwFileAttributes=0x220) returned 1
	[0287.441] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.618] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0287.619] ReadFile (in: hFile=0x1d4, lpBuffer=0x112c3800, nNumberOfBytesToRead=0x1600, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112c3800*, lpNumberOfBytesRead=0x11423e18*=0x1600, lpOverlapped=0x0) returned 1
	[0287.630] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0287.630] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e638 | out: pbBuffer=0x1104e638) returned 1
	[0287.630] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1113c802 | out: pbBuffer=0x1113c802) returned 1
	[0287.631] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1113c833 | out: pbBuffer=0x1113c833) returned 1
	[0287.631] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0287.631] GetFileType (hFile=0x1d4) returned 0x1
	[0287.631] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.631] WriteFile (in: hFile=0x1d4, lpBuffer=0x11150000*, nNumberOfBytesToWrite=0x1600, lpNumberOfBytesWritten=0x1121bdfc, lpOverlapped=0x1121be08 | out: lpBuffer=0x11150000*, lpNumberOfBytesWritten=0x1121bdfc*=0x1600, lpOverlapped=0x1121be08) returned 1
	[0287.632] GetFileType (hFile=0x1d4) returned 0x1
	[0287.632] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1600, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.632] GetFileType (hFile=0x1d4) returned 0x1
	[0287.632] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.632] WriteFile (in: hFile=0x1d4, lpBuffer=0x111ed500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1121bdfc, lpOverlapped=0x1121be08 | out: lpBuffer=0x111ed500*, lpNumberOfBytesWritten=0x1121bdfc*=0x221, lpOverlapped=0x1121be08) returned 1
	[0287.632] GetFileType (hFile=0x1d4) returned 0x1
	[0287.633] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1600, lpNewFilePointer=0x0, dwMoveMethod=0x1121bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.633] CloseHandle (hObject=0x1d4) returned 1
	[0287.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf.tl30z")) returned 0x220
	[0287.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.642] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0287.652] SetEvent (hEvent=0x1b0) returned 1
	[0287.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf")) returned 0x220
	[0287.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF", dwFileAttributes=0x220) returned 1
	[0287.653] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.841] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0287.841] ReadFile (in: hFile=0x1d4, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x4b80, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x11423e18*=0x4b80, lpOverlapped=0x0) returned 1
	[0287.846] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0287.846] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0287.846] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11324802 | out: pbBuffer=0x11324802) returned 1
	[0287.847] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0287.847] GetFileType (hFile=0x1d4) returned 0x1
	[0287.847] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.848] WriteFile (in: hFile=0x1d4, lpBuffer=0x11256000*, nNumberOfBytesToWrite=0x4b80, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11256000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4b80, lpOverlapped=0x1102be08) returned 1
	[0287.848] GetFileType (hFile=0x1d4) returned 0x1
	[0287.848] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4b80, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.848] GetFileType (hFile=0x1d4) returned 0x1
	[0287.848] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.849] WriteFile (in: hFile=0x1d4, lpBuffer=0x11362a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11362a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0287.849] GetFileType (hFile=0x1d4) returned 0x1
	[0287.849] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4b80, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.849] CloseHandle (hObject=0x1d4) returned 1
	[0287.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf.tl30z")) returned 0x220
	[0287.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.871] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0287.878] SetEvent (hEvent=0x234) returned 1
	[0287.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf")) returned 0x220
	[0287.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF", dwFileAttributes=0x220) returned 1
	[0287.879] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.083] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0288.083] ReadFile (in: hFile=0x250, lpBuffer=0x110b4000, nNumberOfBytesToRead=0x2d14, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110b4000*, lpNumberOfBytesRead=0x11423e18*=0x2d14, lpOverlapped=0x0) returned 1
	[0288.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f030 | out: pbBuffer=0x1140f030) returned 1
	[0288.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c7302 | out: pbBuffer=0x113c7302) returned 1
	[0288.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c7321 | out: pbBuffer=0x113c7321) returned 1
	[0288.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c7324 | out: pbBuffer=0x113c7324) returned 1
	[0288.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f060 | out: pbBuffer=0x1140f060) returned 1
	[0288.089] GetFileType (hFile=0x250) returned 0x1
	[0288.090] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.090] WriteFile (in: hFile=0x250, lpBuffer=0x11304000*, nNumberOfBytesToWrite=0x2d14, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11304000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2d14, lpOverlapped=0x1102be08) returned 1
	[0288.090] GetFileType (hFile=0x250) returned 0x1
	[0288.090] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2d14, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.090] GetFileType (hFile=0x250) returned 0x1
	[0288.090] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.090] WriteFile (in: hFile=0x250, lpBuffer=0x112ee380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112ee380*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0288.091] GetFileType (hFile=0x250) returned 0x1
	[0288.091] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2d14, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.091] CloseHandle (hObject=0x250) returned 1
	[0288.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf.tl30z")) returned 0x220
	[0288.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.095] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0288.112] SetEvent (hEvent=0x118) returned 1
	[0288.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf")) returned 0x220
	[0288.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF", dwFileAttributes=0x220) returned 1
	[0288.113] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.317] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0288.317] ReadFile (in: hFile=0x250, lpBuffer=0x11bca000, nNumberOfBytesToRead=0x1580, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11bca000*, lpNumberOfBytesRead=0x11423e18*=0x1580, lpOverlapped=0x0) returned 1
	[0288.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0288.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332668 | out: pbBuffer=0x11332668) returned 1
	[0288.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112be902 | out: pbBuffer=0x112be902) returned 1
	[0288.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0288.327] GetFileType (hFile=0x250) returned 0x1
	[0288.328] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.328] WriteFile (in: hFile=0x250, lpBuffer=0x11bf6000*, nNumberOfBytesToWrite=0x1580, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bf6000*, lpNumberOfBytesWritten=0x11031dfc*=0x1580, lpOverlapped=0x11031e08) returned 1
	[0288.328] GetFileType (hFile=0x250) returned 0x1
	[0288.328] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1580, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.328] GetFileType (hFile=0x250) returned 0x1
	[0288.328] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.329] WriteFile (in: hFile=0x250, lpBuffer=0x11be2380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11be2380*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0288.329] GetFileType (hFile=0x250) returned 0x1
	[0288.329] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1580, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.329] CloseHandle (hObject=0x250) returned 1
	[0288.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf.tl30z")) returned 0x220
	[0288.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.342] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0288.348] SetEvent (hEvent=0x118) returned 1
	[0288.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf")) returned 0x220
	[0288.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF", dwFileAttributes=0x220) returned 1
	[0288.349] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.608] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0288.609] ReadFile (in: hFile=0x250, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x290c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11423e18*=0x290c, lpOverlapped=0x0) returned 1
	[0288.612] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332370 | out: pbBuffer=0x11332370) returned 1
	[0288.612] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bf302 | out: pbBuffer=0x112bf302) returned 1
	[0288.613] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112bf360 | out: pbBuffer=0x112bf360) returned 1
	[0288.613] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0288.613] GetFileType (hFile=0x250) returned 0x1
	[0288.613] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.614] WriteFile (in: hFile=0x250, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x290c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x11031dfc*=0x290c, lpOverlapped=0x11031e08) returned 1
	[0288.614] GetFileType (hFile=0x250) returned 0x1
	[0288.614] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x290c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.614] GetFileType (hFile=0x250) returned 0x1
	[0288.614] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.614] WriteFile (in: hFile=0x250, lpBuffer=0x11340000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11340000*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0288.615] GetFileType (hFile=0x250) returned 0x1
	[0288.615] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x290c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.615] CloseHandle (hObject=0x250) returned 1
	[0288.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf.tl30z")) returned 0x220
	[0288.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.627] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0288.639] SetEvent (hEvent=0x1b0) returned 1
	[0288.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf")) returned 0x220
	[0288.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF", dwFileAttributes=0x220) returned 1
	[0288.640] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.830] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0288.830] ReadFile (in: hFile=0x250, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x305c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x11423e18*=0x305c, lpOverlapped=0x0) returned 1
	[0288.837] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0288.837] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1131e802 | out: pbBuffer=0x1131e802) returned 1
	[0288.837] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1131e83e | out: pbBuffer=0x1131e83e) returned 1
	[0288.837] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1131e85c | out: pbBuffer=0x1131e85c) returned 1
	[0288.838] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0288.838] GetFileType (hFile=0x250) returned 0x1
	[0288.838] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.838] WriteFile (in: hFile=0x250, lpBuffer=0x11bec000*, nNumberOfBytesToWrite=0x305c, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11bec000*, lpNumberOfBytesWritten=0x1124bdfc*=0x305c, lpOverlapped=0x1124be08) returned 1
	[0288.839] GetFileType (hFile=0x250) returned 0x1
	[0288.839] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x305c, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.839] GetFileType (hFile=0x250) returned 0x1
	[0288.839] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.839] WriteFile (in: hFile=0x250, lpBuffer=0x11253880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11253880*, lpNumberOfBytesWritten=0x1124bdfc*=0x22a, lpOverlapped=0x1124be08) returned 1
	[0288.840] GetFileType (hFile=0x250) returned 0x1
	[0288.840] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x305c, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.840] CloseHandle (hObject=0x250) returned 1
	[0288.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf.tl30z")) returned 0x220
	[0288.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.861] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0288.866] SetEvent (hEvent=0x1b0) returned 1
	[0288.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf")) returned 0x220
	[0288.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF", dwFileAttributes=0x220) returned 1
	[0288.867] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.095] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0289.095] ReadFile (in: hFile=0x250, lpBuffer=0x113c4000, nNumberOfBytesToRead=0x175c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113c4000*, lpNumberOfBytesRead=0x11423e18*=0x175c, lpOverlapped=0x0) returned 1
	[0289.099] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332bb0 | out: pbBuffer=0x11332bb0) returned 1
	[0289.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11be1002 | out: pbBuffer=0x11be1002) returned 1
	[0289.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332be0 | out: pbBuffer=0x11332be0) returned 1
	[0289.100] GetFileType (hFile=0x250) returned 0x1
	[0289.101] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.101] WriteFile (in: hFile=0x250, lpBuffer=0x11444000*, nNumberOfBytesToWrite=0x175c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11444000*, lpNumberOfBytesWritten=0x11031dfc*=0x175c, lpOverlapped=0x11031e08) returned 1
	[0289.101] GetFileType (hFile=0x250) returned 0x1
	[0289.101] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x175c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.101] GetFileType (hFile=0x250) returned 0x1
	[0289.102] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.102] WriteFile (in: hFile=0x250, lpBuffer=0x1143c700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1143c700*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0289.102] GetFileType (hFile=0x250) returned 0x1
	[0289.102] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x175c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.102] CloseHandle (hObject=0x250) returned 1
	[0289.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf.tl30z")) returned 0x220
	[0289.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.117] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0289.123] SetEvent (hEvent=0x1b0) returned 1
	[0289.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf")) returned 0x220
	[0289.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF", dwFileAttributes=0x220) returned 1
	[0289.123] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.343] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0289.343] ReadFile (in: hFile=0x250, lpBuffer=0x110a5000, nNumberOfBytesToRead=0x4fdc, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110a5000*, lpNumberOfBytesRead=0x11423e18*=0x4fdc, lpOverlapped=0x0) returned 1
	[0289.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f620 | out: pbBuffer=0x1140f620) returned 1
	[0289.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f618 | out: pbBuffer=0x1140f618) returned 1
	[0289.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11449c02 | out: pbBuffer=0x11449c02) returned 1
	[0289.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f650 | out: pbBuffer=0x1140f650) returned 1
	[0289.348] GetFileType (hFile=0x250) returned 0x1
	[0289.348] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.348] WriteFile (in: hFile=0x250, lpBuffer=0x11c14000*, nNumberOfBytesToWrite=0x4fdc, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11c14000*, lpNumberOfBytesWritten=0x1124bdfc*=0x4fdc, lpOverlapped=0x1124be08) returned 1
	[0289.349] GetFileType (hFile=0x250) returned 0x1
	[0289.349] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4fdc, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.349] GetFileType (hFile=0x250) returned 0x1
	[0289.349] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.349] WriteFile (in: hFile=0x250, lpBuffer=0x11220000*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11220000*, lpNumberOfBytesWritten=0x1124bdfc*=0x236, lpOverlapped=0x1124be08) returned 1
	[0289.350] GetFileType (hFile=0x250) returned 0x1
	[0289.350] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4fdc, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.350] CloseHandle (hObject=0x250) returned 1
	[0289.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf.tl30z")) returned 0x220
	[0289.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.364] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0289.379] SetEvent (hEvent=0x1b0) returned 1
	[0289.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf")) returned 0x220
	[0289.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF", dwFileAttributes=0x220) returned 1
	[0289.380] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.579] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0289.580] ReadFile (in: hFile=0x250, lpBuffer=0x110f0000, nNumberOfBytesToRead=0x1560, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110f0000*, lpNumberOfBytesRead=0x11423e18*=0x1560, lpOverlapped=0x0) returned 1
	[0289.643] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0289.643] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bc802 | out: pbBuffer=0x110bc802) returned 1
	[0289.644] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0289.644] GetFileType (hFile=0x250) returned 0x1
	[0289.644] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.644] WriteFile (in: hFile=0x250, lpBuffer=0x1134c000*, nNumberOfBytesToWrite=0x1560, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x1134c000*, lpNumberOfBytesWritten=0x1145bdfc*=0x1560, lpOverlapped=0x1145be08) returned 1
	[0289.645] GetFileType (hFile=0x250) returned 0x1
	[0289.645] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1560, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.645] GetFileType (hFile=0x250) returned 0x1
	[0289.645] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.645] WriteFile (in: hFile=0x250, lpBuffer=0x1116ee00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x1116ee00*, lpNumberOfBytesWritten=0x1145bdfc*=0x227, lpOverlapped=0x1145be08) returned 1
	[0289.646] GetFileType (hFile=0x250) returned 0x1
	[0289.646] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1560, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.646] CloseHandle (hObject=0x250) returned 1
	[0289.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf.tl30z")) returned 0x220
	[0289.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.671] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0289.692] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0289.760] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0289.791] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0289.830] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0289.887] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0289.978] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.046] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.120] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.179] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.219] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.269] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.331] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.371] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.389] SetEvent (hEvent=0x1b0) returned 1
	[0290.389] SetEvent (hEvent=0x1f0) returned 1
	[0290.389] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0290.392] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.392] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0290.401] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.402] SetEvent (hEvent=0x1b0) returned 1
	[0290.402] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0290.406] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.406] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.420] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.466] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.513] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.588] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.631] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.686] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.703] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0290.710] SetEvent (hEvent=0x118) returned 1
	[0290.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf")) returned 0x220
	[0290.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF", dwFileAttributes=0x220) returned 1
	[0290.711] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.993] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0290.993] ReadFile (in: hFile=0x1d4, lpBuffer=0x110b6000, nNumberOfBytesToRead=0x3734, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110b6000*, lpNumberOfBytesRead=0x11428e18*=0x3734, lpOverlapped=0x0) returned 1
	[0291.001] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0291.001] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11303e02 | out: pbBuffer=0x11303e02) returned 1
	[0291.001] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0291.002] GetFileType (hFile=0x1d4) returned 0x1
	[0291.002] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.002] WriteFile (in: hFile=0x1d4, lpBuffer=0x11190000*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x11190000*, lpNumberOfBytesWritten=0x112fddfc*=0x3734, lpOverlapped=0x112fde08) returned 1
	[0291.003] GetFileType (hFile=0x1d4) returned 0x1
	[0291.003] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3734, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.003] GetFileType (hFile=0x1d4) returned 0x1
	[0291.003] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.003] WriteFile (in: hFile=0x1d4, lpBuffer=0x1117c700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x1117c700*, lpNumberOfBytesWritten=0x112fddfc*=0x230, lpOverlapped=0x112fde08) returned 1
	[0291.004] GetFileType (hFile=0x1d4) returned 0x1
	[0291.004] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3734, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.004] CloseHandle (hObject=0x1d4) returned 1
	[0291.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf.tl30z")) returned 0x220
	[0291.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.016] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0291.028] SetEvent (hEvent=0x234) returned 1
	[0291.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf")) returned 0x220
	[0291.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF", dwFileAttributes=0x220) returned 1
	[0291.029] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.248] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0291.248] ReadFile (in: hFile=0x1d4, lpBuffer=0x11128000, nNumberOfBytesToRead=0x3a94, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11128000*, lpNumberOfBytesRead=0x11428e18*=0x3a94, lpOverlapped=0x0) returned 1
	[0291.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0291.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11249402 | out: pbBuffer=0x11249402) returned 1
	[0291.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11249411 | out: pbBuffer=0x11249411) returned 1
	[0291.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11249429 | out: pbBuffer=0x11249429) returned 1
	[0291.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112494da | out: pbBuffer=0x112494da) returned 1
	[0291.254] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0291.255] GetFileType (hFile=0x1d4) returned 0x1
	[0291.255] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.255] WriteFile (in: hFile=0x1d4, lpBuffer=0x1134c000*, nNumberOfBytesToWrite=0x3a94, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1134c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3a94, lpOverlapped=0x1102be08) returned 1
	[0291.255] GetFileType (hFile=0x1d4) returned 0x1
	[0291.255] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3a94, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.255] GetFileType (hFile=0x1d4) returned 0x1
	[0291.256] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.256] WriteFile (in: hFile=0x1d4, lpBuffer=0x11127c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11127c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0291.256] GetFileType (hFile=0x1d4) returned 0x1
	[0291.256] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3a94, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.256] CloseHandle (hObject=0x1d4) returned 1
	[0291.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf.tl30z")) returned 0x220
	[0291.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.273] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0291.298] SetEvent (hEvent=0x234) returned 1
	[0291.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf")) returned 0x220
	[0291.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF", dwFileAttributes=0x220) returned 1
	[0291.298] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.463] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0291.463] ReadFile (in: hFile=0x1d4, lpBuffer=0x111dc000, nNumberOfBytesToRead=0x614c, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x111dc000*, lpNumberOfBytesRead=0x11428e18*=0x614c, lpOverlapped=0x0) returned 1
	[0291.469] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6540 | out: pbBuffer=0x113e6540) returned 1
	[0291.469] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6538 | out: pbBuffer=0x113e6538) returned 1
	[0291.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ec802 | out: pbBuffer=0x110ec802) returned 1
	[0291.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0291.471] GetFileType (hFile=0x1d4) returned 0x1
	[0291.471] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.471] WriteFile (in: hFile=0x1d4, lpBuffer=0x11308000*, nNumberOfBytesToWrite=0x614c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11308000*, lpNumberOfBytesWritten=0x1102bdfc*=0x614c, lpOverlapped=0x1102be08) returned 1
	[0291.472] GetFileType (hFile=0x1d4) returned 0x1
	[0291.472] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x614c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.472] GetFileType (hFile=0x1d4) returned 0x1
	[0291.472] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.472] WriteFile (in: hFile=0x1d4, lpBuffer=0x113d3880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d3880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0291.473] GetFileType (hFile=0x1d4) returned 0x1
	[0291.473] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x614c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.473] CloseHandle (hObject=0x1d4) returned 1
	[0291.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf.tl30z")) returned 0x220
	[0291.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.487] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0291.491] SetEvent (hEvent=0x234) returned 1
	[0291.491] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf")) returned 0x220
	[0291.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF", dwFileAttributes=0x220) returned 1
	[0291.491] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.561] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0291.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0291.565] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0291.565] ReadFile (in: hFile=0x1d8, lpBuffer=0x1105a000, nNumberOfBytesToRead=0x2168, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1105a000*, lpNumberOfBytesRead=0x11428e18*=0x2168, lpOverlapped=0x0) returned 1
	[0291.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0291.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0291.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11266802 | out: pbBuffer=0x11266802) returned 1
	[0291.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0291.571] GetFileType (hFile=0x1d8) returned 0x1
	[0291.571] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.571] WriteFile (in: hFile=0x1d8, lpBuffer=0x111b4000*, nNumberOfBytesToWrite=0x2168, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111b4000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2168, lpOverlapped=0x1102be08) returned 1
	[0291.572] GetFileType (hFile=0x1d8) returned 0x1
	[0291.572] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2168, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.572] GetFileType (hFile=0x1d8) returned 0x1
	[0291.572] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.572] WriteFile (in: hFile=0x1d8, lpBuffer=0x11218e00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11218e00*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0291.572] GetFileType (hFile=0x1d8) returned 0x1
	[0291.572] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2168, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.572] CloseHandle (hObject=0x1d8) returned 1
	[0291.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf.tl30z")) returned 0x220
	[0291.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.575] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0291.578] SetEvent (hEvent=0x1b0) returned 1
	[0291.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf")) returned 0x220
	[0291.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF", dwFileAttributes=0x220) returned 1
	[0291.579] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0291.645] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0291.645] ReadFile (in: hFile=0x1d8, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x3734, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x11428e18*=0x3734, lpOverlapped=0x0) returned 1
	[0291.650] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0291.650] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1124c802 | out: pbBuffer=0x1124c802) returned 1
	[0291.650] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0291.650] GetFileType (hFile=0x1d8) returned 0x1
	[0291.651] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.651] WriteFile (in: hFile=0x1d8, lpBuffer=0x1145c000*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0x110f1dfc, lpOverlapped=0x110f1e08 | out: lpBuffer=0x1145c000*, lpNumberOfBytesWritten=0x110f1dfc*=0x3734, lpOverlapped=0x110f1e08) returned 1
	[0291.651] GetFileType (hFile=0x1d8) returned 0x1
	[0291.651] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3734, lpNewFilePointer=0x0, dwMoveMethod=0x110f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.651] GetFileType (hFile=0x1d8) returned 0x1
	[0291.651] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.651] WriteFile (in: hFile=0x1d8, lpBuffer=0x11430a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x110f1dfc, lpOverlapped=0x110f1e08 | out: lpBuffer=0x11430a80*, lpNumberOfBytesWritten=0x110f1dfc*=0x230, lpOverlapped=0x110f1e08) returned 1
	[0291.652] GetFileType (hFile=0x1d8) returned 0x1
	[0291.652] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3734, lpNewFilePointer=0x0, dwMoveMethod=0x110f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.652] CloseHandle (hObject=0x1d8) returned 1
	[0291.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf.tl30z")) returned 0x220
	[0291.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.654] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0291.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf")) returned 0x220
	[0291.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF", dwFileAttributes=0x220) returned 1
	[0291.656] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.720] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0291.721] ReadFile (in: hFile=0x1d4, lpBuffer=0x110a0000, nNumberOfBytesToRead=0x3e10, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110a0000*, lpNumberOfBytesRead=0x11428e18*=0x3e10, lpOverlapped=0x0) returned 1
	[0291.725] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0291.725] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130f302 | out: pbBuffer=0x1130f302) returned 1
	[0291.726] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0291.726] GetFileType (hFile=0x1d4) returned 0x1
	[0291.726] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.726] WriteFile (in: hFile=0x1d4, lpBuffer=0x11182000*, nNumberOfBytesToWrite=0x3e10, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11182000*, lpNumberOfBytesWritten=0x112f5dfc*=0x3e10, lpOverlapped=0x112f5e08) returned 1
	[0291.727] GetFileType (hFile=0x1d4) returned 0x1
	[0291.727] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3e10, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.727] GetFileType (hFile=0x1d4) returned 0x1
	[0291.727] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.727] WriteFile (in: hFile=0x1d4, lpBuffer=0x111dd880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x111dd880*, lpNumberOfBytesWritten=0x112f5dfc*=0x22a, lpOverlapped=0x112f5e08) returned 1
	[0291.727] GetFileType (hFile=0x1d4) returned 0x1
	[0291.728] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3e10, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.728] CloseHandle (hObject=0x1d4) returned 1
	[0291.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf.tl30z")) returned 0x220
	[0291.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.730] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0291.733] SetEvent (hEvent=0x1b0) returned 1
	[0291.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf")) returned 0x220
	[0291.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF", dwFileAttributes=0x220) returned 1
	[0291.733] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0291.824] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0291.824] ReadFile (in: hFile=0x1d8, lpBuffer=0x11130000, nNumberOfBytesToRead=0x13d4, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11130000*, lpNumberOfBytesRead=0x11428e18*=0x13d4, lpOverlapped=0x0) returned 1
	[0291.830] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332980 | out: pbBuffer=0x11332980) returned 1
	[0291.830] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1118fc02 | out: pbBuffer=0x1118fc02) returned 1
	[0291.830] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118fc8b | out: pbBuffer=0x1118fc8b) returned 1
	[0291.831] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113329b0 | out: pbBuffer=0x113329b0) returned 1
	[0291.831] SetEvent (hEvent=0x1b0) returned 1
	[0291.831] GetFileType (hFile=0x1d8) returned 0x1
	[0291.831] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.831] WriteFile (in: hFile=0x1d8, lpBuffer=0x11154000*, nNumberOfBytesToWrite=0x13d4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11154000*, lpNumberOfBytesWritten=0x1102bdfc*=0x13d4, lpOverlapped=0x1102be08) returned 1
	[0291.832] GetFileType (hFile=0x1d8) returned 0x1
	[0291.832] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x13d4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.832] GetFileType (hFile=0x1d8) returned 0x1
	[0291.832] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.833] WriteFile (in: hFile=0x1d8, lpBuffer=0x112c9500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112c9500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0291.833] GetFileType (hFile=0x1d8) returned 0x1
	[0291.833] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x13d4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.833] CloseHandle (hObject=0x1d8) returned 1
	[0291.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf.tl30z")) returned 0x220
	[0291.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.840] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0291.842] SetEvent (hEvent=0x1b0) returned 1
	[0291.842] SetEvent (hEvent=0x234) returned 1
	[0291.842] SwitchToThread () returned 1
	[0291.877] SwitchToThread () returned 1
	[0291.878] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0291.914] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0291.928] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0291.969] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0291.991] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0292.010] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0292.032] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0292.072] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0292.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf")) returned 0x220
	[0292.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF", dwFileAttributes=0x220) returned 1
	[0292.098] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0292.204] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0292.204] ReadFile (in: hFile=0x1fc, lpBuffer=0x11148000, nNumberOfBytesToRead=0xbe0, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11148000*, lpNumberOfBytesRead=0x11288e18*=0xbe0, lpOverlapped=0x0) returned 1
	[0292.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0292.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0292.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ec802 | out: pbBuffer=0x111ec802) returned 1
	[0292.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ec86c | out: pbBuffer=0x111ec86c) returned 1
	[0292.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ec899 | out: pbBuffer=0x111ec899) returned 1
	[0292.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ec8b6 | out: pbBuffer=0x111ec8b6) returned 1
	[0292.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0292.216] GetFileType (hFile=0x1fc) returned 0x1
	[0292.216] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.216] WriteFile (in: hFile=0x1fc, lpBuffer=0x11218000*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x111e3dfc, lpOverlapped=0x111e3e08 | out: lpBuffer=0x11218000*, lpNumberOfBytesWritten=0x111e3dfc*=0xbe0, lpOverlapped=0x111e3e08) returned 1
	[0292.217] GetFileType (hFile=0x1fc) returned 0x1
	[0292.217] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xbe0, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.217] GetFileType (hFile=0x1fc) returned 0x1
	[0292.217] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.217] WriteFile (in: hFile=0x1fc, lpBuffer=0x11200a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x111e3dfc, lpOverlapped=0x111e3e08 | out: lpBuffer=0x11200a80*, lpNumberOfBytesWritten=0x111e3dfc*=0x22a, lpOverlapped=0x111e3e08) returned 1
	[0292.218] GetFileType (hFile=0x1fc) returned 0x1
	[0292.218] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xbe0, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.218] CloseHandle (hObject=0x1fc) returned 1
	[0292.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf.tl30z")) returned 0x220
	[0292.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.232] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0292.240] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0292.252] SetEvent (hEvent=0x1b0) returned 1
	[0292.253] SetEvent (hEvent=0x1f0) returned 1
	[0292.253] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0292.256] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0292.257] SetEvent (hEvent=0x234) returned 1
	[0292.257] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0292.261] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0293.253] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0293.256] SetEvent (hEvent=0x210) returned 1
	[0293.256] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0293.262] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0293.277] SetEvent (hEvent=0x210) returned 1
	[0293.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf")) returned 0x220
	[0293.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF", dwFileAttributes=0x220) returned 1
	[0293.289] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0293.374] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x113f3e08 | out: lpMode=0x113f3e08) returned 0
	[0293.375] ReadFile (in: hFile=0x1fc, lpBuffer=0x1105a000, nNumberOfBytesToRead=0x2020, lpNumberOfBytesRead=0x113f3e18, lpOverlapped=0x0 | out: lpBuffer=0x1105a000*, lpNumberOfBytesRead=0x113f3e18*=0x2020, lpOverlapped=0x0) returned 1
	[0293.381] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0293.381] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1112c802 | out: pbBuffer=0x1112c802) returned 1
	[0293.381] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1112c80a | out: pbBuffer=0x1112c80a) returned 1
	[0293.384] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0293.384] GetFileType (hFile=0x1fc) returned 0x1
	[0293.385] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.385] WriteFile (in: hFile=0x1fc, lpBuffer=0x113d8000*, nNumberOfBytesToWrite=0x2020, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x113d8000*, lpNumberOfBytesWritten=0x113f3dfc*=0x2020, lpOverlapped=0x113f3e08) returned 1
	[0293.385] GetFileType (hFile=0x1fc) returned 0x1
	[0293.386] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2020, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.386] GetFileType (hFile=0x1fc) returned 0x1
	[0293.386] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.386] WriteFile (in: hFile=0x1fc, lpBuffer=0x1132ca80*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x1132ca80*, lpNumberOfBytesWritten=0x113f3dfc*=0x21e, lpOverlapped=0x113f3e08) returned 1
	[0293.386] GetFileType (hFile=0x1fc) returned 0x1
	[0293.386] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2020, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.387] CloseHandle (hObject=0x1fc) returned 1
	[0293.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf.tl30z")) returned 0x220
	[0293.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.390] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0293.393] SetEvent (hEvent=0x218) returned 1
	[0293.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg")) returned 0x220
	[0293.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG", dwFileAttributes=0x220) returned 1
	[0293.395] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0293.471] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0293.471] ReadFile (in: hFile=0x1d4, lpBuffer=0x1128e000, nNumberOfBytesToRead=0xf0c1, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x11423e18*=0xf0c1, lpOverlapped=0x0) returned 1
	[0293.477] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0293.477] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11107e02 | out: pbBuffer=0x11107e02) returned 1
	[0293.477] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11107e17 | out: pbBuffer=0x11107e17) returned 1
	[0293.477] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11107e4e | out: pbBuffer=0x11107e4e) returned 1
	[0293.478] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0293.480] GetFileType (hFile=0x1d4) returned 0x1
	[0293.480] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.480] WriteFile (in: hFile=0x1d4, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0xf0c1, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x113efdfc*=0xf0c1, lpOverlapped=0x113efe08) returned 1
	[0293.481] GetFileType (hFile=0x1d4) returned 0x1
	[0293.481] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xf0c1, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.482] GetFileType (hFile=0x1d4) returned 0x1
	[0293.482] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.482] WriteFile (in: hFile=0x1d4, lpBuffer=0x112aa700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x112aa700*, lpNumberOfBytesWritten=0x113efdfc*=0x230, lpOverlapped=0x113efe08) returned 1
	[0293.482] GetFileType (hFile=0x1d4) returned 0x1
	[0293.482] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xf0c1, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.482] CloseHandle (hObject=0x1d4) returned 1
	[0293.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg.tl30z")) returned 0x220
	[0293.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.486] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0293.490] SetEvent (hEvent=0x218) returned 1
	[0293.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg")) returned 0x220
	[0293.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG", dwFileAttributes=0x220) returned 1
	[0293.491] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0293.593] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0293.593] ReadFile (in: hFile=0x250, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x8fd4, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11423e18*=0x8fd4, lpOverlapped=0x0) returned 1
	[0293.600] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0293.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1126dd02 | out: pbBuffer=0x1126dd02) returned 1
	[0293.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0293.602] GetFileType (hFile=0x250) returned 0x1
	[0293.602] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.603] WriteFile (in: hFile=0x250, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x8fd4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x11031dfc*=0x8fd4, lpOverlapped=0x11031e08) returned 1
	[0293.603] GetFileType (hFile=0x250) returned 0x1
	[0293.604] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x8fd4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.604] GetFileType (hFile=0x250) returned 0x1
	[0293.604] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.604] WriteFile (in: hFile=0x250, lpBuffer=0x11372a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11372a80*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0293.605] GetFileType (hFile=0x250) returned 0x1
	[0293.605] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x8fd4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.605] CloseHandle (hObject=0x250) returned 1
	[0293.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg.tl30z")) returned 0x220
	[0293.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.609] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0293.612] SetEvent (hEvent=0x210) returned 1
	[0293.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg")) returned 0x220
	[0293.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG", dwFileAttributes=0x220) returned 1
	[0293.613] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0293.794] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0293.794] ReadFile (in: hFile=0x288, lpBuffer=0x11218000, nNumberOfBytesToRead=0xb5ac, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11218000*, lpNumberOfBytesRead=0x11423e18*=0xb5ac, lpOverlapped=0x0) returned 1
	[0293.800] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0293.800] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1143bc02 | out: pbBuffer=0x1143bc02) returned 1
	[0293.800] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1143bccf | out: pbBuffer=0x1143bccf) returned 1
	[0293.801] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0293.802] GetFileType (hFile=0x288) returned 0x1
	[0293.802] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.802] WriteFile (in: hFile=0x288, lpBuffer=0x11158000*, nNumberOfBytesToWrite=0xb5ac, lpNumberOfBytesWritten=0x112a3dfc, lpOverlapped=0x112a3e08 | out: lpBuffer=0x11158000*, lpNumberOfBytesWritten=0x112a3dfc*=0xb5ac, lpOverlapped=0x112a3e08) returned 1
	[0293.803] GetFileType (hFile=0x288) returned 0x1
	[0293.803] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xb5ac, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.803] GetFileType (hFile=0x288) returned 0x1
	[0293.803] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.803] WriteFile (in: hFile=0x288, lpBuffer=0x11232700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x112a3dfc, lpOverlapped=0x112a3e08 | out: lpBuffer=0x11232700*, lpNumberOfBytesWritten=0x112a3dfc*=0x236, lpOverlapped=0x112a3e08) returned 1
	[0293.804] GetFileType (hFile=0x288) returned 0x1
	[0293.804] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xb5ac, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.804] CloseHandle (hObject=0x288) returned 1
	[0293.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg.tl30z")) returned 0x220
	[0293.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.808] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0293.809] SetEvent (hEvent=0x210) returned 1
	[0293.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg")) returned 0x220
	[0293.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG", dwFileAttributes=0x220) returned 1
	[0293.810] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0293.955] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0293.955] ReadFile (in: hFile=0x1d8, lpBuffer=0x11058000, nNumberOfBytesToRead=0xfd22, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11423e18*=0xfd22, lpOverlapped=0x0) returned 1
	[0293.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0293.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137de02 | out: pbBuffer=0x1137de02) returned 1
	[0293.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137de85 | out: pbBuffer=0x1137de85) returned 1
	[0293.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137debf | out: pbBuffer=0x1137debf) returned 1
	[0293.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137dec4 | out: pbBuffer=0x1137dec4) returned 1
	[0293.963] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6430 | out: pbBuffer=0x113e6430) returned 1
	[0293.964] GetFileType (hFile=0x1d8) returned 0x1
	[0293.964] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.965] WriteFile (in: hFile=0x1d8, lpBuffer=0x11148000*, nNumberOfBytesToWrite=0xfd22, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11148000*, lpNumberOfBytesWritten=0x11031dfc*=0xfd22, lpOverlapped=0x11031e08) returned 1
	[0293.965] GetFileType (hFile=0x1d8) returned 0x1
	[0293.966] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xfd22, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.966] GetFileType (hFile=0x1d8) returned 0x1
	[0293.966] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.966] WriteFile (in: hFile=0x1d8, lpBuffer=0x1129a700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1129a700*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0293.967] GetFileType (hFile=0x1d8) returned 0x1
	[0293.967] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xfd22, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.967] CloseHandle (hObject=0x1d8) returned 1
	[0293.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg.tl30z")) returned 0x220
	[0293.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.970] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0293.973] SetEvent (hEvent=0x234) returned 1
	[0293.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf")) returned 0x220
	[0293.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF", dwFileAttributes=0x220) returned 1
	[0293.974] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0294.061] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0294.061] ReadFile (in: hFile=0x288, lpBuffer=0x111ce000, nNumberOfBytesToRead=0x4844, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x111ce000*, lpNumberOfBytesRead=0x11423e18*=0x4844, lpOverlapped=0x0) returned 1
	[0294.067] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332650 | out: pbBuffer=0x11332650) returned 1
	[0294.067] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111dc802 | out: pbBuffer=0x111dc802) returned 1
	[0294.068] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332680 | out: pbBuffer=0x11332680) returned 1
	[0294.069] GetFileType (hFile=0x288) returned 0x1
	[0294.070] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.070] WriteFile (in: hFile=0x288, lpBuffer=0x111f8000*, nNumberOfBytesToWrite=0x4844, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x111f8000*, lpNumberOfBytesWritten=0x112a1dfc*=0x4844, lpOverlapped=0x112a1e08) returned 1
	[0294.070] GetFileType (hFile=0x288) returned 0x1
	[0294.070] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x4844, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.070] GetFileType (hFile=0x288) returned 0x1
	[0294.071] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.071] WriteFile (in: hFile=0x288, lpBuffer=0x11bdd500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x11bdd500*, lpNumberOfBytesWritten=0x112a1dfc*=0x224, lpOverlapped=0x112a1e08) returned 1
	[0294.071] GetFileType (hFile=0x288) returned 0x1
	[0294.071] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x4844, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.071] CloseHandle (hObject=0x288) returned 1
	[0294.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf.tl30z")) returned 0x220
	[0294.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.076] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0294.078] SetEvent (hEvent=0x210) returned 1
	[0294.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf")) returned 0x220
	[0294.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF", dwFileAttributes=0x220) returned 1
	[0294.079] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0294.178] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0294.178] ReadFile (in: hFile=0x288, lpBuffer=0x11328000, nNumberOfBytesToRead=0x3418, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11328000*, lpNumberOfBytesRead=0x11423e18*=0x3418, lpOverlapped=0x0) returned 1
	[0294.183] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0294.183] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0294.183] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11351302 | out: pbBuffer=0x11351302) returned 1
	[0294.183] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11351381 | out: pbBuffer=0x11351381) returned 1
	[0294.183] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113513df | out: pbBuffer=0x113513df) returned 1
	[0294.184] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0294.184] GetFileType (hFile=0x288) returned 0x1
	[0294.184] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.185] WriteFile (in: hFile=0x288, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x3418, lpNumberOfBytesWritten=0x112d9dfc, lpOverlapped=0x112d9e08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x112d9dfc*=0x3418, lpOverlapped=0x112d9e08) returned 1
	[0294.185] GetFileType (hFile=0x288) returned 0x1
	[0294.185] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x3418, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.185] GetFileType (hFile=0x288) returned 0x1
	[0294.185] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.186] WriteFile (in: hFile=0x288, lpBuffer=0x11292000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112d9dfc, lpOverlapped=0x112d9e08 | out: lpBuffer=0x11292000*, lpNumberOfBytesWritten=0x112d9dfc*=0x227, lpOverlapped=0x112d9e08) returned 1
	[0294.186] GetFileType (hFile=0x288) returned 0x1
	[0294.186] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x3418, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.186] CloseHandle (hObject=0x288) returned 1
	[0294.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf.tl30z")) returned 0x220
	[0294.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.189] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0294.192] SetEvent (hEvent=0x234) returned 1
	[0294.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf")) returned 0x220
	[0294.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF", dwFileAttributes=0x220) returned 1
	[0294.192] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0294.268] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0294.268] ReadFile (in: hFile=0x250, lpBuffer=0x11438000, nNumberOfBytesToRead=0x2c4c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11438000*, lpNumberOfBytesRead=0x11423e18*=0x2c4c, lpOverlapped=0x0) returned 1
	[0294.288] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0294.288] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e1202 | out: pbBuffer=0x110e1202) returned 1
	[0294.289] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0294.289] GetFileType (hFile=0x250) returned 0x1
	[0294.289] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.290] WriteFile (in: hFile=0x250, lpBuffer=0x1109e000*, nNumberOfBytesToWrite=0x2c4c, lpNumberOfBytesWritten=0x112d5dfc, lpOverlapped=0x112d5e08 | out: lpBuffer=0x1109e000*, lpNumberOfBytesWritten=0x112d5dfc*=0x2c4c, lpOverlapped=0x112d5e08) returned 1
	[0294.290] GetFileType (hFile=0x250) returned 0x1
	[0294.290] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2c4c, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.290] GetFileType (hFile=0x250) returned 0x1
	[0294.290] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.291] WriteFile (in: hFile=0x250, lpBuffer=0x112f9880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112d5dfc, lpOverlapped=0x112d5e08 | out: lpBuffer=0x112f9880*, lpNumberOfBytesWritten=0x112d5dfc*=0x22a, lpOverlapped=0x112d5e08) returned 1
	[0294.291] GetFileType (hFile=0x250) returned 0x1
	[0294.291] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2c4c, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.291] CloseHandle (hObject=0x250) returned 1
	[0294.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf.tl30z")) returned 0x220
	[0294.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf")) returned 0x220
	[0294.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF", dwFileAttributes=0x220) returned 1
	[0294.296] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.389] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0294.389] ReadFile (in: hFile=0x1fc, lpBuffer=0x111aa000, nNumberOfBytesToRead=0xd28, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x111aa000*, lpNumberOfBytesRead=0x11423e18*=0xd28, lpOverlapped=0x0) returned 1
	[0294.398] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6960 | out: pbBuffer=0x113e6960) returned 1
	[0294.398] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c5a02 | out: pbBuffer=0x113c5a02) returned 1
	[0294.398] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c5ab2 | out: pbBuffer=0x113c5ab2) returned 1
	[0294.399] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6990 | out: pbBuffer=0x113e6990) returned 1
	[0294.399] GetFileType (hFile=0x1fc) returned 0x1
	[0294.399] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.399] WriteFile (in: hFile=0x1fc, lpBuffer=0x11136000*, nNumberOfBytesToWrite=0xd28, lpNumberOfBytesWritten=0x112d5dfc, lpOverlapped=0x112d5e08 | out: lpBuffer=0x11136000*, lpNumberOfBytesWritten=0x112d5dfc*=0xd28, lpOverlapped=0x112d5e08) returned 1
	[0294.400] GetFileType (hFile=0x1fc) returned 0x1
	[0294.400] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd28, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.400] GetFileType (hFile=0x1fc) returned 0x1
	[0294.400] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.400] WriteFile (in: hFile=0x1fc, lpBuffer=0x11183180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112d5dfc, lpOverlapped=0x112d5e08 | out: lpBuffer=0x11183180*, lpNumberOfBytesWritten=0x112d5dfc*=0x227, lpOverlapped=0x112d5e08) returned 1
	[0294.400] GetFileType (hFile=0x1fc) returned 0x1
	[0294.400] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd28, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.400] CloseHandle (hObject=0x1fc) returned 1
	[0294.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf.tl30z")) returned 0x220
	[0294.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.403] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0294.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf")) returned 0x220
	[0294.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF", dwFileAttributes=0x220) returned 1
	[0294.406] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.534] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0294.535] ReadFile (in: hFile=0x1fc, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x40f8, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x11423e18*=0x40f8, lpOverlapped=0x0) returned 1
	[0294.539] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63d0 | out: pbBuffer=0x113e63d0) returned 1
	[0294.539] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c6602 | out: pbBuffer=0x110c6602) returned 1
	[0294.539] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c663e | out: pbBuffer=0x110c663e) returned 1
	[0294.539] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c669d | out: pbBuffer=0x110c669d) returned 1
	[0294.539] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0294.540] GetFileType (hFile=0x1fc) returned 0x1
	[0294.540] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.540] WriteFile (in: hFile=0x1fc, lpBuffer=0x1131e000*, nNumberOfBytesToWrite=0x40f8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1131e000*, lpNumberOfBytesWritten=0x11031dfc*=0x40f8, lpOverlapped=0x11031e08) returned 1
	[0294.541] GetFileType (hFile=0x1fc) returned 0x1
	[0294.541] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x40f8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.541] GetFileType (hFile=0x1fc) returned 0x1
	[0294.541] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.541] WriteFile (in: hFile=0x1fc, lpBuffer=0x1133f500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1133f500*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0294.541] GetFileType (hFile=0x1fc) returned 0x1
	[0294.541] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x40f8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.541] CloseHandle (hObject=0x1fc) returned 1
	[0294.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf.tl30z")) returned 0x220
	[0294.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.544] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0294.546] SetEvent (hEvent=0x218) returned 1
	[0294.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf")) returned 0x220
	[0294.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF", dwFileAttributes=0x220) returned 1
	[0294.546] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0294.618] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0294.619] ReadFile (in: hFile=0x250, lpBuffer=0x1143c000, nNumberOfBytesToRead=0x785c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1143c000*, lpNumberOfBytesRead=0x11423e18*=0x785c, lpOverlapped=0x0) returned 1
	[0294.624] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66c0 | out: pbBuffer=0x113e66c0) returned 1
	[0294.624] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66b8 | out: pbBuffer=0x113e66b8) returned 1
	[0294.624] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c7a02 | out: pbBuffer=0x110c7a02) returned 1
	[0294.624] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66f0 | out: pbBuffer=0x113e66f0) returned 1
	[0294.625] GetFileType (hFile=0x250) returned 0x1
	[0294.625] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.626] WriteFile (in: hFile=0x250, lpBuffer=0x110aa000*, nNumberOfBytesToWrite=0x785c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110aa000*, lpNumberOfBytesWritten=0x11031dfc*=0x785c, lpOverlapped=0x11031e08) returned 1
	[0294.626] GetFileType (hFile=0x250) returned 0x1
	[0294.626] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x785c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.626] GetFileType (hFile=0x250) returned 0x1
	[0294.626] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.627] WriteFile (in: hFile=0x250, lpBuffer=0x11061180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11061180*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0294.627] GetFileType (hFile=0x250) returned 0x1
	[0294.627] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x785c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.627] CloseHandle (hObject=0x250) returned 1
	[0294.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf.tl30z")) returned 0x220
	[0294.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.630] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0294.632] SetEvent (hEvent=0x218) returned 1
	[0294.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf")) returned 0x220
	[0294.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF", dwFileAttributes=0x220) returned 1
	[0294.633] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0294.708] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0294.708] ReadFile (in: hFile=0x250, lpBuffer=0x111bc000, nNumberOfBytesToRead=0x4b8, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x111bc000*, lpNumberOfBytesRead=0x11423e18*=0x4b8, lpOverlapped=0x0) returned 1
	[0294.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0294.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0294.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11350802 | out: pbBuffer=0x11350802) returned 1
	[0294.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11350808 | out: pbBuffer=0x11350808) returned 1
	[0294.718] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11350849 | out: pbBuffer=0x11350849) returned 1
	[0294.718] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113508cf | out: pbBuffer=0x113508cf) returned 1
	[0294.718] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0294.718] GetFileType (hFile=0x250) returned 0x1
	[0294.718] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.718] WriteFile (in: hFile=0x250, lpBuffer=0x11267000*, nNumberOfBytesToWrite=0x4b8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11267000*, lpNumberOfBytesWritten=0x11031dfc*=0x4b8, lpOverlapped=0x11031e08) returned 1
	[0294.719] GetFileType (hFile=0x250) returned 0x1
	[0294.719] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4b8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.719] GetFileType (hFile=0x250) returned 0x1
	[0294.719] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.719] WriteFile (in: hFile=0x250, lpBuffer=0x1125d500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1125d500*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0294.720] GetFileType (hFile=0x250) returned 0x1
	[0294.720] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4b8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.720] CloseHandle (hObject=0x250) returned 1
	[0294.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf.tl30z")) returned 0x220
	[0294.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.722] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0294.726] SetEvent (hEvent=0x234) returned 1
	[0294.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf")) returned 0x220
	[0294.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF", dwFileAttributes=0x220) returned 1
	[0294.726] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0294.798] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0294.798] ReadFile (in: hFile=0x1d8, lpBuffer=0x1132e000, nNumberOfBytesToRead=0x1b6c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1132e000*, lpNumberOfBytesRead=0x11423e18*=0x1b6c, lpOverlapped=0x0) returned 1
	[0294.805] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0294.805] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a5302 | out: pbBuffer=0x113a5302) returned 1
	[0294.805] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a5316 | out: pbBuffer=0x113a5316) returned 1
	[0294.805] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a5348 | out: pbBuffer=0x113a5348) returned 1
	[0294.805] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0294.806] GetFileType (hFile=0x1d8) returned 0x1
	[0294.806] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.806] WriteFile (in: hFile=0x1d8, lpBuffer=0x111a6000*, nNumberOfBytesToWrite=0x1b6c, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x111a6000*, lpNumberOfBytesWritten=0x110c3dfc*=0x1b6c, lpOverlapped=0x110c3e08) returned 1
	[0294.806] GetFileType (hFile=0x1d8) returned 0x1
	[0294.807] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b6c, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.807] GetFileType (hFile=0x1d8) returned 0x1
	[0294.807] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.807] WriteFile (in: hFile=0x1d8, lpBuffer=0x112e5880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x112e5880*, lpNumberOfBytesWritten=0x110c3dfc*=0x230, lpOverlapped=0x110c3e08) returned 1
	[0294.807] GetFileType (hFile=0x1d8) returned 0x1
	[0294.807] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b6c, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.808] CloseHandle (hObject=0x1d8) returned 1
	[0294.809] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf.tl30z")) returned 0x220
	[0294.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.812] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0294.814] SetEvent (hEvent=0x26c) returned 1
	[0294.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf")) returned 0x220
	[0294.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF", dwFileAttributes=0x220) returned 1
	[0294.814] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0294.991] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0294.991] ReadFile (in: hFile=0x224, lpBuffer=0x11300800, nNumberOfBytesToRead=0x794, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11300800*, lpNumberOfBytesRead=0x11423e18*=0x794, lpOverlapped=0x0) returned 1
	[0295.002] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0295.002] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e638 | out: pbBuffer=0x1104e638) returned 1
	[0295.002] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f5002 | out: pbBuffer=0x112f5002) returned 1
	[0295.002] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f5090 | out: pbBuffer=0x112f5090) returned 1
	[0295.002] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f50e1 | out: pbBuffer=0x112f50e1) returned 1
	[0295.005] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0295.005] GetFileType (hFile=0x224) returned 0x1
	[0295.005] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.005] WriteFile (in: hFile=0x224, lpBuffer=0x11099000*, nNumberOfBytesToWrite=0x794, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11099000*, lpNumberOfBytesWritten=0x11031dfc*=0x794, lpOverlapped=0x11031e08) returned 1
	[0295.005] GetFileType (hFile=0x224) returned 0x1
	[0295.005] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x794, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.006] GetFileType (hFile=0x224) returned 0x1
	[0295.006] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.006] WriteFile (in: hFile=0x224, lpBuffer=0x1109a000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1109a000*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0295.006] GetFileType (hFile=0x224) returned 0x1
	[0295.006] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x794, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.006] CloseHandle (hObject=0x224) returned 1
	[0295.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf.tl30z")) returned 0x220
	[0295.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.014] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0295.027] SetEvent (hEvent=0x26c) returned 1
	[0295.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf")) returned 0x220
	[0295.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF", dwFileAttributes=0x220) returned 1
	[0295.028] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.111] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0295.111] ReadFile (in: hFile=0x224, lpBuffer=0x11142000, nNumberOfBytesToRead=0x778, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11142000*, lpNumberOfBytesRead=0x11423e18*=0x778, lpOverlapped=0x0) returned 1
	[0295.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66a0 | out: pbBuffer=0x113e66a0) returned 1
	[0295.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11467202 | out: pbBuffer=0x11467202) returned 1
	[0295.127] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114672d0 | out: pbBuffer=0x114672d0) returned 1
	[0295.127] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66d0 | out: pbBuffer=0x113e66d0) returned 1
	[0295.127] GetFileType (hFile=0x224) returned 0x1
	[0295.127] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.127] WriteFile (in: hFile=0x224, lpBuffer=0x11155000*, nNumberOfBytesToWrite=0x778, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x11155000*, lpNumberOfBytesWritten=0x110c3dfc*=0x778, lpOverlapped=0x110c3e08) returned 1
	[0295.128] GetFileType (hFile=0x224) returned 0x1
	[0295.128] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x778, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.128] GetFileType (hFile=0x224) returned 0x1
	[0295.128] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.129] WriteFile (in: hFile=0x224, lpBuffer=0x11152380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x11152380*, lpNumberOfBytesWritten=0x110c3dfc*=0x22d, lpOverlapped=0x110c3e08) returned 1
	[0295.129] GetFileType (hFile=0x224) returned 0x1
	[0295.129] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x778, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.129] CloseHandle (hObject=0x224) returned 1
	[0295.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf.tl30z")) returned 0x220
	[0295.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.134] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0295.137] SetEvent (hEvent=0x26c) returned 1
	[0295.137] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf")) returned 0x220
	[0295.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF", dwFileAttributes=0x220) returned 1
	[0295.138] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.226] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0295.226] ReadFile (in: hFile=0x224, lpBuffer=0x11160000, nNumberOfBytesToRead=0xbc0, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11160000*, lpNumberOfBytesRead=0x11423e18*=0xbc0, lpOverlapped=0x0) returned 1
	[0295.231] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0295.231] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11176802 | out: pbBuffer=0x11176802) returned 1
	[0295.231] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11176830 | out: pbBuffer=0x11176830) returned 1
	[0295.232] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0295.232] GetFileType (hFile=0x224) returned 0x1
	[0295.232] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.232] WriteFile (in: hFile=0x224, lpBuffer=0x113a0000*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x11419dfc, lpOverlapped=0x11419e08 | out: lpBuffer=0x113a0000*, lpNumberOfBytesWritten=0x11419dfc*=0xbc0, lpOverlapped=0x11419e08) returned 1
	[0295.233] GetFileType (hFile=0x224) returned 0x1
	[0295.233] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xbc0, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.233] GetFileType (hFile=0x224) returned 0x1
	[0295.233] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.233] WriteFile (in: hFile=0x224, lpBuffer=0x1132aa80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11419dfc, lpOverlapped=0x11419e08 | out: lpBuffer=0x1132aa80*, lpNumberOfBytesWritten=0x11419dfc*=0x227, lpOverlapped=0x11419e08) returned 1
	[0295.233] GetFileType (hFile=0x224) returned 0x1
	[0295.233] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xbc0, lpNewFilePointer=0x0, dwMoveMethod=0x11419de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.233] CloseHandle (hObject=0x224) returned 1
	[0295.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf.tl30z")) returned 0x220
	[0295.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.236] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0295.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf")) returned 0x220
	[0295.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF", dwFileAttributes=0x220) returned 1
	[0295.237] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.328] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0295.328] ReadFile (in: hFile=0x224, lpBuffer=0x112ac000, nNumberOfBytesToRead=0x3c58, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112ac000*, lpNumberOfBytesRead=0x1128be18*=0x3c58, lpOverlapped=0x0) returned 1
	[0295.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0295.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1117fd02 | out: pbBuffer=0x1117fd02) returned 1
	[0295.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117fd9d | out: pbBuffer=0x1117fd9d) returned 1
	[0295.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117fdce | out: pbBuffer=0x1117fdce) returned 1
	[0295.334] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0295.334] GetFileType (hFile=0x224) returned 0x1
	[0295.334] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.335] WriteFile (in: hFile=0x224, lpBuffer=0x110f4000*, nNumberOfBytesToWrite=0x3c58, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110f4000*, lpNumberOfBytesWritten=0x11031dfc*=0x3c58, lpOverlapped=0x11031e08) returned 1
	[0295.335] GetFileType (hFile=0x224) returned 0x1
	[0295.335] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3c58, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.335] GetFileType (hFile=0x224) returned 0x1
	[0295.335] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.336] WriteFile (in: hFile=0x224, lpBuffer=0x112b6a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112b6a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0295.336] GetFileType (hFile=0x224) returned 0x1
	[0295.336] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3c58, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.336] CloseHandle (hObject=0x224) returned 1
	[0295.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf.tl30z")) returned 0x220
	[0295.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.339] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0295.342] SetEvent (hEvent=0x218) returned 1
	[0295.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf")) returned 0x220
	[0295.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF", dwFileAttributes=0x220) returned 1
	[0295.343] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0295.425] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0295.425] ReadFile (in: hFile=0x1d8, lpBuffer=0x111fa000, nNumberOfBytesToRead=0x1d08, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x111fa000*, lpNumberOfBytesRead=0x1128be18*=0x1d08, lpOverlapped=0x0) returned 1
	[0295.429] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0295.430] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e4802 | out: pbBuffer=0x112e4802) returned 1
	[0295.430] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e48c3 | out: pbBuffer=0x112e48c3) returned 1
	[0295.430] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0295.430] GetFileType (hFile=0x1d8) returned 0x1
	[0295.431] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.431] WriteFile (in: hFile=0x1d8, lpBuffer=0x1132e000*, nNumberOfBytesToWrite=0x1d08, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x1132e000*, lpNumberOfBytesWritten=0x1141ddfc*=0x1d08, lpOverlapped=0x1141de08) returned 1
	[0295.431] GetFileType (hFile=0x1d8) returned 0x1
	[0295.431] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1d08, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.432] GetFileType (hFile=0x1d8) returned 0x1
	[0295.432] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.432] WriteFile (in: hFile=0x1d8, lpBuffer=0x11201880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11201880*, lpNumberOfBytesWritten=0x1141ddfc*=0x227, lpOverlapped=0x1141de08) returned 1
	[0295.432] GetFileType (hFile=0x1d8) returned 0x1
	[0295.432] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1d08, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.432] CloseHandle (hObject=0x1d8) returned 1
	[0295.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf.tl30z")) returned 0x220
	[0295.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.435] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0295.437] SetEvent (hEvent=0x26c) returned 1
	[0295.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf")) returned 0x220
	[0295.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF", dwFileAttributes=0x220) returned 1
	[0295.438] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0295.518] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0295.518] ReadFile (in: hFile=0x1d8, lpBuffer=0x110d0800, nNumberOfBytesToRead=0x45f8, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x110d0800*, lpNumberOfBytesRead=0x1128be18*=0x45f8, lpOverlapped=0x0) returned 1
	[0295.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0295.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6268 | out: pbBuffer=0x113e6268) returned 1
	[0295.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11217202 | out: pbBuffer=0x11217202) returned 1
	[0295.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121728d | out: pbBuffer=0x1121728d) returned 1
	[0295.525] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0295.526] GetFileType (hFile=0x1d8) returned 0x1
	[0295.526] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.526] WriteFile (in: hFile=0x1d8, lpBuffer=0x11468000*, nNumberOfBytesToWrite=0x45f8, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x11468000*, lpNumberOfBytesWritten=0x1141fdfc*=0x45f8, lpOverlapped=0x1141fe08) returned 1
	[0295.526] GetFileType (hFile=0x1d8) returned 0x1
	[0295.526] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x45f8, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.527] GetFileType (hFile=0x1d8) returned 0x1
	[0295.527] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.527] WriteFile (in: hFile=0x1d8, lpBuffer=0x113a1880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x113a1880*, lpNumberOfBytesWritten=0x1141fdfc*=0x230, lpOverlapped=0x1141fe08) returned 1
	[0295.527] GetFileType (hFile=0x1d8) returned 0x1
	[0295.527] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x45f8, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.527] CloseHandle (hObject=0x1d8) returned 1
	[0295.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf.tl30z")) returned 0x220
	[0295.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.532] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0295.536] SetEvent (hEvent=0x118) returned 1
	[0295.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg")) returned 0x220
	[0295.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG", dwFileAttributes=0x220) returned 1
	[0295.537] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg.tl30z"), dwFlags=0x1) returned 1
	[0295.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0295.611] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0295.611] ReadFile (in: hFile=0x1fc, lpBuffer=0x112a6000, nNumberOfBytesToRead=0xb594, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112a6000*, lpNumberOfBytesRead=0x1128be18*=0xb594, lpOverlapped=0x0) returned 1
	[0295.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f350 | out: pbBuffer=0x1140f350) returned 1
	[0295.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b2702 | out: pbBuffer=0x112b2702) returned 1
	[0295.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b278c | out: pbBuffer=0x112b278c) returned 1
	[0295.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f380 | out: pbBuffer=0x1140f380) returned 1
	[0295.619] GetFileType (hFile=0x1fc) returned 0x1
	[0295.619] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.619] WriteFile (in: hFile=0x1fc, lpBuffer=0x11116000*, nNumberOfBytesToWrite=0xb594, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11116000*, lpNumberOfBytesWritten=0x1141ddfc*=0xb594, lpOverlapped=0x1141de08) returned 1
	[0295.620] GetFileType (hFile=0x1fc) returned 0x1
	[0295.620] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xb594, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.621] GetFileType (hFile=0x1fc) returned 0x1
	[0295.621] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.621] WriteFile (in: hFile=0x1fc, lpBuffer=0x11126000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11126000*, lpNumberOfBytesWritten=0x1141ddfc*=0x233, lpOverlapped=0x1141de08) returned 1
	[0295.621] GetFileType (hFile=0x1fc) returned 0x1
	[0295.621] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xb594, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.621] CloseHandle (hObject=0x1fc) returned 1
	[0295.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg.tl30z")) returned 0x220
	[0295.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0295.625] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0295.627] SetEvent (hEvent=0x118) returned 1
	[0295.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf")) returned 0x220
	[0295.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF", dwFileAttributes=0x220) returned 1
	[0295.628] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0295.705] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0295.705] ReadFile (in: hFile=0x1fc, lpBuffer=0x1132c000, nNumberOfBytesToRead=0x1b74, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1132c000*, lpNumberOfBytesRead=0x1128be18*=0x1b74, lpOverlapped=0x0) returned 1
	[0295.710] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0295.710] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112dd302 | out: pbBuffer=0x112dd302) returned 1
	[0295.710] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112dd30d | out: pbBuffer=0x112dd30d) returned 1
	[0295.710] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112dd384 | out: pbBuffer=0x112dd384) returned 1
	[0295.711] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323d0 | out: pbBuffer=0x113323d0) returned 1
	[0295.711] GetFileType (hFile=0x1fc) returned 0x1
	[0295.711] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.711] WriteFile (in: hFile=0x1fc, lpBuffer=0x113d2000*, nNumberOfBytesToWrite=0x1b74, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x113d2000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1b74, lpOverlapped=0x1133de08) returned 1
	[0295.712] GetFileType (hFile=0x1fc) returned 0x1
	[0295.712] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1b74, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.712] GetFileType (hFile=0x1fc) returned 0x1
	[0295.712] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.712] WriteFile (in: hFile=0x1fc, lpBuffer=0x11361880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11361880*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0295.712] GetFileType (hFile=0x1fc) returned 0x1
	[0295.712] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1b74, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.713] CloseHandle (hObject=0x1fc) returned 1
	[0295.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf.tl30z")) returned 0x220
	[0295.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.726] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0295.732] SetEvent (hEvent=0x234) returned 1
	[0295.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg")) returned 0x220
	[0295.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG", dwFileAttributes=0x220) returned 1
	[0295.733] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg.tl30z"), dwFlags=0x1) returned 1
	[0295.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0295.810] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0295.810] ReadFile (in: hFile=0x250, lpBuffer=0x11bd4000, nNumberOfBytesToRead=0x6196, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11bd4000*, lpNumberOfBytesRead=0x1128be18*=0x6196, lpOverlapped=0x0) returned 1
	[0295.816] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0295.816] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0295.817] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11351202 | out: pbBuffer=0x11351202) returned 1
	[0295.817] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0295.818] GetFileType (hFile=0x250) returned 0x1
	[0295.818] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.818] WriteFile (in: hFile=0x250, lpBuffer=0x112b2000*, nNumberOfBytesToWrite=0x6196, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x112b2000*, lpNumberOfBytesWritten=0x11339dfc*=0x6196, lpOverlapped=0x11339e08) returned 1
	[0295.819] GetFileType (hFile=0x250) returned 0x1
	[0295.819] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x6196, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.819] GetFileType (hFile=0x250) returned 0x1
	[0295.819] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.819] WriteFile (in: hFile=0x250, lpBuffer=0x11153880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11153880*, lpNumberOfBytesWritten=0x11339dfc*=0x22d, lpOverlapped=0x11339e08) returned 1
	[0295.820] GetFileType (hFile=0x250) returned 0x1
	[0295.820] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x6196, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.820] CloseHandle (hObject=0x250) returned 1
	[0295.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg.tl30z")) returned 0x220
	[0295.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0295.823] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0295.825] SetEvent (hEvent=0x218) returned 1
	[0295.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg")) returned 0x220
	[0295.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG", dwFileAttributes=0x220) returned 1
	[0295.825] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg.tl30z"), dwFlags=0x1) returned 1
	[0295.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.950] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0295.950] ReadFile (in: hFile=0x224, lpBuffer=0x1144a000, nNumberOfBytesToRead=0x907d, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1144a000*, lpNumberOfBytesRead=0x1128be18*=0x907d, lpOverlapped=0x0) returned 1
	[0295.957] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0295.957] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0295.957] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141c802 | out: pbBuffer=0x1141c802) returned 1
	[0295.957] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1141c866 | out: pbBuffer=0x1141c866) returned 1
	[0295.957] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0295.958] GetFileType (hFile=0x224) returned 0x1
	[0295.959] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.959] WriteFile (in: hFile=0x224, lpBuffer=0x112d4000*, nNumberOfBytesToWrite=0x907d, lpNumberOfBytesWritten=0x11327dfc, lpOverlapped=0x11327e08 | out: lpBuffer=0x112d4000*, lpNumberOfBytesWritten=0x11327dfc*=0x907d, lpOverlapped=0x11327e08) returned 1
	[0295.959] GetFileType (hFile=0x224) returned 0x1
	[0295.959] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x907d, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.959] GetFileType (hFile=0x224) returned 0x1
	[0295.959] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.960] WriteFile (in: hFile=0x224, lpBuffer=0x1133ca80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11327dfc, lpOverlapped=0x11327e08 | out: lpBuffer=0x1133ca80*, lpNumberOfBytesWritten=0x11327dfc*=0x233, lpOverlapped=0x11327e08) returned 1
	[0295.960] GetFileType (hFile=0x224) returned 0x1
	[0295.960] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x907d, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.960] CloseHandle (hObject=0x224) returned 1
	[0295.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg.tl30z")) returned 0x220
	[0295.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0295.965] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0295.967] SetEvent (hEvent=0x118) returned 1
	[0295.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg")) returned 0x220
	[0295.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG", dwFileAttributes=0x220) returned 1
	[0295.967] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg.tl30z"), dwFlags=0x1) returned 1
	[0296.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0296.074] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0296.074] ReadFile (in: hFile=0x224, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x7d26, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x1128be18*=0x7d26, lpOverlapped=0x0) returned 1
	[0296.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e610 | out: pbBuffer=0x1104e610) returned 1
	[0296.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e608 | out: pbBuffer=0x1104e608) returned 1
	[0296.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11298802 | out: pbBuffer=0x11298802) returned 1
	[0296.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0296.082] GetFileType (hFile=0x224) returned 0x1
	[0296.082] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.083] WriteFile (in: hFile=0x224, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x7d26, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x11031dfc*=0x7d26, lpOverlapped=0x11031e08) returned 1
	[0296.083] GetFileType (hFile=0x224) returned 0x1
	[0296.083] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7d26, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.084] GetFileType (hFile=0x224) returned 0x1
	[0296.084] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.084] WriteFile (in: hFile=0x224, lpBuffer=0x11099880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11099880*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0296.084] GetFileType (hFile=0x224) returned 0x1
	[0296.084] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7d26, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.085] CloseHandle (hObject=0x224) returned 1
	[0296.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg.tl30z")) returned 0x220
	[0296.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0296.089] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0296.091] SetEvent (hEvent=0x118) returned 1
	[0296.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf")) returned 0x220
	[0296.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF", dwFileAttributes=0x220) returned 1
	[0296.091] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0296.305] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0296.305] ReadFile (in: hFile=0x250, lpBuffer=0x11418000, nNumberOfBytesToRead=0x3b2e, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11418000*, lpNumberOfBytesRead=0x1128be18*=0x3b2e, lpOverlapped=0x0) returned 1
	[0296.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0296.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0296.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267302 | out: pbBuffer=0x11267302) returned 1
	[0296.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112673cd | out: pbBuffer=0x112673cd) returned 1
	[0296.312] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0296.312] GetFileType (hFile=0x250) returned 0x1
	[0296.312] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.313] WriteFile (in: hFile=0x250, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x3b2e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x11031dfc*=0x3b2e, lpOverlapped=0x11031e08) returned 1
	[0296.313] GetFileType (hFile=0x250) returned 0x1
	[0296.313] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3b2e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.313] GetFileType (hFile=0x250) returned 0x1
	[0296.313] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.314] WriteFile (in: hFile=0x250, lpBuffer=0x111a9c00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111a9c00*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0296.314] GetFileType (hFile=0x250) returned 0x1
	[0296.314] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3b2e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.314] CloseHandle (hObject=0x250) returned 1
	[0296.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf.tl30z")) returned 0x220
	[0296.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.317] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0296.321] SetEvent (hEvent=0x210) returned 1
	[0296.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf")) returned 0x220
	[0296.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF", dwFileAttributes=0x220) returned 1
	[0296.321] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0296.404] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0296.404] ReadFile (in: hFile=0x1d4, lpBuffer=0x112a0000, nNumberOfBytesToRead=0x5f6e, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112a0000*, lpNumberOfBytesRead=0x1128be18*=0x5f6e, lpOverlapped=0x0) returned 1
	[0296.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1f0 | out: pbBuffer=0x1140f1f0) returned 1
	[0296.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1105bc02 | out: pbBuffer=0x1105bc02) returned 1
	[0296.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105bc32 | out: pbBuffer=0x1105bc32) returned 1
	[0296.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105bca6 | out: pbBuffer=0x1105bca6) returned 1
	[0296.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105bcbd | out: pbBuffer=0x1105bcbd) returned 1
	[0296.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f220 | out: pbBuffer=0x1140f220) returned 1
	[0296.412] GetFileType (hFile=0x1d4) returned 0x1
	[0296.412] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.412] WriteFile (in: hFile=0x1d4, lpBuffer=0x11438000*, nNumberOfBytesToWrite=0x5f6e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11438000*, lpNumberOfBytesWritten=0x11031dfc*=0x5f6e, lpOverlapped=0x11031e08) returned 1
	[0296.413] GetFileType (hFile=0x1d4) returned 0x1
	[0296.413] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5f6e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.413] GetFileType (hFile=0x1d4) returned 0x1
	[0296.413] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.413] WriteFile (in: hFile=0x1d4, lpBuffer=0x113a3500*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113a3500*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0296.413] GetFileType (hFile=0x1d4) returned 0x1
	[0296.413] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5f6e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.414] CloseHandle (hObject=0x1d4) returned 1
	[0296.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf.tl30z")) returned 0x220
	[0296.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.417] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0296.423] SetEvent (hEvent=0x210) returned 1
	[0296.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf")) returned 0x220
	[0296.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF", dwFileAttributes=0x220) returned 1
	[0296.424] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0296.519] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0296.520] ReadFile (in: hFile=0x250, lpBuffer=0x1118c000, nNumberOfBytesToRead=0x62e0, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1118c000*, lpNumberOfBytesRead=0x1128be18*=0x62e0, lpOverlapped=0x0) returned 1
	[0296.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0296.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6548 | out: pbBuffer=0x113e6548) returned 1
	[0296.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a0802 | out: pbBuffer=0x111a0802) returned 1
	[0296.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0296.528] GetFileType (hFile=0x250) returned 0x1
	[0296.528] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.528] WriteFile (in: hFile=0x250, lpBuffer=0x111ee000*, nNumberOfBytesToWrite=0x62e0, lpNumberOfBytesWritten=0x11301dfc, lpOverlapped=0x11301e08 | out: lpBuffer=0x111ee000*, lpNumberOfBytesWritten=0x11301dfc*=0x62e0, lpOverlapped=0x11301e08) returned 1
	[0296.529] GetFileType (hFile=0x250) returned 0x1
	[0296.529] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x62e0, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.529] GetFileType (hFile=0x250) returned 0x1
	[0296.529] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.529] WriteFile (in: hFile=0x250, lpBuffer=0x1111f500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11301dfc, lpOverlapped=0x11301e08 | out: lpBuffer=0x1111f500*, lpNumberOfBytesWritten=0x11301dfc*=0x22a, lpOverlapped=0x11301e08) returned 1
	[0296.529] GetFileType (hFile=0x250) returned 0x1
	[0296.529] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x62e0, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.530] CloseHandle (hObject=0x250) returned 1
	[0296.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf.tl30z")) returned 0x220
	[0296.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.533] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0296.535] SetEvent (hEvent=0x210) returned 1
	[0296.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf")) returned 0x220
	[0296.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF", dwFileAttributes=0x220) returned 1
	[0296.535] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0296.641] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0296.641] ReadFile (in: hFile=0x1d8, lpBuffer=0x11214000, nNumberOfBytesToRead=0x8420, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11214000*, lpNumberOfBytesRead=0x1128be18*=0x8420, lpOverlapped=0x0) returned 1
	[0296.648] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0296.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e338 | out: pbBuffer=0x1104e338) returned 1
	[0296.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11473302 | out: pbBuffer=0x11473302) returned 1
	[0296.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0296.650] GetFileType (hFile=0x1d8) returned 0x1
	[0296.650] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.650] WriteFile (in: hFile=0x1d8, lpBuffer=0x112b4000*, nNumberOfBytesToWrite=0x8420, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112b4000*, lpNumberOfBytesWritten=0x1102bdfc*=0x8420, lpOverlapped=0x1102be08) returned 1
	[0296.651] GetFileType (hFile=0x1d8) returned 0x1
	[0296.651] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8420, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.651] GetFileType (hFile=0x1d8) returned 0x1
	[0296.651] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.651] WriteFile (in: hFile=0x1d8, lpBuffer=0x1125dc00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1125dc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0296.652] GetFileType (hFile=0x1d8) returned 0x1
	[0296.652] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8420, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.652] CloseHandle (hObject=0x1d8) returned 1
	[0296.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf.tl30z")) returned 0x220
	[0296.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.655] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0296.659] SetEvent (hEvent=0x1f0) returned 1
	[0296.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf")) returned 0x220
	[0296.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF", dwFileAttributes=0x220) returned 1
	[0296.659] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0296.726] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0296.726] ReadFile (in: hFile=0x224, lpBuffer=0x111a4000, nNumberOfBytesToRead=0x2182, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x111a4000*, lpNumberOfBytesRead=0x1128be18*=0x2182, lpOverlapped=0x0) returned 1
	[0296.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0296.731] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137dc02 | out: pbBuffer=0x1137dc02) returned 1
	[0296.731] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137dc4b | out: pbBuffer=0x1137dc4b) returned 1
	[0296.731] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137dcab | out: pbBuffer=0x1137dcab) returned 1
	[0296.731] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0296.731] GetFileType (hFile=0x224) returned 0x1
	[0296.732] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.732] WriteFile (in: hFile=0x224, lpBuffer=0x111de000*, nNumberOfBytesToWrite=0x2182, lpNumberOfBytesWritten=0x112a5dfc, lpOverlapped=0x112a5e08 | out: lpBuffer=0x111de000*, lpNumberOfBytesWritten=0x112a5dfc*=0x2182, lpOverlapped=0x112a5e08) returned 1
	[0296.732] GetFileType (hFile=0x224) returned 0x1
	[0296.732] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2182, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.732] GetFileType (hFile=0x224) returned 0x1
	[0296.732] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.732] WriteFile (in: hFile=0x224, lpBuffer=0x111d2700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112a5dfc, lpOverlapped=0x112a5e08 | out: lpBuffer=0x111d2700*, lpNumberOfBytesWritten=0x112a5dfc*=0x224, lpOverlapped=0x112a5e08) returned 1
	[0296.733] GetFileType (hFile=0x224) returned 0x1
	[0296.733] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2182, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.733] CloseHandle (hObject=0x224) returned 1
	[0296.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf.tl30z")) returned 0x220
	[0296.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.736] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0296.739] SetEvent (hEvent=0x218) returned 1
	[0296.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf")) returned 0x220
	[0296.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF", dwFileAttributes=0x220) returned 1
	[0296.740] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0296.836] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0296.837] ReadFile (in: hFile=0x1d4, lpBuffer=0x11090000, nNumberOfBytesToRead=0x4724, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x1128be18*=0x4724, lpOverlapped=0x0) returned 1
	[0296.843] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f590 | out: pbBuffer=0x1140f590) returned 1
	[0296.843] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f588 | out: pbBuffer=0x1140f588) returned 1
	[0296.843] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e2802 | out: pbBuffer=0x113e2802) returned 1
	[0296.843] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e28cf | out: pbBuffer=0x113e28cf) returned 1
	[0296.844] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5c0 | out: pbBuffer=0x1140f5c0) returned 1
	[0296.844] GetFileType (hFile=0x1d4) returned 0x1
	[0296.845] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.845] WriteFile (in: hFile=0x1d4, lpBuffer=0x11358000*, nNumberOfBytesToWrite=0x4724, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11358000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4724, lpOverlapped=0x1102be08) returned 1
	[0296.845] GetFileType (hFile=0x1d4) returned 0x1
	[0296.845] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4724, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.845] GetFileType (hFile=0x1d4) returned 0x1
	[0296.846] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.846] WriteFile (in: hFile=0x1d4, lpBuffer=0x1137d880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1137d880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0296.846] GetFileType (hFile=0x1d4) returned 0x1
	[0296.846] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4724, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.846] CloseHandle (hObject=0x1d4) returned 1
	[0296.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf.tl30z")) returned 0x220
	[0296.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.850] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0296.853] SetEvent (hEvent=0x234) returned 1
	[0296.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf")) returned 0x220
	[0296.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF", dwFileAttributes=0x220) returned 1
	[0296.854] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0296.965] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0296.965] ReadFile (in: hFile=0x1d4, lpBuffer=0x113cc000, nNumberOfBytesToRead=0x1d4c, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x113cc000*, lpNumberOfBytesRead=0x1128be18*=0x1d4c, lpOverlapped=0x0) returned 1
	[0296.970] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0296.970] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ede02 | out: pbBuffer=0x111ede02) returned 1
	[0296.970] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ede86 | out: pbBuffer=0x111ede86) returned 1
	[0296.970] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111edeca | out: pbBuffer=0x111edeca) returned 1
	[0296.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0296.971] GetFileType (hFile=0x1d4) returned 0x1
	[0296.971] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.971] WriteFile (in: hFile=0x1d4, lpBuffer=0x110c6000*, nNumberOfBytesToWrite=0x1d4c, lpNumberOfBytesWritten=0x111e7dfc, lpOverlapped=0x111e7e08 | out: lpBuffer=0x110c6000*, lpNumberOfBytesWritten=0x111e7dfc*=0x1d4c, lpOverlapped=0x111e7e08) returned 1
	[0296.971] GetFileType (hFile=0x1d4) returned 0x1
	[0296.972] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1d4c, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.972] GetFileType (hFile=0x1d4) returned 0x1
	[0296.972] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.972] WriteFile (in: hFile=0x1d4, lpBuffer=0x110b4700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x111e7dfc, lpOverlapped=0x111e7e08 | out: lpBuffer=0x110b4700*, lpNumberOfBytesWritten=0x111e7dfc*=0x22d, lpOverlapped=0x111e7e08) returned 1
	[0296.972] GetFileType (hFile=0x1d4) returned 0x1
	[0296.972] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1d4c, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.972] CloseHandle (hObject=0x1d4) returned 1
	[0296.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf.tl30z")) returned 0x220
	[0296.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.974] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0296.977] SetEvent (hEvent=0x234) returned 1
	[0296.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf")) returned 0x220
	[0296.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF", dwFileAttributes=0x220) returned 1
	[0296.978] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0297.067] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0297.067] ReadFile (in: hFile=0x288, lpBuffer=0x1125c000, nNumberOfBytesToRead=0x1bcc, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1125c000*, lpNumberOfBytesRead=0x1128be18*=0x1bcc, lpOverlapped=0x0) returned 1
	[0297.071] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0297.071] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6548 | out: pbBuffer=0x113e6548) returned 1
	[0297.072] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110be902 | out: pbBuffer=0x110be902) returned 1
	[0297.072] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110be90f | out: pbBuffer=0x110be90f) returned 1
	[0297.072] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0297.072] GetFileType (hFile=0x288) returned 0x1
	[0297.072] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.073] WriteFile (in: hFile=0x288, lpBuffer=0x1114e000*, nNumberOfBytesToWrite=0x1bcc, lpNumberOfBytesWritten=0x111e7dfc, lpOverlapped=0x111e7e08 | out: lpBuffer=0x1114e000*, lpNumberOfBytesWritten=0x111e7dfc*=0x1bcc, lpOverlapped=0x111e7e08) returned 1
	[0297.073] GetFileType (hFile=0x288) returned 0x1
	[0297.073] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1bcc, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.073] GetFileType (hFile=0x288) returned 0x1
	[0297.073] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.073] WriteFile (in: hFile=0x288, lpBuffer=0x110b5500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x111e7dfc, lpOverlapped=0x111e7e08 | out: lpBuffer=0x110b5500*, lpNumberOfBytesWritten=0x111e7dfc*=0x230, lpOverlapped=0x111e7e08) returned 1
	[0297.073] GetFileType (hFile=0x288) returned 0x1
	[0297.074] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1bcc, lpNewFilePointer=0x0, dwMoveMethod=0x111e7de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.074] CloseHandle (hObject=0x288) returned 1
	[0297.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf.tl30z")) returned 0x220
	[0297.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.077] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0297.080] SetEvent (hEvent=0x234) returned 1
	[0297.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf")) returned 0x220
	[0297.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF", dwFileAttributes=0x220) returned 1
	[0297.081] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0297.201] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0297.201] ReadFile (in: hFile=0x1fc, lpBuffer=0x11338000, nNumberOfBytesToRead=0x2a44, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11338000*, lpNumberOfBytesRead=0x1128be18*=0x2a44, lpOverlapped=0x0) returned 1
	[0297.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0297.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0297.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b8802 | out: pbBuffer=0x111b8802) returned 1
	[0297.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0297.215] GetFileType (hFile=0x1fc) returned 0x1
	[0297.216] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1116dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.216] WriteFile (in: hFile=0x1fc, lpBuffer=0x110e6000*, nNumberOfBytesToWrite=0x2a44, lpNumberOfBytesWritten=0x1116ddfc, lpOverlapped=0x1116de08 | out: lpBuffer=0x110e6000*, lpNumberOfBytesWritten=0x1116ddfc*=0x2a44, lpOverlapped=0x1116de08) returned 1
	[0297.216] GetFileType (hFile=0x1fc) returned 0x1
	[0297.216] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2a44, lpNewFilePointer=0x0, dwMoveMethod=0x1116dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.216] GetFileType (hFile=0x1fc) returned 0x1
	[0297.216] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1116dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.216] WriteFile (in: hFile=0x1fc, lpBuffer=0x11178a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1116ddfc, lpOverlapped=0x1116de08 | out: lpBuffer=0x11178a80*, lpNumberOfBytesWritten=0x1116ddfc*=0x227, lpOverlapped=0x1116de08) returned 1
	[0297.217] GetFileType (hFile=0x1fc) returned 0x1
	[0297.217] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2a44, lpNewFilePointer=0x0, dwMoveMethod=0x1116dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.217] CloseHandle (hObject=0x1fc) returned 1
	[0297.220] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf.tl30z")) returned 0x220
	[0297.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.223] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0297.226] SetEvent (hEvent=0x26c) returned 1
	[0297.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf")) returned 0x220
	[0297.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF", dwFileAttributes=0x220) returned 1
	[0297.227] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0297.371] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0297.371] ReadFile (in: hFile=0x1fc, lpBuffer=0x110c2000, nNumberOfBytesToRead=0x1388, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x110c2000*, lpNumberOfBytesRead=0x1128be18*=0x1388, lpOverlapped=0x0) returned 1
	[0297.378] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0297.378] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6268 | out: pbBuffer=0x113e6268) returned 1
	[0297.378] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1135b202 | out: pbBuffer=0x1135b202) returned 1
	[0297.378] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1135b2b5 | out: pbBuffer=0x1135b2b5) returned 1
	[0297.378] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1135b2c0 | out: pbBuffer=0x1135b2c0) returned 1
	[0297.379] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0297.379] GetFileType (hFile=0x1fc) returned 0x1
	[0297.379] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.379] WriteFile (in: hFile=0x1fc, lpBuffer=0x1130c000*, nNumberOfBytesToWrite=0x1388, lpNumberOfBytesWritten=0x11169dfc, lpOverlapped=0x11169e08 | out: lpBuffer=0x1130c000*, lpNumberOfBytesWritten=0x11169dfc*=0x1388, lpOverlapped=0x11169e08) returned 1
	[0297.380] GetFileType (hFile=0x1fc) returned 0x1
	[0297.380] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1388, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.380] GetFileType (hFile=0x1fc) returned 0x1
	[0297.380] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.380] WriteFile (in: hFile=0x1fc, lpBuffer=0x11061880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11169dfc, lpOverlapped=0x11169e08 | out: lpBuffer=0x11061880*, lpNumberOfBytesWritten=0x11169dfc*=0x227, lpOverlapped=0x11169e08) returned 1
	[0297.381] GetFileType (hFile=0x1fc) returned 0x1
	[0297.381] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1388, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.381] CloseHandle (hObject=0x1fc) returned 1
	[0297.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf.tl30z")) returned 0x220
	[0297.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.385] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0297.389] SetEvent (hEvent=0x218) returned 1
	[0297.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf")) returned 0x220
	[0297.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF", dwFileAttributes=0x220) returned 1
	[0297.390] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0297.497] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0297.497] ReadFile (in: hFile=0x1d4, lpBuffer=0x1145e000, nNumberOfBytesToRead=0x3e9e, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1145e000*, lpNumberOfBytesRead=0x1128be18*=0x3e9e, lpOverlapped=0x0) returned 1
	[0297.502] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66b0 | out: pbBuffer=0x113e66b0) returned 1
	[0297.503] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112af102 | out: pbBuffer=0x112af102) returned 1
	[0297.503] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112af1c5 | out: pbBuffer=0x112af1c5) returned 1
	[0297.503] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66e0 | out: pbBuffer=0x113e66e0) returned 1
	[0297.504] GetFileType (hFile=0x1d4) returned 0x1
	[0297.504] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.504] WriteFile (in: hFile=0x1d4, lpBuffer=0x111da000*, nNumberOfBytesToWrite=0x3e9e, lpNumberOfBytesWritten=0x11169dfc, lpOverlapped=0x11169e08 | out: lpBuffer=0x111da000*, lpNumberOfBytesWritten=0x11169dfc*=0x3e9e, lpOverlapped=0x11169e08) returned 1
	[0297.505] GetFileType (hFile=0x1d4) returned 0x1
	[0297.505] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3e9e, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.505] GetFileType (hFile=0x1d4) returned 0x1
	[0297.505] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.505] WriteFile (in: hFile=0x1d4, lpBuffer=0x11470380*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11169dfc, lpOverlapped=0x11169e08 | out: lpBuffer=0x11470380*, lpNumberOfBytesWritten=0x11169dfc*=0x236, lpOverlapped=0x11169e08) returned 1
	[0297.506] GetFileType (hFile=0x1d4) returned 0x1
	[0297.506] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3e9e, lpNewFilePointer=0x0, dwMoveMethod=0x11169de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.506] CloseHandle (hObject=0x1d4) returned 1
	[0297.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf.tl30z")) returned 0x220
	[0297.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.517] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0297.521] SetEvent (hEvent=0x218) returned 1
	[0297.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf")) returned 0x220
	[0297.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF", dwFileAttributes=0x220) returned 1
	[0297.522] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0297.676] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0297.677] ReadFile (in: hFile=0x250, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x207a, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x1128be18*=0x207a, lpOverlapped=0x0) returned 1
	[0297.683] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0297.683] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63d8 | out: pbBuffer=0x113e63d8) returned 1
	[0297.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112afe02 | out: pbBuffer=0x112afe02) returned 1
	[0297.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112afe04 | out: pbBuffer=0x112afe04) returned 1
	[0297.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112afe98 | out: pbBuffer=0x112afe98) returned 1
	[0297.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0297.685] GetFileType (hFile=0x250) returned 0x1
	[0297.685] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.685] WriteFile (in: hFile=0x250, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x207a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x207a, lpOverlapped=0x1102be08) returned 1
	[0297.686] GetFileType (hFile=0x250) returned 0x1
	[0297.686] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x207a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.686] GetFileType (hFile=0x250) returned 0x1
	[0297.686] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.686] WriteFile (in: hFile=0x250, lpBuffer=0x1137ea80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1137ea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0297.687] GetFileType (hFile=0x250) returned 0x1
	[0297.687] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x207a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.687] CloseHandle (hObject=0x250) returned 1
	[0297.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf.tl30z")) returned 0x220
	[0297.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.692] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0297.695] SetEvent (hEvent=0x218) returned 1
	[0297.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf")) returned 0x220
	[0297.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF", dwFileAttributes=0x220) returned 1
	[0297.696] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0297.791] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0297.791] ReadFile (in: hFile=0x224, lpBuffer=0x113c8c00, nNumberOfBytesToRead=0xbbc, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x113c8c00*, lpNumberOfBytesRead=0x1128be18*=0xbbc, lpOverlapped=0x0) returned 1
	[0297.797] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0297.797] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4c8 | out: pbBuffer=0x1104e4c8) returned 1
	[0297.797] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d5c02 | out: pbBuffer=0x110d5c02) returned 1
	[0297.798] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0297.798] GetFileType (hFile=0x224) returned 0x1
	[0297.798] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.798] WriteFile (in: hFile=0x224, lpBuffer=0x11096000*, nNumberOfBytesToWrite=0xbbc, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x11096000*, lpNumberOfBytesWritten=0x1129ddfc*=0xbbc, lpOverlapped=0x1129de08) returned 1
	[0297.799] GetFileType (hFile=0x224) returned 0x1
	[0297.799] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xbbc, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.799] GetFileType (hFile=0x224) returned 0x1
	[0297.799] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.799] WriteFile (in: hFile=0x224, lpBuffer=0x11310700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x11310700*, lpNumberOfBytesWritten=0x1129ddfc*=0x230, lpOverlapped=0x1129de08) returned 1
	[0297.800] GetFileType (hFile=0x224) returned 0x1
	[0297.800] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xbbc, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.800] CloseHandle (hObject=0x224) returned 1
	[0297.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf.tl30z")) returned 0x220
	[0297.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.804] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0297.810] SetEvent (hEvent=0x218) returned 1
	[0297.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf")) returned 0x220
	[0297.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF", dwFileAttributes=0x220) returned 1
	[0297.811] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0297.895] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0297.895] ReadFile (in: hFile=0x1fc, lpBuffer=0x11124000, nNumberOfBytesToRead=0x1b00, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11124000*, lpNumberOfBytesRead=0x1128be18*=0x1b00, lpOverlapped=0x0) returned 1
	[0297.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113322f0 | out: pbBuffer=0x113322f0) returned 1
	[0297.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113322e8 | out: pbBuffer=0x113322e8) returned 1
	[0297.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a1b02 | out: pbBuffer=0x110a1b02) returned 1
	[0297.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110a1bc4 | out: pbBuffer=0x110a1bc4) returned 1
	[0297.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332320 | out: pbBuffer=0x11332320) returned 1
	[0297.904] GetFileType (hFile=0x1fc) returned 0x1
	[0297.905] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.905] WriteFile (in: hFile=0x1fc, lpBuffer=0x111fe000*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x111fe000*, lpNumberOfBytesWritten=0x1129ddfc*=0x1b00, lpOverlapped=0x1129de08) returned 1
	[0297.905] GetFileType (hFile=0x1fc) returned 0x1
	[0297.905] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1b00, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.906] GetFileType (hFile=0x1fc) returned 0x1
	[0297.906] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.906] WriteFile (in: hFile=0x1fc, lpBuffer=0x1145d180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x1145d180*, lpNumberOfBytesWritten=0x1129ddfc*=0x224, lpOverlapped=0x1129de08) returned 1
	[0297.906] GetFileType (hFile=0x1fc) returned 0x1
	[0297.906] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1b00, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.906] CloseHandle (hObject=0x1fc) returned 1
	[0297.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf.tl30z")) returned 0x220
	[0297.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.962] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0297.966] SetEvent (hEvent=0x218) returned 1
	[0297.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf")) returned 0x220
	[0297.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF", dwFileAttributes=0x220) returned 1
	[0297.967] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.058] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0298.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0298.073] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1138be08 | out: lpMode=0x1138be08) returned 0
	[0298.073] ReadFile (in: hFile=0x288, lpBuffer=0x113ec000, nNumberOfBytesToRead=0x5cae, lpNumberOfBytesRead=0x1138be18, lpOverlapped=0x0 | out: lpBuffer=0x113ec000*, lpNumberOfBytesRead=0x1138be18*=0x5cae, lpOverlapped=0x0) returned 1
	[0298.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0298.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0298.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113fa802 | out: pbBuffer=0x113fa802) returned 1
	[0298.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113fa821 | out: pbBuffer=0x113fa821) returned 1
	[0298.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0298.082] GetFileType (hFile=0x288) returned 0x1
	[0298.082] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.082] WriteFile (in: hFile=0x288, lpBuffer=0x111ac000*, nNumberOfBytesToWrite=0x5cae, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x111ac000*, lpNumberOfBytesWritten=0x1138bdfc*=0x5cae, lpOverlapped=0x1138be08) returned 1
	[0298.082] GetFileType (hFile=0x288) returned 0x1
	[0298.083] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5cae, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.083] GetFileType (hFile=0x288) returned 0x1
	[0298.083] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.083] WriteFile (in: hFile=0x288, lpBuffer=0x1132ea80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x1132ea80*, lpNumberOfBytesWritten=0x1138bdfc*=0x233, lpOverlapped=0x1138be08) returned 1
	[0298.083] GetFileType (hFile=0x288) returned 0x1
	[0298.083] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5cae, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.084] CloseHandle (hObject=0x288) returned 1
	[0298.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf.tl30z")) returned 0x220
	[0298.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.088] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0298.091] SetEvent (hEvent=0x234) returned 1
	[0298.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf")) returned 0x220
	[0298.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF", dwFileAttributes=0x220) returned 1
	[0298.092] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0298.207] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0298.207] ReadFile (in: hFile=0x288, lpBuffer=0x111fa000, nNumberOfBytesToRead=0xa520, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x111fa000*, lpNumberOfBytesRead=0x1128be18*=0xa520, lpOverlapped=0x0) returned 1
	[0298.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f550 | out: pbBuffer=0x1140f550) returned 1
	[0298.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11206602 | out: pbBuffer=0x11206602) returned 1
	[0298.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1120664e | out: pbBuffer=0x1120664e) returned 1
	[0298.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11206668 | out: pbBuffer=0x11206668) returned 1
	[0298.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1120668b | out: pbBuffer=0x1120668b) returned 1
	[0298.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112066da | out: pbBuffer=0x112066da) returned 1
	[0298.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f580 | out: pbBuffer=0x1140f580) returned 1
	[0298.216] SetEvent (hEvent=0x218) returned 1
	[0298.217] GetFileType (hFile=0x288) returned 0x1
	[0298.217] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.217] WriteFile (in: hFile=0x288, lpBuffer=0x1123c000*, nNumberOfBytesToWrite=0xa520, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1123c000*, lpNumberOfBytesWritten=0x11031dfc*=0xa520, lpOverlapped=0x11031e08) returned 1
	[0298.217] GetFileType (hFile=0x288) returned 0x1
	[0298.218] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xa520, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.218] GetFileType (hFile=0x288) returned 0x1
	[0298.218] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.218] WriteFile (in: hFile=0x288, lpBuffer=0x11437880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11437880*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0298.218] GetFileType (hFile=0x288) returned 0x1
	[0298.218] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xa520, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.219] CloseHandle (hObject=0x288) returned 1
	[0298.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf.tl30z")) returned 0x220
	[0298.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.225] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0298.228] SetEvent (hEvent=0x218) returned 1
	[0298.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf")) returned 0x220
	[0298.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF", dwFileAttributes=0x220) returned 1
	[0298.229] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0298.343] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0298.343] ReadFile (in: hFile=0x1fc, lpBuffer=0x1129e000, nNumberOfBytesToRead=0xc20c, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1129e000*, lpNumberOfBytesRead=0x11316e18*=0xc20c, lpOverlapped=0x0) returned 1
	[0298.350] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0298.350] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11433d02 | out: pbBuffer=0x11433d02) returned 1
	[0298.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11433d2e | out: pbBuffer=0x11433d2e) returned 1
	[0298.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332550 | out: pbBuffer=0x11332550) returned 1
	[0298.352] GetFileType (hFile=0x1fc) returned 0x1
	[0298.352] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.353] WriteFile (in: hFile=0x1fc, lpBuffer=0x1144a000*, nNumberOfBytesToWrite=0xc20c, lpNumberOfBytesWritten=0x111c3dfc, lpOverlapped=0x111c3e08 | out: lpBuffer=0x1144a000*, lpNumberOfBytesWritten=0x111c3dfc*=0xc20c, lpOverlapped=0x111c3e08) returned 1
	[0298.353] GetFileType (hFile=0x1fc) returned 0x1
	[0298.353] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xc20c, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.354] GetFileType (hFile=0x1fc) returned 0x1
	[0298.354] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.354] WriteFile (in: hFile=0x1fc, lpBuffer=0x110c8700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x111c3dfc, lpOverlapped=0x111c3e08 | out: lpBuffer=0x110c8700*, lpNumberOfBytesWritten=0x111c3dfc*=0x22a, lpOverlapped=0x111c3e08) returned 1
	[0298.354] GetFileType (hFile=0x1fc) returned 0x1
	[0298.354] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xc20c, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.354] CloseHandle (hObject=0x1fc) returned 1
	[0298.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf.tl30z")) returned 0x220
	[0298.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.358] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0298.361] SetEvent (hEvent=0x218) returned 1
	[0298.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf")) returned 0x220
	[0298.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF", dwFileAttributes=0x220) returned 1
	[0298.362] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0298.456] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0298.456] ReadFile (in: hFile=0x224, lpBuffer=0x110cc000, nNumberOfBytesToRead=0xc37e, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11316e18*=0xc37e, lpOverlapped=0x0) returned 1
	[0298.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0298.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0298.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11156802 | out: pbBuffer=0x11156802) returned 1
	[0298.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0298.466] GetFileType (hFile=0x224) returned 0x1
	[0298.466] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.466] WriteFile (in: hFile=0x224, lpBuffer=0x1131e000*, nNumberOfBytesToWrite=0xc37e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1131e000*, lpNumberOfBytesWritten=0x11031dfc*=0xc37e, lpOverlapped=0x11031e08) returned 1
	[0298.467] GetFileType (hFile=0x224) returned 0x1
	[0298.467] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xc37e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.467] GetFileType (hFile=0x224) returned 0x1
	[0298.467] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.468] WriteFile (in: hFile=0x224, lpBuffer=0x11168a80*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11168a80*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0298.468] GetFileType (hFile=0x224) returned 0x1
	[0298.468] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xc37e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.468] CloseHandle (hObject=0x224) returned 1
	[0298.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf.tl30z")) returned 0x220
	[0298.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.471] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0298.473] SetEvent (hEvent=0x118) returned 1
	[0298.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf")) returned 0x220
	[0298.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF", dwFileAttributes=0x220) returned 1
	[0298.474] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0298.700] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0298.700] ReadFile (in: hFile=0x1d4, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x2a18, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x11316e18*=0x2a18, lpOverlapped=0x0) returned 1
	[0298.707] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0298.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e2802 | out: pbBuffer=0x113e2802) returned 1
	[0298.708] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0298.708] GetFileType (hFile=0x1d4) returned 0x1
	[0298.708] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.709] WriteFile (in: hFile=0x1d4, lpBuffer=0x113ca000*, nNumberOfBytesToWrite=0x2a18, lpNumberOfBytesWritten=0x112b7dfc, lpOverlapped=0x112b7e08 | out: lpBuffer=0x113ca000*, lpNumberOfBytesWritten=0x112b7dfc*=0x2a18, lpOverlapped=0x112b7e08) returned 1
	[0298.709] GetFileType (hFile=0x1d4) returned 0x1
	[0298.709] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2a18, lpNewFilePointer=0x0, dwMoveMethod=0x112b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.709] GetFileType (hFile=0x1d4) returned 0x1
	[0298.709] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.709] WriteFile (in: hFile=0x1d4, lpBuffer=0x1119ea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112b7dfc, lpOverlapped=0x112b7e08 | out: lpBuffer=0x1119ea80*, lpNumberOfBytesWritten=0x112b7dfc*=0x227, lpOverlapped=0x112b7e08) returned 1
	[0298.710] GetFileType (hFile=0x1d4) returned 0x1
	[0298.710] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2a18, lpNewFilePointer=0x0, dwMoveMethod=0x112b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.710] CloseHandle (hObject=0x1d4) returned 1
	[0298.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf.tl30z")) returned 0x220
	[0298.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.712] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0298.714] SetEvent (hEvent=0x118) returned 1
	[0298.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf")) returned 0x220
	[0298.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF", dwFileAttributes=0x220) returned 1
	[0298.715] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0298.786] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0298.787] ReadFile (in: hFile=0x288, lpBuffer=0x111c8000, nNumberOfBytesToRead=0x1c0c, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x111c8000*, lpNumberOfBytesRead=0x11316e18*=0x1c0c, lpOverlapped=0x0) returned 1
	[0298.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332800 | out: pbBuffer=0x11332800) returned 1
	[0298.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327f8 | out: pbBuffer=0x113327f8) returned 1
	[0298.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a1102 | out: pbBuffer=0x110a1102) returned 1
	[0298.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332830 | out: pbBuffer=0x11332830) returned 1
	[0298.793] GetFileType (hFile=0x288) returned 0x1
	[0298.793] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.794] WriteFile (in: hFile=0x288, lpBuffer=0x111e6000*, nNumberOfBytesToWrite=0x1c0c, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x111e6000*, lpNumberOfBytesWritten=0x112b9dfc*=0x1c0c, lpOverlapped=0x112b9e08) returned 1
	[0298.794] GetFileType (hFile=0x288) returned 0x1
	[0298.794] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1c0c, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.794] GetFileType (hFile=0x288) returned 0x1
	[0298.794] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.794] WriteFile (in: hFile=0x288, lpBuffer=0x111da380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x111da380*, lpNumberOfBytesWritten=0x112b9dfc*=0x227, lpOverlapped=0x112b9e08) returned 1
	[0298.795] GetFileType (hFile=0x288) returned 0x1
	[0298.795] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1c0c, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.795] CloseHandle (hObject=0x288) returned 1
	[0298.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf.tl30z")) returned 0x220
	[0298.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.798] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0298.799] SetEvent (hEvent=0x234) returned 1
	[0298.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf")) returned 0x220
	[0298.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF", dwFileAttributes=0x220) returned 1
	[0298.799] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0298.872] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0298.872] ReadFile (in: hFile=0x224, lpBuffer=0x112f6000, nNumberOfBytesToRead=0xa0b0, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x112f6000*, lpNumberOfBytesRead=0x11316e18*=0xa0b0, lpOverlapped=0x0) returned 1
	[0298.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0298.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63d8 | out: pbBuffer=0x113e63d8) returned 1
	[0298.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c5c02 | out: pbBuffer=0x111c5c02) returned 1
	[0298.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c5c36 | out: pbBuffer=0x111c5c36) returned 1
	[0298.878] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0298.879] GetFileType (hFile=0x224) returned 0x1
	[0298.879] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.879] WriteFile (in: hFile=0x224, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0xa0b0, lpNumberOfBytesWritten=0x110c7dfc, lpOverlapped=0x110c7e08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x110c7dfc*=0xa0b0, lpOverlapped=0x110c7e08) returned 1
	[0298.879] GetFileType (hFile=0x224) returned 0x1
	[0298.880] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa0b0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.880] GetFileType (hFile=0x224) returned 0x1
	[0298.880] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.880] WriteFile (in: hFile=0x224, lpBuffer=0x113f6700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x110c7dfc, lpOverlapped=0x110c7e08 | out: lpBuffer=0x113f6700*, lpNumberOfBytesWritten=0x110c7dfc*=0x22a, lpOverlapped=0x110c7e08) returned 1
	[0298.880] GetFileType (hFile=0x224) returned 0x1
	[0298.880] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa0b0, lpNewFilePointer=0x0, dwMoveMethod=0x110c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.880] CloseHandle (hObject=0x224) returned 1
	[0298.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf.tl30z")) returned 0x220
	[0298.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.883] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0298.885] SetEvent (hEvent=0x218) returned 1
	[0298.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf")) returned 0x220
	[0298.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF", dwFileAttributes=0x220) returned 1
	[0298.886] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0299.162] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0299.162] ReadFile (in: hFile=0x1d4, lpBuffer=0x1146b000, nNumberOfBytesToRead=0xf36, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1146b000*, lpNumberOfBytesRead=0x11316e18*=0xf36, lpOverlapped=0x0) returned 1
	[0299.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0299.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f418 | out: pbBuffer=0x1140f418) returned 1
	[0299.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d1d02 | out: pbBuffer=0x111d1d02) returned 1
	[0299.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f450 | out: pbBuffer=0x1140f450) returned 1
	[0299.168] GetFileType (hFile=0x1d4) returned 0x1
	[0299.168] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.168] WriteFile (in: hFile=0x1d4, lpBuffer=0x11242000*, nNumberOfBytesToWrite=0xf36, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x11242000*, lpNumberOfBytesWritten=0x110c3dfc*=0xf36, lpOverlapped=0x110c3e08) returned 1
	[0299.168] GetFileType (hFile=0x1d4) returned 0x1
	[0299.169] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xf36, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.169] GetFileType (hFile=0x1d4) returned 0x1
	[0299.169] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.169] WriteFile (in: hFile=0x1d4, lpBuffer=0x11228700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x11228700*, lpNumberOfBytesWritten=0x110c3dfc*=0x230, lpOverlapped=0x110c3e08) returned 1
	[0299.169] GetFileType (hFile=0x1d4) returned 0x1
	[0299.169] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xf36, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.170] CloseHandle (hObject=0x1d4) returned 1
	[0299.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf.tl30z")) returned 0x220
	[0299.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.173] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0299.177] SetEvent (hEvent=0x118) returned 1
	[0299.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf")) returned 0x220
	[0299.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF", dwFileAttributes=0x220) returned 1
	[0299.177] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0299.272] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0299.272] ReadFile (in: hFile=0x224, lpBuffer=0x1129a000, nNumberOfBytesToRead=0x199a, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1129a000*, lpNumberOfBytesRead=0x11316e18*=0x199a, lpOverlapped=0x0) returned 1
	[0299.298] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0299.298] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bd402 | out: pbBuffer=0x110bd402) returned 1
	[0299.299] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0299.299] GetFileType (hFile=0x224) returned 0x1
	[0299.299] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.299] WriteFile (in: hFile=0x224, lpBuffer=0x1136a000*, nNumberOfBytesToWrite=0x199a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1136a000*, lpNumberOfBytesWritten=0x11031dfc*=0x199a, lpOverlapped=0x11031e08) returned 1
	[0299.300] GetFileType (hFile=0x224) returned 0x1
	[0299.300] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x199a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.300] GetFileType (hFile=0x224) returned 0x1
	[0299.300] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.300] WriteFile (in: hFile=0x224, lpBuffer=0x1137c000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1137c000*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0299.301] GetFileType (hFile=0x224) returned 0x1
	[0299.301] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x199a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.301] CloseHandle (hObject=0x224) returned 1
	[0299.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf.tl30z")) returned 0x220
	[0299.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.305] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0299.308] SetEvent (hEvent=0x234) returned 1
	[0299.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf")) returned 0x220
	[0299.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF", dwFileAttributes=0x220) returned 1
	[0299.309] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.382] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0299.383] ReadFile (in: hFile=0x250, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x7cb6, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11316e18*=0x7cb6, lpOverlapped=0x0) returned 1
	[0299.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0299.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6268 | out: pbBuffer=0x113e6268) returned 1
	[0299.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141d302 | out: pbBuffer=0x1141d302) returned 1
	[0299.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0299.388] GetFileType (hFile=0x250) returned 0x1
	[0299.388] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.388] WriteFile (in: hFile=0x250, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x7cb6, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1138fdfc*=0x7cb6, lpOverlapped=0x1138fe08) returned 1
	[0299.389] GetFileType (hFile=0x250) returned 0x1
	[0299.389] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x7cb6, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.389] GetFileType (hFile=0x250) returned 0x1
	[0299.389] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.390] WriteFile (in: hFile=0x250, lpBuffer=0x11375880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x11375880*, lpNumberOfBytesWritten=0x1138fdfc*=0x236, lpOverlapped=0x1138fe08) returned 1
	[0299.390] GetFileType (hFile=0x250) returned 0x1
	[0299.390] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x7cb6, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.390] CloseHandle (hObject=0x250) returned 1
	[0299.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf.tl30z")) returned 0x220
	[0299.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.393] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0299.398] SetEvent (hEvent=0x234) returned 1
	[0299.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf")) returned 0x220
	[0299.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF", dwFileAttributes=0x220) returned 1
	[0299.398] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.477] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0299.477] ReadFile (in: hFile=0x250, lpBuffer=0x111ec000, nNumberOfBytesToRead=0x244a, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x111ec000*, lpNumberOfBytesRead=0x11316e18*=0x244a, lpOverlapped=0x0) returned 1
	[0299.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f550 | out: pbBuffer=0x1140f550) returned 1
	[0299.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f548 | out: pbBuffer=0x1140f548) returned 1
	[0299.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1118c902 | out: pbBuffer=0x1118c902) returned 1
	[0299.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118c95e | out: pbBuffer=0x1118c95e) returned 1
	[0299.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118c96d | out: pbBuffer=0x1118c96d) returned 1
	[0299.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118c9a4 | out: pbBuffer=0x1118c9a4) returned 1
	[0299.483] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f580 | out: pbBuffer=0x1140f580) returned 1
	[0299.483] GetFileType (hFile=0x250) returned 0x1
	[0299.483] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.484] WriteFile (in: hFile=0x250, lpBuffer=0x1121c000*, nNumberOfBytesToWrite=0x244a, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x1121c000*, lpNumberOfBytesWritten=0x1138bdfc*=0x244a, lpOverlapped=0x1138be08) returned 1
	[0299.485] GetFileType (hFile=0x250) returned 0x1
	[0299.485] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x244a, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.485] GetFileType (hFile=0x250) returned 0x1
	[0299.485] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.485] WriteFile (in: hFile=0x250, lpBuffer=0x11161500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x11161500*, lpNumberOfBytesWritten=0x1138bdfc*=0x227, lpOverlapped=0x1138be08) returned 1
	[0299.485] GetFileType (hFile=0x250) returned 0x1
	[0299.486] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x244a, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.486] CloseHandle (hObject=0x250) returned 1
	[0299.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf.tl30z")) returned 0x220
	[0299.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.489] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0299.492] SetEvent (hEvent=0x234) returned 1
	[0299.492] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf")) returned 0x220
	[0299.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF", dwFileAttributes=0x220) returned 1
	[0299.493] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.663] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0299.663] ReadFile (in: hFile=0x250, lpBuffer=0x110d4000, nNumberOfBytesToRead=0xa488, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110d4000*, lpNumberOfBytesRead=0x11316e18*=0xa488, lpOverlapped=0x0) returned 1
	[0299.710] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0299.710] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11351302 | out: pbBuffer=0x11351302) returned 1
	[0299.711] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0299.712] GetFileType (hFile=0x250) returned 0x1
	[0299.712] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.713] WriteFile (in: hFile=0x250, lpBuffer=0x112ee000*, nNumberOfBytesToWrite=0xa488, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x112ee000*, lpNumberOfBytesWritten=0x1141fdfc*=0xa488, lpOverlapped=0x1141fe08) returned 1
	[0299.713] GetFileType (hFile=0x250) returned 0x1
	[0299.713] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xa488, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.714] GetFileType (hFile=0x250) returned 0x1
	[0299.714] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.714] WriteFile (in: hFile=0x250, lpBuffer=0x11255880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x11255880*, lpNumberOfBytesWritten=0x1141fdfc*=0x22a, lpOverlapped=0x1141fe08) returned 1
	[0299.714] GetFileType (hFile=0x250) returned 0x1
	[0299.714] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xa488, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.714] CloseHandle (hObject=0x250) returned 1
	[0299.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf.tl30z")) returned 0x220
	[0299.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.718] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0299.721] SetEvent (hEvent=0x118) returned 1
	[0299.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf")) returned 0x220
	[0299.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF", dwFileAttributes=0x220) returned 1
	[0299.722] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.799] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0299.800] ReadFile (in: hFile=0x250, lpBuffer=0x111ee000, nNumberOfBytesToRead=0x1484, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x111ee000*, lpNumberOfBytesRead=0x11316e18*=0x1484, lpOverlapped=0x0) returned 1
	[0299.805] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e620 | out: pbBuffer=0x1104e620) returned 1
	[0299.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e618 | out: pbBuffer=0x1104e618) returned 1
	[0299.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f4802 | out: pbBuffer=0x111f4802) returned 1
	[0299.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f483b | out: pbBuffer=0x111f483b) returned 1
	[0299.808] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0299.808] GetFileType (hFile=0x250) returned 0x1
	[0299.809] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.809] WriteFile (in: hFile=0x250, lpBuffer=0x1120e000*, nNumberOfBytesToWrite=0x1484, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x1120e000*, lpNumberOfBytesWritten=0x1141fdfc*=0x1484, lpOverlapped=0x1141fe08) returned 1
	[0299.809] GetFileType (hFile=0x250) returned 0x1
	[0299.809] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1484, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.810] GetFileType (hFile=0x250) returned 0x1
	[0299.810] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.810] WriteFile (in: hFile=0x250, lpBuffer=0x11451500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x11451500*, lpNumberOfBytesWritten=0x1141fdfc*=0x224, lpOverlapped=0x1141fe08) returned 1
	[0299.811] GetFileType (hFile=0x250) returned 0x1
	[0299.811] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1484, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.811] CloseHandle (hObject=0x250) returned 1
	[0299.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf.tl30z")) returned 0x220
	[0299.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.815] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0299.819] SetEvent (hEvent=0x118) returned 1
	[0299.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf")) returned 0x220
	[0299.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF", dwFileAttributes=0x220) returned 1
	[0299.819] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0299.901] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0299.902] ReadFile (in: hFile=0x224, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x65a6, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x11316e18*=0x65a6, lpOverlapped=0x0) returned 1
	[0299.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0299.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0299.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b6802 | out: pbBuffer=0x112b6802) returned 1
	[0299.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b6855 | out: pbBuffer=0x112b6855) returned 1
	[0299.910] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b68d4 | out: pbBuffer=0x112b68d4) returned 1
	[0299.911] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0299.912] GetFileType (hFile=0x224) returned 0x1
	[0299.912] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.912] WriteFile (in: hFile=0x224, lpBuffer=0x112be000*, nNumberOfBytesToWrite=0x65a6, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112be000*, lpNumberOfBytesWritten=0x1133ddfc*=0x65a6, lpOverlapped=0x1133de08) returned 1
	[0299.912] GetFileType (hFile=0x224) returned 0x1
	[0299.913] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x65a6, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.913] GetFileType (hFile=0x224) returned 0x1
	[0299.913] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.913] WriteFile (in: hFile=0x224, lpBuffer=0x110c2a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110c2a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0299.913] GetFileType (hFile=0x224) returned 0x1
	[0299.913] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x65a6, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.913] CloseHandle (hObject=0x224) returned 1
	[0299.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf.tl30z")) returned 0x220
	[0299.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.917] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0299.951] SetEvent (hEvent=0x234) returned 1
	[0299.952] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf")) returned 0x220
	[0299.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF", dwFileAttributes=0x220) returned 1
	[0299.952] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0300.043] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0300.043] ReadFile (in: hFile=0x250, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x6bc2, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x11316e18*=0x6bc2, lpOverlapped=0x0) returned 1
	[0300.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158550 | out: pbBuffer=0x11158550) returned 1
	[0300.050] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ae702 | out: pbBuffer=0x112ae702) returned 1
	[0300.050] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158580 | out: pbBuffer=0x11158580) returned 1
	[0300.051] GetFileType (hFile=0x250) returned 0x1
	[0300.051] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.051] WriteFile (in: hFile=0x250, lpBuffer=0x1113c000*, nNumberOfBytesToWrite=0x6bc2, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1113c000*, lpNumberOfBytesWritten=0x11031dfc*=0x6bc2, lpOverlapped=0x11031e08) returned 1
	[0300.051] GetFileType (hFile=0x250) returned 0x1
	[0300.052] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x6bc2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.052] GetFileType (hFile=0x250) returned 0x1
	[0300.052] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.052] WriteFile (in: hFile=0x250, lpBuffer=0x112e7880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112e7880*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0300.052] GetFileType (hFile=0x250) returned 0x1
	[0300.052] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x6bc2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.052] CloseHandle (hObject=0x250) returned 1
	[0300.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf.tl30z")) returned 0x220
	[0300.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.056] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0300.059] SetEvent (hEvent=0x234) returned 1
	[0300.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf")) returned 0x220
	[0300.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF", dwFileAttributes=0x220) returned 1
	[0300.060] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208
	[0300.102] GetConsoleMode (in: hConsoleHandle=0x208, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0300.102] ReadFile (in: hFile=0x208, lpBuffer=0x110ac000, nNumberOfBytesToRead=0x26e8, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110ac000*, lpNumberOfBytesRead=0x11316e18*=0x26e8, lpOverlapped=0x0) returned 1
	[0300.402] SwitchToThread () returned 1
	[0300.426] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0300.442] SetEvent (hEvent=0x150) returned 1
	[0300.442] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111586d0 | out: pbBuffer=0x111586d0) returned 1
	[0300.442] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0300.447] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ae002 | out: pbBuffer=0x112ae002) returned 1
	[0300.447] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ae0e3 | out: pbBuffer=0x112ae0e3) returned 1
	[0300.448] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e020 | out: pbBuffer=0x1104e020) returned 1
	[0300.448] GetFileType (hFile=0x208) returned 0x1
	[0300.448] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.448] WriteFile (in: hFile=0x208, lpBuffer=0x11182000*, nNumberOfBytesToWrite=0x26e8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11182000*, lpNumberOfBytesWritten=0x11031dfc*=0x26e8, lpOverlapped=0x11031e08) returned 1
	[0300.449] GetFileType (hFile=0x208) returned 0x1
	[0300.449] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x26e8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.449] GetFileType (hFile=0x208) returned 0x1
	[0300.449] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.449] WriteFile (in: hFile=0x208, lpBuffer=0x112e6380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112e6380*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0300.450] GetFileType (hFile=0x208) returned 0x1
	[0300.450] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x26e8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.450] CloseHandle (hObject=0x208) returned 1
	[0300.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf.tl30z")) returned 0x220
	[0300.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348)) returned 1
	[0300.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf")) returned 0x220
	[0300.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF", dwFileAttributes=0x220) returned 1
	[0300.452] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208
	[0300.455] GetConsoleMode (in: hConsoleHandle=0x208, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0300.455] ReadFile (in: hFile=0x208, lpBuffer=0x110c2000, nNumberOfBytesToRead=0x1bc8, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110c2000*, lpNumberOfBytesRead=0x11316e18*=0x1bc8, lpOverlapped=0x0) returned 1
	[0301.000] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0301.021] SetEvent (hEvent=0x26c) returned 1
	[0301.021] SetEvent (hEvent=0x1bc) returned 1
	[0301.021] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0301.105] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158df0 | out: pbBuffer=0x11158df0) returned 1
	[0301.105] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158de8 | out: pbBuffer=0x11158de8) returned 1
	[0301.106] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123a602 | out: pbBuffer=0x1123a602) returned 1
	[0301.106] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1123a60c | out: pbBuffer=0x1123a60c) returned 1
	[0301.106] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158e20 | out: pbBuffer=0x11158e20) returned 1
	[0301.108] GetFileType (hFile=0x1fc) returned 0x1
	[0301.108] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.109] WriteFile (in: hFile=0x1fc, lpBuffer=0x1131e000*, nNumberOfBytesToWrite=0x8424, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x1131e000*, lpNumberOfBytesWritten=0x112bbdfc*=0x8424, lpOverlapped=0x112bbe08) returned 1
	[0301.128] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0301.138] GetFileType (hFile=0x1fc) returned 0x1
	[0301.138] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x8424, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.139] GetFileType (hFile=0x1fc) returned 0x1
	[0301.139] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.139] WriteFile (in: hFile=0x1fc, lpBuffer=0x11cac000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x11cac000*, lpNumberOfBytesWritten=0x112bbdfc*=0x227, lpOverlapped=0x112bbe08) returned 1
	[0301.149] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0301.153] GetFileType (hFile=0x1fc) returned 0x1
	[0301.153] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x8424, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.153] CloseHandle (hObject=0x1fc) returned 1
	[0301.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf.tl30z")) returned 0x220
	[0301.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.194] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0301.328] SetEvent (hEvent=0x1e0) returned 1
	[0301.328] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0301.343] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0301.485] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0301.487] SetEvent (hEvent=0x24c) returned 1
	[0301.487] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0301.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf")) returned 0x220
	[0301.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF", dwFileAttributes=0x220) returned 1
	[0301.525] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0301.611] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0301.611] ReadFile (in: hFile=0x1b4, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x30f2, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11423e18*=0x30f2, lpOverlapped=0x0) returned 1
	[0301.616] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0301.616] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e6802 | out: pbBuffer=0x112e6802) returned 1
	[0301.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0301.617] GetFileType (hFile=0x1b4) returned 0x1
	[0301.617] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.617] WriteFile (in: hFile=0x1b4, lpBuffer=0x110de000*, nNumberOfBytesToWrite=0x30f2, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110de000*, lpNumberOfBytesWritten=0x1102ddfc*=0x30f2, lpOverlapped=0x1102de08) returned 1
	[0301.618] GetFileType (hFile=0x1b4) returned 0x1
	[0301.618] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x30f2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.618] GetFileType (hFile=0x1b4) returned 0x1
	[0301.618] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.619] WriteFile (in: hFile=0x1b4, lpBuffer=0x11144a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11144a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0301.619] GetFileType (hFile=0x1b4) returned 0x1
	[0301.619] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x30f2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.619] CloseHandle (hObject=0x1b4) returned 1
	[0301.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf.tl30z")) returned 0x220
	[0301.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.622] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0301.626] SetEvent (hEvent=0x284) returned 1
	[0301.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf")) returned 0x220
	[0301.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF", dwFileAttributes=0x220) returned 1
	[0301.627] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0301.704] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0301.704] ReadFile (in: hFile=0x250, lpBuffer=0x112a4a00, nNumberOfBytesToRead=0x2440, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112a4a00*, lpNumberOfBytesRead=0x11423e18*=0x2440, lpOverlapped=0x0) returned 1
	[0301.711] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0301.711] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f9d02 | out: pbBuffer=0x112f9d02) returned 1
	[0301.711] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0301.712] GetFileType (hFile=0x250) returned 0x1
	[0301.712] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.712] WriteFile (in: hFile=0x250, lpBuffer=0x11c2c000*, nNumberOfBytesToWrite=0x2440, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c2c000*, lpNumberOfBytesWritten=0x11031dfc*=0x2440, lpOverlapped=0x11031e08) returned 1
	[0301.713] GetFileType (hFile=0x250) returned 0x1
	[0301.713] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2440, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.713] GetFileType (hFile=0x250) returned 0x1
	[0301.713] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.713] WriteFile (in: hFile=0x250, lpBuffer=0x11c12700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c12700*, lpNumberOfBytesWritten=0x11031dfc*=0x221, lpOverlapped=0x11031e08) returned 1
	[0301.714] GetFileType (hFile=0x250) returned 0x1
	[0301.714] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2440, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.714] CloseHandle (hObject=0x250) returned 1
	[0301.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf.tl30z")) returned 0x220
	[0301.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.721] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0301.723] SetEvent (hEvent=0x284) returned 1
	[0301.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf")) returned 0x220
	[0301.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF", dwFileAttributes=0x220) returned 1
	[0301.723] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0301.810] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0301.810] ReadFile (in: hFile=0x2a0, lpBuffer=0x110a2000, nNumberOfBytesToRead=0x23f4, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110a2000*, lpNumberOfBytesRead=0x11423e18*=0x23f4, lpOverlapped=0x0) returned 1
	[0301.816] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0301.816] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111580f8 | out: pbBuffer=0x111580f8) returned 1
	[0301.816] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1146c802 | out: pbBuffer=0x1146c802) returned 1
	[0301.816] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1146c82c | out: pbBuffer=0x1146c82c) returned 1
	[0301.816] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1146c838 | out: pbBuffer=0x1146c838) returned 1
	[0301.817] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0301.817] GetFileType (hFile=0x2a0) returned 0x1
	[0301.817] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.817] WriteFile (in: hFile=0x2a0, lpBuffer=0x11398000*, nNumberOfBytesToWrite=0x23f4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11398000*, lpNumberOfBytesWritten=0x1102bdfc*=0x23f4, lpOverlapped=0x1102be08) returned 1
	[0301.818] GetFileType (hFile=0x2a0) returned 0x1
	[0301.818] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x23f4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.818] GetFileType (hFile=0x2a0) returned 0x1
	[0301.818] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.819] WriteFile (in: hFile=0x2a0, lpBuffer=0x11066a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11066a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0301.819] GetFileType (hFile=0x2a0) returned 0x1
	[0301.819] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x23f4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.819] CloseHandle (hObject=0x2a0) returned 1
	[0301.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf.tl30z")) returned 0x220
	[0301.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf")) returned 0x220
	[0301.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF", dwFileAttributes=0x220) returned 1
	[0301.823] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0301.947] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0301.947] ReadFile (in: hFile=0x2a0, lpBuffer=0x1129e000, nNumberOfBytesToRead=0x80d8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1129e000*, lpNumberOfBytesRead=0x11023e18*=0x80d8, lpOverlapped=0x0) returned 1
	[0301.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158270 | out: pbBuffer=0x11158270) returned 1
	[0301.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1146d302 | out: pbBuffer=0x1146d302) returned 1
	[0301.957] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582a0 | out: pbBuffer=0x111582a0) returned 1
	[0301.958] GetFileType (hFile=0x2a0) returned 0x1
	[0301.958] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.959] WriteFile (in: hFile=0x2a0, lpBuffer=0x11162000*, nNumberOfBytesToWrite=0x80d8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11162000*, lpNumberOfBytesWritten=0x1102bdfc*=0x80d8, lpOverlapped=0x1102be08) returned 1
	[0301.959] GetFileType (hFile=0x2a0) returned 0x1
	[0301.959] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x80d8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.960] GetFileType (hFile=0x2a0) returned 0x1
	[0301.960] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.960] WriteFile (in: hFile=0x2a0, lpBuffer=0x11067880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11067880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0301.960] GetFileType (hFile=0x2a0) returned 0x1
	[0301.960] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x80d8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.961] CloseHandle (hObject=0x2a0) returned 1
	[0301.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf.tl30z")) returned 0x220
	[0301.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.979] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0301.986] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.001] SetEvent (hEvent=0x24c) returned 1
	[0302.002] SetEvent (hEvent=0x174) returned 1
	[0302.002] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0302.004] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0302.006] SetEvent (hEvent=0x284) returned 1
	[0302.006] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0302.035] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.092] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.113] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.132] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.154] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.174] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.192] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.211] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.220] SetEvent (hEvent=0x164) returned 1
	[0302.220] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf")) returned 0x220
	[0302.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF", dwFileAttributes=0x220) returned 1
	[0302.225] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.332] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0302.332] ReadFile (in: hFile=0x1d8, lpBuffer=0x113e2000, nNumberOfBytesToRead=0x1b64, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x113e2000*, lpNumberOfBytesRead=0x11022e18*=0x1b64, lpOverlapped=0x0) returned 1
	[0302.338] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0302.338] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f268 | out: pbBuffer=0x1140f268) returned 1
	[0302.338] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11be1202 | out: pbBuffer=0x11be1202) returned 1
	[0302.339] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11be12df | out: pbBuffer=0x11be12df) returned 1
	[0302.339] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11be12e8 | out: pbBuffer=0x11be12e8) returned 1
	[0302.339] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0302.340] GetFileType (hFile=0x1d8) returned 0x1
	[0302.340] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.340] WriteFile (in: hFile=0x1d8, lpBuffer=0x11454000*, nNumberOfBytesToWrite=0x1b64, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11454000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1b64, lpOverlapped=0x1133be08) returned 1
	[0302.340] GetFileType (hFile=0x1d8) returned 0x1
	[0302.341] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b64, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.341] GetFileType (hFile=0x1d8) returned 0x1
	[0302.341] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.341] WriteFile (in: hFile=0x1d8, lpBuffer=0x11469c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11469c00*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0302.341] GetFileType (hFile=0x1d8) returned 0x1
	[0302.341] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b64, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.341] CloseHandle (hObject=0x1d8) returned 1
	[0302.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf.tl30z")) returned 0x220
	[0302.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.405] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.419] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.441] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.463] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.483] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.502] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.522] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.547] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.561] SetEvent (hEvent=0x1b0) returned 1
	[0302.562] SetEvent (hEvent=0x174) returned 1
	[0302.562] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0302.565] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.565] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0302.566] SetEvent (hEvent=0x160) returned 1
	[0302.567] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0302.569] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.569] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.805] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.806] SetEvent (hEvent=0x160) returned 1
	[0302.806] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf")) returned 0x220
	[0302.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF", dwFileAttributes=0x220) returned 1
	[0302.845] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0302.950] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0302.950] ReadFile (in: hFile=0x250, lpBuffer=0x11320000, nNumberOfBytesToRead=0x2cf8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11320000*, lpNumberOfBytesRead=0x11023e18*=0x2cf8, lpOverlapped=0x0) returned 1
	[0302.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158550 | out: pbBuffer=0x11158550) returned 1
	[0302.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11373102 | out: pbBuffer=0x11373102) returned 1
	[0302.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113731dd | out: pbBuffer=0x113731dd) returned 1
	[0302.956] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158580 | out: pbBuffer=0x11158580) returned 1
	[0302.957] GetFileType (hFile=0x250) returned 0x1
	[0302.957] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.957] WriteFile (in: hFile=0x250, lpBuffer=0x113f2000*, nNumberOfBytesToWrite=0x2cf8, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113f2000*, lpNumberOfBytesWritten=0x1133fdfc*=0x2cf8, lpOverlapped=0x1133fe08) returned 1
	[0302.957] GetFileType (hFile=0x250) returned 0x1
	[0302.957] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2cf8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.957] GetFileType (hFile=0x250) returned 0x1
	[0302.958] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.958] WriteFile (in: hFile=0x250, lpBuffer=0x113ba380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113ba380*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0302.958] GetFileType (hFile=0x250) returned 0x1
	[0302.958] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2cf8, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.958] CloseHandle (hObject=0x250) returned 1
	[0302.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf.tl30z")) returned 0x220
	[0302.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.961] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0302.963] SetEvent (hEvent=0x160) returned 1
	[0302.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg")) returned 0x220
	[0302.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG", dwFileAttributes=0x220) returned 1
	[0302.964] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0303.052] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0303.052] ReadFile (in: hFile=0x1fc, lpBuffer=0x11466000, nNumberOfBytesToRead=0x81f0, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11466000*, lpNumberOfBytesRead=0x11023e18*=0x81f0, lpOverlapped=0x0) returned 1
	[0303.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0303.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f568 | out: pbBuffer=0x1140f568) returned 1
	[0303.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11472702 | out: pbBuffer=0x11472702) returned 1
	[0303.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11472704 | out: pbBuffer=0x11472704) returned 1
	[0303.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11472762 | out: pbBuffer=0x11472762) returned 1
	[0303.060] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0303.060] GetFileType (hFile=0x1fc) returned 0x1
	[0303.060] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.061] WriteFile (in: hFile=0x1fc, lpBuffer=0x11136000*, nNumberOfBytesToWrite=0x81f0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11136000*, lpNumberOfBytesWritten=0x1102bdfc*=0x81f0, lpOverlapped=0x1102be08) returned 1
	[0303.061] GetFileType (hFile=0x1fc) returned 0x1
	[0303.061] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x81f0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.061] GetFileType (hFile=0x1fc) returned 0x1
	[0303.062] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.062] WriteFile (in: hFile=0x1fc, lpBuffer=0x1111f500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1111f500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0303.062] GetFileType (hFile=0x1fc) returned 0x1
	[0303.062] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x81f0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.062] CloseHandle (hObject=0x1fc) returned 1
	[0303.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg.tl30z")) returned 0x220
	[0303.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.065] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0303.068] SetEvent (hEvent=0x160) returned 1
	[0303.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf")) returned 0x220
	[0303.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF", dwFileAttributes=0x220) returned 1
	[0303.068] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf.tl30z"), dwFlags=0x1) returned 1
	[0303.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.391] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0303.391] ReadFile (in: hFile=0x1d8, lpBuffer=0x11320000, nNumberOfBytesToRead=0x2b38, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11320000*, lpNumberOfBytesRead=0x11023e18*=0x2b38, lpOverlapped=0x0) returned 1
	[0303.402] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0303.403] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125a802 | out: pbBuffer=0x1125a802) returned 1
	[0303.403] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0303.404] GetFileType (hFile=0x1d8) returned 0x1
	[0303.404] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.405] WriteFile (in: hFile=0x1d8, lpBuffer=0x11204000*, nNumberOfBytesToWrite=0x2b38, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11204000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2b38, lpOverlapped=0x1102be08) returned 1
	[0303.406] GetFileType (hFile=0x1d8) returned 0x1
	[0303.406] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2b38, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.406] GetFileType (hFile=0x1d8) returned 0x1
	[0303.406] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.407] WriteFile (in: hFile=0x1d8, lpBuffer=0x1134ea80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1134ea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0303.407] GetFileType (hFile=0x1d8) returned 0x1
	[0303.407] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2b38, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.408] CloseHandle (hObject=0x1d8) returned 1
	[0303.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf.tl30z")) returned 0x220
	[0303.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0303.420] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0303.437] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0303.458] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0303.478] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0303.498] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0303.524] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0303.528] SetEvent (hEvent=0x1b0) returned 1
	[0303.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf")) returned 0x220
	[0303.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF", dwFileAttributes=0x220) returned 1
	[0303.528] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf.tl30z"), dwFlags=0x1) returned 1
	[0303.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0303.631] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0303.631] ReadFile (in: hFile=0x1d4, lpBuffer=0x11130000, nNumberOfBytesToRead=0x28be, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11130000*, lpNumberOfBytesRead=0x1128be18*=0x28be, lpOverlapped=0x0) returned 1
	[0303.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0303.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111580f8 | out: pbBuffer=0x111580f8) returned 1
	[0303.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c2802 | out: pbBuffer=0x112c2802) returned 1
	[0303.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c28bd | out: pbBuffer=0x112c28bd) returned 1
	[0303.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0303.640] GetFileType (hFile=0x1d4) returned 0x1
	[0303.640] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.640] WriteFile (in: hFile=0x1d4, lpBuffer=0x11128000*, nNumberOfBytesToWrite=0x28be, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11128000*, lpNumberOfBytesWritten=0x1102ddfc*=0x28be, lpOverlapped=0x1102de08) returned 1
	[0303.641] GetFileType (hFile=0x1d4) returned 0x1
	[0303.641] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x28be, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.641] GetFileType (hFile=0x1d4) returned 0x1
	[0303.641] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.641] WriteFile (in: hFile=0x1d4, lpBuffer=0x1112ee00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1112ee00*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0303.641] GetFileType (hFile=0x1d4) returned 0x1
	[0303.642] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x28be, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.642] CloseHandle (hObject=0x1d4) returned 1
	[0303.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf.tl30z")) returned 0x220
	[0303.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0303.645] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0303.649] SetEvent (hEvent=0x1b0) returned 1
	[0303.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg")) returned 0x220
	[0303.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG", dwFileAttributes=0x220) returned 1
	[0303.649] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0303.734] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0303.734] ReadFile (in: hFile=0x2a0, lpBuffer=0x112a4000, nNumberOfBytesToRead=0x27d4, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112a4000*, lpNumberOfBytesRead=0x1128be18*=0x27d4, lpOverlapped=0x0) returned 1
	[0303.741] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0303.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6258 | out: pbBuffer=0x113e6258) returned 1
	[0303.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113fb202 | out: pbBuffer=0x113fb202) returned 1
	[0303.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0303.742] GetFileType (hFile=0x2a0) returned 0x1
	[0303.743] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.743] WriteFile (in: hFile=0x2a0, lpBuffer=0x113b8000*, nNumberOfBytesToWrite=0x27d4, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113b8000*, lpNumberOfBytesWritten=0x1133fdfc*=0x27d4, lpOverlapped=0x1133fe08) returned 1
	[0303.743] GetFileType (hFile=0x2a0) returned 0x1
	[0303.743] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x27d4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.744] GetFileType (hFile=0x2a0) returned 0x1
	[0303.744] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.744] WriteFile (in: hFile=0x2a0, lpBuffer=0x112e3880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112e3880*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0303.744] GetFileType (hFile=0x2a0) returned 0x1
	[0303.744] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x27d4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.744] CloseHandle (hObject=0x2a0) returned 1
	[0303.745] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg.tl30z")) returned 0x220
	[0303.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.746] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0303.748] SetEvent (hEvent=0x164) returned 1
	[0303.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg")) returned 0x220
	[0303.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG", dwFileAttributes=0x220) returned 1
	[0303.749] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0303.821] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0303.821] ReadFile (in: hFile=0x1d4, lpBuffer=0x1144c000, nNumberOfBytesToRead=0x7457, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1144c000*, lpNumberOfBytesRead=0x1128be18*=0x7457, lpOverlapped=0x0) returned 1
	[0303.830] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0303.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0303.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e368 | out: pbBuffer=0x1104e368) returned 1
	[0303.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11059202 | out: pbBuffer=0x11059202) returned 1
	[0303.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3a0 | out: pbBuffer=0x1104e3a0) returned 1
	[0303.842] GetFileType (hFile=0x1d4) returned 0x1
	[0303.842] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.842] WriteFile (in: hFile=0x1d4, lpBuffer=0x11232000*, nNumberOfBytesToWrite=0x7457, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11232000*, lpNumberOfBytesWritten=0x1133bdfc*=0x7457, lpOverlapped=0x1133be08) returned 1
	[0303.843] GetFileType (hFile=0x1d4) returned 0x1
	[0303.843] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7457, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.843] GetFileType (hFile=0x1d4) returned 0x1
	[0303.843] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.843] WriteFile (in: hFile=0x1d4, lpBuffer=0x1139b880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1139b880*, lpNumberOfBytesWritten=0x1133bdfc*=0x233, lpOverlapped=0x1133be08) returned 1
	[0303.843] GetFileType (hFile=0x1d4) returned 0x1
	[0303.843] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7457, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.844] CloseHandle (hObject=0x1d4) returned 1
	[0303.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg.tl30z")) returned 0x220
	[0303.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.848] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0303.852] SetEvent (hEvent=0x1b0) returned 1
	[0303.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg")) returned 0x220
	[0303.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG", dwFileAttributes=0x220) returned 1
	[0303.852] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.974] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0303.974] ReadFile (in: hFile=0x1d8, lpBuffer=0x11396000, nNumberOfBytesToRead=0x6aa8, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x1128be18*=0x6aa8, lpOverlapped=0x0) returned 1
	[0303.979] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f110 | out: pbBuffer=0x1140f110) returned 1
	[0303.979] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11360802 | out: pbBuffer=0x11360802) returned 1
	[0303.979] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11360866 | out: pbBuffer=0x11360866) returned 1
	[0303.980] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f140 | out: pbBuffer=0x1140f140) returned 1
	[0303.980] GetFileType (hFile=0x1d8) returned 0x1
	[0303.981] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.981] WriteFile (in: hFile=0x1d8, lpBuffer=0x11094000*, nNumberOfBytesToWrite=0x6aa8, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11094000*, lpNumberOfBytesWritten=0x1133bdfc*=0x6aa8, lpOverlapped=0x1133be08) returned 1
	[0303.981] GetFileType (hFile=0x1d8) returned 0x1
	[0303.981] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6aa8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.981] GetFileType (hFile=0x1d8) returned 0x1
	[0303.982] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.982] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c8a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113c8a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0303.982] GetFileType (hFile=0x1d8) returned 0x1
	[0303.982] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6aa8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.982] CloseHandle (hObject=0x1d8) returned 1
	[0303.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg.tl30z")) returned 0x220
	[0303.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.985] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0303.988] SetEvent (hEvent=0x1b0) returned 1
	[0303.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg")) returned 0x220
	[0303.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG", dwFileAttributes=0x220) returned 1
	[0303.989] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.079] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0304.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0304.081] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0304.081] ReadFile (in: hFile=0x1b4, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x2026, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x1128be18*=0x2026, lpOverlapped=0x0) returned 1
	[0304.095] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0304.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1142dc02 | out: pbBuffer=0x1142dc02) returned 1
	[0304.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6430 | out: pbBuffer=0x113e6430) returned 1
	[0304.096] GetFileType (hFile=0x1b4) returned 0x1
	[0304.096] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.097] WriteFile (in: hFile=0x1b4, lpBuffer=0x11454000*, nNumberOfBytesToWrite=0x2026, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11454000*, lpNumberOfBytesWritten=0x1133fdfc*=0x2026, lpOverlapped=0x1133fe08) returned 1
	[0304.097] GetFileType (hFile=0x1b4) returned 0x1
	[0304.097] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2026, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.097] GetFileType (hFile=0x1b4) returned 0x1
	[0304.097] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.097] WriteFile (in: hFile=0x1b4, lpBuffer=0x1144a700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1144a700*, lpNumberOfBytesWritten=0x1133fdfc*=0x224, lpOverlapped=0x1133fe08) returned 1
	[0304.098] GetFileType (hFile=0x1b4) returned 0x1
	[0304.098] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2026, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.098] CloseHandle (hObject=0x1b4) returned 1
	[0304.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg.tl30z")) returned 0x220
	[0304.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg")) returned 0x220
	[0304.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG", dwFileAttributes=0x220) returned 1
	[0304.129] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0304.323] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0304.324] ReadFile (in: hFile=0x1d8, lpBuffer=0x11058000, nNumberOfBytesToRead=0x49ba, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x1131ae18*=0x49ba, lpOverlapped=0x0) returned 1
	[0304.329] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0304.329] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1139e802 | out: pbBuffer=0x1139e802) returned 1
	[0304.330] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0304.330] GetFileType (hFile=0x1d8) returned 0x1
	[0304.331] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.331] WriteFile (in: hFile=0x1d8, lpBuffer=0x11302000*, nNumberOfBytesToWrite=0x49ba, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11302000*, lpNumberOfBytesWritten=0x11031dfc*=0x49ba, lpOverlapped=0x11031e08) returned 1
	[0304.331] GetFileType (hFile=0x1d8) returned 0x1
	[0304.331] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x49ba, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.331] GetFileType (hFile=0x1d8) returned 0x1
	[0304.332] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.332] WriteFile (in: hFile=0x1d8, lpBuffer=0x11298a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11298a80*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0304.332] GetFileType (hFile=0x1d8) returned 0x1
	[0304.332] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x49ba, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.332] CloseHandle (hObject=0x1d8) returned 1
	[0304.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg.tl30z")) returned 0x220
	[0304.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.370] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0304.381] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0304.400] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0304.417] SetEvent (hEvent=0x164) returned 1
	[0304.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg")) returned 0x220
	[0304.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG", dwFileAttributes=0x220) returned 1
	[0304.417] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0304.669] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0304.669] ReadFile (in: hFile=0x2a0, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x8ee4, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11425e18*=0x8ee4, lpOverlapped=0x0) returned 1
	[0304.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0304.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111580f8 | out: pbBuffer=0x111580f8) returned 1
	[0304.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a7202 | out: pbBuffer=0x110a7202) returned 1
	[0304.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110a725e | out: pbBuffer=0x110a725e) returned 1
	[0304.682] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0304.683] GetFileType (hFile=0x2a0) returned 0x1
	[0304.683] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.684] WriteFile (in: hFile=0x2a0, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x8ee4, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1133fdfc*=0x8ee4, lpOverlapped=0x1133fe08) returned 1
	[0304.684] GetFileType (hFile=0x2a0) returned 0x1
	[0304.684] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x8ee4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.685] GetFileType (hFile=0x2a0) returned 0x1
	[0304.685] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.685] WriteFile (in: hFile=0x2a0, lpBuffer=0x1146b880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1146b880*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0304.685] GetFileType (hFile=0x2a0) returned 0x1
	[0304.685] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x8ee4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.685] CloseHandle (hObject=0x2a0) returned 1
	[0304.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg.tl30z")) returned 0x220
	[0304.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.696] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0304.715] SetEvent (hEvent=0x284) returned 1
	[0304.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg")) returned 0x220
	[0304.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG", dwFileAttributes=0x220) returned 1
	[0304.716] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0304.795] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0304.796] ReadFile (in: hFile=0x1d4, lpBuffer=0x1111c000, nNumberOfBytesToRead=0x8a99, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1111c000*, lpNumberOfBytesRead=0x1131ae18*=0x8a99, lpOverlapped=0x0) returned 1
	[0304.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158270 | out: pbBuffer=0x11158270) returned 1
	[0304.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158268 | out: pbBuffer=0x11158268) returned 1
	[0304.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a7c02 | out: pbBuffer=0x110a7c02) returned 1
	[0304.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582a0 | out: pbBuffer=0x111582a0) returned 1
	[0304.804] GetFileType (hFile=0x1d4) returned 0x1
	[0304.804] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.805] WriteFile (in: hFile=0x1d4, lpBuffer=0x111cc000*, nNumberOfBytesToWrite=0x8a99, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111cc000*, lpNumberOfBytesWritten=0x1133fdfc*=0x8a99, lpOverlapped=0x1133fe08) returned 1
	[0304.805] GetFileType (hFile=0x1d4) returned 0x1
	[0304.805] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8a99, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.805] GetFileType (hFile=0x1d4) returned 0x1
	[0304.805] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.805] WriteFile (in: hFile=0x1d4, lpBuffer=0x11134700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11134700*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0304.812] GetFileType (hFile=0x1d4) returned 0x1
	[0304.813] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8a99, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.813] CloseHandle (hObject=0x1d4) returned 1
	[0304.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg.tl30z")) returned 0x220
	[0304.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.815] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0304.822] SetEvent (hEvent=0x1b0) returned 1
	[0304.822] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0304.826] SetEvent (hEvent=0x284) returned 1
	[0304.826] SetEvent (hEvent=0x1e0) returned 1
	[0304.826] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0304.830] SetEvent (hEvent=0x1b0) returned 1
	[0304.830] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0305.562] SetEvent (hEvent=0x1e0) returned 1
	[0305.562] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0305.563] SetEvent (hEvent=0x1e0) returned 1
	[0305.563] SetEvent (hEvent=0x124) returned 1
	[0305.563] SwitchToThread () returned 1
	[0305.567] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0305.804] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0305.893] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0305.903] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0305.927] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0305.943] SetEvent (hEvent=0x1b0) returned 1
	[0305.943] SetEvent (hEvent=0x124) returned 1
	[0305.944] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0305.952] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0305.952] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0305.955] SetEvent (hEvent=0x1b0) returned 1
	[0305.955] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0305.958] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0305.966] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.017] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.037] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.057] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.075] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.092] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.100] SetEvent (hEvent=0x160) returned 1
	[0306.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf")) returned 0x220
	[0306.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF", dwFileAttributes=0x220) returned 1
	[0306.100] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0306.191] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0306.191] ReadFile (in: hFile=0x1b4, lpBuffer=0x11460000, nNumberOfBytesToRead=0x1324, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11460000*, lpNumberOfBytesRead=0x11023e18*=0x1324, lpOverlapped=0x0) returned 1
	[0306.196] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f010 | out: pbBuffer=0x1140f010) returned 1
	[0306.196] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11249102 | out: pbBuffer=0x11249102) returned 1
	[0306.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11249123 | out: pbBuffer=0x11249123) returned 1
	[0306.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f040 | out: pbBuffer=0x1140f040) returned 1
	[0306.197] GetFileType (hFile=0x1b4) returned 0x1
	[0306.197] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.198] WriteFile (in: hFile=0x1b4, lpBuffer=0x111d6000*, nNumberOfBytesToWrite=0x1324, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x111d6000*, lpNumberOfBytesWritten=0x11339dfc*=0x1324, lpOverlapped=0x11339e08) returned 1
	[0306.198] GetFileType (hFile=0x1b4) returned 0x1
	[0306.198] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1324, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.198] GetFileType (hFile=0x1b4) returned 0x1
	[0306.198] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.199] WriteFile (in: hFile=0x1b4, lpBuffer=0x11472380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11472380*, lpNumberOfBytesWritten=0x11339dfc*=0x227, lpOverlapped=0x11339e08) returned 1
	[0306.199] GetFileType (hFile=0x1b4) returned 0x1
	[0306.199] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1324, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.199] CloseHandle (hObject=0x1b4) returned 1
	[0306.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf.tl30z")) returned 0x220
	[0306.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.203] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.208] SetEvent (hEvent=0x24c) returned 1
	[0306.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf")) returned 0x220
	[0306.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF", dwFileAttributes=0x220) returned 1
	[0306.211] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.309] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0306.309] ReadFile (in: hFile=0x2a0, lpBuffer=0x110ce500, nNumberOfBytesToRead=0x21c2, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x110ce500*, lpNumberOfBytesRead=0x11023e18*=0x21c2, lpOverlapped=0x0) returned 1
	[0306.315] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6830 | out: pbBuffer=0x113e6830) returned 1
	[0306.315] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e1c02 | out: pbBuffer=0x111e1c02) returned 1
	[0306.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e1c1c | out: pbBuffer=0x111e1c1c) returned 1
	[0306.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e1c3e | out: pbBuffer=0x111e1c3e) returned 1
	[0306.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6860 | out: pbBuffer=0x113e6860) returned 1
	[0306.316] SetEvent (hEvent=0x24c) returned 1
	[0306.317] GetFileType (hFile=0x2a0) returned 0x1
	[0306.317] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.317] WriteFile (in: hFile=0x2a0, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x21c2, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x1133fdfc*=0x21c2, lpOverlapped=0x1133fe08) returned 1
	[0306.318] GetFileType (hFile=0x2a0) returned 0x1
	[0306.318] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x21c2, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.318] GetFileType (hFile=0x2a0) returned 0x1
	[0306.318] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.318] WriteFile (in: hFile=0x2a0, lpBuffer=0x110f7180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110f7180*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0306.318] GetFileType (hFile=0x2a0) returned 0x1
	[0306.319] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x21c2, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.319] CloseHandle (hObject=0x2a0) returned 1
	[0306.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf.tl30z")) returned 0x220
	[0306.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.327] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.330] SetEvent (hEvent=0x24c) returned 1
	[0306.330] SetEvent (hEvent=0x160) returned 1
	[0306.330] SwitchToThread () returned 1
	[0306.368] SwitchToThread () returned 1
	[0306.371] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.393] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.411] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.432] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.450] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.470] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.488] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.507] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.525] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.545] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.567] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.587] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.602] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.633] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.659] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.688] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.709] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.728] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.743] SetEvent (hEvent=0x24c) returned 1
	[0306.743] SetEvent (hEvent=0x124) returned 1
	[0306.743] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x102
	[0306.745] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0306.745] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0306.747] SetEvent (hEvent=0x284) returned 1
	[0306.747] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0x1) returned 0x0
	[0306.749] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.155] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.158] SetEvent (hEvent=0x24c) returned 1
	[0307.158] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf")) returned 0x220
	[0307.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF", dwFileAttributes=0x220) returned 1
	[0307.162] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.246] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0307.246] ReadFile (in: hFile=0x2a0, lpBuffer=0x1115a000, nNumberOfBytesToRead=0x2230, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1115a000*, lpNumberOfBytesRead=0x11022e18*=0x2230, lpOverlapped=0x0) returned 1
	[0307.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0307.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112d4802 | out: pbBuffer=0x112d4802) returned 1
	[0307.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112d48a8 | out: pbBuffer=0x112d48a8) returned 1
	[0307.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0307.252] GetFileType (hFile=0x2a0) returned 0x1
	[0307.252] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.252] WriteFile (in: hFile=0x2a0, lpBuffer=0x11218000*, nNumberOfBytesToWrite=0x2230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11218000*, lpNumberOfBytesWritten=0x1102ddfc*=0x2230, lpOverlapped=0x1102de08) returned 1
	[0307.253] GetFileType (hFile=0x2a0) returned 0x1
	[0307.253] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x2230, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.253] GetFileType (hFile=0x2a0) returned 0x1
	[0307.253] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.253] WriteFile (in: hFile=0x2a0, lpBuffer=0x112e6a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112e6a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x224, lpOverlapped=0x1102de08) returned 1
	[0307.253] GetFileType (hFile=0x2a0) returned 0x1
	[0307.253] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x2230, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.253] CloseHandle (hObject=0x2a0) returned 1
	[0307.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf.tl30z")) returned 0x220
	[0307.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.256] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.257] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.261] SetEvent (hEvent=0x284) returned 1
	[0307.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf")) returned 0x220
	[0307.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF", dwFileAttributes=0x220) returned 1
	[0307.261] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.356] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0307.356] ReadFile (in: hFile=0x2a0, lpBuffer=0x112fc000, nNumberOfBytesToRead=0xa04, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112fc000*, lpNumberOfBytesRead=0x1128ce18*=0xa04, lpOverlapped=0x0) returned 1
	[0307.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6c0 | out: pbBuffer=0x1140f6c0) returned 1
	[0307.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f6b8 | out: pbBuffer=0x1140f6b8) returned 1
	[0307.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ab302 | out: pbBuffer=0x111ab302) returned 1
	[0307.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ab328 | out: pbBuffer=0x111ab328) returned 1
	[0307.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ab376 | out: pbBuffer=0x111ab376) returned 1
	[0307.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ab381 | out: pbBuffer=0x111ab381) returned 1
	[0307.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6f0 | out: pbBuffer=0x1140f6f0) returned 1
	[0307.362] GetFileType (hFile=0x2a0) returned 0x1
	[0307.362] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.362] WriteFile (in: hFile=0x2a0, lpBuffer=0x11305000*, nNumberOfBytesToWrite=0xa04, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11305000*, lpNumberOfBytesWritten=0x1133bdfc*=0xa04, lpOverlapped=0x1133be08) returned 1
	[0307.362] GetFileType (hFile=0x2a0) returned 0x1
	[0307.362] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xa04, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.362] GetFileType (hFile=0x2a0) returned 0x1
	[0307.363] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.363] WriteFile (in: hFile=0x2a0, lpBuffer=0x11308700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11308700*, lpNumberOfBytesWritten=0x1133bdfc*=0x221, lpOverlapped=0x1133be08) returned 1
	[0307.363] GetFileType (hFile=0x2a0) returned 0x1
	[0307.363] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xa04, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.363] CloseHandle (hObject=0x2a0) returned 1
	[0307.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf.tl30z")) returned 0x220
	[0307.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.366] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.368] SetEvent (hEvent=0x284) returned 1
	[0307.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf")) returned 0x220
	[0307.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF", dwFileAttributes=0x220) returned 1
	[0307.369] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0307.473] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0307.473] ReadFile (in: hFile=0x1fc, lpBuffer=0x11464000, nNumberOfBytesToRead=0xd6e, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11464000*, lpNumberOfBytesRead=0x1128ce18*=0xd6e, lpOverlapped=0x0) returned 1
	[0307.478] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0307.478] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e358 | out: pbBuffer=0x1104e358) returned 1
	[0307.478] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1124f302 | out: pbBuffer=0x1124f302) returned 1
	[0307.479] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0307.479] GetFileType (hFile=0x1fc) returned 0x1
	[0307.479] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11245de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.479] WriteFile (in: hFile=0x1fc, lpBuffer=0x111d8000*, nNumberOfBytesToWrite=0xd6e, lpNumberOfBytesWritten=0x11245dfc, lpOverlapped=0x11245e08 | out: lpBuffer=0x111d8000*, lpNumberOfBytesWritten=0x11245dfc*=0xd6e, lpOverlapped=0x11245e08) returned 1
	[0307.480] GetFileType (hFile=0x1fc) returned 0x1
	[0307.480] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd6e, lpNewFilePointer=0x0, dwMoveMethod=0x11245de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.480] GetFileType (hFile=0x1fc) returned 0x1
	[0307.480] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11245de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.481] WriteFile (in: hFile=0x1fc, lpBuffer=0x1110f880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11245dfc, lpOverlapped=0x11245e08 | out: lpBuffer=0x1110f880*, lpNumberOfBytesWritten=0x11245dfc*=0x230, lpOverlapped=0x11245e08) returned 1
	[0307.481] GetFileType (hFile=0x1fc) returned 0x1
	[0307.481] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd6e, lpNewFilePointer=0x0, dwMoveMethod=0x11245de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.481] CloseHandle (hObject=0x1fc) returned 1
	[0307.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf.tl30z")) returned 0x220
	[0307.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.484] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.487] SetEvent (hEvent=0x160) returned 1
	[0307.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf")) returned 0x220
	[0307.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF", dwFileAttributes=0x220) returned 1
	[0307.488] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0307.591] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0307.591] ReadFile (in: hFile=0x1d4, lpBuffer=0x110d4000, nNumberOfBytesToRead=0x4ada, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110d4000*, lpNumberOfBytesRead=0x1128ce18*=0x4ada, lpOverlapped=0x0) returned 1
	[0307.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0307.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11391202 | out: pbBuffer=0x11391202) returned 1
	[0307.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11391269 | out: pbBuffer=0x11391269) returned 1
	[0307.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0307.598] GetFileType (hFile=0x1d4) returned 0x1
	[0307.598] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.598] WriteFile (in: hFile=0x1d4, lpBuffer=0x11302000*, nNumberOfBytesToWrite=0x4ada, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11302000*, lpNumberOfBytesWritten=0x1133fdfc*=0x4ada, lpOverlapped=0x1133fe08) returned 1
	[0307.598] GetFileType (hFile=0x1d4) returned 0x1
	[0307.599] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4ada, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.599] GetFileType (hFile=0x1d4) returned 0x1
	[0307.599] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.599] WriteFile (in: hFile=0x1d4, lpBuffer=0x113cb880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113cb880*, lpNumberOfBytesWritten=0x1133fdfc*=0x230, lpOverlapped=0x1133fe08) returned 1
	[0307.599] GetFileType (hFile=0x1d4) returned 0x1
	[0307.600] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4ada, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.600] CloseHandle (hObject=0x1d4) returned 1
	[0307.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf.tl30z")) returned 0x220
	[0307.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.604] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.607] SetEvent (hEvent=0x24c) returned 1
	[0307.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf")) returned 0x220
	[0307.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF", dwFileAttributes=0x220) returned 1
	[0307.608] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0307.688] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0307.688] ReadFile (in: hFile=0x250, lpBuffer=0x11122000, nNumberOfBytesToRead=0xb9e, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11122000*, lpNumberOfBytesRead=0x1128ce18*=0xb9e, lpOverlapped=0x0) returned 1
	[0307.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0307.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11134802 | out: pbBuffer=0x11134802) returned 1
	[0307.694] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0307.694] GetFileType (hFile=0x250) returned 0x1
	[0307.694] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.695] WriteFile (in: hFile=0x250, lpBuffer=0x11452000*, nNumberOfBytesToWrite=0xb9e, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11452000*, lpNumberOfBytesWritten=0x1133bdfc*=0xb9e, lpOverlapped=0x1133be08) returned 1
	[0307.695] GetFileType (hFile=0x250) returned 0x1
	[0307.695] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xb9e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.695] GetFileType (hFile=0x250) returned 0x1
	[0307.695] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.695] WriteFile (in: hFile=0x250, lpBuffer=0x1143aa80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1143aa80*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0307.696] GetFileType (hFile=0x250) returned 0x1
	[0307.696] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xb9e, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.696] CloseHandle (hObject=0x250) returned 1
	[0307.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf.tl30z")) returned 0x220
	[0307.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.700] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.702] SetEvent (hEvent=0x24c) returned 1
	[0307.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf")) returned 0x220
	[0307.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF", dwFileAttributes=0x220) returned 1
	[0307.702] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0307.781] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0307.781] ReadFile (in: hFile=0x1b4, lpBuffer=0x1118c000, nNumberOfBytesToRead=0x1138, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1118c000*, lpNumberOfBytesRead=0x1128ce18*=0x1138, lpOverlapped=0x0) returned 1
	[0307.786] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66e0 | out: pbBuffer=0x113e66e0) returned 1
	[0307.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11239102 | out: pbBuffer=0x11239102) returned 1
	[0307.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11239197 | out: pbBuffer=0x11239197) returned 1
	[0307.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112391b0 | out: pbBuffer=0x112391b0) returned 1
	[0307.787] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6710 | out: pbBuffer=0x113e6710) returned 1
	[0307.787] SetEvent (hEvent=0x24c) returned 1
	[0307.787] GetFileType (hFile=0x1b4) returned 0x1
	[0307.788] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.788] WriteFile (in: hFile=0x1b4, lpBuffer=0x111a4000*, nNumberOfBytesToWrite=0x1138, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111a4000*, lpNumberOfBytesWritten=0x1102ddfc*=0x1138, lpOverlapped=0x1102de08) returned 1
	[0307.788] GetFileType (hFile=0x1b4) returned 0x1
	[0307.788] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1138, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.788] GetFileType (hFile=0x1b4) returned 0x1
	[0307.789] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.789] WriteFile (in: hFile=0x1b4, lpBuffer=0x1119c700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1119c700*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0307.789] GetFileType (hFile=0x1b4) returned 0x1
	[0307.789] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1138, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.789] CloseHandle (hObject=0x1b4) returned 1
	[0307.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf.tl30z")) returned 0x220
	[0307.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.794] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.795] SetEvent (hEvent=0x24c) returned 1
	[0307.795] SetEvent (hEvent=0x160) returned 1
	[0307.795] SwitchToThread () returned 1
	[0307.798] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.799] SetEvent (hEvent=0x160) returned 1
	[0307.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf")) returned 0x220
	[0307.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF", dwFileAttributes=0x220) returned 1
	[0307.800] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.866] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0307.872] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0307.872] ReadFile (in: hFile=0x2a0, lpBuffer=0x11076480, nNumberOfBytesToRead=0x43c, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11076480*, lpNumberOfBytesRead=0x11428e18*=0x43c, lpOverlapped=0x0) returned 1
	[0307.878] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0307.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0307.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e8802 | out: pbBuffer=0x110e8802) returned 1
	[0307.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e8834 | out: pbBuffer=0x110e8834) returned 1
	[0307.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e88dd | out: pbBuffer=0x110e88dd) returned 1
	[0307.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e88e4 | out: pbBuffer=0x110e88e4) returned 1
	[0307.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e88eb | out: pbBuffer=0x110e88eb) returned 1
	[0307.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0307.880] GetFileType (hFile=0x2a0) returned 0x1
	[0307.880] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.880] WriteFile (in: hFile=0x2a0, lpBuffer=0x1130c000*, nNumberOfBytesToWrite=0x43c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1130c000*, lpNumberOfBytesWritten=0x1133fdfc*=0x43c, lpOverlapped=0x1133fe08) returned 1
	[0307.880] GetFileType (hFile=0x2a0) returned 0x1
	[0307.880] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x43c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.880] GetFileType (hFile=0x2a0) returned 0x1
	[0307.881] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.881] WriteFile (in: hFile=0x2a0, lpBuffer=0x112fca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112fca80*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0307.881] GetFileType (hFile=0x2a0) returned 0x1
	[0307.881] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x43c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.881] CloseHandle (hObject=0x2a0) returned 1
	[0307.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf.tl30z")) returned 0x220
	[0307.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.886] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0307.892] SetEvent (hEvent=0x174) returned 1
	[0307.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf")) returned 0x220
	[0307.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF", dwFileAttributes=0x220) returned 1
	[0307.893] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0308.020] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0308.020] ReadFile (in: hFile=0x1fc, lpBuffer=0x112a6000, nNumberOfBytesToRead=0x4816, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x112a6000*, lpNumberOfBytesRead=0x1131ae18*=0x4816, lpOverlapped=0x0) returned 1
	[0308.026] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f550 | out: pbBuffer=0x1140f550) returned 1
	[0308.026] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f548 | out: pbBuffer=0x1140f548) returned 1
	[0308.026] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b8602 | out: pbBuffer=0x112b8602) returned 1
	[0308.026] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b8633 | out: pbBuffer=0x112b8633) returned 1
	[0308.026] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b86ab | out: pbBuffer=0x112b86ab) returned 1
	[0308.026] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b86d2 | out: pbBuffer=0x112b86d2) returned 1
	[0308.027] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f580 | out: pbBuffer=0x1140f580) returned 1
	[0308.028] GetFileType (hFile=0x1fc) returned 0x1
	[0308.028] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.028] WriteFile (in: hFile=0x1fc, lpBuffer=0x1124a000*, nNumberOfBytesToWrite=0x4816, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1124a000*, lpNumberOfBytesWritten=0x1133fdfc*=0x4816, lpOverlapped=0x1133fe08) returned 1
	[0308.029] GetFileType (hFile=0x1fc) returned 0x1
	[0308.029] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4816, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.029] GetFileType (hFile=0x1fc) returned 0x1
	[0308.029] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.029] WriteFile (in: hFile=0x1fc, lpBuffer=0x1109b500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1109b500*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0308.029] GetFileType (hFile=0x1fc) returned 0x1
	[0308.030] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4816, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.030] CloseHandle (hObject=0x1fc) returned 1
	[0308.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf.tl30z")) returned 0x220
	[0308.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.034] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0308.039] SetEvent (hEvent=0x174) returned 1
	[0308.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf")) returned 0x220
	[0308.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF", dwFileAttributes=0x220) returned 1
	[0308.040] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0308.143] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0308.143] ReadFile (in: hFile=0x1b4, lpBuffer=0x110ff000, nNumberOfBytesToRead=0xe14, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x110ff000*, lpNumberOfBytesRead=0x1131ae18*=0xe14, lpOverlapped=0x0) returned 1
	[0308.148] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e610 | out: pbBuffer=0x1104e610) returned 1
	[0308.148] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11102802 | out: pbBuffer=0x11102802) returned 1
	[0308.148] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0308.149] GetFileType (hFile=0x1b4) returned 0x1
	[0308.149] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.149] WriteFile (in: hFile=0x1b4, lpBuffer=0x11114000*, nNumberOfBytesToWrite=0xe14, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11114000*, lpNumberOfBytesWritten=0x1102bdfc*=0xe14, lpOverlapped=0x1102be08) returned 1
	[0308.149] GetFileType (hFile=0x1b4) returned 0x1
	[0308.149] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xe14, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.149] GetFileType (hFile=0x1b4) returned 0x1
	[0308.149] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.150] WriteFile (in: hFile=0x1b4, lpBuffer=0x110f9500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110f9500*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0308.150] GetFileType (hFile=0x1b4) returned 0x1
	[0308.150] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xe14, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.150] CloseHandle (hObject=0x1b4) returned 1
	[0308.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf.tl30z")) returned 0x220
	[0308.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.153] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0308.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf")) returned 0x220
	[0308.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF", dwFileAttributes=0x220) returned 1
	[0308.156] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0308.268] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0308.268] ReadFile (in: hFile=0x1d8, lpBuffer=0x110ccc00, nNumberOfBytesToRead=0xbd8, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x110ccc00*, lpNumberOfBytesRead=0x1131ae18*=0xbd8, lpOverlapped=0x0) returned 1
	[0308.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263b0 | out: pbBuffer=0x111263b0) returned 1
	[0308.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11103202 | out: pbBuffer=0x11103202) returned 1
	[0308.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11103254 | out: pbBuffer=0x11103254) returned 1
	[0308.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263e0 | out: pbBuffer=0x111263e0) returned 1
	[0308.309] GetFileType (hFile=0x1d8) returned 0x1
	[0308.309] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.310] WriteFile (in: hFile=0x1d8, lpBuffer=0x11334000*, nNumberOfBytesToWrite=0xbd8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11334000*, lpNumberOfBytesWritten=0x1102bdfc*=0xbd8, lpOverlapped=0x1102be08) returned 1
	[0308.310] GetFileType (hFile=0x1d8) returned 0x1
	[0308.310] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xbd8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.310] GetFileType (hFile=0x1d8) returned 0x1
	[0308.310] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.311] WriteFile (in: hFile=0x1d8, lpBuffer=0x11280700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11280700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0308.311] GetFileType (hFile=0x1d8) returned 0x1
	[0308.311] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xbd8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.312] CloseHandle (hObject=0x1d8) returned 1
	[0308.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf.tl30z")) returned 0x220
	[0308.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.318] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0308.323] SetEvent (hEvent=0x174) returned 1
	[0308.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf")) returned 0x220
	[0308.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF", dwFileAttributes=0x220) returned 1
	[0308.324] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0308.405] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0308.405] ReadFile (in: hFile=0x2a0, lpBuffer=0x11358000, nNumberOfBytesToRead=0x1e98, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11358000*, lpNumberOfBytesRead=0x1131ae18*=0x1e98, lpOverlapped=0x0) returned 1
	[0308.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0308.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0308.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11185302 | out: pbBuffer=0x11185302) returned 1
	[0308.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111853bf | out: pbBuffer=0x111853bf) returned 1
	[0308.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111853dc | out: pbBuffer=0x111853dc) returned 1
	[0308.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0308.411] GetFileType (hFile=0x2a0) returned 0x1
	[0308.411] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.411] WriteFile (in: hFile=0x2a0, lpBuffer=0x113ec000*, nNumberOfBytesToWrite=0x1e98, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113ec000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1e98, lpOverlapped=0x1133be08) returned 1
	[0308.412] GetFileType (hFile=0x2a0) returned 0x1
	[0308.412] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1e98, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.412] GetFileType (hFile=0x2a0) returned 0x1
	[0308.412] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.412] WriteFile (in: hFile=0x2a0, lpBuffer=0x112db880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112db880*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0308.413] GetFileType (hFile=0x2a0) returned 0x1
	[0308.413] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1e98, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.413] CloseHandle (hObject=0x2a0) returned 1
	[0308.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf.tl30z")) returned 0x220
	[0308.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.416] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0308.418] SetEvent (hEvent=0x174) returned 1
	[0308.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf")) returned 0x220
	[0308.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF", dwFileAttributes=0x220) returned 1
	[0308.418] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0308.515] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0308.516] ReadFile (in: hFile=0x1fc, lpBuffer=0x113ae000, nNumberOfBytesToRead=0x28ec, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x113ae000*, lpNumberOfBytesRead=0x1131ae18*=0x28ec, lpOverlapped=0x0) returned 1
	[0308.868] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0308.893] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126da0 | out: pbBuffer=0x11126da0) returned 1
	[0308.893] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c10502 | out: pbBuffer=0x11c10502) returned 1
	[0308.893] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c10561 | out: pbBuffer=0x11c10561) returned 1
	[0308.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126dd0 | out: pbBuffer=0x11126dd0) returned 1
	[0308.895] GetFileType (hFile=0x1fc) returned 0x1
	[0308.895] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.895] WriteFile (in: hFile=0x1fc, lpBuffer=0x11c3a000*, nNumberOfBytesToWrite=0x28ec, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c3a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x28ec, lpOverlapped=0x1102be08) returned 1
	[0308.895] GetFileType (hFile=0x1fc) returned 0x1
	[0308.896] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x28ec, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.896] GetFileType (hFile=0x1fc) returned 0x1
	[0308.896] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.896] WriteFile (in: hFile=0x1fc, lpBuffer=0x11c0ea80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c0ea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0308.896] GetFileType (hFile=0x1fc) returned 0x1
	[0308.896] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x28ec, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.896] CloseHandle (hObject=0x1fc) returned 1
	[0308.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf.tl30z")) returned 0x220
	[0308.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.898] SetEvent (hEvent=0x1f0) returned 1
	[0308.898] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) returned 0x0
	[0308.904] SetEvent (hEvent=0x174) returned 1
	[0308.904] WaitForSingleObject (hHandle=0x248, dwMilliseconds=0xffffffff) 

Thread:
	id = 38
	os_tid = 0xd30

	[0212.851] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3297ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3297ff30*=0x1f8) returned 1
	[0212.851] VirtualQuery (in: lpAddress=0x3297ff40, lpBuffer=0x3297ff40, dwLength=0x1c | out: lpBuffer=0x3297ff40*(BaseAddress=0x3297f000, AllocationBase=0x32880000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0212.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e690 | out: pbBuffer=0x1104e690) returned 1
	[0212.851] VirtualAlloc (lpAddress=0x11bdc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bdc000
	[0212.853] VirtualAlloc (lpAddress=0x11be0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11be0000
	[0212.855] VirtualAlloc (lpAddress=0x11be4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11be4000
	[0212.856] VirtualAlloc (lpAddress=0x11be8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11be8000
	[0212.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11036c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228
	[0212.859] CloseHandle (hObject=0x228) returned 1
	[0212.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11036e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228
	[0212.861] CloseHandle (hObject=0x228) returned 1
	[0212.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11036fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x228
	[0212.863] CloseHandle (hObject=0x228) returned 1
	[0212.863] GetFileType (hFile=0x16c) returned 0x1
	[0212.863] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0212.864] WriteFile (in: hFile=0x16c, lpBuffer=0x115b4000*, nNumberOfBytesToWrite=0x11fd7, lpNumberOfBytesWritten=0x112f1dfc, lpOverlapped=0x112f1e08 | out: lpBuffer=0x115b4000*, lpNumberOfBytesWritten=0x112f1dfc*=0x11fd7, lpOverlapped=0x112f1e08) returned 1
	[0212.865] GetFileType (hFile=0x16c) returned 0x1
	[0212.865] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x11fd7, lpNewFilePointer=0x0, dwMoveMethod=0x112f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0212.865] GetFileType (hFile=0x16c) returned 0x1
	[0212.865] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0212.865] WriteFile (in: hFile=0x16c, lpBuffer=0x11b8f180*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0x112f1dfc, lpOverlapped=0x112f1e08 | out: lpBuffer=0x11b8f180*, lpNumberOfBytesWritten=0x112f1dfc*=0x245, lpOverlapped=0x112f1e08) returned 1
	[0212.873] GetFileType (hFile=0x16c) returned 0x1
	[0212.873] SetFilePointerEx (in: hFile=0x16c, liDistanceToMove=0x11fd7, lpNewFilePointer=0x0, dwMoveMethod=0x112f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0212.873] CloseHandle (hObject=0x16c) returned 1
	[0213.058] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.tl30z")) returned 0x20
	[0213.059] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0213.089] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0214.755] SetEvent (hEvent=0x1f0) returned 1
	[0214.755] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0216.023] SetEvent (hEvent=0x150) returned 1
	[0216.023] SetEvent (hEvent=0x284) returned 1
	[0216.023] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0217.099] SetEvent (hEvent=0x12c) returned 1
	[0217.099] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0219.793] SetEvent (hEvent=0x150) returned 1
	[0219.793] SetEvent (hEvent=0x1e8) returned 1
	[0219.793] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0222.675] SetEvent (hEvent=0x25c) returned 1
	[0222.675] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0223.088] SetEvent (hEvent=0x150) returned 1
	[0223.088] SetEvent (hEvent=0x1f0) returned 1
	[0223.088] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0223.575] SetEvent (hEvent=0x264) returned 1
	[0223.576] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0224.089] SetEvent (hEvent=0x264) returned 1
	[0224.089] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0224.463] SetEvent (hEvent=0x150) returned 1
	[0224.463] SetEvent (hEvent=0x1e8) returned 1
	[0224.463] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0225.208] SetEvent (hEvent=0x23c) returned 1
	[0225.208] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0225.365] SetEvent (hEvent=0x150) returned 1
	[0225.365] SetEvent (hEvent=0x1f0) returned 1
	[0225.365] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0225.457] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x26c
	[0225.458] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.668] SetEvent (hEvent=0x23c) returned 1
	[0227.668] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.673] SetEvent (hEvent=0x23c) returned 1
	[0227.673] SwitchToThread () returned 1
	[0227.676] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.701] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.754] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.863] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.914] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0228.079] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0228.157] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0228.202] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0228.217] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0228.288] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0228.691] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.049] SetEvent (hEvent=0x12c) returned 1
	[0229.049] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 0x20
	[0229.049] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx", dwFileAttributes=0x20) returned 1
	[0229.049] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.tl30z"), dwFlags=0x1) returned 1
	[0229.405] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0229.429] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11554e08 | out: lpMode=0x11554e08) returned 0
	[0229.429] ReadFile (in: hFile=0x1b4, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11554e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11554e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0229.447] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0229.447] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11066902 | out: pbBuffer=0x11066902) returned 1
	[0229.447] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11066987 | out: pbBuffer=0x11066987) returned 1
	[0229.447] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0229.448] GetFileType (hFile=0x1b4) returned 0x1
	[0229.448] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.449] WriteFile (in: hFile=0x1b4, lpBuffer=0x11144000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11144000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0229.449] GetFileType (hFile=0x1b4) returned 0x1
	[0229.449] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.450] GetFileType (hFile=0x1b4) returned 0x1
	[0229.450] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.450] WriteFile (in: hFile=0x1b4, lpBuffer=0x113a0a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x113a0a80*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0229.450] GetFileType (hFile=0x1b4) returned 0x1
	[0229.451] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.451] CloseHandle (hObject=0x1b4) returned 1
	[0229.585] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.tl30z")) returned 0x20
	[0229.585] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0229.599] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.625] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.764] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.783] SetEvent (hEvent=0x1f0) returned 1
	[0229.783] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 0x20
	[0229.783] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0229.784] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0230.584] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0230.595] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0230.595] ReadFile (in: hFile=0x1c8, lpBuffer=0x11122000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11122000*, lpNumberOfBytesRead=0x1131ce18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0230.613] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e400 | out: pbBuffer=0x1142e400) returned 1
	[0230.613] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e3f8 | out: pbBuffer=0x1142e3f8) returned 1
	[0230.613] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11136302 | out: pbBuffer=0x11136302) returned 1
	[0230.613] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11136371 | out: pbBuffer=0x11136371) returned 1
	[0230.613] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11136374 | out: pbBuffer=0x11136374) returned 1
	[0230.614] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e430 | out: pbBuffer=0x1142e430) returned 1
	[0230.614] GetFileType (hFile=0x1c8) returned 0x1
	[0230.615] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.615] WriteFile (in: hFile=0x1c8, lpBuffer=0x11262000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11262000*, lpNumberOfBytesWritten=0x112efdfc*=0x6ccc, lpOverlapped=0x112efe08) returned 1
	[0230.615] GetFileType (hFile=0x1c8) returned 0x1
	[0230.616] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.616] GetFileType (hFile=0x1c8) returned 0x1
	[0230.617] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.617] WriteFile (in: hFile=0x1c8, lpBuffer=0x11242700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11242700*, lpNumberOfBytesWritten=0x112efdfc*=0x230, lpOverlapped=0x112efe08) returned 1
	[0230.617] GetFileType (hFile=0x1c8) returned 0x1
	[0230.617] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.618] CloseHandle (hObject=0x1c8) returned 1
	[0230.655] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.tl30z")) returned 0x20
	[0230.656] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0230.671] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0230.695] SetEvent (hEvent=0x1e8) returned 1
	[0230.695] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 0x20
	[0230.696] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx", dwFileAttributes=0x20) returned 1
	[0230.696] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.tl30z"), dwFlags=0x1) returned 1
	[0231.276] SetEvent (hEvent=0x150) returned 1
	[0231.276] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0231.289] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0231.289] ReadFile (in: hFile=0x1d0, lpBuffer=0x1105f000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1105f000*, lpNumberOfBytesRead=0x1131ce18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0231.298] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e280 | out: pbBuffer=0x1142e280) returned 1
	[0231.298] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e278 | out: pbBuffer=0x1142e278) returned 1
	[0231.298] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1142d302 | out: pbBuffer=0x1142d302) returned 1
	[0231.298] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142d3a9 | out: pbBuffer=0x1142d3a9) returned 1
	[0231.298] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142d3ca | out: pbBuffer=0x1142d3ca) returned 1
	[0231.299] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2b0 | out: pbBuffer=0x1142e2b0) returned 1
	[0231.300] GetFileType (hFile=0x1d0) returned 0x1
	[0231.300] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.300] WriteFile (in: hFile=0x1d0, lpBuffer=0x110f2000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110f2000*, lpNumberOfBytesWritten=0x11031dfc*=0x6ccc, lpOverlapped=0x11031e08) returned 1
	[0231.301] GetFileType (hFile=0x1d0) returned 0x1
	[0231.301] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.301] GetFileType (hFile=0x1d0) returned 0x1
	[0231.301] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.301] WriteFile (in: hFile=0x1d0, lpBuffer=0x11323880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11323880*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0231.302] GetFileType (hFile=0x1d0) returned 0x1
	[0231.302] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.302] CloseHandle (hObject=0x1d0) returned 1
	[0231.314] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.tl30z")) returned 0x20
	[0231.314] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0231.355] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0231.364] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0231.386] SetEvent (hEvent=0x12c) returned 1
	[0231.386] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 0x20
	[0231.386] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0231.387] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0232.444] SetEvent (hEvent=0x150) returned 1
	[0232.444] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0232.455] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11556e08 | out: lpMode=0x11556e08) returned 0
	[0232.455] ReadFile (in: hFile=0x1c8, lpBuffer=0x11116000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11556e18, lpOverlapped=0x0 | out: lpBuffer=0x11116000*, lpNumberOfBytesRead=0x11556e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0232.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327e0 | out: pbBuffer=0x113327e0) returned 1
	[0232.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327d8 | out: pbBuffer=0x113327d8) returned 1
	[0232.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11275002 | out: pbBuffer=0x11275002) returned 1
	[0232.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11275049 | out: pbBuffer=0x11275049) returned 1
	[0232.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0232.471] GetFileType (hFile=0x1c8) returned 0x1
	[0232.471] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.472] WriteFile (in: hFile=0x1c8, lpBuffer=0x11162000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11162000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0232.472] GetFileType (hFile=0x1c8) returned 0x1
	[0232.473] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.473] GetFileType (hFile=0x1c8) returned 0x1
	[0232.473] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.473] WriteFile (in: hFile=0x1c8, lpBuffer=0x11132380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11132380*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0232.474] GetFileType (hFile=0x1c8) returned 0x1
	[0232.474] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.474] CloseHandle (hObject=0x1c8) returned 1
	[0232.487] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.tl30z")) returned 0x20
	[0232.488] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0232.494] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.608] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.645] SetEvent (hEvent=0x1f0) returned 1
	[0232.645] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 0x20
	[0232.646] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0232.646] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0233.046] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0233.089] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11556e08 | out: lpMode=0x11556e08) returned 0
	[0233.090] ReadFile (in: hFile=0x250, lpBuffer=0x1145e000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11556e18, lpOverlapped=0x0 | out: lpBuffer=0x1145e000*, lpNumberOfBytesRead=0x11556e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0233.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e2e0 | out: pbBuffer=0x1104e2e0) returned 1
	[0233.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11275502 | out: pbBuffer=0x11275502) returned 1
	[0233.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112755cb | out: pbBuffer=0x112755cb) returned 1
	[0233.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e310 | out: pbBuffer=0x1104e310) returned 1
	[0233.101] GetFileType (hFile=0x250) returned 0x1
	[0233.101] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0233.101] WriteFile (in: hFile=0x250, lpBuffer=0x11484000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11484000*, lpNumberOfBytesWritten=0x1102ddfc*=0x6ccc, lpOverlapped=0x1102de08) returned 1
	[0233.102] GetFileType (hFile=0x250) returned 0x1
	[0233.102] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0233.102] GetFileType (hFile=0x250) returned 0x1
	[0233.102] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0233.103] WriteFile (in: hFile=0x250, lpBuffer=0x1149bc00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1149bc00*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0233.103] GetFileType (hFile=0x250) returned 0x1
	[0233.103] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0233.103] CloseHandle (hObject=0x250) returned 1
	[0233.129] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.tl30z")) returned 0x20
	[0233.129] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0233.146] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0233.152] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0233.465] SetEvent (hEvent=0x12c) returned 1
	[0233.465] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 0x20
	[0233.465] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", dwFileAttributes=0x20) returned 1
	[0233.466] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.tl30z"), dwFlags=0x1) returned 1
	[0234.722] SetEvent (hEvent=0x150) returned 1
	[0234.722] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0234.743] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11556e08 | out: lpMode=0x11556e08) returned 0
	[0234.743] ReadFile (in: hFile=0x204, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x11fd7, lpNumberOfBytesRead=0x11556e18, lpOverlapped=0x0 | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x11556e18*=0x11fd7, lpOverlapped=0x0) returned 1
	[0234.754] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e460 | out: pbBuffer=0x1104e460) returned 1
	[0234.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11275f02 | out: pbBuffer=0x11275f02) returned 1
	[0234.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11275f05 | out: pbBuffer=0x11275f05) returned 1
	[0234.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e490 | out: pbBuffer=0x1104e490) returned 1
	[0234.757] GetFileType (hFile=0x204) returned 0x1
	[0234.757] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0234.757] WriteFile (in: hFile=0x204, lpBuffer=0x111fc000*, nNumberOfBytesToWrite=0x11fd7, lpNumberOfBytesWritten=0x112a9dfc, lpOverlapped=0x112a9e08 | out: lpBuffer=0x111fc000*, lpNumberOfBytesWritten=0x112a9dfc*=0x11fd7, lpOverlapped=0x112a9e08) returned 1
	[0234.759] GetFileType (hFile=0x204) returned 0x1
	[0234.759] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x11fd7, lpNewFilePointer=0x0, dwMoveMethod=0x112a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0234.759] GetFileType (hFile=0x204) returned 0x1
	[0234.759] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0234.759] WriteFile (in: hFile=0x204, lpBuffer=0x11164a80*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0x112a9dfc, lpOverlapped=0x112a9e08 | out: lpBuffer=0x11164a80*, lpNumberOfBytesWritten=0x112a9dfc*=0x245, lpOverlapped=0x112a9e08) returned 1
	[0234.768] GetFileType (hFile=0x204) returned 0x1
	[0234.768] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x11fd7, lpNewFilePointer=0x0, dwMoveMethod=0x112a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0234.769] CloseHandle (hObject=0x204) returned 1
	[0234.971] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.tl30z")) returned 0x20
	[0234.976] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0235.011] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0235.062] SetEvent (hEvent=0x23c) returned 1
	[0235.062] GetFileAttributesW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 0x20
	[0235.063] SetFileAttributesW (lpFileName="C:\\Logs\\Windows PowerShell.evtx", dwFileAttributes=0x20) returned 1
	[0235.063] MoveFileExW (lpExistingFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), lpNewFileName="C:\\Logs\\Windows PowerShell.evtx.tl30z" (normalized: "c:\\logs\\windows powershell.evtx.tl30z"), dwFlags=0x1) returned 1
	[0235.895] CreateFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx.tl30z" (normalized: "c:\\logs\\windows powershell.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0235.923] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11555e08 | out: lpMode=0x11555e08) returned 0
	[0235.923] ReadFile (in: hFile=0x1d0, lpBuffer=0x112fd000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11555e18, lpOverlapped=0x0 | out: lpBuffer=0x112fd000*, lpNumberOfBytesRead=0x11555e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0235.989] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364280 | out: pbBuffer=0x11364280) returned 1
	[0235.989] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11173d02 | out: pbBuffer=0x11173d02) returned 1
	[0235.990] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113642b0 | out: pbBuffer=0x113642b0) returned 1
	[0235.991] GetFileType (hFile=0x1d0) returned 0x1
	[0235.991] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.991] WriteFile (in: hFile=0x1d0, lpBuffer=0x11322000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11322000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6ccc, lpOverlapped=0x112f5e08) returned 1
	[0235.992] GetFileType (hFile=0x1d0) returned 0x1
	[0235.992] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.992] GetFileType (hFile=0x1d0) returned 0x1
	[0235.992] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.992] WriteFile (in: hFile=0x1d0, lpBuffer=0x11165880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11165880*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0235.993] GetFileType (hFile=0x1d0) returned 0x1
	[0235.993] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.993] CloseHandle (hObject=0x1d0) returned 1
	[0235.999] GetFileAttributesW (lpFileName="C:\\Logs\\Windows PowerShell.evtx.tl30z" (normalized: "c:\\logs\\windows powershell.evtx.tl30z")) returned 0x20
	[0235.999] SetFileAttributesW (lpFileName="C:\\Logs\\Windows PowerShell.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0236.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 0x20
	[0236.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x20) returned 1
	[0236.001] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.tl30z"), dwFlags=0x1) returned 1
	[0236.002] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0236.002] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0236.002] ReadFile (in: hFile=0x1d0, lpBuffer=0x1114a000, nNumberOfBytesToRead=0xaa22, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1114a000*, lpNumberOfBytesRead=0x11022e18*=0xaa22, lpOverlapped=0x0) returned 1
	[0236.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113643f0 | out: pbBuffer=0x113643f0) returned 1
	[0236.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113643e8 | out: pbBuffer=0x113643e8) returned 1
	[0236.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e4902 | out: pbBuffer=0x113e4902) returned 1
	[0236.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e497e | out: pbBuffer=0x113e497e) returned 1
	[0236.060] SetEvent (hEvent=0x264) returned 1
	[0236.061] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364420 | out: pbBuffer=0x11364420) returned 1
	[0236.067] GetFileType (hFile=0x1d0) returned 0x1
	[0236.067] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0236.067] WriteFile (in: hFile=0x1d0, lpBuffer=0x110f2000*, nNumberOfBytesToWrite=0xaa22, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x110f2000*, lpNumberOfBytesWritten=0x112f5dfc*=0xaa22, lpOverlapped=0x112f5e08) returned 1
	[0236.068] GetFileType (hFile=0x1d0) returned 0x1
	[0236.068] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xaa22, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0236.068] GetFileType (hFile=0x1d0) returned 0x1
	[0236.069] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0236.069] WriteFile (in: hFile=0x1d0, lpBuffer=0x11460a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11460a80*, lpNumberOfBytesWritten=0x112f5dfc*=0x22d, lpOverlapped=0x112f5e08) returned 1
	[0236.071] GetFileType (hFile=0x1d0) returned 0x1
	[0236.071] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xaa22, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0236.071] CloseHandle (hObject=0x1d0) returned 1
	[0236.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.tl30z")) returned 0x20
	[0236.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.tl30z", dwFileAttributes=0x21) returned 1
	[0236.091] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.495] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.608] SetEvent (hEvent=0x284) returned 1
	[0236.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 0x20
	[0236.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties", dwFileAttributes=0x20) returned 1
	[0236.609] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.tl30z"), dwFlags=0x1) returned 1
	[0236.725] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0236.726] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0236.726] ReadFile (in: hFile=0x1cc, lpBuffer=0x113ce000, nNumberOfBytesToRead=0x95, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x113ce000*, lpNumberOfBytesRead=0x11287e18*=0x95, lpOverlapped=0x0) returned 1
	[0236.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3d0 | out: pbBuffer=0x1104e3d0) returned 1
	[0236.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e3c8 | out: pbBuffer=0x1104e3c8) returned 1
	[0236.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bc802 | out: pbBuffer=0x111bc802) returned 1
	[0236.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111bc8cc | out: pbBuffer=0x111bc8cc) returned 1
	[0236.785] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e400 | out: pbBuffer=0x1104e400) returned 1
	[0236.785] GetFileType (hFile=0x1cc) returned 0x1
	[0236.785] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0236.785] WriteFile (in: hFile=0x1cc, lpBuffer=0x112ea600*, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112ea600*, lpNumberOfBytesWritten=0x11031dfc*=0x95, lpOverlapped=0x11031e08) returned 1
	[0236.786] GetFileType (hFile=0x1cc) returned 0x1
	[0236.786] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x95, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0236.786] GetFileType (hFile=0x1cc) returned 0x1
	[0236.786] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0236.786] WriteFile (in: hFile=0x1cc, lpBuffer=0x11460e00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11460e00*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0236.788] GetFileType (hFile=0x1cc) returned 0x1
	[0236.788] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x95, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0236.788] CloseHandle (hObject=0x1cc) returned 1
	[0236.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.tl30z")) returned 0x20
	[0236.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0236.790] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0236.790] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1102be08 | out: lpMode=0x1102be08) returned 0
	[0236.790] ReadFile (in: hFile=0x1cc, lpBuffer=0x11360000, nNumberOfBytesToRead=0x27a, lpNumberOfBytesRead=0x1102be18, lpOverlapped=0x0 | out: lpBuffer=0x11360000*, lpNumberOfBytesRead=0x1102be18*=0x27a, lpOverlapped=0x0) returned 1
	[0236.795] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e540 | out: pbBuffer=0x1104e540) returned 1
	[0236.795] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bd202 | out: pbBuffer=0x111bd202) returned 1
	[0236.796] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111bd28b | out: pbBuffer=0x111bd28b) returned 1
	[0236.796] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e570 | out: pbBuffer=0x1104e570) returned 1
	[0236.796] GetFileType (hFile=0x1cc) returned 0x1
	[0236.796] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.797] WriteFile (in: hFile=0x1cc, lpBuffer=0x112eb200*, nNumberOfBytesToWrite=0x27a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112eb200*, lpNumberOfBytesWritten=0x1102bdfc*=0x27a, lpOverlapped=0x1102be08) returned 1
	[0236.797] GetFileType (hFile=0x1cc) returned 0x1
	[0236.797] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x27a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.798] GetFileType (hFile=0x1cc) returned 0x1
	[0236.798] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.798] WriteFile (in: hFile=0x1cc, lpBuffer=0x11461c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11461c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0236.798] GetFileType (hFile=0x1cc) returned 0x1
	[0236.798] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x27a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.798] CloseHandle (hObject=0x1cc) returned 1
	[0236.800] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.tl30z")) returned 0x20
	[0236.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.tl30z", dwFileAttributes=0x21) returned 1
	[0236.801] WriteFile (in: hFile=0x1d0, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1bf4, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x112f1bf4*=0x292, lpOverlapped=0x0) returned 1
	[0236.804] CloseHandle (hObject=0x1d0) returned 1
	[0236.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\applet"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x9081e203, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x9081e203, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0236.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562)) returned 1
	[0236.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa)) returned 1
	[0236.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983)) returned 1
	[0236.805] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0236.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1ff0
	[0236.807] FindNextFileW (in: hFindFile=0x7f1ff0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.807] FindNextFileW (in: hFindFile=0x7f1ff0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1
	[0236.807] FindNextFileW (in: hFindFile=0x7f1ff0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1
	[0236.807] FindNextFileW (in: hFindFile=0x7f1ff0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1
	[0236.807] FindNextFileW (in: hFindFile=0x7f1ff0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1
	[0236.807] FindNextFileW (in: hFindFile=0x7f1ff0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1
	[0236.807] FindNextFileW (in: hFindFile=0x7f1ff0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.807] FindClose (in: hFindFile=0x7f1ff0 | out: hFindFile=0x7f1ff0) returned 1
	[0236.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1
	[0236.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1
	[0236.809] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1
	[0236.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a)) returned 1
	[0236.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1
	[0236.810] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0237.092] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x112f1c24 | out: lpMode=0x112f1c24) returned 0
	[0237.092] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.221] SetEvent (hEvent=0x264) returned 1
	[0237.222] SetEvent (hEvent=0x23c) returned 1
	[0237.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 0x20
	[0237.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties", dwFileAttributes=0x20) returned 1
	[0237.223] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.tl30z"), dwFlags=0x1) returned 1
	[0237.224] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0237.224] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0237.224] ReadFile (in: hFile=0x250, lpBuffer=0x1137c000, nNumberOfBytesToRead=0x562, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1137c000*, lpNumberOfBytesRead=0x11287e18*=0x562, lpOverlapped=0x0) returned 1
	[0237.341] SwitchToThread () returned 1
	[0237.387] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.449] SetEvent (hEvent=0x1f0) returned 1
	[0237.449] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.467] SetEvent (hEvent=0x1f0) returned 1
	[0237.467] SetEvent (hEvent=0x23c) returned 1
	[0237.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 0x20
	[0237.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", dwFileAttributes=0x20) returned 1
	[0237.469] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.tl30z"), dwFlags=0x1) returned 1
	[0237.470] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0237.470] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0237.470] ReadFile (in: hFile=0x1d0, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x83ce, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x11316e18*=0x83ce, lpOverlapped=0x0) returned 1
	[0237.596] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e120 | out: pbBuffer=0x1142e120) returned 1
	[0237.596] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11396802 | out: pbBuffer=0x11396802) returned 1
	[0237.597] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e150 | out: pbBuffer=0x1142e150) returned 1
	[0237.598] GetFileType (hFile=0x1d0) returned 0x1
	[0237.598] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0237.598] WriteFile (in: hFile=0x1d0, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x83ce, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1102ddfc*=0x83ce, lpOverlapped=0x1102de08) returned 1
	[0237.599] GetFileType (hFile=0x1d0) returned 0x1
	[0237.599] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x83ce, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0237.599] GetFileType (hFile=0x1d0) returned 0x1
	[0237.599] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0237.599] WriteFile (in: hFile=0x1d0, lpBuffer=0x112dca80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112dca80*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0237.600] GetFileType (hFile=0x1d0) returned 0x1
	[0237.600] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x83ce, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0237.600] CloseHandle (hObject=0x1d0) returned 1
	[0237.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.tl30z")) returned 0x20
	[0237.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.tl30z", dwFileAttributes=0x21) returned 1
	[0237.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 0x20
	[0237.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf", dwFileAttributes=0x20) returned 1
	[0237.611] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.tl30z"), dwFlags=0x1) returned 1
	[0239.492] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0239.633] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0239.633] ReadFile (in: hFile=0x1b4, lpBuffer=0x113a0000, nNumberOfBytesToRead=0xc48, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113a0000*, lpNumberOfBytesRead=0x11428e18*=0xc48, lpOverlapped=0x0) returned 1
	[0239.671] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62e0 | out: pbBuffer=0x113e62e0) returned 1
	[0239.671] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141b402 | out: pbBuffer=0x1141b402) returned 1
	[0239.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6310 | out: pbBuffer=0x113e6310) returned 1
	[0239.672] VirtualAlloc (lpAddress=0x11bbc000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bbc000
	[0239.675] GetFileType (hFile=0x1b4) returned 0x1
	[0239.675] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0239.675] WriteFile (in: hFile=0x1b4, lpBuffer=0x11312000*, nNumberOfBytesToWrite=0xc48, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11312000*, lpNumberOfBytesWritten=0x1102ddfc*=0xc48, lpOverlapped=0x1102de08) returned 1
	[0239.675] GetFileType (hFile=0x1b4) returned 0x1
	[0239.676] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xc48, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0239.676] GetFileType (hFile=0x1b4) returned 0x1
	[0239.676] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0239.676] WriteFile (in: hFile=0x1b4, lpBuffer=0x1127f880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1127f880*, lpNumberOfBytesWritten=0x1102ddfc*=0x224, lpOverlapped=0x1102de08) returned 1
	[0239.676] GetFileType (hFile=0x1b4) returned 0x1
	[0239.676] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xc48, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0239.677] CloseHandle (hObject=0x1b4) returned 1
	[0239.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.tl30z")) returned 0x20
	[0239.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.tl30z", dwFileAttributes=0x21) returned 1
	[0239.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 0x20
	[0239.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties", dwFileAttributes=0x20) returned 1
	[0239.679] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.tl30z"), dwFlags=0x1) returned 1
	[0240.102] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0240.115] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0240.115] ReadFile (in: hFile=0x1cc, lpBuffer=0x1140e000, nNumberOfBytesToRead=0xcea, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1140e000*, lpNumberOfBytesRead=0x1131ce18*=0xcea, lpOverlapped=0x0) returned 1
	[0240.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332220 | out: pbBuffer=0x11332220) returned 1
	[0240.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332218 | out: pbBuffer=0x11332218) returned 1
	[0240.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a0802 | out: pbBuffer=0x112a0802) returned 1
	[0240.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332250 | out: pbBuffer=0x11332250) returned 1
	[0240.131] GetFileType (hFile=0x1cc) returned 0x1
	[0240.131] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.131] WriteFile (in: hFile=0x1cc, lpBuffer=0x1121a000*, nNumberOfBytesToWrite=0xcea, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x1121a000*, lpNumberOfBytesWritten=0x112efdfc*=0xcea, lpOverlapped=0x112efe08) returned 1
	[0240.132] GetFileType (hFile=0x1cc) returned 0x1
	[0240.132] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xcea, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.132] GetFileType (hFile=0x1cc) returned 0x1
	[0240.132] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.132] WriteFile (in: hFile=0x1cc, lpBuffer=0x112b4a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x112b4a80*, lpNumberOfBytesWritten=0x112efdfc*=0x22d, lpOverlapped=0x112efe08) returned 1
	[0240.132] GetFileType (hFile=0x1cc) returned 0x1
	[0240.132] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xcea, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.133] CloseHandle (hObject=0x1cc) returned 1
	[0240.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.tl30z")) returned 0x20
	[0240.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0240.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 0x20
	[0240.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties", dwFileAttributes=0x20) returned 1
	[0240.154] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.tl30z"), dwFlags=0x1) returned 1
	[0240.767] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0240.777] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0240.777] ReadFile (in: hFile=0x250, lpBuffer=0x1110a000, nNumberOfBytesToRead=0x18cd, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1110a000*, lpNumberOfBytesRead=0x11425e18*=0x18cd, lpOverlapped=0x0) returned 1
	[0240.782] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65b0 | out: pbBuffer=0x113e65b0) returned 1
	[0240.783] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e65a8 | out: pbBuffer=0x113e65a8) returned 1
	[0240.783] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11112802 | out: pbBuffer=0x11112802) returned 1
	[0240.783] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11112898 | out: pbBuffer=0x11112898) returned 1
	[0240.783] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65e0 | out: pbBuffer=0x113e65e0) returned 1
	[0240.784] GetFileType (hFile=0x250) returned 0x1
	[0240.784] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1127dde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.784] WriteFile (in: hFile=0x250, lpBuffer=0x11132000*, nNumberOfBytesToWrite=0x18cd, lpNumberOfBytesWritten=0x1127ddfc, lpOverlapped=0x1127de08 | out: lpBuffer=0x11132000*, lpNumberOfBytesWritten=0x1127ddfc*=0x18cd, lpOverlapped=0x1127de08) returned 1
	[0240.784] GetFileType (hFile=0x250) returned 0x1
	[0240.785] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x18cd, lpNewFilePointer=0x0, dwMoveMethod=0x1127dde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.785] GetFileType (hFile=0x250) returned 0x1
	[0240.785] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1127dde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.785] WriteFile (in: hFile=0x250, lpBuffer=0x11249500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1127ddfc, lpOverlapped=0x1127de08 | out: lpBuffer=0x11249500*, lpNumberOfBytesWritten=0x1127ddfc*=0x22d, lpOverlapped=0x1127de08) returned 1
	[0240.785] GetFileType (hFile=0x250) returned 0x1
	[0240.785] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x18cd, lpNewFilePointer=0x0, dwMoveMethod=0x1127dde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.786] CloseHandle (hObject=0x250) returned 1
	[0240.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.tl30z")) returned 0x20
	[0240.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0240.797] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0240.804] SetEvent (hEvent=0x23c) returned 1
	[0240.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20
	[0240.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties", dwFileAttributes=0x20) returned 1
	[0240.805] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.tl30z"), dwFlags=0x1) returned 1
	[0241.434] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0241.609] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0241.609] ReadFile (in: hFile=0x250, lpBuffer=0x1149f000, nNumberOfBytesToRead=0xea8, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1149f000*, lpNumberOfBytesRead=0x11425e18*=0xea8, lpOverlapped=0x0) returned 1
	[0241.614] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e280 | out: pbBuffer=0x1142e280) returned 1
	[0241.614] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112eb402 | out: pbBuffer=0x112eb402) returned 1
	[0241.614] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112eb438 | out: pbBuffer=0x112eb438) returned 1
	[0241.615] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2b0 | out: pbBuffer=0x1142e2b0) returned 1
	[0241.615] GetFileType (hFile=0x250) returned 0x1
	[0241.615] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.615] WriteFile (in: hFile=0x250, lpBuffer=0x1148c000*, nNumberOfBytesToWrite=0xea8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1148c000*, lpNumberOfBytesWritten=0x1102bdfc*=0xea8, lpOverlapped=0x1102be08) returned 1
	[0241.616] GetFileType (hFile=0x250) returned 0x1
	[0241.616] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xea8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.616] GetFileType (hFile=0x250) returned 0x1
	[0241.616] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.616] WriteFile (in: hFile=0x250, lpBuffer=0x11488380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11488380*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0241.617] GetFileType (hFile=0x250) returned 0x1
	[0241.617] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xea8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.617] CloseHandle (hObject=0x250) returned 1
	[0241.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.tl30z")) returned 0x20
	[0241.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0241.704] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0241.714] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0242.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar")) returned 0x20
	[0242.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", dwFileAttributes=0x20) returned 1
	[0242.198] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.tl30z"), dwFlags=0x1) returned 1
	[0242.509] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254
	[0242.537] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0242.538] VirtualAlloc (lpAddress=0x11bc6000, dwSize=0x58000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bc6000
	[0242.584] ReadFile (in: hFile=0x254, lpBuffer=0x11bc6000, nNumberOfBytesToRead=0x56226, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesRead=0x1131be18*=0x56226, lpOverlapped=0x0) returned 1
	[0242.658] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332ad0 | out: pbBuffer=0x11332ad0) returned 1
	[0242.658] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332ac8 | out: pbBuffer=0x11332ac8) returned 1
	[0242.658] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11282e02 | out: pbBuffer=0x11282e02) returned 1
	[0242.658] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11282e23 | out: pbBuffer=0x11282e23) returned 1
	[0242.658] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332b00 | out: pbBuffer=0x11332b00) returned 1
	[0242.661] VirtualAlloc (lpAddress=0x11c1e000, dwSize=0x1e000, flAllocationType=0x1000, flProtect=0x4) returned 0x11c1e000
	[0242.667] VirtualAlloc (lpAddress=0x11c3c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11c3c000
	[0242.994] VirtualAlloc (lpAddress=0x11c40000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11c40000
	[0242.996] VirtualAlloc (lpAddress=0x11c44000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11c44000
	[0242.998] VirtualAlloc (lpAddress=0x11c48000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11c48000
	[0243.000] VirtualAlloc (lpAddress=0x11c4c000, dwSize=0x3e000, flAllocationType=0x1000, flProtect=0x4) returned 0x11c4c000
	[0243.002] VirtualFree (lpAddress=0x114aa000, dwSize=0x71c000, dwFreeType=0x4000) returned 1
	[0243.202] SetEvent (hEvent=0x23c) returned 1
	[0243.220] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0243.238] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0243.239] SetEvent (hEvent=0x150) returned 1
	[0243.239] SetEvent (hEvent=0x23c) returned 1
	[0243.242] VirtualAlloc (lpAddress=0x11c8a000, dwSize=0x40000, flAllocationType=0x1000, flProtect=0x4) returned 0x11c8a000
	[0243.266] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0243.331] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0243.331] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0243.342] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0243.343] SetEvent (hEvent=0x240) returned 1
	[0243.343] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0243.367] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0243.367] VirtualAlloc (lpAddress=0x11cca000, dwSize=0x80000, flAllocationType=0x1000, flProtect=0x4) returned 0x11cca000
	[0243.390] GetFileType (hFile=0x254) returned 0x1
	[0243.390] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0243.391] WriteFile (in: hFile=0x254, lpBuffer=0x11cca000*, nNumberOfBytesToWrite=0x56226, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11cca000*, lpNumberOfBytesWritten=0x112efdfc*=0x56226, lpOverlapped=0x112efe08) returned 1
	[0243.394] GetFileType (hFile=0x254) returned 0x1
	[0243.394] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x56226, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0243.394] GetFileType (hFile=0x254) returned 0x1
	[0243.395] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0243.395] WriteFile (in: hFile=0x254, lpBuffer=0x111bc000*, nNumberOfBytesToWrite=0x266, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x111bc000*, lpNumberOfBytesWritten=0x112efdfc*=0x266, lpOverlapped=0x112efe08) returned 1
	[0243.398] GetFileType (hFile=0x254) returned 0x1
	[0243.399] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x56226, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0243.399] CloseHandle (hObject=0x254) returned 1
	[0243.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.tl30z")) returned 0x20
	[0243.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0243.850] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0243.905] SetEvent (hEvent=0x240) returned 1
	[0243.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20
	[0243.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf", dwFileAttributes=0x20) returned 1
	[0243.906] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.tl30z"), dwFlags=0x1) returned 1
	[0244.748] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0244.754] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0244.754] ReadFile (in: hFile=0x21c, lpBuffer=0x11492000, nNumberOfBytesToRead=0xba44, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11492000*, lpNumberOfBytesRead=0x11286e18*=0xba44, lpOverlapped=0x0) returned 1
	[0244.763] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0244.763] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e108 | out: pbBuffer=0x1142e108) returned 1
	[0244.763] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11408902 | out: pbBuffer=0x11408902) returned 1
	[0244.763] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114089d4 | out: pbBuffer=0x114089d4) returned 1
	[0244.764] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0244.768] SetEvent (hEvent=0x284) returned 1
	[0244.768] GetFileType (hFile=0x21c) returned 0x1
	[0244.768] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.769] WriteFile (in: hFile=0x21c, lpBuffer=0x11172000*, nNumberOfBytesToWrite=0xba44, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11172000*, lpNumberOfBytesWritten=0x112f5dfc*=0xba44, lpOverlapped=0x112f5e08) returned 1
	[0244.769] GetFileType (hFile=0x21c) returned 0x1
	[0244.770] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xba44, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.770] GetFileType (hFile=0x21c) returned 0x1
	[0244.770] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.771] WriteFile (in: hFile=0x21c, lpBuffer=0x11240a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11240a80*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0244.775] GetFileType (hFile=0x21c) returned 0x1
	[0244.775] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xba44, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.775] CloseHandle (hObject=0x21c) returned 1
	[0244.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.tl30z")) returned 0x20
	[0244.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.tl30z", dwFileAttributes=0x21) returned 1
	[0244.810] WriteFile (in: hFile=0x250, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1bf4, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x112f1bf4*=0x292, lpOverlapped=0x0) returned 1
	[0244.813] CloseHandle (hObject=0x250) returned 1
	[0244.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x95647d76, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x95647d76, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0245.875] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a)) returned 1
	[0245.875] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0245.876] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f21f0
	[0245.876] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0245.876] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1
	[0245.876] FindNextFileW (in: hFindFile=0x7f21f0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0245.877] FindClose (in: hFindFile=0x7f21f0 | out: hFindFile=0x7f21f0) returned 1
	[0245.877] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0245.877] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x112f18c0 | out: lpFindFileData=0x112f18c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f22b0
	[0245.908] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0245.936] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0246.021] SwitchToThread () returned 1
	[0246.042] SetEvent (hEvent=0x1b0) returned 1
	[0246.042] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0246.058] SetEvent (hEvent=0x248) returned 1
	[0246.058] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0246.469] SetEvent (hEvent=0x1b0) returned 1
	[0246.469] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0246.526] SetEvent (hEvent=0x1b0) returned 1
	[0246.526] SetEvent (hEvent=0x134) returned 1
	[0246.527] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x112f193c | out: lpFindFileData=0x112f193c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0246.527] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x112f193c | out: lpFindFileData=0x112f193c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1
	[0246.527] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x112f193c | out: lpFindFileData=0x112f193c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1
	[0246.527] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x112f193c | out: lpFindFileData=0x112f193c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1
	[0246.527] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x112f193c | out: lpFindFileData=0x112f193c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1
	[0246.527] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x112f193c | out: lpFindFileData=0x112f193c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1
	[0246.527] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x112f193c | out: lpFindFileData=0x112f193c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1
	[0246.527] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x112f193c | out: lpFindFileData=0x112f193c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1
	[0246.527] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x112f193c | out: lpFindFileData=0x112f193c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1
	[0246.527] FindNextFileW (in: hFindFile=0x7f22b0, lpFindFileData=0x112f193c | out: lpFindFileData=0x112f193c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0246.528] FindClose (in: hFindFile=0x7f22b0 | out: hFindFile=0x7f22b0) returned 1
	[0246.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), fInfoLevelId=0x0, lpFileInformation=0x112f1994 | out: lpFileInformation=0x112f1994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1
	[0246.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x112f1994 | out: lpFileInformation=0x112f1994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1
	[0246.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x112f1994 | out: lpFileInformation=0x112f1994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1
	[0246.534] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x112f1994 | out: lpFileInformation=0x112f1994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1
	[0246.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x112f1994 | out: lpFileInformation=0x112f1994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1
	[0246.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x112f1994 | out: lpFileInformation=0x112f1994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1
	[0246.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x112f1994 | out: lpFileInformation=0x112f1994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1
	[0246.751] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0246.773] SetEvent (hEvent=0x248) returned 1
	[0246.773] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0246.951] SetEvent (hEvent=0x248) returned 1
	[0246.951] SetEvent (hEvent=0x234) returned 1
	[0246.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20
	[0246.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x20) returned 1
	[0246.953] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.tl30z"), dwFlags=0x1) returned 1
	[0248.571] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0248.578] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0248.578] ReadFile (in: hFile=0x1d0, lpBuffer=0x1136e370, nNumberOfBytesToRead=0xa8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1136e370*, lpNumberOfBytesRead=0x11287e18*=0xa8, lpOverlapped=0x0) returned 1
	[0248.582] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2a0 | out: pbBuffer=0x1142e2a0) returned 1
	[0248.582] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11393202 | out: pbBuffer=0x11393202) returned 1
	[0248.582] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2d0 | out: pbBuffer=0x1142e2d0) returned 1
	[0248.582] GetFileType (hFile=0x1d0) returned 0x1
	[0248.582] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.583] WriteFile (in: hFile=0x1d0, lpBuffer=0x1135d200*, nNumberOfBytesToWrite=0xa8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135d200*, lpNumberOfBytesWritten=0x1102bdfc*=0xa8, lpOverlapped=0x1102be08) returned 1
	[0248.583] GetFileType (hFile=0x1d0) returned 0x1
	[0248.583] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.583] GetFileType (hFile=0x1d0) returned 0x1
	[0248.583] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.583] WriteFile (in: hFile=0x1d0, lpBuffer=0x113d4000*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d4000*, lpNumberOfBytesWritten=0x1102bdfc*=0x221, lpOverlapped=0x1102be08) returned 1
	[0248.586] GetFileType (hFile=0x1d0) returned 0x1
	[0248.586] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.587] CloseHandle (hObject=0x1d0) returned 1
	[0248.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.tl30z")) returned 0x20
	[0248.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.tl30z", dwFileAttributes=0x21) returned 1
	[0248.596] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0248.855] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0248.952] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0249.126] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0249.183] SetEvent (hEvent=0x1f0) returned 1
	[0249.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 0x20
	[0249.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc", dwFileAttributes=0x20) returned 1
	[0249.184] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.tl30z"), dwFlags=0x1) returned 1
	[0249.456] SetEvent (hEvent=0x150) returned 1
	[0249.456] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0249.487] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0249.487] ReadFile (in: hFile=0x1d0, lpBuffer=0x113e8000, nNumberOfBytesToRead=0x4e8d, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x113e8000*, lpNumberOfBytesRead=0x1131ae18*=0x4e8d, lpOverlapped=0x0) returned 1
	[0249.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e120 | out: pbBuffer=0x1142e120) returned 1
	[0249.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1106a902 | out: pbBuffer=0x1106a902) returned 1
	[0249.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1106a91e | out: pbBuffer=0x1106a91e) returned 1
	[0249.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1106a9d7 | out: pbBuffer=0x1106a9d7) returned 1
	[0249.529] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e150 | out: pbBuffer=0x1142e150) returned 1
	[0249.529] GetFileType (hFile=0x1d0) returned 0x1
	[0249.530] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0249.530] WriteFile (in: hFile=0x1d0, lpBuffer=0x11338000*, nNumberOfBytesToWrite=0x4e8d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11338000*, lpNumberOfBytesWritten=0x11031dfc*=0x4e8d, lpOverlapped=0x11031e08) returned 1
	[0249.530] GetFileType (hFile=0x1d0) returned 0x1
	[0249.530] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x4e8d, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0249.531] GetFileType (hFile=0x1d0) returned 0x1
	[0249.531] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0249.531] WriteFile (in: hFile=0x1d0, lpBuffer=0x11284e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11284e00*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0249.531] GetFileType (hFile=0x1d0) returned 0x1
	[0249.531] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x4e8d, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0249.532] CloseHandle (hObject=0x1d0) returned 1
	[0249.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.tl30z")) returned 0x20
	[0249.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.tl30z", dwFileAttributes=0x21) returned 1
	[0249.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0x20
	[0249.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", dwFileAttributes=0x20) returned 1
	[0249.610] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.tl30z"), dwFlags=0x1) returned 1
	[0249.946] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0249.962] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0249.962] ReadFile (in: hFile=0x204, lpBuffer=0x11322000, nNumberOfBytesToRead=0xdafa, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11322000*, lpNumberOfBytesRead=0x1131ae18*=0xdafa, lpOverlapped=0x0) returned 1
	[0249.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e520 | out: pbBuffer=0x1104e520) returned 1
	[0249.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e518 | out: pbBuffer=0x1104e518) returned 1
	[0249.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137f402 | out: pbBuffer=0x1137f402) returned 1
	[0249.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137f4bd | out: pbBuffer=0x1137f4bd) returned 1
	[0249.972] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e550 | out: pbBuffer=0x1104e550) returned 1
	[0249.973] GetFileType (hFile=0x204) returned 0x1
	[0249.973] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0249.973] WriteFile (in: hFile=0x204, lpBuffer=0x11476000*, nNumberOfBytesToWrite=0xdafa, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11476000*, lpNumberOfBytesWritten=0x112f5dfc*=0xdafa, lpOverlapped=0x112f5e08) returned 1
	[0249.974] GetFileType (hFile=0x204) returned 0x1
	[0249.974] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xdafa, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0249.974] GetFileType (hFile=0x204) returned 0x1
	[0249.975] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0249.975] WriteFile (in: hFile=0x204, lpBuffer=0x11059880*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11059880*, lpNumberOfBytesWritten=0x112f5dfc*=0x23c, lpOverlapped=0x112f5e08) returned 1
	[0249.981] GetFileType (hFile=0x204) returned 0x1
	[0249.981] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xdafa, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0249.981] CloseHandle (hObject=0x204) returned 1
	[0250.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.tl30z")) returned 0x20
	[0250.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0250.044] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0250.149] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0250.290] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0250.324] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0250.427] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0250.498] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0250.512] SetEvent (hEvent=0x234) returned 1
	[0250.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 0x20
	[0250.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template", dwFileAttributes=0x20) returned 1
	[0250.513] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.tl30z"), dwFlags=0x1) returned 1
	[0250.762] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0250.773] SetEvent (hEvent=0x1f0) returned 1
	[0250.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 0x20
	[0250.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar", dwFileAttributes=0x20) returned 1
	[0250.774] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.tl30z"), dwFlags=0x1) returned 1
	[0250.939] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0250.943] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0250.943] ReadFile (in: hFile=0x1fc, lpBuffer=0x110f4180, nNumberOfBytesToRead=0x17d, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x110f4180*, lpNumberOfBytesRead=0x1128be18*=0x17d, lpOverlapped=0x0) returned 1
	[0250.947] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e530 | out: pbBuffer=0x1104e530) returned 1
	[0250.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e528 | out: pbBuffer=0x1104e528) returned 1
	[0250.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11345302 | out: pbBuffer=0x11345302) returned 1
	[0250.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11345344 | out: pbBuffer=0x11345344) returned 1
	[0250.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134539b | out: pbBuffer=0x1134539b) returned 1
	[0250.948] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113453b8 | out: pbBuffer=0x113453b8) returned 1
	[0250.949] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e560 | out: pbBuffer=0x1104e560) returned 1
	[0250.949] GetFileType (hFile=0x1fc) returned 0x1
	[0250.949] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.949] WriteFile (in: hFile=0x1fc, lpBuffer=0x11407200*, nNumberOfBytesToWrite=0x17d, lpNumberOfBytesWritten=0x110fddfc, lpOverlapped=0x110fde08 | out: lpBuffer=0x11407200*, lpNumberOfBytesWritten=0x110fddfc*=0x17d, lpOverlapped=0x110fde08) returned 1
	[0250.950] GetFileType (hFile=0x1fc) returned 0x1
	[0250.950] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x17d, lpNewFilePointer=0x0, dwMoveMethod=0x110fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.950] GetFileType (hFile=0x1fc) returned 0x1
	[0250.950] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.950] WriteFile (in: hFile=0x1fc, lpBuffer=0x11261c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x110fddfc, lpOverlapped=0x110fde08 | out: lpBuffer=0x11261c00*, lpNumberOfBytesWritten=0x110fddfc*=0x22d, lpOverlapped=0x110fde08) returned 1
	[0250.954] GetFileType (hFile=0x1fc) returned 0x1
	[0250.954] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x17d, lpNewFilePointer=0x0, dwMoveMethod=0x110fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.954] CloseHandle (hObject=0x1fc) returned 1
	[0250.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.tl30z")) returned 0x20
	[0250.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0251.302] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0253.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0253.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0253.898] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0254.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0254.892] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0254.892] ReadFile (in: hFile=0x1f4, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x4bfb, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x1131de18*=0x4bfb, lpOverlapped=0x0) returned 1
	[0254.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0254.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e358 | out: pbBuffer=0x1104e358) returned 1
	[0254.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e1202 | out: pbBuffer=0x113e1202) returned 1
	[0254.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e1232 | out: pbBuffer=0x113e1232) returned 1
	[0254.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0254.905] GetFileType (hFile=0x1f4) returned 0x1
	[0254.905] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.905] WriteFile (in: hFile=0x1f4, lpBuffer=0x112fc000*, nNumberOfBytesToWrite=0x4bfb, lpNumberOfBytesWritten=0x110afdfc, lpOverlapped=0x110afe08 | out: lpBuffer=0x112fc000*, lpNumberOfBytesWritten=0x110afdfc*=0x4bfb, lpOverlapped=0x110afe08) returned 1
	[0254.905] GetFileType (hFile=0x1f4) returned 0x1
	[0254.905] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x4bfb, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.906] GetFileType (hFile=0x1f4) returned 0x1
	[0254.906] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.906] WriteFile (in: hFile=0x1f4, lpBuffer=0x1131f880*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x110afdfc, lpOverlapped=0x110afe08 | out: lpBuffer=0x1131f880*, lpNumberOfBytesWritten=0x110afdfc*=0x239, lpOverlapped=0x110afe08) returned 1
	[0254.906] GetFileType (hFile=0x1f4) returned 0x1
	[0254.907] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x4bfb, lpNewFilePointer=0x0, dwMoveMethod=0x110afde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.907] CloseHandle (hObject=0x1f4) returned 1
	[0254.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0254.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0254.932] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0254.952] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0254.981] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0255.048] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0255.175] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0255.196] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0255.342] SetEvent (hEvent=0x210) returned 1
	[0255.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0255.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0255.343] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0255.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0255.929] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0255.929] ReadFile (in: hFile=0x224, lpBuffer=0x1110a000, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1110a000*, lpNumberOfBytesRead=0x11288e18*=0x4ed, lpOverlapped=0x0) returned 1
	[0255.941] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0255.941] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112eb202 | out: pbBuffer=0x112eb202) returned 1
	[0255.942] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112eb207 | out: pbBuffer=0x112eb207) returned 1
	[0255.942] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112eb244 | out: pbBuffer=0x112eb244) returned 1
	[0255.943] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0255.943] SetEvent (hEvent=0x218) returned 1
	[0255.943] GetFileType (hFile=0x224) returned 0x1
	[0255.943] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.943] WriteFile (in: hFile=0x224, lpBuffer=0x11117000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x11f6bdfc, lpOverlapped=0x11f6be08 | out: lpBuffer=0x11117000*, lpNumberOfBytesWritten=0x11f6bdfc*=0x4ed, lpOverlapped=0x11f6be08) returned 1
	[0255.944] GetFileType (hFile=0x224) returned 0x1
	[0255.944] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.944] GetFileType (hFile=0x224) returned 0x1
	[0255.944] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.944] WriteFile (in: hFile=0x224, lpBuffer=0x1135b880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11f6bdfc, lpOverlapped=0x11f6be08 | out: lpBuffer=0x1135b880*, lpNumberOfBytesWritten=0x11f6bdfc*=0x22d, lpOverlapped=0x11f6be08) returned 1
	[0255.945] GetFileType (hFile=0x224) returned 0x1
	[0255.945] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11f6bde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.945] CloseHandle (hObject=0x224) returned 1
	[0255.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0255.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0255.970] SwitchToThread () returned 1
	[0255.980] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0255.988] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0256.079] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0256.197] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0256.250] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0256.378] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0256.400] SetEvent (hEvent=0x1e8) returned 1
	[0256.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0256.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0256.401] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0256.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0256.901] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0256.901] ReadFile (in: hFile=0x1d8, lpBuffer=0x110c0500, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x110c0500*, lpNumberOfBytesRead=0x11023e18*=0x4ed, lpOverlapped=0x0) returned 1
	[0256.905] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332970 | out: pbBuffer=0x11332970) returned 1
	[0256.905] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332968 | out: pbBuffer=0x11332968) returned 1
	[0256.905] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11103d02 | out: pbBuffer=0x11103d02) returned 1
	[0256.906] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113329a0 | out: pbBuffer=0x113329a0) returned 1
	[0256.906] GetFileType (hFile=0x1d8) returned 0x1
	[0256.906] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.906] WriteFile (in: hFile=0x1d8, lpBuffer=0x11fb9000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x11fb3dfc, lpOverlapped=0x11fb3e08 | out: lpBuffer=0x11fb9000*, lpNumberOfBytesWritten=0x11fb3dfc*=0x4ed, lpOverlapped=0x11fb3e08) returned 1
	[0256.906] GetFileType (hFile=0x1d8) returned 0x1
	[0256.907] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.907] GetFileType (hFile=0x1d8) returned 0x1
	[0256.907] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.907] WriteFile (in: hFile=0x1d8, lpBuffer=0x11299500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11fb3dfc, lpOverlapped=0x11fb3e08 | out: lpBuffer=0x11299500*, lpNumberOfBytesWritten=0x11fb3dfc*=0x22d, lpOverlapped=0x11fb3e08) returned 1
	[0256.908] GetFileType (hFile=0x1d8) returned 0x1
	[0256.908] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11fb3de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.908] CloseHandle (hObject=0x1d8) returned 1
	[0256.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0256.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0257.027] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0257.035] SetEvent (hEvent=0x234) returned 1
	[0257.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0257.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0257.036] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0257.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0257.512] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0257.513] ReadFile (in: hFile=0x1fc, lpBuffer=0x111c6000, nNumberOfBytesToRead=0xeaa, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111c6000*, lpNumberOfBytesRead=0x11023e18*=0xeaa, lpOverlapped=0x0) returned 1
	[0257.526] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e7a0 | out: pbBuffer=0x1104e7a0) returned 1
	[0257.526] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e798 | out: pbBuffer=0x1104e798) returned 1
	[0257.526] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11fd5002 | out: pbBuffer=0x11fd5002) returned 1
	[0257.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e7d0 | out: pbBuffer=0x1104e7d0) returned 1
	[0257.527] GetFileType (hFile=0x1fc) returned 0x1
	[0257.527] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.527] WriteFile (in: hFile=0x1fc, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0xeaa, lpNumberOfBytesWritten=0x11f69dfc, lpOverlapped=0x11f69e08 | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x11f69dfc*=0xeaa, lpOverlapped=0x11f69e08) returned 1
	[0257.528] GetFileType (hFile=0x1fc) returned 0x1
	[0257.528] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xeaa, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.528] GetFileType (hFile=0x1fc) returned 0x1
	[0257.528] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.528] WriteFile (in: hFile=0x1fc, lpBuffer=0x111da380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11f69dfc, lpOverlapped=0x11f69e08 | out: lpBuffer=0x111da380*, lpNumberOfBytesWritten=0x11f69dfc*=0x22d, lpOverlapped=0x11f69e08) returned 1
	[0257.529] GetFileType (hFile=0x1fc) returned 0x1
	[0257.529] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xeaa, lpNewFilePointer=0x0, dwMoveMethod=0x11f69de0 | out: lpNewFilePointer=0x0) returned 1
	[0257.529] CloseHandle (hObject=0x1fc) returned 1
	[0257.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0257.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0257.601] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0257.607] SetEvent (hEvent=0x234) returned 1
	[0257.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0257.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0257.608] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0257.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0258.078] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0258.078] ReadFile (in: hFile=0x1fc, lpBuffer=0x11186500, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11186500*, lpNumberOfBytesRead=0x11023e18*=0x4ed, lpOverlapped=0x0) returned 1
	[0258.088] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0258.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f9802 | out: pbBuffer=0x111f9802) returned 1
	[0258.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f98c3 | out: pbBuffer=0x111f98c3) returned 1
	[0258.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0258.089] GetFileType (hFile=0x1fc) returned 0x1
	[0258.089] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.090] WriteFile (in: hFile=0x1fc, lpBuffer=0x11393000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x113d7dfc, lpOverlapped=0x113d7e08 | out: lpBuffer=0x11393000*, lpNumberOfBytesWritten=0x113d7dfc*=0x4ed, lpOverlapped=0x113d7e08) returned 1
	[0258.090] GetFileType (hFile=0x1fc) returned 0x1
	[0258.090] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.090] GetFileType (hFile=0x1fc) returned 0x1
	[0258.090] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.090] WriteFile (in: hFile=0x1fc, lpBuffer=0x11205880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113d7dfc, lpOverlapped=0x113d7e08 | out: lpBuffer=0x11205880*, lpNumberOfBytesWritten=0x113d7dfc*=0x22d, lpOverlapped=0x113d7e08) returned 1
	[0258.091] GetFileType (hFile=0x1fc) returned 0x1
	[0258.091] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x113d7de0 | out: lpNewFilePointer=0x0) returned 1
	[0258.091] CloseHandle (hObject=0x1fc) returned 1
	[0258.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0258.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0258.246] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0258.451] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0259.058] SetEvent (hEvent=0x210) returned 1
	[0259.059] SetEvent (hEvent=0x234) returned 1
	[0259.059] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0259.074] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0259.074] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0259.083] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0259.083] SetEvent (hEvent=0x210) returned 1
	[0259.083] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0259.113] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0259.113] SwitchToThread () returned 1
	[0259.120] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0259.252] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0259.478] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0259.614] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0259.776] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0259.814] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0259.847] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0259.949] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0259.980] SetEvent (hEvent=0x118) returned 1
	[0259.980] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 0x220
	[0259.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", dwFileAttributes=0x220) returned 1
	[0259.981] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.tl30z"), dwFlags=0x1) returned 1
	[0260.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0260.324] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0260.324] ReadFile (in: hFile=0x288, lpBuffer=0x110a2000, nNumberOfBytesToRead=0xd9c, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x110a2000*, lpNumberOfBytesRead=0x11023e18*=0xd9c, lpOverlapped=0x0) returned 1
	[0260.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112969b0 | out: pbBuffer=0x112969b0) returned 1
	[0260.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112969a8 | out: pbBuffer=0x112969a8) returned 1
	[0260.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113dfb02 | out: pbBuffer=0x113dfb02) returned 1
	[0260.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113dfb3e | out: pbBuffer=0x113dfb3e) returned 1
	[0260.332] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112969e0 | out: pbBuffer=0x112969e0) returned 1
	[0260.332] GetFileType (hFile=0x288) returned 0x1
	[0260.332] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.332] WriteFile (in: hFile=0x288, lpBuffer=0x110b8000*, nNumberOfBytesToWrite=0xd9c, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x110b8000*, lpNumberOfBytesWritten=0x112bfdfc*=0xd9c, lpOverlapped=0x112bfe08) returned 1
	[0260.333] GetFileType (hFile=0x288) returned 0x1
	[0260.333] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xd9c, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.333] GetFileType (hFile=0x288) returned 0x1
	[0260.333] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.333] WriteFile (in: hFile=0x288, lpBuffer=0x113c1180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x113c1180*, lpNumberOfBytesWritten=0x112bfdfc*=0x22d, lpOverlapped=0x112bfe08) returned 1
	[0260.334] GetFileType (hFile=0x288) returned 0x1
	[0260.334] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xd9c, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.334] CloseHandle (hObject=0x288) returned 1
	[0260.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.tl30z")) returned 0x220
	[0260.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0260.356] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0260.432] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0260.463] SetEvent (hEvent=0x118) returned 1
	[0260.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 0x220
	[0260.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", dwFileAttributes=0x220) returned 1
	[0260.464] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.tl30z"), dwFlags=0x1) returned 1
	[0260.896] SetEvent (hEvent=0x150) returned 1
	[0260.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0260.899] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0260.900] ReadFile (in: hFile=0x1d8, lpBuffer=0x11142000, nNumberOfBytesToRead=0x296f, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11142000*, lpNumberOfBytesRead=0x11286e18*=0x296f, lpOverlapped=0x0) returned 1
	[0260.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332970 | out: pbBuffer=0x11332970) returned 1
	[0260.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11152602 | out: pbBuffer=0x11152602) returned 1
	[0260.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1115268f | out: pbBuffer=0x1115268f) returned 1
	[0260.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111526c8 | out: pbBuffer=0x111526c8) returned 1
	[0260.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111526cb | out: pbBuffer=0x111526cb) returned 1
	[0260.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111526cb | out: pbBuffer=0x111526cb) returned 1
	[0260.905] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113329a0 | out: pbBuffer=0x113329a0) returned 1
	[0260.906] GetFileType (hFile=0x1d8) returned 0x1
	[0260.906] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.906] WriteFile (in: hFile=0x1d8, lpBuffer=0x1116c000*, nNumberOfBytesToWrite=0x296f, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1116c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x296f, lpOverlapped=0x1102be08) returned 1
	[0260.906] GetFileType (hFile=0x1d8) returned 0x1
	[0260.907] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x296f, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.907] GetFileType (hFile=0x1d8) returned 0x1
	[0260.907] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.907] WriteFile (in: hFile=0x1d8, lpBuffer=0x11170000*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11170000*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0260.907] GetFileType (hFile=0x1d8) returned 0x1
	[0260.908] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x296f, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.908] CloseHandle (hObject=0x1d8) returned 1
	[0260.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.tl30z")) returned 0x220
	[0260.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0260.917] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0260.929] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0260.957] SetEvent (hEvent=0x1e8) returned 1
	[0260.957] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0261.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 0x220
	[0261.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF", dwFileAttributes=0x220) returned 1
	[0261.021] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.tl30z"), dwFlags=0x1) returned 1
	[0261.323] SetEvent (hEvent=0x150) returned 1
	[0261.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0261.326] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0261.327] ReadFile (in: hFile=0x1fc, lpBuffer=0x11076480, nNumberOfBytesToRead=0x47a, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11076480*, lpNumberOfBytesRead=0x11428e18*=0x47a, lpOverlapped=0x0) returned 1
	[0261.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0261.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11374802 | out: pbBuffer=0x11374802) returned 1
	[0261.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113748b4 | out: pbBuffer=0x113748b4) returned 1
	[0261.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0261.331] GetFileType (hFile=0x1fc) returned 0x1
	[0261.332] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.332] WriteFile (in: hFile=0x1fc, lpBuffer=0x11060000*, nNumberOfBytesToWrite=0x47a, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x11060000*, lpNumberOfBytesWritten=0x112bfdfc*=0x47a, lpOverlapped=0x112bfe08) returned 1
	[0261.332] GetFileType (hFile=0x1fc) returned 0x1
	[0261.332] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x47a, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.332] GetFileType (hFile=0x1fc) returned 0x1
	[0261.332] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.333] WriteFile (in: hFile=0x1fc, lpBuffer=0x112c4a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x112c4a80*, lpNumberOfBytesWritten=0x112bfdfc*=0x22a, lpOverlapped=0x112bfe08) returned 1
	[0261.333] GetFileType (hFile=0x1fc) returned 0x1
	[0261.333] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x47a, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.333] CloseHandle (hObject=0x1fc) returned 1
	[0261.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.tl30z")) returned 0x220
	[0261.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0261.352] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0261.362] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0261.371] SetEvent (hEvent=0x248) returned 1
	[0261.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 0x220
	[0261.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", dwFileAttributes=0x220) returned 1
	[0261.373] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.tl30z"), dwFlags=0x1) returned 1
	[0261.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0261.650] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0261.650] ReadFile (in: hFile=0x1fc, lpBuffer=0x1121a000, nNumberOfBytesToRead=0x131e, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1121a000*, lpNumberOfBytesRead=0x11423e18*=0x131e, lpOverlapped=0x0) returned 1
	[0261.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0261.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6558 | out: pbBuffer=0x113e6558) returned 1
	[0261.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11184802 | out: pbBuffer=0x11184802) returned 1
	[0261.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111848e6 | out: pbBuffer=0x111848e6) returned 1
	[0261.655] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0261.655] GetFileType (hFile=0x1fc) returned 0x1
	[0261.655] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.655] WriteFile (in: hFile=0x1fc, lpBuffer=0x111a8000*, nNumberOfBytesToWrite=0x131e, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x111a8000*, lpNumberOfBytesWritten=0x112bfdfc*=0x131e, lpOverlapped=0x112bfe08) returned 1
	[0261.656] GetFileType (hFile=0x1fc) returned 0x1
	[0261.656] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x131e, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.656] GetFileType (hFile=0x1fc) returned 0x1
	[0261.656] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.656] WriteFile (in: hFile=0x1fc, lpBuffer=0x112a7500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x112a7500*, lpNumberOfBytesWritten=0x112bfdfc*=0x22d, lpOverlapped=0x112bfe08) returned 1
	[0261.656] GetFileType (hFile=0x1fc) returned 0x1
	[0261.657] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x131e, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.657] CloseHandle (hObject=0x1fc) returned 1
	[0261.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.tl30z")) returned 0x220
	[0261.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0261.668] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0261.722] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0261.805] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0261.882] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0261.906] SetEvent (hEvent=0x248) returned 1
	[0261.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 0x220
	[0261.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", dwFileAttributes=0x220) returned 1
	[0261.907] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.tl30z"), dwFlags=0x1) returned 1
	[0262.296] SetEvent (hEvent=0x150) returned 1
	[0262.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0262.300] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0262.301] ReadFile (in: hFile=0x224, lpBuffer=0x11432000, nNumberOfBytesToRead=0xd32, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11432000*, lpNumberOfBytesRead=0x11286e18*=0xd32, lpOverlapped=0x0) returned 1
	[0262.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0262.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c9302 | out: pbBuffer=0x110c9302) returned 1
	[0262.308] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2c0 | out: pbBuffer=0x1140f2c0) returned 1
	[0262.309] GetFileType (hFile=0x224) returned 0x1
	[0262.309] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.309] WriteFile (in: hFile=0x224, lpBuffer=0x1144a000*, nNumberOfBytesToWrite=0xd32, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x1144a000*, lpNumberOfBytesWritten=0x112b9dfc*=0xd32, lpOverlapped=0x112b9e08) returned 1
	[0262.309] GetFileType (hFile=0x224) returned 0x1
	[0262.309] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xd32, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.310] GetFileType (hFile=0x224) returned 0x1
	[0262.310] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.310] WriteFile (in: hFile=0x224, lpBuffer=0x1123b880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x1123b880*, lpNumberOfBytesWritten=0x112b9dfc*=0x22a, lpOverlapped=0x112b9e08) returned 1
	[0262.310] GetFileType (hFile=0x224) returned 0x1
	[0262.310] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xd32, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.310] CloseHandle (hObject=0x224) returned 1
	[0262.316] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.tl30z")) returned 0x220
	[0262.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0262.335] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0262.394] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0262.424] SetEvent (hEvent=0x1b0) returned 1
	[0262.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 0x220
	[0262.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", dwFileAttributes=0x220) returned 1
	[0262.425] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0262.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0262.726] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0262.726] SetEvent (hEvent=0x248) returned 1
	[0262.726] ReadFile (in: hFile=0x1d4, lpBuffer=0x11162000, nNumberOfBytesToRead=0x5062, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11162000*, lpNumberOfBytesRead=0x11286e18*=0x5062, lpOverlapped=0x0) returned 1
	[0262.737] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f700 | out: pbBuffer=0x1140f700) returned 1
	[0262.738] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1110d302 | out: pbBuffer=0x1110d302) returned 1
	[0262.738] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1110d387 | out: pbBuffer=0x1110d387) returned 1
	[0262.738] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f730 | out: pbBuffer=0x1140f730) returned 1
	[0262.738] GetFileType (hFile=0x1d4) returned 0x1
	[0262.739] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.739] WriteFile (in: hFile=0x1d4, lpBuffer=0x11c06000*, nNumberOfBytesToWrite=0x5062, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11c06000*, lpNumberOfBytesWritten=0x112b9dfc*=0x5062, lpOverlapped=0x112b9e08) returned 1
	[0262.739] GetFileType (hFile=0x1d4) returned 0x1
	[0262.739] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5062, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.739] GetFileType (hFile=0x1d4) returned 0x1
	[0262.739] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.740] WriteFile (in: hFile=0x1d4, lpBuffer=0x11bdc380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11bdc380*, lpNumberOfBytesWritten=0x112b9dfc*=0x227, lpOverlapped=0x112b9e08) returned 1
	[0262.740] GetFileType (hFile=0x1d4) returned 0x1
	[0262.740] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5062, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.740] CloseHandle (hObject=0x1d4) returned 1
	[0262.744] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0262.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.tl30z")) returned 0x220
	[0262.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0262.839] SwitchToThread () returned 1
	[0262.848] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0263.046] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0263.185] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0263.246] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0263.353] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0263.465] SetEvent (hEvent=0x218) returned 1
	[0263.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 0x220
	[0263.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", dwFileAttributes=0x220) returned 1
	[0263.466] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0263.704] SetEvent (hEvent=0x150) returned 1
	[0263.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0263.711] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0263.711] ReadFile (in: hFile=0x1fc, lpBuffer=0x110d6000, nNumberOfBytesToRead=0x66dc, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110d6000*, lpNumberOfBytesRead=0x11423e18*=0x66dc, lpOverlapped=0x0) returned 1
	[0263.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0263.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f418 | out: pbBuffer=0x1140f418) returned 1
	[0263.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11275c02 | out: pbBuffer=0x11275c02) returned 1
	[0263.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f450 | out: pbBuffer=0x1140f450) returned 1
	[0263.795] GetFileType (hFile=0x1fc) returned 0x1
	[0263.796] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.796] WriteFile (in: hFile=0x1fc, lpBuffer=0x111cc000*, nNumberOfBytesToWrite=0x66dc, lpNumberOfBytesWritten=0x1110bdfc, lpOverlapped=0x1110be08 | out: lpBuffer=0x111cc000*, lpNumberOfBytesWritten=0x1110bdfc*=0x66dc, lpOverlapped=0x1110be08) returned 1
	[0263.796] GetFileType (hFile=0x1fc) returned 0x1
	[0263.797] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x66dc, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.797] GetFileType (hFile=0x1fc) returned 0x1
	[0263.797] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.797] WriteFile (in: hFile=0x1fc, lpBuffer=0x11256e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1110bdfc, lpOverlapped=0x1110be08 | out: lpBuffer=0x11256e00*, lpNumberOfBytesWritten=0x1110bdfc*=0x233, lpOverlapped=0x1110be08) returned 1
	[0263.798] GetFileType (hFile=0x1fc) returned 0x1
	[0263.798] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x66dc, lpNewFilePointer=0x0, dwMoveMethod=0x1110bde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.798] CloseHandle (hObject=0x1fc) returned 1
	[0263.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.tl30z")) returned 0x220
	[0263.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0263.821] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0263.828] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0263.959] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0263.976] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0263.995] SetEvent (hEvent=0x218) returned 1
	[0263.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 0x220
	[0263.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", dwFileAttributes=0x220) returned 1
	[0263.996] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0264.367] SetEvent (hEvent=0x150) returned 1
	[0264.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0264.371] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0264.371] ReadFile (in: hFile=0x1fc, lpBuffer=0x111fe000, nNumberOfBytesToRead=0x1ccc, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111fe000*, lpNumberOfBytesRead=0x11023e18*=0x1ccc, lpOverlapped=0x0) returned 1
	[0264.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296110 | out: pbBuffer=0x11296110) returned 1
	[0264.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11296108 | out: pbBuffer=0x11296108) returned 1
	[0264.378] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1120c802 | out: pbBuffer=0x1120c802) returned 1
	[0264.378] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296140 | out: pbBuffer=0x11296140) returned 1
	[0264.378] GetFileType (hFile=0x1fc) returned 0x1
	[0264.379] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0264.379] WriteFile (in: hFile=0x1fc, lpBuffer=0x1144a000*, nNumberOfBytesToWrite=0x1ccc, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x1144a000*, lpNumberOfBytesWritten=0x112b9dfc*=0x1ccc, lpOverlapped=0x112b9e08) returned 1
	[0264.379] GetFileType (hFile=0x1fc) returned 0x1
	[0264.379] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0264.380] GetFileType (hFile=0x1fc) returned 0x1
	[0264.380] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0264.380] WriteFile (in: hFile=0x1fc, lpBuffer=0x1121ea80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x1121ea80*, lpNumberOfBytesWritten=0x112b9dfc*=0x22d, lpOverlapped=0x112b9e08) returned 1
	[0264.380] GetFileType (hFile=0x1fc) returned 0x1
	[0264.380] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0264.380] CloseHandle (hObject=0x1fc) returned 1
	[0264.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.tl30z")) returned 0x220
	[0264.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0264.399] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0264.483] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0264.514] SetEvent (hEvent=0x118) returned 1
	[0264.514] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0264.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 0x220
	[0264.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", dwFileAttributes=0x220) returned 1
	[0264.580] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0264.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0264.937] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0264.937] ReadFile (in: hFile=0x288, lpBuffer=0x1135a000, nNumberOfBytesToRead=0x928, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1135a000*, lpNumberOfBytesRead=0x11425e18*=0x928, lpOverlapped=0x0) returned 1
	[0264.941] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0264.942] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261d02 | out: pbBuffer=0x11261d02) returned 1
	[0264.942] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0264.942] GetFileType (hFile=0x288) returned 0x1
	[0264.943] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.943] WriteFile (in: hFile=0x288, lpBuffer=0x11361000*, nNumberOfBytesToWrite=0x928, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x11361000*, lpNumberOfBytesWritten=0x112bfdfc*=0x928, lpOverlapped=0x112bfe08) returned 1
	[0264.943] GetFileType (hFile=0x288) returned 0x1
	[0264.943] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x928, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.944] GetFileType (hFile=0x288) returned 0x1
	[0264.944] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.944] WriteFile (in: hFile=0x288, lpBuffer=0x1105c700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x1105c700*, lpNumberOfBytesWritten=0x112bfdfc*=0x224, lpOverlapped=0x112bfe08) returned 1
	[0264.944] GetFileType (hFile=0x288) returned 0x1
	[0264.944] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x928, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.944] CloseHandle (hObject=0x288) returned 1
	[0264.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.tl30z")) returned 0x220
	[0264.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0264.955] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0264.967] SetEvent (hEvent=0x1b0) returned 1
	[0264.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 0x220
	[0264.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", dwFileAttributes=0x220) returned 1
	[0264.969] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0265.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0265.871] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0265.871] ReadFile (in: hFile=0x1d8, lpBuffer=0x112fd300, nNumberOfBytesToRead=0x1204, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x112fd300*, lpNumberOfBytesRead=0x11425e18*=0x1204, lpOverlapped=0x0) returned 1
	[0265.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112963f0 | out: pbBuffer=0x112963f0) returned 1
	[0265.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112963e8 | out: pbBuffer=0x112963e8) returned 1
	[0265.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a3d02 | out: pbBuffer=0x112a3d02) returned 1
	[0265.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a3d0a | out: pbBuffer=0x112a3d0a) returned 1
	[0265.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296420 | out: pbBuffer=0x11296420) returned 1
	[0265.877] GetFileType (hFile=0x1d8) returned 0x1
	[0265.877] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.877] WriteFile (in: hFile=0x1d8, lpBuffer=0x110b6000*, nNumberOfBytesToWrite=0x1204, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x110b6000*, lpNumberOfBytesWritten=0x112b9dfc*=0x1204, lpOverlapped=0x112b9e08) returned 1
	[0265.878] GetFileType (hFile=0x1d8) returned 0x1
	[0265.878] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1204, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.878] GetFileType (hFile=0x1d8) returned 0x1
	[0265.878] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.878] WriteFile (in: hFile=0x1d8, lpBuffer=0x110a4700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x110a4700*, lpNumberOfBytesWritten=0x112b9dfc*=0x221, lpOverlapped=0x112b9e08) returned 1
	[0265.879] GetFileType (hFile=0x1d8) returned 0x1
	[0265.879] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1204, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.879] CloseHandle (hObject=0x1d8) returned 1
	[0265.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.tl30z")) returned 0x220
	[0265.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0265.891] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0265.900] SetEvent (hEvent=0x1b0) returned 1
	[0265.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 0x220
	[0265.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", dwFileAttributes=0x220) returned 1
	[0265.901] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0266.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.209] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0266.209] ReadFile (in: hFile=0x1d8, lpBuffer=0x1112c000, nNumberOfBytesToRead=0x1e7c, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1112c000*, lpNumberOfBytesRead=0x11425e18*=0x1e7c, lpOverlapped=0x0) returned 1
	[0266.216] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0266.216] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0266.216] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134fd02 | out: pbBuffer=0x1134fd02) returned 1
	[0266.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134fd47 | out: pbBuffer=0x1134fd47) returned 1
	[0266.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134fd88 | out: pbBuffer=0x1134fd88) returned 1
	[0266.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134fd8e | out: pbBuffer=0x1134fd8e) returned 1
	[0266.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0266.217] GetFileType (hFile=0x1d8) returned 0x1
	[0266.217] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.218] WriteFile (in: hFile=0x1d8, lpBuffer=0x11152000*, nNumberOfBytesToWrite=0x1e7c, lpNumberOfBytesWritten=0x11193dfc, lpOverlapped=0x11193e08 | out: lpBuffer=0x11152000*, lpNumberOfBytesWritten=0x11193dfc*=0x1e7c, lpOverlapped=0x11193e08) returned 1
	[0266.218] GetFileType (hFile=0x1d8) returned 0x1
	[0266.218] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1e7c, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.218] GetFileType (hFile=0x1d8) returned 0x1
	[0266.218] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.218] WriteFile (in: hFile=0x1d8, lpBuffer=0x1113c700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11193dfc, lpOverlapped=0x11193e08 | out: lpBuffer=0x1113c700*, lpNumberOfBytesWritten=0x11193dfc*=0x233, lpOverlapped=0x11193e08) returned 1
	[0266.219] GetFileType (hFile=0x1d8) returned 0x1
	[0266.219] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1e7c, lpNewFilePointer=0x0, dwMoveMethod=0x11193de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.219] CloseHandle (hObject=0x1d8) returned 1
	[0266.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.tl30z")) returned 0x220
	[0266.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0266.226] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0266.236] SetEvent (hEvent=0x1b0) returned 1
	[0266.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 0x220
	[0266.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", dwFileAttributes=0x220) returned 1
	[0266.236] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0266.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.587] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0266.587] ReadFile (in: hFile=0x1d8, lpBuffer=0x111d0d80, nNumberOfBytesToRead=0xc9c, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x111d0d80*, lpNumberOfBytesRead=0x11425e18*=0xc9c, lpOverlapped=0x0) returned 1
	[0266.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296b10 | out: pbBuffer=0x11296b10) returned 1
	[0266.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11296b08 | out: pbBuffer=0x11296b08) returned 1
	[0266.593] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111db102 | out: pbBuffer=0x111db102) returned 1
	[0266.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296b40 | out: pbBuffer=0x11296b40) returned 1
	[0266.594] GetFileType (hFile=0x1d8) returned 0x1
	[0266.594] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.594] WriteFile (in: hFile=0x1d8, lpBuffer=0x11218000*, nNumberOfBytesToWrite=0xc9c, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11218000*, lpNumberOfBytesWritten=0x112b9dfc*=0xc9c, lpOverlapped=0x112b9e08) returned 1
	[0266.595] GetFileType (hFile=0x1d8) returned 0x1
	[0266.595] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc9c, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.595] GetFileType (hFile=0x1d8) returned 0x1
	[0266.595] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.595] WriteFile (in: hFile=0x1d8, lpBuffer=0x111ece00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x111ece00*, lpNumberOfBytesWritten=0x112b9dfc*=0x22a, lpOverlapped=0x112b9e08) returned 1
	[0266.596] GetFileType (hFile=0x1d8) returned 0x1
	[0266.596] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc9c, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.596] CloseHandle (hObject=0x1d8) returned 1
	[0266.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.tl30z")) returned 0x220
	[0266.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0266.603] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0266.677] SetEvent (hEvent=0x1b0) returned 1
	[0266.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x220
	[0266.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", dwFileAttributes=0x220) returned 1
	[0266.678] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.156] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0267.156] ReadFile (in: hFile=0x1d8, lpBuffer=0x111b4000, nNumberOfBytesToRead=0x1306, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x111b4000*, lpNumberOfBytesRead=0x11425e18*=0x1306, lpOverlapped=0x0) returned 1
	[0267.166] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296100 | out: pbBuffer=0x11296100) returned 1
	[0267.166] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11390802 | out: pbBuffer=0x11390802) returned 1
	[0267.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296130 | out: pbBuffer=0x11296130) returned 1
	[0267.167] GetFileType (hFile=0x1d8) returned 0x1
	[0267.167] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.168] WriteFile (in: hFile=0x1d8, lpBuffer=0x11064000*, nNumberOfBytesToWrite=0x1306, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x11064000*, lpNumberOfBytesWritten=0x11373dfc*=0x1306, lpOverlapped=0x11373e08) returned 1
	[0267.168] GetFileType (hFile=0x1d8) returned 0x1
	[0267.168] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1306, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.168] GetFileType (hFile=0x1d8) returned 0x1
	[0267.168] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.168] WriteFile (in: hFile=0x1d8, lpBuffer=0x113f2a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x113f2a80*, lpNumberOfBytesWritten=0x11373dfc*=0x227, lpOverlapped=0x11373e08) returned 1
	[0267.169] GetFileType (hFile=0x1d8) returned 0x1
	[0267.169] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1306, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.169] CloseHandle (hObject=0x1d8) returned 1
	[0267.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.tl30z")) returned 0x220
	[0267.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.264] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.294] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.412] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.456] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.498] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.542] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.583] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.650] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.672] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.738] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.777] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.809] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.872] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.884] SetEvent (hEvent=0x1b0) returned 1
	[0267.885] SetEvent (hEvent=0x1f0) returned 1
	[0267.885] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0267.893] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.893] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0267.896] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.896] SetEvent (hEvent=0x1b0) returned 1
	[0267.896] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0267.901] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0267.901] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0268.389] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0268.393] SetEvent (hEvent=0x210) returned 1
	[0268.393] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0268.398] SetEvent (hEvent=0x210) returned 1
	[0268.398] SwitchToThread () returned 1
	[0268.401] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0268.411] SetEvent (hEvent=0x234) returned 1
	[0268.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x220
	[0268.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", dwFileAttributes=0x220) returned 1
	[0268.412] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.568] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0268.568] ReadFile (in: hFile=0x1d4, lpBuffer=0x113d6800, nNumberOfBytesToRead=0x4780, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x113d6800*, lpNumberOfBytesRead=0x1128ce18*=0x4780, lpOverlapped=0x0) returned 1
	[0268.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3e0 | out: pbBuffer=0x1140f3e0) returned 1
	[0268.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3d8 | out: pbBuffer=0x1140f3d8) returned 1
	[0268.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267c02 | out: pbBuffer=0x11267c02) returned 1
	[0268.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0268.575] GetFileType (hFile=0x1d4) returned 0x1
	[0268.575] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.576] WriteFile (in: hFile=0x1d4, lpBuffer=0x113ba000*, nNumberOfBytesToWrite=0x4780, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113ba000*, lpNumberOfBytesWritten=0x11031dfc*=0x4780, lpOverlapped=0x11031e08) returned 1
	[0268.576] GetFileType (hFile=0x1d4) returned 0x1
	[0268.576] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4780, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.576] GetFileType (hFile=0x1d4) returned 0x1
	[0268.576] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.577] WriteFile (in: hFile=0x1d4, lpBuffer=0x11bc8a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bc8a80*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0268.577] GetFileType (hFile=0x1d4) returned 0x1
	[0268.577] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4780, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.577] CloseHandle (hObject=0x1d4) returned 1
	[0268.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.tl30z")) returned 0x220
	[0268.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.589] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0268.593] SetEvent (hEvent=0x234) returned 1
	[0268.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x220
	[0268.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF", dwFileAttributes=0x220) returned 1
	[0268.594] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.774] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0268.774] ReadFile (in: hFile=0x1d4, lpBuffer=0x11bda800, nNumberOfBytesToRead=0x3f4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11bda800*, lpNumberOfBytesRead=0x1128ce18*=0x3f4, lpOverlapped=0x0) returned 1
	[0268.777] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f830 | out: pbBuffer=0x1140f830) returned 1
	[0268.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f3b02 | out: pbBuffer=0x112f3b02) returned 1
	[0268.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f860 | out: pbBuffer=0x1140f860) returned 1
	[0268.778] GetFileType (hFile=0x1d4) returned 0x1
	[0268.778] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.779] WriteFile (in: hFile=0x1d4, lpBuffer=0x1129a000*, nNumberOfBytesToWrite=0x3f4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1129a000*, lpNumberOfBytesWritten=0x11031dfc*=0x3f4, lpOverlapped=0x11031e08) returned 1
	[0268.779] GetFileType (hFile=0x1d4) returned 0x1
	[0268.779] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3f4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.779] GetFileType (hFile=0x1d4) returned 0x1
	[0268.779] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.780] WriteFile (in: hFile=0x1d4, lpBuffer=0x1118f500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1118f500*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0268.780] GetFileType (hFile=0x1d4) returned 0x1
	[0268.780] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3f4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.780] CloseHandle (hObject=0x1d4) returned 1
	[0268.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.tl30z")) returned 0x220
	[0268.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.793] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0268.921] SetEvent (hEvent=0x234) returned 1
	[0268.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x220
	[0268.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF", dwFileAttributes=0x220) returned 1
	[0268.921] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0269.074] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0269.074] ReadFile (in: hFile=0x1d4, lpBuffer=0x112cb200, nNumberOfBytesToRead=0x5ec, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112cb200*, lpNumberOfBytesRead=0x1128ce18*=0x5ec, lpOverlapped=0x0) returned 1
	[0269.078] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296370 | out: pbBuffer=0x11296370) returned 1
	[0269.078] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11296368 | out: pbBuffer=0x11296368) returned 1
	[0269.078] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bc802 | out: pbBuffer=0x110bc802) returned 1
	[0269.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112963a0 | out: pbBuffer=0x112963a0) returned 1
	[0269.079] GetFileType (hFile=0x1d4) returned 0x1
	[0269.079] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.079] WriteFile (in: hFile=0x1d4, lpBuffer=0x1143a000*, nNumberOfBytesToWrite=0x5ec, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x1143a000*, lpNumberOfBytesWritten=0x1138ddfc*=0x5ec, lpOverlapped=0x1138de08) returned 1
	[0269.080] GetFileType (hFile=0x1d4) returned 0x1
	[0269.080] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5ec, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.080] GetFileType (hFile=0x1d4) returned 0x1
	[0269.080] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.080] WriteFile (in: hFile=0x1d4, lpBuffer=0x11434380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x11434380*, lpNumberOfBytesWritten=0x1138ddfc*=0x22d, lpOverlapped=0x1138de08) returned 1
	[0269.081] GetFileType (hFile=0x1d4) returned 0x1
	[0269.081] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5ec, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.081] CloseHandle (hObject=0x1d4) returned 1
	[0269.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.tl30z")) returned 0x220
	[0269.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.091] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0269.113] SetEvent (hEvent=0x234) returned 1
	[0269.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x220
	[0269.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", dwFileAttributes=0x220) returned 1
	[0269.113] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0269.276] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0269.277] ReadFile (in: hFile=0x1d4, lpBuffer=0x110f6000, nNumberOfBytesToRead=0x386c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110f6000*, lpNumberOfBytesRead=0x1128ce18*=0x386c, lpOverlapped=0x0) returned 1
	[0269.281] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140ff70 | out: pbBuffer=0x1140ff70) returned 1
	[0269.281] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e7002 | out: pbBuffer=0x111e7002) returned 1
	[0269.281] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140ffa0 | out: pbBuffer=0x1140ffa0) returned 1
	[0269.282] GetFileType (hFile=0x1d4) returned 0x1
	[0269.282] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.282] WriteFile (in: hFile=0x1d4, lpBuffer=0x11112000*, nNumberOfBytesToWrite=0x386c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11112000*, lpNumberOfBytesWritten=0x11031dfc*=0x386c, lpOverlapped=0x11031e08) returned 1
	[0269.282] GetFileType (hFile=0x1d4) returned 0x1
	[0269.283] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x386c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.283] GetFileType (hFile=0x1d4) returned 0x1
	[0269.283] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.283] WriteFile (in: hFile=0x1d4, lpBuffer=0x11465c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11465c00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0269.283] GetFileType (hFile=0x1d4) returned 0x1
	[0269.283] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x386c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.283] CloseHandle (hObject=0x1d4) returned 1
	[0269.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.tl30z")) returned 0x220
	[0269.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.292] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0269.302] SetEvent (hEvent=0x218) returned 1
	[0269.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x220
	[0269.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF", dwFileAttributes=0x220) returned 1
	[0269.303] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.499] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0269.499] ReadFile (in: hFile=0x1d8, lpBuffer=0x1110c000, nNumberOfBytesToRead=0x9fc, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1110c000*, lpNumberOfBytesRead=0x1128ce18*=0x9fc, lpOverlapped=0x0) returned 1
	[0269.502] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0269.502] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e7c02 | out: pbBuffer=0x111e7c02) returned 1
	[0269.502] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e7c1b | out: pbBuffer=0x111e7c1b) returned 1
	[0269.503] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0269.503] GetFileType (hFile=0x1d8) returned 0x1
	[0269.503] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.503] WriteFile (in: hFile=0x1d8, lpBuffer=0x11390000*, nNumberOfBytesToWrite=0x9fc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11390000*, lpNumberOfBytesWritten=0x11031dfc*=0x9fc, lpOverlapped=0x11031e08) returned 1
	[0269.503] GetFileType (hFile=0x1d8) returned 0x1
	[0269.504] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9fc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.504] GetFileType (hFile=0x1d8) returned 0x1
	[0269.504] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.504] WriteFile (in: hFile=0x1d8, lpBuffer=0x111ea700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111ea700*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0269.504] GetFileType (hFile=0x1d8) returned 0x1
	[0269.504] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9fc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.504] CloseHandle (hObject=0x1d8) returned 1
	[0269.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.tl30z")) returned 0x220
	[0269.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.512] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0269.519] SetEvent (hEvent=0x210) returned 1
	[0269.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x220
	[0269.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF", dwFileAttributes=0x220) returned 1
	[0269.520] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.647] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0269.647] ReadFile (in: hFile=0x1d8, lpBuffer=0x11396000, nNumberOfBytesToRead=0xec4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x1128ce18*=0xec4, lpOverlapped=0x0) returned 1
	[0269.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f560 | out: pbBuffer=0x1140f560) returned 1
	[0269.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f558 | out: pbBuffer=0x1140f558) returned 1
	[0269.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a0602 | out: pbBuffer=0x113a0602) returned 1
	[0269.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a060e | out: pbBuffer=0x113a060e) returned 1
	[0269.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a063f | out: pbBuffer=0x113a063f) returned 1
	[0269.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a06d0 | out: pbBuffer=0x113a06d0) returned 1
	[0269.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f590 | out: pbBuffer=0x1140f590) returned 1
	[0269.653] GetFileType (hFile=0x1d8) returned 0x1
	[0269.653] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.653] WriteFile (in: hFile=0x1d8, lpBuffer=0x112e0000*, nNumberOfBytesToWrite=0xec4, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x112e0000*, lpNumberOfBytesWritten=0x113afdfc*=0xec4, lpOverlapped=0x113afe08) returned 1
	[0269.653] GetFileType (hFile=0x1d8) returned 0x1
	[0269.654] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xec4, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.654] GetFileType (hFile=0x1d8) returned 0x1
	[0269.654] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.654] WriteFile (in: hFile=0x1d8, lpBuffer=0x111b5500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x111b5500*, lpNumberOfBytesWritten=0x113afdfc*=0x22a, lpOverlapped=0x113afe08) returned 1
	[0269.659] GetFileType (hFile=0x1d8) returned 0x1
	[0269.659] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xec4, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.659] CloseHandle (hObject=0x1d8) returned 1
	[0269.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf.tl30z")) returned 0x220
	[0269.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.670] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0269.683] SetEvent (hEvent=0x210) returned 1
	[0269.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x220
	[0269.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", dwFileAttributes=0x220) returned 1
	[0269.684] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.870] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0269.871] ReadFile (in: hFile=0x1d8, lpBuffer=0x110ea000, nNumberOfBytesToRead=0x1b54, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110ea000*, lpNumberOfBytesRead=0x1128ce18*=0x1b54, lpOverlapped=0x0) returned 1
	[0269.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6480 | out: pbBuffer=0x113e6480) returned 1
	[0269.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6478 | out: pbBuffer=0x113e6478) returned 1
	[0269.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cd102 | out: pbBuffer=0x113cd102) returned 1
	[0269.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cd13a | out: pbBuffer=0x113cd13a) returned 1
	[0269.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e64b0 | out: pbBuffer=0x113e64b0) returned 1
	[0269.877] GetFileType (hFile=0x1d8) returned 0x1
	[0269.877] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.877] WriteFile (in: hFile=0x1d8, lpBuffer=0x111ca000*, nNumberOfBytesToWrite=0x1b54, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111ca000*, lpNumberOfBytesWritten=0x11031dfc*=0x1b54, lpOverlapped=0x11031e08) returned 1
	[0269.878] GetFileType (hFile=0x1d8) returned 0x1
	[0269.878] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b54, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.878] GetFileType (hFile=0x1d8) returned 0x1
	[0269.878] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.878] WriteFile (in: hFile=0x1d8, lpBuffer=0x112fee00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112fee00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0269.878] GetFileType (hFile=0x1d8) returned 0x1
	[0269.879] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b54, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.879] CloseHandle (hObject=0x1d8) returned 1
	[0269.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf.tl30z")) returned 0x220
	[0269.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.889] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0269.896] SetEvent (hEvent=0x210) returned 1
	[0269.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x220
	[0269.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", dwFileAttributes=0x220) returned 1
	[0269.897] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.108] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0270.108] ReadFile (in: hFile=0x1d8, lpBuffer=0x112b0000, nNumberOfBytesToRead=0x1870, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112b0000*, lpNumberOfBytesRead=0x1128ce18*=0x1870, lpOverlapped=0x0) returned 1
	[0270.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fc90 | out: pbBuffer=0x1140fc90) returned 1
	[0270.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140fc88 | out: pbBuffer=0x1140fc88) returned 1
	[0270.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111dfb02 | out: pbBuffer=0x111dfb02) returned 1
	[0270.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111dfb1d | out: pbBuffer=0x111dfb1d) returned 1
	[0270.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111dfbdb | out: pbBuffer=0x111dfbdb) returned 1
	[0270.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fcc0 | out: pbBuffer=0x1140fcc0) returned 1
	[0270.114] GetFileType (hFile=0x1d8) returned 0x1
	[0270.114] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.114] WriteFile (in: hFile=0x1d8, lpBuffer=0x11212000*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x113b1dfc, lpOverlapped=0x113b1e08 | out: lpBuffer=0x11212000*, lpNumberOfBytesWritten=0x113b1dfc*=0x1870, lpOverlapped=0x113b1e08) returned 1
	[0270.114] GetFileType (hFile=0x1d8) returned 0x1
	[0270.115] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1870, lpNewFilePointer=0x0, dwMoveMethod=0x113b1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.115] GetFileType (hFile=0x1d8) returned 0x1
	[0270.115] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.115] WriteFile (in: hFile=0x1d8, lpBuffer=0x11214000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113b1dfc, lpOverlapped=0x113b1e08 | out: lpBuffer=0x11214000*, lpNumberOfBytesWritten=0x113b1dfc*=0x227, lpOverlapped=0x113b1e08) returned 1
	[0270.115] GetFileType (hFile=0x1d8) returned 0x1
	[0270.115] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1870, lpNewFilePointer=0x0, dwMoveMethod=0x113b1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.115] CloseHandle (hObject=0x1d8) returned 1
	[0270.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf.tl30z")) returned 0x220
	[0270.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.128] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0270.131] SetEvent (hEvent=0x248) returned 1
	[0270.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x220
	[0270.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF", dwFileAttributes=0x220) returned 1
	[0270.131] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.290] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0270.290] ReadFile (in: hFile=0x1d8, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x532, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x1128ce18*=0x532, lpOverlapped=0x0) returned 1
	[0270.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0270.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137f302 | out: pbBuffer=0x1137f302) returned 1
	[0270.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0270.295] GetFileType (hFile=0x1d8) returned 0x1
	[0270.295] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.296] WriteFile (in: hFile=0x1d8, lpBuffer=0x112e3000*, nNumberOfBytesToWrite=0x532, lpNumberOfBytesWritten=0x113f1dfc, lpOverlapped=0x113f1e08 | out: lpBuffer=0x112e3000*, lpNumberOfBytesWritten=0x113f1dfc*=0x532, lpOverlapped=0x113f1e08) returned 1
	[0270.296] GetFileType (hFile=0x1d8) returned 0x1
	[0270.296] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x532, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.296] GetFileType (hFile=0x1d8) returned 0x1
	[0270.296] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.296] WriteFile (in: hFile=0x1d8, lpBuffer=0x11365880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113f1dfc, lpOverlapped=0x113f1e08 | out: lpBuffer=0x11365880*, lpNumberOfBytesWritten=0x113f1dfc*=0x227, lpOverlapped=0x113f1e08) returned 1
	[0270.297] GetFileType (hFile=0x1d8) returned 0x1
	[0270.297] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x532, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.297] CloseHandle (hObject=0x1d8) returned 1
	[0270.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf.tl30z")) returned 0x220
	[0270.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.301] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0270.320] SetEvent (hEvent=0x218) returned 1
	[0270.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x220
	[0270.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF", dwFileAttributes=0x220) returned 1
	[0270.321] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.475] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0270.476] ReadFile (in: hFile=0x1d8, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x876, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x1128ce18*=0x876, lpOverlapped=0x0) returned 1
	[0270.485] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66c0 | out: pbBuffer=0x113e66c0) returned 1
	[0270.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e5302 | out: pbBuffer=0x110e5302) returned 1
	[0270.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e53bc | out: pbBuffer=0x110e53bc) returned 1
	[0270.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e53c4 | out: pbBuffer=0x110e53c4) returned 1
	[0270.486] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66f0 | out: pbBuffer=0x113e66f0) returned 1
	[0270.486] GetFileType (hFile=0x1d8) returned 0x1
	[0270.487] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.487] WriteFile (in: hFile=0x1d8, lpBuffer=0x112fe000*, nNumberOfBytesToWrite=0x876, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112fe000*, lpNumberOfBytesWritten=0x11031dfc*=0x876, lpOverlapped=0x11031e08) returned 1
	[0270.487] GetFileType (hFile=0x1d8) returned 0x1
	[0270.487] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x876, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.487] GetFileType (hFile=0x1d8) returned 0x1
	[0270.487] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.488] WriteFile (in: hFile=0x1d8, lpBuffer=0x112f4700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112f4700*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0270.488] GetFileType (hFile=0x1d8) returned 0x1
	[0270.488] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x876, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.488] CloseHandle (hObject=0x1d8) returned 1
	[0270.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf.tl30z")) returned 0x220
	[0270.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.498] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0270.508] SetEvent (hEvent=0x218) returned 1
	[0270.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x220
	[0270.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF", dwFileAttributes=0x220) returned 1
	[0270.508] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.802] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0270.802] ReadFile (in: hFile=0x1d8, lpBuffer=0x11208000, nNumberOfBytesToRead=0xc20, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11208000*, lpNumberOfBytesRead=0x1128ce18*=0xc20, lpOverlapped=0x0) returned 1
	[0270.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11452270 | out: pbBuffer=0x11452270) returned 1
	[0270.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11452268 | out: pbBuffer=0x11452268) returned 1
	[0270.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c5302 | out: pbBuffer=0x111c5302) returned 1
	[0270.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c530e | out: pbBuffer=0x111c530e) returned 1
	[0270.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c532d | out: pbBuffer=0x111c532d) returned 1
	[0270.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c53e4 | out: pbBuffer=0x111c53e4) returned 1
	[0270.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x114522a0 | out: pbBuffer=0x114522a0) returned 1
	[0270.807] GetFileType (hFile=0x1d8) returned 0x1
	[0270.807] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.808] WriteFile (in: hFile=0x1d8, lpBuffer=0x11102000*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x1146fdfc, lpOverlapped=0x1146fe08 | out: lpBuffer=0x11102000*, lpNumberOfBytesWritten=0x1146fdfc*=0xc20, lpOverlapped=0x1146fe08) returned 1
	[0270.808] GetFileType (hFile=0x1d8) returned 0x1
	[0270.808] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc20, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.808] GetFileType (hFile=0x1d8) returned 0x1
	[0270.808] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.808] WriteFile (in: hFile=0x1d8, lpBuffer=0x111d9880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1146fdfc, lpOverlapped=0x1146fe08 | out: lpBuffer=0x111d9880*, lpNumberOfBytesWritten=0x1146fdfc*=0x221, lpOverlapped=0x1146fe08) returned 1
	[0270.809] GetFileType (hFile=0x1d8) returned 0x1
	[0270.809] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc20, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.809] CloseHandle (hObject=0x1d8) returned 1
	[0270.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf.tl30z")) returned 0x220
	[0270.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.824] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0270.835] SetEvent (hEvent=0x218) returned 1
	[0270.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x220
	[0270.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF", dwFileAttributes=0x220) returned 1
	[0270.836] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.979] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0270.979] ReadFile (in: hFile=0x1d8, lpBuffer=0x1117c000, nNumberOfBytesToRead=0xdc4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1117c000*, lpNumberOfBytesRead=0x1128ce18*=0xdc4, lpOverlapped=0x0) returned 1
	[0270.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324e0 | out: pbBuffer=0x113324e0) returned 1
	[0270.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324d8 | out: pbBuffer=0x113324d8) returned 1
	[0270.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c9c02 | out: pbBuffer=0x113c9c02) returned 1
	[0270.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c9ca2 | out: pbBuffer=0x113c9ca2) returned 1
	[0270.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0270.987] SetEvent (hEvent=0x218) returned 1
	[0270.987] GetFileType (hFile=0x1d8) returned 0x1
	[0270.987] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.988] WriteFile (in: hFile=0x1d8, lpBuffer=0x111a6000*, nNumberOfBytesToWrite=0xdc4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111a6000*, lpNumberOfBytesWritten=0x11031dfc*=0xdc4, lpOverlapped=0x11031e08) returned 1
	[0270.988] GetFileType (hFile=0x1d8) returned 0x1
	[0270.988] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xdc4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.988] GetFileType (hFile=0x1d8) returned 0x1
	[0270.988] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.989] WriteFile (in: hFile=0x1d8, lpBuffer=0x1118c700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1118c700*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0270.989] GetFileType (hFile=0x1d8) returned 0x1
	[0270.989] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xdc4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.989] CloseHandle (hObject=0x1d8) returned 1
	[0271.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf.tl30z")) returned 0x220
	[0271.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.005] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.010] SetEvent (hEvent=0x218) returned 1
	[0271.011] SetEvent (hEvent=0x248) returned 1
	[0271.011] SwitchToThread () returned 1
	[0271.015] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.045] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.086] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.127] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.168] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.328] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.363] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.434] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.469] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.509] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.561] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.594] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.626] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.658] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.743] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.785] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.818] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.851] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.879] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.903] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.943] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0271.979] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0272.014] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0272.041] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0272.059] SetEvent (hEvent=0x218) returned 1
	[0272.060] SetEvent (hEvent=0x1f0) returned 1
	[0272.060] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0272.065] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0272.065] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0272.068] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0272.068] SetEvent (hEvent=0x218) returned 1
	[0272.068] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0272.077] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0272.078] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0272.752] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0272.760] SetEvent (hEvent=0x1b0) returned 1
	[0272.760] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0272.765] SetEvent (hEvent=0x1b0) returned 1
	[0272.766] SwitchToThread () returned 1
	[0272.769] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0272.774] SetEvent (hEvent=0x218) returned 1
	[0272.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x220
	[0272.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF", dwFileAttributes=0x220) returned 1
	[0272.775] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.952] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0272.952] ReadFile (in: hFile=0x1d8, lpBuffer=0x112f8000, nNumberOfBytesToRead=0x39e4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112f8000*, lpNumberOfBytesRead=0x1128ce18*=0x39e4, lpOverlapped=0x0) returned 1
	[0272.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0272.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324e8 | out: pbBuffer=0x113324e8) returned 1
	[0272.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261d02 | out: pbBuffer=0x11261d02) returned 1
	[0272.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0272.962] GetFileType (hFile=0x1d8) returned 0x1
	[0272.963] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.963] WriteFile (in: hFile=0x1d8, lpBuffer=0x1117e000*, nNumberOfBytesToWrite=0x39e4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1117e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x39e4, lpOverlapped=0x1102be08) returned 1
	[0272.963] GetFileType (hFile=0x1d8) returned 0x1
	[0272.963] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x39e4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.963] GetFileType (hFile=0x1d8) returned 0x1
	[0272.964] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.964] WriteFile (in: hFile=0x1d8, lpBuffer=0x11300a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11300a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0272.964] GetFileType (hFile=0x1d8) returned 0x1
	[0272.964] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x39e4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.964] CloseHandle (hObject=0x1d8) returned 1
	[0272.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf.tl30z")) returned 0x220
	[0272.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.968] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0272.978] SetEvent (hEvent=0x218) returned 1
	[0272.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x220
	[0272.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF", dwFileAttributes=0x220) returned 1
	[0272.979] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.125] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0273.125] ReadFile (in: hFile=0x1d8, lpBuffer=0x112f4400, nNumberOfBytesToRead=0xadc, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112f4400*, lpNumberOfBytesRead=0x1128ce18*=0xadc, lpOverlapped=0x0) returned 1
	[0273.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6030 | out: pbBuffer=0x113e6030) returned 1
	[0273.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ad102 | out: pbBuffer=0x112ad102) returned 1
	[0273.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ad13e | out: pbBuffer=0x112ad13e) returned 1
	[0273.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ad16e | out: pbBuffer=0x112ad16e) returned 1
	[0273.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ad185 | out: pbBuffer=0x112ad185) returned 1
	[0273.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ad1a7 | out: pbBuffer=0x112ad1a7) returned 1
	[0273.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6060 | out: pbBuffer=0x113e6060) returned 1
	[0273.132] GetFileType (hFile=0x1d8) returned 0x1
	[0273.132] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.132] WriteFile (in: hFile=0x1d8, lpBuffer=0x110ba000*, nNumberOfBytesToWrite=0xadc, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x110ba000*, lpNumberOfBytesWritten=0x112c9dfc*=0xadc, lpOverlapped=0x112c9e08) returned 1
	[0273.132] GetFileType (hFile=0x1d8) returned 0x1
	[0273.133] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xadc, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.133] GetFileType (hFile=0x1d8) returned 0x1
	[0273.133] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.133] WriteFile (in: hFile=0x1d8, lpBuffer=0x110b2380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x110b2380*, lpNumberOfBytesWritten=0x112c9dfc*=0x22d, lpOverlapped=0x112c9e08) returned 1
	[0273.133] GetFileType (hFile=0x1d8) returned 0x1
	[0273.133] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xadc, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.133] CloseHandle (hObject=0x1d8) returned 1
	[0273.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf.tl30z")) returned 0x220
	[0273.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.147] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0273.151] SetEvent (hEvent=0x218) returned 1
	[0273.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x220
	[0273.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF", dwFileAttributes=0x220) returned 1
	[0273.153] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.315] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0273.316] ReadFile (in: hFile=0x1d8, lpBuffer=0x11090900, nNumberOfBytesToRead=0x8b4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11090900*, lpNumberOfBytesRead=0x1128ce18*=0x8b4, lpOverlapped=0x0) returned 1
	[0273.321] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332c50 | out: pbBuffer=0x11332c50) returned 1
	[0273.321] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11461102 | out: pbBuffer=0x11461102) returned 1
	[0273.321] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332c80 | out: pbBuffer=0x11332c80) returned 1
	[0273.321] GetFileType (hFile=0x1d8) returned 0x1
	[0273.322] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.322] WriteFile (in: hFile=0x1d8, lpBuffer=0x1111a000*, nNumberOfBytesToWrite=0x8b4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1111a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x8b4, lpOverlapped=0x1102be08) returned 1
	[0273.322] GetFileType (hFile=0x1d8) returned 0x1
	[0273.322] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8b4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.322] GetFileType (hFile=0x1d8) returned 0x1
	[0273.322] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.323] WriteFile (in: hFile=0x1d8, lpBuffer=0x11469180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11469180*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0273.323] GetFileType (hFile=0x1d8) returned 0x1
	[0273.323] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8b4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.323] CloseHandle (hObject=0x1d8) returned 1
	[0273.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf.tl30z")) returned 0x220
	[0273.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.335] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0273.352] SetEvent (hEvent=0x218) returned 1
	[0273.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x220
	[0273.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF", dwFileAttributes=0x220) returned 1
	[0273.353] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.522] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0273.522] ReadFile (in: hFile=0x1d8, lpBuffer=0x11172000, nNumberOfBytesToRead=0x7d4, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11172000*, lpNumberOfBytesRead=0x1128ce18*=0x7d4, lpOverlapped=0x0) returned 1
	[0273.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6760 | out: pbBuffer=0x113e6760) returned 1
	[0273.528] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d8402 | out: pbBuffer=0x111d8402) returned 1
	[0273.529] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6790 | out: pbBuffer=0x113e6790) returned 1
	[0273.529] GetFileType (hFile=0x1d8) returned 0x1
	[0273.529] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.529] WriteFile (in: hFile=0x1d8, lpBuffer=0x111e2000*, nNumberOfBytesToWrite=0x7d4, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x111e2000*, lpNumberOfBytesWritten=0x112c9dfc*=0x7d4, lpOverlapped=0x112c9e08) returned 1
	[0273.530] GetFileType (hFile=0x1d8) returned 0x1
	[0273.530] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7d4, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.530] GetFileType (hFile=0x1d8) returned 0x1
	[0273.530] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.530] WriteFile (in: hFile=0x1d8, lpBuffer=0x111d6a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x111d6a80*, lpNumberOfBytesWritten=0x112c9dfc*=0x22d, lpOverlapped=0x112c9e08) returned 1
	[0273.530] GetFileType (hFile=0x1d8) returned 0x1
	[0273.530] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7d4, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.530] CloseHandle (hObject=0x1d8) returned 1
	[0273.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf.tl30z")) returned 0x220
	[0273.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.629] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0273.651] SetEvent (hEvent=0x218) returned 1
	[0273.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x220
	[0273.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF", dwFileAttributes=0x220) returned 1
	[0273.651] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.837] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0273.837] ReadFile (in: hFile=0x1d8, lpBuffer=0x1127a000, nNumberOfBytesToRead=0x70c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1127a000*, lpNumberOfBytesRead=0x1131ce18*=0x70c, lpOverlapped=0x0) returned 1
	[0273.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0273.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ea802 | out: pbBuffer=0x112ea802) returned 1
	[0273.840] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0273.840] GetFileType (hFile=0x1d8) returned 0x1
	[0273.840] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.840] WriteFile (in: hFile=0x1d8, lpBuffer=0x1122d000*, nNumberOfBytesToWrite=0x70c, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1122d000*, lpNumberOfBytesWritten=0x112c9dfc*=0x70c, lpOverlapped=0x112c9e08) returned 1
	[0273.840] GetFileType (hFile=0x1d8) returned 0x1
	[0273.840] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x70c, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.840] GetFileType (hFile=0x1d8) returned 0x1
	[0273.841] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.841] WriteFile (in: hFile=0x1d8, lpBuffer=0x1142ca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1142ca80*, lpNumberOfBytesWritten=0x112c9dfc*=0x227, lpOverlapped=0x112c9e08) returned 1
	[0273.841] GetFileType (hFile=0x1d8) returned 0x1
	[0273.841] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x70c, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.841] CloseHandle (hObject=0x1d8) returned 1
	[0273.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf.tl30z")) returned 0x220
	[0273.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.856] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0273.867] SetEvent (hEvent=0x210) returned 1
	[0273.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x220
	[0273.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF", dwFileAttributes=0x220) returned 1
	[0273.868] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.017] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0274.017] ReadFile (in: hFile=0x1d8, lpBuffer=0x1135c000, nNumberOfBytesToRead=0x5a8, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1135c000*, lpNumberOfBytesRead=0x1131ce18*=0x5a8, lpOverlapped=0x0) returned 1
	[0274.020] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0274.020] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11216502 | out: pbBuffer=0x11216502) returned 1
	[0274.020] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121650c | out: pbBuffer=0x1121650c) returned 1
	[0274.021] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0274.021] GetFileType (hFile=0x1d8) returned 0x1
	[0274.021] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.024] WriteFile (in: hFile=0x1d8, lpBuffer=0x11220000*, nNumberOfBytesToWrite=0x5a8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11220000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5a8, lpOverlapped=0x1102be08) returned 1
	[0274.025] GetFileType (hFile=0x1d8) returned 0x1
	[0274.025] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5a8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.025] GetFileType (hFile=0x1d8) returned 0x1
	[0274.025] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.025] WriteFile (in: hFile=0x1d8, lpBuffer=0x11375180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11375180*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0274.025] GetFileType (hFile=0x1d8) returned 0x1
	[0274.025] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5a8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.026] CloseHandle (hObject=0x1d8) returned 1
	[0274.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf.tl30z")) returned 0x220
	[0274.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.045] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0274.059] SetEvent (hEvent=0x210) returned 1
	[0274.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x220
	[0274.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF", dwFileAttributes=0x220) returned 1
	[0274.059] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.241] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0274.241] ReadFile (in: hFile=0x1d8, lpBuffer=0x11083400, nNumberOfBytesToRead=0x384, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11083400*, lpNumberOfBytesRead=0x1131ce18*=0x384, lpOverlapped=0x0) returned 1
	[0274.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f340 | out: pbBuffer=0x1140f340) returned 1
	[0274.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f338 | out: pbBuffer=0x1140f338) returned 1
	[0274.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e4802 | out: pbBuffer=0x113e4802) returned 1
	[0274.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e4879 | out: pbBuffer=0x113e4879) returned 1
	[0274.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f450 | out: pbBuffer=0x1140f450) returned 1
	[0274.252] GetFileType (hFile=0x1d8) returned 0x1
	[0274.252] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.252] WriteFile (in: hFile=0x1d8, lpBuffer=0x113b5000*, nNumberOfBytesToWrite=0x384, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x113b5000*, lpNumberOfBytesWritten=0x112c9dfc*=0x384, lpOverlapped=0x112c9e08) returned 1
	[0274.253] GetFileType (hFile=0x1d8) returned 0x1
	[0274.253] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x384, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.253] GetFileType (hFile=0x1d8) returned 0x1
	[0274.253] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.253] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c0000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x113c0000*, lpNumberOfBytesWritten=0x112c9dfc*=0x224, lpOverlapped=0x112c9e08) returned 1
	[0274.253] GetFileType (hFile=0x1d8) returned 0x1
	[0274.253] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x384, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.253] CloseHandle (hObject=0x1d8) returned 1
	[0274.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf.tl30z")) returned 0x220
	[0274.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.263] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0274.285] SetEvent (hEvent=0x210) returned 1
	[0274.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x220
	[0274.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF", dwFileAttributes=0x220) returned 1
	[0274.286] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0274.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.506] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0274.506] ReadFile (in: hFile=0x1d8, lpBuffer=0x11bd9400, nNumberOfBytesToRead=0x128, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11bd9400*, lpNumberOfBytesRead=0x1131ce18*=0x128, lpOverlapped=0x0) returned 1
	[0274.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b60 | out: pbBuffer=0x113e6b60) returned 1
	[0274.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6b58 | out: pbBuffer=0x113e6b58) returned 1
	[0274.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cd902 | out: pbBuffer=0x113cd902) returned 1
	[0274.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6b90 | out: pbBuffer=0x113e6b90) returned 1
	[0274.510] GetFileType (hFile=0x1d8) returned 0x1
	[0274.510] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.510] WriteFile (in: hFile=0x1d8, lpBuffer=0x1130ec00*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1130ec00*, lpNumberOfBytesWritten=0x1102bdfc*=0x128, lpOverlapped=0x1102be08) returned 1
	[0274.510] GetFileType (hFile=0x1d8) returned 0x1
	[0274.510] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.510] GetFileType (hFile=0x1d8) returned 0x1
	[0274.510] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.511] WriteFile (in: hFile=0x1d8, lpBuffer=0x111d9880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111d9880*, lpNumberOfBytesWritten=0x1102bdfc*=0x221, lpOverlapped=0x1102be08) returned 1
	[0274.512] GetFileType (hFile=0x1d8) returned 0x1
	[0274.512] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x128, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0274.513] CloseHandle (hObject=0x1d8) returned 1
	[0274.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf.tl30z")) returned 0x220
	[0274.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0274.517] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0274.529] SetEvent (hEvent=0x210) returned 1
	[0274.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid")) returned 0x220
	[0274.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID", dwFileAttributes=0x220) returned 1
	[0274.530] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0274.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0274.688] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0274.688] ReadFile (in: hFile=0x1d8, lpBuffer=0x11458000, nNumberOfBytesToRead=0x1815, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11458000*, lpNumberOfBytesRead=0x1131ce18*=0x1815, lpOverlapped=0x0) returned 1
	[0274.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fb30 | out: pbBuffer=0x1140fb30) returned 1
	[0274.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140fb28 | out: pbBuffer=0x1140fb28) returned 1
	[0274.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bfc02 | out: pbBuffer=0x112bfc02) returned 1
	[0274.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112bfcaf | out: pbBuffer=0x112bfcaf) returned 1
	[0274.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fb60 | out: pbBuffer=0x1140fb60) returned 1
	[0274.693] GetFileType (hFile=0x1d8) returned 0x1
	[0274.694] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.694] WriteFile (in: hFile=0x1d8, lpBuffer=0x11100000*, nNumberOfBytesToWrite=0x1815, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11100000*, lpNumberOfBytesWritten=0x112c9dfc*=0x1815, lpOverlapped=0x112c9e08) returned 1
	[0274.694] GetFileType (hFile=0x1d8) returned 0x1
	[0274.694] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1815, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.694] GetFileType (hFile=0x1d8) returned 0x1
	[0274.694] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.694] WriteFile (in: hFile=0x1d8, lpBuffer=0x1146c700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1146c700*, lpNumberOfBytesWritten=0x112c9dfc*=0x227, lpOverlapped=0x112c9e08) returned 1
	[0274.695] GetFileType (hFile=0x1d8) returned 0x1
	[0274.695] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1815, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0274.695] CloseHandle (hObject=0x1d8) returned 1
	[0274.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid.tl30z")) returned 0x220
	[0274.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0274.839] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0274.851] SetEvent (hEvent=0x210) returned 1
	[0274.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf")) returned 0x220
	[0274.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF", dwFileAttributes=0x220) returned 1
	[0274.852] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0275.072] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0275.072] ReadFile (in: hFile=0x1d8, lpBuffer=0x1117c000, nNumberOfBytesToRead=0x3670, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1117c000*, lpNumberOfBytesRead=0x1131ce18*=0x3670, lpOverlapped=0x0) returned 1
	[0275.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e7280 | out: pbBuffer=0x113e7280) returned 1
	[0275.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11150d02 | out: pbBuffer=0x11150d02) returned 1
	[0275.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11150d64 | out: pbBuffer=0x11150d64) returned 1
	[0275.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e72b0 | out: pbBuffer=0x113e72b0) returned 1
	[0275.084] SetEvent (hEvent=0x210) returned 1
	[0275.084] GetFileType (hFile=0x1d8) returned 0x1
	[0275.084] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.085] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bee000*, nNumberOfBytesToWrite=0x3670, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bee000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3670, lpOverlapped=0x1102be08) returned 1
	[0275.085] GetFileType (hFile=0x1d8) returned 0x1
	[0275.085] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3670, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.085] GetFileType (hFile=0x1d8) returned 0x1
	[0275.085] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.085] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bf2000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bf2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0275.086] GetFileType (hFile=0x1d8) returned 0x1
	[0275.086] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3670, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.086] CloseHandle (hObject=0x1d8) returned 1
	[0275.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf.tl30z")) returned 0x220
	[0275.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.108] SwitchToThread () returned 1
	[0275.115] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.135] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.178] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.223] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.283] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.373] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.417] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.462] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.510] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.576] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.618] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.669] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.749] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.837] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.867] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0275.897] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0276.005] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0276.013] SetEvent (hEvent=0x118) returned 1
	[0276.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x220
	[0276.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF", dwFileAttributes=0x220) returned 1
	[0276.013] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.192] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0276.193] ReadFile (in: hFile=0x224, lpBuffer=0x110e8000, nNumberOfBytesToRead=0x17b4, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110e8000*, lpNumberOfBytesRead=0x11423e18*=0x17b4, lpOverlapped=0x0) returned 1
	[0276.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0276.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63f8 | out: pbBuffer=0x113e63f8) returned 1
	[0276.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11091d02 | out: pbBuffer=0x11091d02) returned 1
	[0276.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11091de6 | out: pbBuffer=0x11091de6) returned 1
	[0276.201] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6430 | out: pbBuffer=0x113e6430) returned 1
	[0276.201] GetFileType (hFile=0x224) returned 0x1
	[0276.201] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.201] WriteFile (in: hFile=0x224, lpBuffer=0x110d6000*, nNumberOfBytesToWrite=0x17b4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110d6000*, lpNumberOfBytesWritten=0x11031dfc*=0x17b4, lpOverlapped=0x11031e08) returned 1
	[0276.202] GetFileType (hFile=0x224) returned 0x1
	[0276.202] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x17b4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.202] GetFileType (hFile=0x224) returned 0x1
	[0276.202] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.202] WriteFile (in: hFile=0x224, lpBuffer=0x1141aa80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1141aa80*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0276.203] GetFileType (hFile=0x224) returned 0x1
	[0276.203] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x17b4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.203] CloseHandle (hObject=0x224) returned 1
	[0276.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf.tl30z")) returned 0x220
	[0276.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.209] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0276.223] SetEvent (hEvent=0x218) returned 1
	[0276.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x220
	[0276.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF", dwFileAttributes=0x220) returned 1
	[0276.224] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.404] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0276.404] ReadFile (in: hFile=0x224, lpBuffer=0x110a2000, nNumberOfBytesToRead=0x1ec6, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x110a2000*, lpNumberOfBytesRead=0x11423e18*=0x1ec6, lpOverlapped=0x0) returned 1
	[0276.412] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0276.412] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e338 | out: pbBuffer=0x1104e338) returned 1
	[0276.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11315202 | out: pbBuffer=0x11315202) returned 1
	[0276.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0276.471] GetFileType (hFile=0x224) returned 0x1
	[0276.471] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.471] WriteFile (in: hFile=0x224, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x1ec6, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1139fdfc*=0x1ec6, lpOverlapped=0x1139fe08) returned 1
	[0276.472] GetFileType (hFile=0x224) returned 0x1
	[0276.472] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1ec6, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.472] GetFileType (hFile=0x224) returned 0x1
	[0276.472] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.472] WriteFile (in: hFile=0x224, lpBuffer=0x11103880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x11103880*, lpNumberOfBytesWritten=0x1139fdfc*=0x230, lpOverlapped=0x1139fe08) returned 1
	[0276.473] GetFileType (hFile=0x224) returned 0x1
	[0276.473] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1ec6, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.473] CloseHandle (hObject=0x224) returned 1
	[0276.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf.tl30z")) returned 0x220
	[0276.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.487] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0276.497] SetEvent (hEvent=0x218) returned 1
	[0276.497] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x220
	[0276.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF", dwFileAttributes=0x220) returned 1
	[0276.498] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.648] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0276.648] ReadFile (in: hFile=0x224, lpBuffer=0x111fe000, nNumberOfBytesToRead=0x13ea, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x111fe000*, lpNumberOfBytesRead=0x11423e18*=0x13ea, lpOverlapped=0x0) returned 1
	[0276.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0276.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bcbc02 | out: pbBuffer=0x11bcbc02) returned 1
	[0276.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bcbc09 | out: pbBuffer=0x11bcbc09) returned 1
	[0276.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bcbcdd | out: pbBuffer=0x11bcbcdd) returned 1
	[0276.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f430 | out: pbBuffer=0x1140f430) returned 1
	[0276.653] GetFileType (hFile=0x224) returned 0x1
	[0276.653] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.654] WriteFile (in: hFile=0x224, lpBuffer=0x11218000*, nNumberOfBytesToWrite=0x13ea, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x11218000*, lpNumberOfBytesWritten=0x113a3dfc*=0x13ea, lpOverlapped=0x113a3e08) returned 1
	[0276.654] GetFileType (hFile=0x224) returned 0x1
	[0276.654] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x13ea, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.654] GetFileType (hFile=0x224) returned 0x1
	[0276.654] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.654] WriteFile (in: hFile=0x224, lpBuffer=0x11210700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x11210700*, lpNumberOfBytesWritten=0x113a3dfc*=0x230, lpOverlapped=0x113a3e08) returned 1
	[0276.655] GetFileType (hFile=0x224) returned 0x1
	[0276.655] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x13ea, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.655] CloseHandle (hObject=0x224) returned 1
	[0276.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf.tl30z")) returned 0x220
	[0276.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.667] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0276.674] SetEvent (hEvent=0x218) returned 1
	[0276.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x220
	[0276.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF", dwFileAttributes=0x220) returned 1
	[0276.674] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.845] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0276.845] ReadFile (in: hFile=0x224, lpBuffer=0x11196000, nNumberOfBytesToRead=0x380, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11196000*, lpNumberOfBytesRead=0x11423e18*=0x380, lpOverlapped=0x0) returned 1
	[0276.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0276.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11266802 | out: pbBuffer=0x11266802) returned 1
	[0276.852] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0276.852] GetFileType (hFile=0x224) returned 0x1
	[0276.852] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.852] WriteFile (in: hFile=0x224, lpBuffer=0x11335000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11335000*, lpNumberOfBytesWritten=0x11031dfc*=0x380, lpOverlapped=0x11031e08) returned 1
	[0276.852] GetFileType (hFile=0x224) returned 0x1
	[0276.853] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.853] GetFileType (hFile=0x224) returned 0x1
	[0276.853] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.853] WriteFile (in: hFile=0x224, lpBuffer=0x11197180*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11197180*, lpNumberOfBytesWritten=0x11031dfc*=0x221, lpOverlapped=0x11031e08) returned 1
	[0276.853] GetFileType (hFile=0x224) returned 0x1
	[0276.853] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.853] CloseHandle (hObject=0x224) returned 1
	[0276.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf.tl30z")) returned 0x220
	[0276.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.860] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0276.870] SetEvent (hEvent=0x1b0) returned 1
	[0276.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf")) returned 0x220
	[0276.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF", dwFileAttributes=0x220) returned 1
	[0276.870] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0277.041] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0277.041] ReadFile (in: hFile=0x224, lpBuffer=0x113d8000, nNumberOfBytesToRead=0xa6d0, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113d8000*, lpNumberOfBytesRead=0x11423e18*=0xa6d0, lpOverlapped=0x0) returned 1
	[0277.050] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0277.050] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137dd02 | out: pbBuffer=0x1137dd02) returned 1
	[0277.050] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137dd89 | out: pbBuffer=0x1137dd89) returned 1
	[0277.051] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0277.052] GetFileType (hFile=0x224) returned 0x1
	[0277.052] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.052] WriteFile (in: hFile=0x224, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0xa6d0, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x113a1dfc*=0xa6d0, lpOverlapped=0x113a1e08) returned 1
	[0277.053] GetFileType (hFile=0x224) returned 0x1
	[0277.053] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa6d0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.053] GetFileType (hFile=0x224) returned 0x1
	[0277.053] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.053] WriteFile (in: hFile=0x224, lpBuffer=0x110d8700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x110d8700*, lpNumberOfBytesWritten=0x113a1dfc*=0x230, lpOverlapped=0x113a1e08) returned 1
	[0277.054] GetFileType (hFile=0x224) returned 0x1
	[0277.054] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa6d0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.054] CloseHandle (hObject=0x224) returned 1
	[0277.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf.tl30z")) returned 0x220
	[0277.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.100] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0277.237] SetEvent (hEvent=0x1b0) returned 1
	[0277.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf")) returned 0x220
	[0277.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF", dwFileAttributes=0x220) returned 1
	[0277.238] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0277.415] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0277.415] ReadFile (in: hFile=0x224, lpBuffer=0x112c7000, nNumberOfBytesToRead=0xf7c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112c7000*, lpNumberOfBytesRead=0x11423e18*=0xf7c, lpOverlapped=0x0) returned 1
	[0277.425] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0277.425] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332508 | out: pbBuffer=0x11332508) returned 1
	[0277.425] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123de02 | out: pbBuffer=0x1123de02) returned 1
	[0277.425] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1123dee9 | out: pbBuffer=0x1123dee9) returned 1
	[0277.426] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332540 | out: pbBuffer=0x11332540) returned 1
	[0277.426] GetFileType (hFile=0x224) returned 0x1
	[0277.426] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.426] WriteFile (in: hFile=0x224, lpBuffer=0x111e2000*, nNumberOfBytesToWrite=0xf7c, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x111e2000*, lpNumberOfBytesWritten=0x113b7dfc*=0xf7c, lpOverlapped=0x113b7e08) returned 1
	[0277.426] GetFileType (hFile=0x224) returned 0x1
	[0277.427] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xf7c, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.427] GetFileType (hFile=0x224) returned 0x1
	[0277.428] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.428] WriteFile (in: hFile=0x224, lpBuffer=0x111cc700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x111cc700*, lpNumberOfBytesWritten=0x113b7dfc*=0x233, lpOverlapped=0x113b7e08) returned 1
	[0277.429] GetFileType (hFile=0x224) returned 0x1
	[0277.429] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xf7c, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.429] CloseHandle (hObject=0x224) returned 1
	[0277.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf.tl30z")) returned 0x220
	[0277.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.442] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0277.445] SetEvent (hEvent=0x234) returned 1
	[0277.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf")) returned 0x220
	[0277.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF", dwFileAttributes=0x220) returned 1
	[0277.446] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0277.614] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0277.614] SetEvent (hEvent=0x248) returned 1
	[0277.614] ReadFile (in: hFile=0x1fc, lpBuffer=0x11164000, nNumberOfBytesToRead=0x4604, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11164000*, lpNumberOfBytesRead=0x11423e18*=0x4604, lpOverlapped=0x0) returned 1
	[0277.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332980 | out: pbBuffer=0x11332980) returned 1
	[0277.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332978 | out: pbBuffer=0x11332978) returned 1
	[0277.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ddd02 | out: pbBuffer=0x111ddd02) returned 1
	[0277.620] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113329b0 | out: pbBuffer=0x113329b0) returned 1
	[0277.620] GetFileType (hFile=0x1fc) returned 0x1
	[0277.621] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.621] WriteFile (in: hFile=0x1fc, lpBuffer=0x11bea000*, nNumberOfBytesToWrite=0x4604, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x11bea000*, lpNumberOfBytesWritten=0x113a3dfc*=0x4604, lpOverlapped=0x113a3e08) returned 1
	[0277.621] GetFileType (hFile=0x1fc) returned 0x1
	[0277.621] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4604, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.621] GetFileType (hFile=0x1fc) returned 0x1
	[0277.621] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.622] WriteFile (in: hFile=0x1fc, lpBuffer=0x11103180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x11103180*, lpNumberOfBytesWritten=0x113a3dfc*=0x224, lpOverlapped=0x113a3e08) returned 1
	[0277.622] GetFileType (hFile=0x1fc) returned 0x1
	[0277.622] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4604, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.622] CloseHandle (hObject=0x1fc) returned 1
	[0277.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf.tl30z")) returned 0x220
	[0277.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.638] SwitchToThread () returned 1
	[0277.640] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0277.659] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0277.697] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0277.726] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0277.788] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0277.825] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0277.890] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0277.998] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.028] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.081] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.160] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.206] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.239] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.290] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.338] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.386] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.430] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.554] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.592] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.623] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.661] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.700] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.713] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.734] SetEvent (hEvent=0x248) returned 1
	[0278.735] SetEvent (hEvent=0x1f0) returned 1
	[0278.735] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0278.741] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.741] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0278.745] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.745] SetEvent (hEvent=0x248) returned 1
	[0278.745] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0278.749] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.749] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.763] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.792] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.890] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.924] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0278.972] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.006] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.035] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.074] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.103] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.148] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.174] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.240] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.278] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.318] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.344] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.386] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.428] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.457] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.477] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.511] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.537] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.568] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.581] SetEvent (hEvent=0x218) returned 1
	[0279.582] SetEvent (hEvent=0x1f0) returned 1
	[0279.582] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0279.586] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.586] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x0
	[0279.590] SetEvent (hEvent=0x1b0) returned 1
	[0279.590] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0279.593] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.594] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0279.982] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0280.651] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0280.653] SetEvent (hEvent=0x234) returned 1
	[0280.653] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0280.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf")) returned 0x220
	[0280.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF", dwFileAttributes=0x220) returned 1
	[0280.659] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0280.844] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0280.845] ReadFile (in: hFile=0x1d8, lpBuffer=0x113ee000, nNumberOfBytesToRead=0x5664, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x113ee000*, lpNumberOfBytesRead=0x11288e18*=0x5664, lpOverlapped=0x0) returned 1
	[0280.849] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0280.849] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a0002 | out: pbBuffer=0x113a0002) returned 1
	[0280.849] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0280.850] GetFileType (hFile=0x1d8) returned 0x1
	[0280.850] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.851] WriteFile (in: hFile=0x1d8, lpBuffer=0x11204000*, nNumberOfBytesToWrite=0x5664, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11204000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5664, lpOverlapped=0x1102be08) returned 1
	[0280.851] GetFileType (hFile=0x1d8) returned 0x1
	[0280.851] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5664, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.851] GetFileType (hFile=0x1d8) returned 0x1
	[0280.852] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.852] WriteFile (in: hFile=0x1d8, lpBuffer=0x1137d180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1137d180*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0280.852] GetFileType (hFile=0x1d8) returned 0x1
	[0280.852] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5664, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.852] CloseHandle (hObject=0x1d8) returned 1
	[0280.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf.tl30z")) returned 0x220
	[0280.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.876] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0280.886] SetEvent (hEvent=0x248) returned 1
	[0280.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf")) returned 0x220
	[0280.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF", dwFileAttributes=0x220) returned 1
	[0280.886] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.112] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0281.112] ReadFile (in: hFile=0x1d8, lpBuffer=0x111e2000, nNumberOfBytesToRead=0x486, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x111e2000*, lpNumberOfBytesRead=0x1131ce18*=0x486, lpOverlapped=0x0) returned 1
	[0281.115] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0281.116] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4a8 | out: pbBuffer=0x1104e4a8) returned 1
	[0281.116] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ec502 | out: pbBuffer=0x111ec502) returned 1
	[0281.116] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0281.116] GetFileType (hFile=0x1d8) returned 0x1
	[0281.116] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1118fde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.116] WriteFile (in: hFile=0x1d8, lpBuffer=0x111fe000*, nNumberOfBytesToWrite=0x486, lpNumberOfBytesWritten=0x1118fdfc, lpOverlapped=0x1118fe08 | out: lpBuffer=0x111fe000*, lpNumberOfBytesWritten=0x1118fdfc*=0x486, lpOverlapped=0x1118fe08) returned 1
	[0281.117] GetFileType (hFile=0x1d8) returned 0x1
	[0281.117] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x486, lpNewFilePointer=0x0, dwMoveMethod=0x1118fde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.117] GetFileType (hFile=0x1d8) returned 0x1
	[0281.117] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1118fde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.117] WriteFile (in: hFile=0x1d8, lpBuffer=0x111eaa80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1118fdfc, lpOverlapped=0x1118fe08 | out: lpBuffer=0x111eaa80*, lpNumberOfBytesWritten=0x1118fdfc*=0x224, lpOverlapped=0x1118fe08) returned 1
	[0281.117] GetFileType (hFile=0x1d8) returned 0x1
	[0281.118] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x486, lpNewFilePointer=0x0, dwMoveMethod=0x1118fde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.118] CloseHandle (hObject=0x1d8) returned 1
	[0281.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf.tl30z")) returned 0x220
	[0281.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.124] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0281.143] SetEvent (hEvent=0x248) returned 1
	[0281.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf")) returned 0x220
	[0281.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF", dwFileAttributes=0x220) returned 1
	[0281.144] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.306] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0281.307] ReadFile (in: hFile=0x1d8, lpBuffer=0x1139a800, nNumberOfBytesToRead=0x764, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1139a800*, lpNumberOfBytesRead=0x1131ce18*=0x764, lpOverlapped=0x0) returned 1
	[0281.310] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e610 | out: pbBuffer=0x1104e610) returned 1
	[0281.310] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e608 | out: pbBuffer=0x1104e608) returned 1
	[0281.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111ecf02 | out: pbBuffer=0x111ecf02) returned 1
	[0281.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111ecf5c | out: pbBuffer=0x111ecf5c) returned 1
	[0281.311] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0281.311] GetFileType (hFile=0x1d8) returned 0x1
	[0281.312] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1118fde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.312] WriteFile (in: hFile=0x1d8, lpBuffer=0x112c4000*, nNumberOfBytesToWrite=0x764, lpNumberOfBytesWritten=0x1118fdfc, lpOverlapped=0x1118fe08 | out: lpBuffer=0x112c4000*, lpNumberOfBytesWritten=0x1118fdfc*=0x764, lpOverlapped=0x1118fe08) returned 1
	[0281.312] GetFileType (hFile=0x1d8) returned 0x1
	[0281.312] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x764, lpNewFilePointer=0x0, dwMoveMethod=0x1118fde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.313] GetFileType (hFile=0x1d8) returned 0x1
	[0281.313] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1118fde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.313] WriteFile (in: hFile=0x1d8, lpBuffer=0x111eb880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1118fdfc, lpOverlapped=0x1118fe08 | out: lpBuffer=0x111eb880*, lpNumberOfBytesWritten=0x1118fdfc*=0x22a, lpOverlapped=0x1118fe08) returned 1
	[0281.313] GetFileType (hFile=0x1d8) returned 0x1
	[0281.313] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x764, lpNewFilePointer=0x0, dwMoveMethod=0x1118fde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.313] CloseHandle (hObject=0x1d8) returned 1
	[0281.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf.tl30z")) returned 0x220
	[0281.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.326] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0281.336] SetEvent (hEvent=0x248) returned 1
	[0281.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf")) returned 0x220
	[0281.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF", dwFileAttributes=0x220) returned 1
	[0281.337] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0281.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0281.958] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0281.958] ReadFile (in: hFile=0x1d8, lpBuffer=0x11412000, nNumberOfBytesToRead=0x1b08, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11412000*, lpNumberOfBytesRead=0x1131ce18*=0x1b08, lpOverlapped=0x0) returned 1
	[0281.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0281.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0281.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107b302 | out: pbBuffer=0x1107b302) returned 1
	[0281.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107b394 | out: pbBuffer=0x1107b394) returned 1
	[0281.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0281.962] GetFileType (hFile=0x1d8) returned 0x1
	[0281.962] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.962] WriteFile (in: hFile=0x1d8, lpBuffer=0x11384000*, nNumberOfBytesToWrite=0x1b08, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11384000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1b08, lpOverlapped=0x1102be08) returned 1
	[0281.964] GetFileType (hFile=0x1d8) returned 0x1
	[0281.964] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b08, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.964] GetFileType (hFile=0x1d8) returned 0x1
	[0281.964] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.964] WriteFile (in: hFile=0x1d8, lpBuffer=0x1113fc00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1113fc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0281.964] GetFileType (hFile=0x1d8) returned 0x1
	[0281.964] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b08, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0281.965] CloseHandle (hObject=0x1d8) returned 1
	[0281.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf.tl30z")) returned 0x220
	[0281.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0281.982] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0281.993] SetEvent (hEvent=0x1b0) returned 1
	[0281.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf")) returned 0x220
	[0281.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF", dwFileAttributes=0x220) returned 1
	[0281.994] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0282.119] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0282.120] ReadFile (in: hFile=0x1d8, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x2606, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x1131ce18*=0x2606, lpOverlapped=0x0) returned 1
	[0282.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61b0 | out: pbBuffer=0x113e61b0) returned 1
	[0282.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e61a8 | out: pbBuffer=0x113e61a8) returned 1
	[0282.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11377e02 | out: pbBuffer=0x11377e02) returned 1
	[0282.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11377e45 | out: pbBuffer=0x11377e45) returned 1
	[0282.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11377ec1 | out: pbBuffer=0x11377ec1) returned 1
	[0282.125] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61e0 | out: pbBuffer=0x113e61e0) returned 1
	[0282.125] GetFileType (hFile=0x1d8) returned 0x1
	[0282.125] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.125] WriteFile (in: hFile=0x1d8, lpBuffer=0x1146c000*, nNumberOfBytesToWrite=0x2606, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1146c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2606, lpOverlapped=0x1102be08) returned 1
	[0282.126] GetFileType (hFile=0x1d8) returned 0x1
	[0282.126] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2606, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.126] GetFileType (hFile=0x1d8) returned 0x1
	[0282.126] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.126] WriteFile (in: hFile=0x1d8, lpBuffer=0x11141500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11141500*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0282.126] GetFileType (hFile=0x1d8) returned 0x1
	[0282.126] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2606, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.127] CloseHandle (hObject=0x1d8) returned 1
	[0282.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf.tl30z")) returned 0x220
	[0282.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.140] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0282.152] SetEvent (hEvent=0x1b0) returned 1
	[0282.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf")) returned 0x220
	[0282.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF", dwFileAttributes=0x220) returned 1
	[0282.153] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0282.495] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0282.495] ReadFile (in: hFile=0x1d8, lpBuffer=0x1111c000, nNumberOfBytesToRead=0x829a, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1111c000*, lpNumberOfBytesRead=0x1131ce18*=0x829a, lpOverlapped=0x0) returned 1
	[0282.506] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202570 | out: pbBuffer=0x11202570) returned 1
	[0282.506] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202568 | out: pbBuffer=0x11202568) returned 1
	[0282.506] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11128802 | out: pbBuffer=0x11128802) returned 1
	[0282.506] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112025a0 | out: pbBuffer=0x112025a0) returned 1
	[0282.508] GetFileType (hFile=0x1d8) returned 0x1
	[0282.509] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.509] WriteFile (in: hFile=0x1d8, lpBuffer=0x11236000*, nNumberOfBytesToWrite=0x829a, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x11236000*, lpNumberOfBytesWritten=0x111c7dfc*=0x829a, lpOverlapped=0x111c7e08) returned 1
	[0282.510] GetFileType (hFile=0x1d8) returned 0x1
	[0282.510] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x829a, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.510] GetFileType (hFile=0x1d8) returned 0x1
	[0282.510] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.510] WriteFile (in: hFile=0x1d8, lpBuffer=0x110ed500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x110ed500*, lpNumberOfBytesWritten=0x111c7dfc*=0x22d, lpOverlapped=0x111c7e08) returned 1
	[0282.510] GetFileType (hFile=0x1d8) returned 0x1
	[0282.511] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x829a, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.511] CloseHandle (hObject=0x1d8) returned 1
	[0282.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf.tl30z")) returned 0x220
	[0282.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.518] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0282.531] SetEvent (hEvent=0x1b0) returned 1
	[0282.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf")) returned 0x220
	[0282.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF", dwFileAttributes=0x220) returned 1
	[0282.532] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0282.817] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0282.817] ReadFile (in: hFile=0x288, lpBuffer=0x112d4000, nNumberOfBytesToRead=0xb758, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x1131ce18*=0xb758, lpOverlapped=0x0) returned 1
	[0282.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0282.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e0802 | out: pbBuffer=0x112e0802) returned 1
	[0282.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e081a | out: pbBuffer=0x112e081a) returned 1
	[0282.858] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e082a | out: pbBuffer=0x112e082a) returned 1
	[0282.859] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0282.862] GetFileType (hFile=0x288) returned 0x1
	[0282.862] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.862] WriteFile (in: hFile=0x288, lpBuffer=0x113ec000*, nNumberOfBytesToWrite=0xb758, lpNumberOfBytesWritten=0x111b3dfc, lpOverlapped=0x111b3e08 | out: lpBuffer=0x113ec000*, lpNumberOfBytesWritten=0x111b3dfc*=0xb758, lpOverlapped=0x111b3e08) returned 1
	[0282.863] GetFileType (hFile=0x288) returned 0x1
	[0282.863] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xb758, lpNewFilePointer=0x0, dwMoveMethod=0x111b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.863] GetFileType (hFile=0x288) returned 0x1
	[0282.863] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.863] WriteFile (in: hFile=0x288, lpBuffer=0x11060a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x111b3dfc, lpOverlapped=0x111b3e08 | out: lpBuffer=0x11060a80*, lpNumberOfBytesWritten=0x111b3dfc*=0x236, lpOverlapped=0x111b3e08) returned 1
	[0282.864] GetFileType (hFile=0x288) returned 0x1
	[0282.864] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xb758, lpNewFilePointer=0x0, dwMoveMethod=0x111b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.864] CloseHandle (hObject=0x288) returned 1
	[0282.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf.tl30z")) returned 0x220
	[0282.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.877] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0282.883] SetEvent (hEvent=0x210) returned 1
	[0282.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf")) returned 0x220
	[0282.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF", dwFileAttributes=0x220) returned 1
	[0282.883] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf.tl30z"), dwFlags=0x1) returned 1
	[0283.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.022] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0283.022] ReadFile (in: hFile=0x288, lpBuffer=0x11126000, nNumberOfBytesToRead=0x5b0, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11126000*, lpNumberOfBytesRead=0x1131ce18*=0x5b0, lpOverlapped=0x0) returned 1
	[0283.028] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112023d0 | out: pbBuffer=0x112023d0) returned 1
	[0283.029] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11129f02 | out: pbBuffer=0x11129f02) returned 1
	[0283.029] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202400 | out: pbBuffer=0x11202400) returned 1
	[0283.029] GetFileType (hFile=0x288) returned 0x1
	[0283.029] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.029] WriteFile (in: hFile=0x288, lpBuffer=0x112b0000*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112b0000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5b0, lpOverlapped=0x1102be08) returned 1
	[0283.030] GetFileType (hFile=0x288) returned 0x1
	[0283.030] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5b0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.030] GetFileType (hFile=0x288) returned 0x1
	[0283.030] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.030] WriteFile (in: hFile=0x288, lpBuffer=0x112a0a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112a0a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0283.030] GetFileType (hFile=0x288) returned 0x1
	[0283.030] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5b0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.031] CloseHandle (hObject=0x288) returned 1
	[0283.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf.tl30z")) returned 0x220
	[0283.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0283.050] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.059] SetEvent (hEvent=0x210) returned 1
	[0283.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg")) returned 0x220
	[0283.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG", dwFileAttributes=0x220) returned 1
	[0283.060] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg.tl30z"), dwFlags=0x1) returned 1
	[0283.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.241] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0283.241] SetEvent (hEvent=0x210) returned 1
	[0283.241] ReadFile (in: hFile=0x288, lpBuffer=0x1122e000, nNumberOfBytesToRead=0x60b7, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1122e000*, lpNumberOfBytesRead=0x1131ce18*=0x60b7, lpOverlapped=0x0) returned 1
	[0283.252] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112029c0 | out: pbBuffer=0x112029c0) returned 1
	[0283.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112029b8 | out: pbBuffer=0x112029b8) returned 1
	[0283.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d4902 | out: pbBuffer=0x111d4902) returned 1
	[0283.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112029f0 | out: pbBuffer=0x112029f0) returned 1
	[0283.255] GetFileType (hFile=0x288) returned 0x1
	[0283.256] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.256] WriteFile (in: hFile=0x288, lpBuffer=0x11bfc000*, nNumberOfBytesToWrite=0x60b7, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bfc000*, lpNumberOfBytesWritten=0x1102bdfc*=0x60b7, lpOverlapped=0x1102be08) returned 1
	[0283.256] GetFileType (hFile=0x288) returned 0x1
	[0283.256] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x60b7, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.257] GetFileType (hFile=0x288) returned 0x1
	[0283.257] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.257] WriteFile (in: hFile=0x288, lpBuffer=0x11258380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11258380*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0283.257] GetFileType (hFile=0x288) returned 0x1
	[0283.257] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x60b7, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.257] CloseHandle (hObject=0x288) returned 1
	[0283.263] SwitchToThread () returned 1
	[0283.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg.tl30z")) returned 0x220
	[0283.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0283.283] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.298] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.373] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.417] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.448] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.457] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.499] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.532] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.571] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.659] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.721] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.750] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.782] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.815] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.869] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.881] SetEvent (hEvent=0x210) returned 1
	[0283.882] SetEvent (hEvent=0x1f0) returned 1
	[0283.882] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0283.888] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.888] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x0
	[0283.895] SetEvent (hEvent=0x234) returned 1
	[0283.895] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0283.897] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0283.897] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0284.303] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0284.304] SetEvent (hEvent=0x210) returned 1
	[0284.304] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0284.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf")) returned 0x220
	[0284.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF", dwFileAttributes=0x220) returned 1
	[0284.315] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.517] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0284.517] ReadFile (in: hFile=0x1d4, lpBuffer=0x1105a000, nNumberOfBytesToRead=0x9114, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1105a000*, lpNumberOfBytesRead=0x11428e18*=0x9114, lpOverlapped=0x0) returned 1
	[0284.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112026f0 | out: pbBuffer=0x112026f0) returned 1
	[0284.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112026e8 | out: pbBuffer=0x112026e8) returned 1
	[0284.523] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138b202 | out: pbBuffer=0x1138b202) returned 1
	[0284.524] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202720 | out: pbBuffer=0x11202720) returned 1
	[0284.525] GetFileType (hFile=0x1d4) returned 0x1
	[0284.525] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0284.525] WriteFile (in: hFile=0x1d4, lpBuffer=0x11222000*, nNumberOfBytesToWrite=0x9114, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11222000*, lpNumberOfBytesWritten=0x11031dfc*=0x9114, lpOverlapped=0x11031e08) returned 1
	[0284.526] GetFileType (hFile=0x1d4) returned 0x1
	[0284.526] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x9114, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0284.526] GetFileType (hFile=0x1d4) returned 0x1
	[0284.526] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0284.526] WriteFile (in: hFile=0x1d4, lpBuffer=0x11396700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11396700*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0284.526] GetFileType (hFile=0x1d4) returned 0x1
	[0284.526] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x9114, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0284.527] CloseHandle (hObject=0x1d4) returned 1
	[0284.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.tl30z")) returned 0x220
	[0284.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.545] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0284.554] SetEvent (hEvent=0x118) returned 1
	[0284.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf")) returned 0x220
	[0284.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF", dwFileAttributes=0x220) returned 1
	[0284.555] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.745] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0284.745] ReadFile (in: hFile=0x1d4, lpBuffer=0x110c5000, nNumberOfBytesToRead=0xe16, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110c5000*, lpNumberOfBytesRead=0x11428e18*=0xe16, lpOverlapped=0x0) returned 1
	[0284.751] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0284.751] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4c8 | out: pbBuffer=0x1104e4c8) returned 1
	[0284.751] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e3e02 | out: pbBuffer=0x111e3e02) returned 1
	[0284.751] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0284.752] GetFileType (hFile=0x1d4) returned 0x1
	[0284.752] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.752] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ae000*, nNumberOfBytesToWrite=0xe16, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112ae000*, lpNumberOfBytesWritten=0x1102bdfc*=0xe16, lpOverlapped=0x1102be08) returned 1
	[0284.752] GetFileType (hFile=0x1d4) returned 0x1
	[0284.752] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xe16, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.752] GetFileType (hFile=0x1d4) returned 0x1
	[0284.752] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.753] WriteFile (in: hFile=0x1d4, lpBuffer=0x1129c700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1129c700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0284.753] GetFileType (hFile=0x1d4) returned 0x1
	[0284.753] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xe16, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.753] CloseHandle (hObject=0x1d4) returned 1
	[0284.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.tl30z")) returned 0x220
	[0284.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.767] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0284.774] SetEvent (hEvent=0x118) returned 1
	[0284.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf")) returned 0x220
	[0284.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF", dwFileAttributes=0x220) returned 1
	[0284.775] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.tl30z"), dwFlags=0x1) returned 1
	[0285.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.045] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0285.045] ReadFile (in: hFile=0x1d4, lpBuffer=0x110f0000, nNumberOfBytesToRead=0x1352, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110f0000*, lpNumberOfBytesRead=0x11428e18*=0x1352, lpOverlapped=0x0) returned 1
	[0285.052] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0285.052] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11242802 | out: pbBuffer=0x11242802) returned 1
	[0285.052] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0285.052] GetFileType (hFile=0x1d4) returned 0x1
	[0285.053] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.053] WriteFile (in: hFile=0x1d4, lpBuffer=0x11270000*, nNumberOfBytesToWrite=0x1352, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11270000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1352, lpOverlapped=0x1102be08) returned 1
	[0285.053] GetFileType (hFile=0x1d4) returned 0x1
	[0285.053] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1352, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.053] GetFileType (hFile=0x1d4) returned 0x1
	[0285.053] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.054] WriteFile (in: hFile=0x1d4, lpBuffer=0x110d8a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110d8a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0285.054] GetFileType (hFile=0x1d4) returned 0x1
	[0285.054] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1352, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.054] CloseHandle (hObject=0x1d4) returned 1
	[0285.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.tl30z")) returned 0x220
	[0285.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.071] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0285.083] SetEvent (hEvent=0x210) returned 1
	[0285.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg")) returned 0x220
	[0285.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG", dwFileAttributes=0x220) returned 1
	[0285.083] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg.tl30z"), dwFlags=0x1) returned 1
	[0285.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.229] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0285.229] ReadFile (in: hFile=0x1d4, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x2378, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11428e18*=0x2378, lpOverlapped=0x0) returned 1
	[0285.240] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0285.240] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11355d02 | out: pbBuffer=0x11355d02) returned 1
	[0285.240] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0285.240] GetFileType (hFile=0x1d4) returned 0x1
	[0285.241] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.241] WriteFile (in: hFile=0x1d4, lpBuffer=0x1132c000*, nNumberOfBytesToWrite=0x2378, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x1132c000*, lpNumberOfBytesWritten=0x110ebdfc*=0x2378, lpOverlapped=0x110ebe08) returned 1
	[0285.241] GetFileType (hFile=0x1d4) returned 0x1
	[0285.241] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2378, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.241] GetFileType (hFile=0x1d4) returned 0x1
	[0285.241] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.241] WriteFile (in: hFile=0x1d4, lpBuffer=0x11237180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x11237180*, lpNumberOfBytesWritten=0x110ebdfc*=0x22d, lpOverlapped=0x110ebe08) returned 1
	[0285.242] GetFileType (hFile=0x1d4) returned 0x1
	[0285.242] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2378, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.242] CloseHandle (hObject=0x1d4) returned 1
	[0285.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg.tl30z")) returned 0x220
	[0285.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0285.255] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0285.262] SetEvent (hEvent=0x210) returned 1
	[0285.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif")) returned 0x220
	[0285.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF", dwFileAttributes=0x220) returned 1
	[0285.263] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif.tl30z"), dwFlags=0x1) returned 1
	[0285.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.463] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0285.463] ReadFile (in: hFile=0x1d4, lpBuffer=0x11226000, nNumberOfBytesToRead=0x8ada, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11226000*, lpNumberOfBytesRead=0x11428e18*=0x8ada, lpOverlapped=0x0) returned 1
	[0285.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332ad0 | out: pbBuffer=0x11332ad0) returned 1
	[0285.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332ac8 | out: pbBuffer=0x11332ac8) returned 1
	[0285.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130a902 | out: pbBuffer=0x1130a902) returned 1
	[0285.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130a97b | out: pbBuffer=0x1130a97b) returned 1
	[0285.472] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332b00 | out: pbBuffer=0x11332b00) returned 1
	[0285.472] GetFileType (hFile=0x1d4) returned 0x1
	[0285.473] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.473] WriteFile (in: hFile=0x1d4, lpBuffer=0x11094000*, nNumberOfBytesToWrite=0x8ada, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11094000*, lpNumberOfBytesWritten=0x1102bdfc*=0x8ada, lpOverlapped=0x1102be08) returned 1
	[0285.473] GetFileType (hFile=0x1d4) returned 0x1
	[0285.473] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8ada, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.474] GetFileType (hFile=0x1d4) returned 0x1
	[0285.474] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.474] WriteFile (in: hFile=0x1d4, lpBuffer=0x11447500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11447500*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0285.474] GetFileType (hFile=0x1d4) returned 0x1
	[0285.474] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x8ada, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.474] CloseHandle (hObject=0x1d4) returned 1
	[0285.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif.tl30z")) returned 0x220
	[0285.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.499] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0285.508] SetEvent (hEvent=0x210) returned 1
	[0285.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif")) returned 0x220
	[0285.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF", dwFileAttributes=0x220) returned 1
	[0285.509] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif.tl30z"), dwFlags=0x1) returned 1
	[0285.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.761] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0285.761] ReadFile (in: hFile=0x1d4, lpBuffer=0x1138e000, nNumberOfBytesToRead=0x148b, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1138e000*, lpNumberOfBytesRead=0x11428e18*=0x148b, lpOverlapped=0x0) returned 1
	[0285.765] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0285.765] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130bd02 | out: pbBuffer=0x1130bd02) returned 1
	[0285.765] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130bd96 | out: pbBuffer=0x1130bd96) returned 1
	[0285.765] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0285.766] GetFileType (hFile=0x1d4) returned 0x1
	[0285.766] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.766] WriteFile (in: hFile=0x1d4, lpBuffer=0x11338000*, nNumberOfBytesToWrite=0x148b, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11338000*, lpNumberOfBytesWritten=0x1102bdfc*=0x148b, lpOverlapped=0x1102be08) returned 1
	[0285.766] GetFileType (hFile=0x1d4) returned 0x1
	[0285.766] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x148b, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.766] GetFileType (hFile=0x1d4) returned 0x1
	[0285.766] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.767] WriteFile (in: hFile=0x1d4, lpBuffer=0x113a4a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113a4a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0285.767] GetFileType (hFile=0x1d4) returned 0x1
	[0285.767] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x148b, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.767] CloseHandle (hObject=0x1d4) returned 1
	[0285.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif.tl30z")) returned 0x220
	[0285.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.775] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0285.789] SetEvent (hEvent=0x210) returned 1
	[0285.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif")) returned 0x220
	[0285.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF", dwFileAttributes=0x220) returned 1
	[0285.790] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif.tl30z"), dwFlags=0x1) returned 1
	[0286.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.010] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0286.010] ReadFile (in: hFile=0x1d4, lpBuffer=0x110e9000, nNumberOfBytesToRead=0xf40, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110e9000*, lpNumberOfBytesRead=0x11428e18*=0xf40, lpOverlapped=0x0) returned 1
	[0286.123] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0286.123] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c5202 | out: pbBuffer=0x113c5202) returned 1
	[0286.123] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c528a | out: pbBuffer=0x113c528a) returned 1
	[0286.124] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0286.124] GetFileType (hFile=0x1d4) returned 0x1
	[0286.124] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.124] WriteFile (in: hFile=0x1d4, lpBuffer=0x1122a000*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x113bddfc, lpOverlapped=0x113bde08 | out: lpBuffer=0x1122a000*, lpNumberOfBytesWritten=0x113bddfc*=0xf40, lpOverlapped=0x113bde08) returned 1
	[0286.125] GetFileType (hFile=0x1d4) returned 0x1
	[0286.125] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xf40, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.125] GetFileType (hFile=0x1d4) returned 0x1
	[0286.125] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.125] WriteFile (in: hFile=0x1d4, lpBuffer=0x11463880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113bddfc, lpOverlapped=0x113bde08 | out: lpBuffer=0x11463880*, lpNumberOfBytesWritten=0x113bddfc*=0x227, lpOverlapped=0x113bde08) returned 1
	[0286.125] GetFileType (hFile=0x1d4) returned 0x1
	[0286.126] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xf40, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.126] CloseHandle (hObject=0x1d4) returned 1
	[0286.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif.tl30z")) returned 0x220
	[0286.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0286.165] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0286.174] SetEvent (hEvent=0x210) returned 1
	[0286.174] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp")) returned 0x220
	[0286.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP", dwFileAttributes=0x220) returned 1
	[0286.175] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp.tl30z"), dwFlags=0x1) returned 1
	[0286.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.401] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0286.401] ReadFile (in: hFile=0x1d4, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x11288e18*=0x7db8, lpOverlapped=0x0) returned 1
	[0286.414] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0286.414] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a2802 | out: pbBuffer=0x111a2802) returned 1
	[0286.415] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111a2830 | out: pbBuffer=0x111a2830) returned 1
	[0286.415] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0286.416] GetFileType (hFile=0x1d4) returned 0x1
	[0286.416] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.416] WriteFile (in: hFile=0x1d4, lpBuffer=0x113ec000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113ec000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7db8, lpOverlapped=0x1102be08) returned 1
	[0286.417] GetFileType (hFile=0x1d4) returned 0x1
	[0286.417] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.417] GetFileType (hFile=0x1d4) returned 0x1
	[0286.417] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.417] WriteFile (in: hFile=0x1d4, lpBuffer=0x11176a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11176a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0286.418] GetFileType (hFile=0x1d4) returned 0x1
	[0286.418] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.418] CloseHandle (hObject=0x1d4) returned 1
	[0286.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp.tl30z")) returned 0x220
	[0286.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0286.431] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0286.437] SetEvent (hEvent=0x234) returned 1
	[0286.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp")) returned 0x220
	[0286.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP", dwFileAttributes=0x220) returned 1
	[0286.438] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp.tl30z"), dwFlags=0x1) returned 1
	[0286.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.648] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0286.649] ReadFile (in: hFile=0x1d4, lpBuffer=0x11bd6000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11bd6000*, lpNumberOfBytesRead=0x11288e18*=0x7db8, lpOverlapped=0x0) returned 1
	[0286.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113320a0 | out: pbBuffer=0x113320a0) returned 1
	[0286.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332088 | out: pbBuffer=0x11332088) returned 1
	[0286.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119d402 | out: pbBuffer=0x1119d402) returned 1
	[0286.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119d403 | out: pbBuffer=0x1119d403) returned 1
	[0286.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119d493 | out: pbBuffer=0x1119d493) returned 1
	[0286.669] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113321a0 | out: pbBuffer=0x113321a0) returned 1
	[0286.670] GetFileType (hFile=0x1d4) returned 0x1
	[0286.670] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.670] WriteFile (in: hFile=0x1d4, lpBuffer=0x112a6000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112a6000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7db8, lpOverlapped=0x1102be08) returned 1
	[0286.671] GetFileType (hFile=0x1d4) returned 0x1
	[0286.671] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.671] GetFileType (hFile=0x1d4) returned 0x1
	[0286.671] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.671] WriteFile (in: hFile=0x1d4, lpBuffer=0x11be4700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11be4700*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0286.671] GetFileType (hFile=0x1d4) returned 0x1
	[0286.671] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.672] CloseHandle (hObject=0x1d4) returned 1
	[0286.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp.tl30z")) returned 0x220
	[0286.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0286.691] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0286.699] SetEvent (hEvent=0x234) returned 1
	[0286.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf")) returned 0x220
	[0286.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF", dwFileAttributes=0x220) returned 1
	[0286.700] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf.tl30z"), dwFlags=0x1) returned 1
	[0286.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.926] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0286.926] ReadFile (in: hFile=0x1d4, lpBuffer=0x11368000, nNumberOfBytesToRead=0x3ee8, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11368000*, lpNumberOfBytesRead=0x11288e18*=0x3ee8, lpOverlapped=0x0) returned 1
	[0286.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0286.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11219302 | out: pbBuffer=0x11219302) returned 1
	[0286.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121930e | out: pbBuffer=0x1121930e) returned 1
	[0286.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121930f | out: pbBuffer=0x1121930f) returned 1
	[0286.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11219324 | out: pbBuffer=0x11219324) returned 1
	[0286.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0286.938] GetFileType (hFile=0x1d4) returned 0x1
	[0286.938] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.938] WriteFile (in: hFile=0x1d4, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0x3ee8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3ee8, lpOverlapped=0x1102be08) returned 1
	[0286.939] GetFileType (hFile=0x1d4) returned 0x1
	[0286.939] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3ee8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.939] GetFileType (hFile=0x1d4) returned 0x1
	[0286.939] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.939] WriteFile (in: hFile=0x1d4, lpBuffer=0x11be4a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11be4a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0286.940] GetFileType (hFile=0x1d4) returned 0x1
	[0286.940] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3ee8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.940] CloseHandle (hObject=0x1d4) returned 1
	[0286.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf.tl30z")) returned 0x220
	[0286.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0286.955] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0286.960] SetEvent (hEvent=0x1b0) returned 1
	[0286.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf")) returned 0x220
	[0286.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF", dwFileAttributes=0x220) returned 1
	[0286.961] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.183] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0287.183] ReadFile (in: hFile=0x1d4, lpBuffer=0x113ec000, nNumberOfBytesToRead=0x43c0, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x113ec000*, lpNumberOfBytesRead=0x11288e18*=0x43c0, lpOverlapped=0x0) returned 1
	[0287.192] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0287.192] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11222802 | out: pbBuffer=0x11222802) returned 1
	[0287.192] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1122282d | out: pbBuffer=0x1122282d) returned 1
	[0287.192] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11222832 | out: pbBuffer=0x11222832) returned 1
	[0287.193] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0287.193] GetFileType (hFile=0x1d4) returned 0x1
	[0287.193] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.194] WriteFile (in: hFile=0x1d4, lpBuffer=0x11466000*, nNumberOfBytesToWrite=0x43c0, lpNumberOfBytesWritten=0x1121fdfc, lpOverlapped=0x1121fe08 | out: lpBuffer=0x11466000*, lpNumberOfBytesWritten=0x1121fdfc*=0x43c0, lpOverlapped=0x1121fe08) returned 1
	[0287.194] GetFileType (hFile=0x1d4) returned 0x1
	[0287.194] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x43c0, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.194] GetFileType (hFile=0x1d4) returned 0x1
	[0287.194] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.195] WriteFile (in: hFile=0x1d4, lpBuffer=0x11238a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1121fdfc, lpOverlapped=0x1121fe08 | out: lpBuffer=0x11238a80*, lpNumberOfBytesWritten=0x1121fdfc*=0x227, lpOverlapped=0x1121fe08) returned 1
	[0287.195] GetFileType (hFile=0x1d4) returned 0x1
	[0287.195] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x43c0, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.195] CloseHandle (hObject=0x1d4) returned 1
	[0287.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf.tl30z")) returned 0x220
	[0287.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.199] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0287.377] SetEvent (hEvent=0x1b0) returned 1
	[0287.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf")) returned 0x220
	[0287.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF", dwFileAttributes=0x220) returned 1
	[0287.378] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.586] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0287.586] ReadFile (in: hFile=0x1d4, lpBuffer=0x11110000, nNumberOfBytesToRead=0x1434, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11110000*, lpNumberOfBytesRead=0x11288e18*=0x1434, lpOverlapped=0x0) returned 1
	[0287.591] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63c0 | out: pbBuffer=0x113e63c0) returned 1
	[0287.591] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63b8 | out: pbBuffer=0x113e63b8) returned 1
	[0287.591] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11223d02 | out: pbBuffer=0x11223d02) returned 1
	[0287.591] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0287.591] GetFileType (hFile=0x1d4) returned 0x1
	[0287.592] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.592] WriteFile (in: hFile=0x1d4, lpBuffer=0x1113a000*, nNumberOfBytesToWrite=0x1434, lpNumberOfBytesWritten=0x1121fdfc, lpOverlapped=0x1121fe08 | out: lpBuffer=0x1113a000*, lpNumberOfBytesWritten=0x1121fdfc*=0x1434, lpOverlapped=0x1121fe08) returned 1
	[0287.592] GetFileType (hFile=0x1d4) returned 0x1
	[0287.592] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1434, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.592] GetFileType (hFile=0x1d4) returned 0x1
	[0287.593] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.593] WriteFile (in: hFile=0x1d4, lpBuffer=0x11122700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1121fdfc, lpOverlapped=0x1121fe08 | out: lpBuffer=0x11122700*, lpNumberOfBytesWritten=0x1121fdfc*=0x227, lpOverlapped=0x1121fe08) returned 1
	[0287.593] GetFileType (hFile=0x1d4) returned 0x1
	[0287.593] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1434, lpNewFilePointer=0x0, dwMoveMethod=0x1121fde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.593] CloseHandle (hObject=0x1d4) returned 1
	[0287.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf.tl30z")) returned 0x220
	[0287.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.598] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0287.613] SetEvent (hEvent=0x1b0) returned 1
	[0287.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf")) returned 0x220
	[0287.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF", dwFileAttributes=0x220) returned 1
	[0287.613] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf.tl30z"), dwFlags=0x1) returned 1
	[0287.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0287.784] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0287.784] ReadFile (in: hFile=0x1d4, lpBuffer=0x11126000, nNumberOfBytesToRead=0x2bdc, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11126000*, lpNumberOfBytesRead=0x11288e18*=0x2bdc, lpOverlapped=0x0) returned 1
	[0287.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0287.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11223302 | out: pbBuffer=0x11223302) returned 1
	[0287.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112233e5 | out: pbBuffer=0x112233e5) returned 1
	[0287.790] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0287.790] GetFileType (hFile=0x1d4) returned 0x1
	[0287.790] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.790] WriteFile (in: hFile=0x1d4, lpBuffer=0x11382000*, nNumberOfBytesToWrite=0x2bdc, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11382000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2bdc, lpOverlapped=0x1102be08) returned 1
	[0287.791] GetFileType (hFile=0x1d4) returned 0x1
	[0287.791] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2bdc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.792] GetFileType (hFile=0x1d4) returned 0x1
	[0287.792] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.792] WriteFile (in: hFile=0x1d4, lpBuffer=0x1134c700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1134c700*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0287.792] GetFileType (hFile=0x1d4) returned 0x1
	[0287.792] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2bdc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0287.792] CloseHandle (hObject=0x1d4) returned 1
	[0287.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf.tl30z")) returned 0x220
	[0287.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0287.823] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0287.830] SetEvent (hEvent=0x234) returned 1
	[0287.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf")) returned 0x220
	[0287.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF", dwFileAttributes=0x220) returned 1
	[0287.831] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.043] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0288.043] ReadFile (in: hFile=0x250, lpBuffer=0x1133d000, nNumberOfBytesToRead=0x4b28, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1133d000*, lpNumberOfBytesRead=0x1131ce18*=0x4b28, lpOverlapped=0x0) returned 1
	[0288.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0288.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1115dd02 | out: pbBuffer=0x1115dd02) returned 1
	[0288.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0288.050] GetFileType (hFile=0x250) returned 0x1
	[0288.050] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.050] WriteFile (in: hFile=0x250, lpBuffer=0x110ac000*, nNumberOfBytesToWrite=0x4b28, lpNumberOfBytesWritten=0x11133dfc, lpOverlapped=0x11133e08 | out: lpBuffer=0x110ac000*, lpNumberOfBytesWritten=0x11133dfc*=0x4b28, lpOverlapped=0x11133e08) returned 1
	[0288.050] GetFileType (hFile=0x250) returned 0x1
	[0288.050] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4b28, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.050] GetFileType (hFile=0x250) returned 0x1
	[0288.051] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.051] WriteFile (in: hFile=0x250, lpBuffer=0x11477880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11133dfc, lpOverlapped=0x11133e08 | out: lpBuffer=0x11477880*, lpNumberOfBytesWritten=0x11133dfc*=0x22a, lpOverlapped=0x11133e08) returned 1
	[0288.051] GetFileType (hFile=0x250) returned 0x1
	[0288.051] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4b28, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.051] CloseHandle (hObject=0x250) returned 1
	[0288.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf.tl30z")) returned 0x220
	[0288.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.065] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0288.072] SetEvent (hEvent=0x118) returned 1
	[0288.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf")) returned 0x220
	[0288.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF", dwFileAttributes=0x220) returned 1
	[0288.073] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.256] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0288.256] ReadFile (in: hFile=0x250, lpBuffer=0x112a8000, nNumberOfBytesToRead=0x3a14, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x112a8000*, lpNumberOfBytesRead=0x1131ce18*=0x3a14, lpOverlapped=0x0) returned 1
	[0288.261] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0288.261] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11223e02 | out: pbBuffer=0x11223e02) returned 1
	[0288.262] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0288.263] GetFileType (hFile=0x250) returned 0x1
	[0288.263] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.263] WriteFile (in: hFile=0x250, lpBuffer=0x11bc6000*, nNumberOfBytesToWrite=0x3a14, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesWritten=0x11031dfc*=0x3a14, lpOverlapped=0x11031e08) returned 1
	[0288.264] GetFileType (hFile=0x250) returned 0x1
	[0288.264] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3a14, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.264] GetFileType (hFile=0x250) returned 0x1
	[0288.264] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.264] WriteFile (in: hFile=0x250, lpBuffer=0x1134d500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1134d500*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0288.264] GetFileType (hFile=0x250) returned 0x1
	[0288.266] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3a14, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.266] CloseHandle (hObject=0x250) returned 1
	[0288.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf.tl30z")) returned 0x220
	[0288.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.298] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0288.312] SetEvent (hEvent=0x118) returned 1
	[0288.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf")) returned 0x220
	[0288.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF", dwFileAttributes=0x220) returned 1
	[0288.313] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.565] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0288.565] ReadFile (in: hFile=0x250, lpBuffer=0x1141e000, nNumberOfBytesToRead=0x1f38, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1141e000*, lpNumberOfBytesRead=0x1131ce18*=0x1f38, lpOverlapped=0x0) returned 1
	[0288.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0288.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0288.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c10802 | out: pbBuffer=0x11c10802) returned 1
	[0288.572] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0288.572] GetFileType (hFile=0x250) returned 0x1
	[0288.572] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.572] WriteFile (in: hFile=0x250, lpBuffer=0x11382000*, nNumberOfBytesToWrite=0x1f38, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11382000*, lpNumberOfBytesWritten=0x1124bdfc*=0x1f38, lpOverlapped=0x1124be08) returned 1
	[0288.573] GetFileType (hFile=0x250) returned 0x1
	[0288.573] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1f38, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.573] GetFileType (hFile=0x250) returned 0x1
	[0288.573] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.573] WriteFile (in: hFile=0x250, lpBuffer=0x111dce00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x111dce00*, lpNumberOfBytesWritten=0x1124bdfc*=0x230, lpOverlapped=0x1124be08) returned 1
	[0288.573] GetFileType (hFile=0x250) returned 0x1
	[0288.574] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1f38, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.574] CloseHandle (hObject=0x250) returned 1
	[0288.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf.tl30z")) returned 0x220
	[0288.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.583] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0288.598] SetEvent (hEvent=0x1b0) returned 1
	[0288.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf")) returned 0x220
	[0288.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF", dwFileAttributes=0x220) returned 1
	[0288.599] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.785] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0288.786] ReadFile (in: hFile=0x250, lpBuffer=0x110d8a00, nNumberOfBytesToRead=0x229c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110d8a00*, lpNumberOfBytesRead=0x1131ce18*=0x229c, lpOverlapped=0x0) returned 1
	[0288.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332640 | out: pbBuffer=0x11332640) returned 1
	[0288.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332638 | out: pbBuffer=0x11332638) returned 1
	[0288.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11063102 | out: pbBuffer=0x11063102) returned 1
	[0288.792] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110631a0 | out: pbBuffer=0x110631a0) returned 1
	[0288.793] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0288.794] GetFileType (hFile=0x250) returned 0x1
	[0288.794] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.794] WriteFile (in: hFile=0x250, lpBuffer=0x112d8000*, nNumberOfBytesToWrite=0x229c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112d8000*, lpNumberOfBytesWritten=0x11031dfc*=0x229c, lpOverlapped=0x11031e08) returned 1
	[0288.794] GetFileType (hFile=0x250) returned 0x1
	[0288.794] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x229c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.795] GetFileType (hFile=0x250) returned 0x1
	[0288.795] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.795] WriteFile (in: hFile=0x250, lpBuffer=0x11341c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11341c00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0288.795] GetFileType (hFile=0x250) returned 0x1
	[0288.795] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x229c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.795] CloseHandle (hObject=0x250) returned 1
	[0288.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf.tl30z")) returned 0x220
	[0288.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.811] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0288.821] SetEvent (hEvent=0x1b0) returned 1
	[0288.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf")) returned 0x220
	[0288.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF", dwFileAttributes=0x220) returned 1
	[0288.822] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.048] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0289.049] ReadFile (in: hFile=0x250, lpBuffer=0x112c1800, nNumberOfBytesToRead=0x16f8, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x112c1800*, lpNumberOfBytesRead=0x1131ce18*=0x16f8, lpOverlapped=0x0) returned 1
	[0289.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1b0 | out: pbBuffer=0x1140f1b0) returned 1
	[0289.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f1a8 | out: pbBuffer=0x1140f1a8) returned 1
	[0289.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1131fd02 | out: pbBuffer=0x1131fd02) returned 1
	[0289.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1131fd4f | out: pbBuffer=0x1131fd4f) returned 1
	[0289.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1131fd6d | out: pbBuffer=0x1131fd6d) returned 1
	[0289.055] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1e0 | out: pbBuffer=0x1140f1e0) returned 1
	[0289.055] GetFileType (hFile=0x250) returned 0x1
	[0289.055] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.055] WriteFile (in: hFile=0x250, lpBuffer=0x113c2000*, nNumberOfBytesToWrite=0x16f8, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x113c2000*, lpNumberOfBytesWritten=0x1124bdfc*=0x16f8, lpOverlapped=0x1124be08) returned 1
	[0289.056] GetFileType (hFile=0x250) returned 0x1
	[0289.056] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x16f8, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.056] GetFileType (hFile=0x250) returned 0x1
	[0289.056] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.056] WriteFile (in: hFile=0x250, lpBuffer=0x11bd3500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11bd3500*, lpNumberOfBytesWritten=0x1124bdfc*=0x230, lpOverlapped=0x1124be08) returned 1
	[0289.057] GetFileType (hFile=0x250) returned 0x1
	[0289.057] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x16f8, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.057] CloseHandle (hObject=0x250) returned 1
	[0289.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf.tl30z")) returned 0x220
	[0289.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.075] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0289.088] SetEvent (hEvent=0x1b0) returned 1
	[0289.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf")) returned 0x220
	[0289.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF", dwFileAttributes=0x220) returned 1
	[0289.089] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.290] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0289.290] ReadFile (in: hFile=0x250, lpBuffer=0x110b2000, nNumberOfBytesToRead=0xd00, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110b2000*, lpNumberOfBytesRead=0x1131ce18*=0xd00, lpOverlapped=0x0) returned 1
	[0289.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332ea0 | out: pbBuffer=0x11332ea0) returned 1
	[0289.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332e98 | out: pbBuffer=0x11332e98) returned 1
	[0289.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110be602 | out: pbBuffer=0x110be602) returned 1
	[0289.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332ed0 | out: pbBuffer=0x11332ed0) returned 1
	[0289.297] GetFileType (hFile=0x250) returned 0x1
	[0289.297] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.297] WriteFile (in: hFile=0x250, lpBuffer=0x111f4000*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111f4000*, lpNumberOfBytesWritten=0x11031dfc*=0xd00, lpOverlapped=0x11031e08) returned 1
	[0289.298] GetFileType (hFile=0x250) returned 0x1
	[0289.298] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xd00, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.298] GetFileType (hFile=0x250) returned 0x1
	[0289.298] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.298] WriteFile (in: hFile=0x250, lpBuffer=0x110c8380*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110c8380*, lpNumberOfBytesWritten=0x11031dfc*=0x221, lpOverlapped=0x11031e08) returned 1
	[0289.299] GetFileType (hFile=0x250) returned 0x1
	[0289.299] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xd00, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.299] CloseHandle (hObject=0x250) returned 1
	[0289.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf.tl30z")) returned 0x220
	[0289.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.324] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0289.338] SetEvent (hEvent=0x1b0) returned 1
	[0289.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf")) returned 0x220
	[0289.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF", dwFileAttributes=0x220) returned 1
	[0289.339] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.531] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0289.531] ReadFile (in: hFile=0x250, lpBuffer=0x110c0000, nNumberOfBytesToRead=0x1424, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110c0000*, lpNumberOfBytesRead=0x1131ce18*=0x1424, lpOverlapped=0x0) returned 1
	[0289.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0289.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0289.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110be802 | out: pbBuffer=0x110be802) returned 1
	[0289.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110be81f | out: pbBuffer=0x110be81f) returned 1
	[0289.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110be82f | out: pbBuffer=0x110be82f) returned 1
	[0289.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110be830 | out: pbBuffer=0x110be830) returned 1
	[0289.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110be848 | out: pbBuffer=0x110be848) returned 1
	[0289.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110be882 | out: pbBuffer=0x110be882) returned 1
	[0289.538] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110be882 | out: pbBuffer=0x110be882) returned 1
	[0289.539] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0289.539] GetFileType (hFile=0x250) returned 0x1
	[0289.539] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.539] WriteFile (in: hFile=0x250, lpBuffer=0x112ea000*, nNumberOfBytesToWrite=0x1424, lpNumberOfBytesWritten=0x1145fdfc, lpOverlapped=0x1145fe08 | out: lpBuffer=0x112ea000*, lpNumberOfBytesWritten=0x1145fdfc*=0x1424, lpOverlapped=0x1145fe08) returned 1
	[0289.540] GetFileType (hFile=0x250) returned 0x1
	[0289.540] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1424, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.540] GetFileType (hFile=0x250) returned 0x1
	[0289.540] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.540] WriteFile (in: hFile=0x250, lpBuffer=0x110c8a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1145fdfc, lpOverlapped=0x1145fe08 | out: lpBuffer=0x110c8a80*, lpNumberOfBytesWritten=0x1145fdfc*=0x224, lpOverlapped=0x1145fe08) returned 1
	[0289.540] GetFileType (hFile=0x250) returned 0x1
	[0289.540] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1424, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.540] CloseHandle (hObject=0x250) returned 1
	[0289.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf.tl30z")) returned 0x220
	[0289.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.557] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0289.571] SetEvent (hEvent=0x210) returned 1
	[0289.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf")) returned 0x220
	[0289.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF", dwFileAttributes=0x220) returned 1
	[0289.572] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0289.833] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0289.833] ReadFile (in: hFile=0x1d4, lpBuffer=0x111c0000, nNumberOfBytesToRead=0x43b4, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x1131ce18*=0x43b4, lpOverlapped=0x0) returned 1
	[0289.844] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332370 | out: pbBuffer=0x11332370) returned 1
	[0289.844] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bf202 | out: pbBuffer=0x110bf202) returned 1
	[0289.844] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0289.845] GetFileType (hFile=0x1d4) returned 0x1
	[0289.845] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.845] WriteFile (in: hFile=0x1d4, lpBuffer=0x113da000*, nNumberOfBytesToWrite=0x43b4, lpNumberOfBytesWritten=0x1145fdfc, lpOverlapped=0x1145fe08 | out: lpBuffer=0x113da000*, lpNumberOfBytesWritten=0x1145fdfc*=0x43b4, lpOverlapped=0x1145fe08) returned 1
	[0289.846] GetFileType (hFile=0x1d4) returned 0x1
	[0289.846] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x43b4, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.846] GetFileType (hFile=0x1d4) returned 0x1
	[0289.846] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.846] WriteFile (in: hFile=0x1d4, lpBuffer=0x11322380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1145fdfc, lpOverlapped=0x1145fe08 | out: lpBuffer=0x11322380*, lpNumberOfBytesWritten=0x1145fdfc*=0x22d, lpOverlapped=0x1145fe08) returned 1
	[0289.846] GetFileType (hFile=0x1d4) returned 0x1
	[0289.846] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x43b4, lpNewFilePointer=0x0, dwMoveMethod=0x1145fde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.847] CloseHandle (hObject=0x1d4) returned 1
	[0289.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf.tl30z")) returned 0x220
	[0289.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.867] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0289.883] SetEvent (hEvent=0x248) returned 1
	[0289.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf")) returned 0x220
	[0289.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF", dwFileAttributes=0x220) returned 1
	[0289.884] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.180] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0290.180] ReadFile (in: hFile=0x1d4, lpBuffer=0x11194000, nNumberOfBytesToRead=0x35f0, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11194000*, lpNumberOfBytesRead=0x1131ce18*=0x35f0, lpOverlapped=0x0) returned 1
	[0290.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6040 | out: pbBuffer=0x113e6040) returned 1
	[0290.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6038 | out: pbBuffer=0x113e6038) returned 1
	[0290.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144b202 | out: pbBuffer=0x1144b202) returned 1
	[0290.185] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144b24c | out: pbBuffer=0x1144b24c) returned 1
	[0290.186] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6070 | out: pbBuffer=0x113e6070) returned 1
	[0290.186] GetFileType (hFile=0x1d4) returned 0x1
	[0290.186] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.186] WriteFile (in: hFile=0x1d4, lpBuffer=0x11128000*, nNumberOfBytesToWrite=0x35f0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11128000*, lpNumberOfBytesWritten=0x11031dfc*=0x35f0, lpOverlapped=0x11031e08) returned 1
	[0290.187] GetFileType (hFile=0x1d4) returned 0x1
	[0290.187] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x35f0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.187] GetFileType (hFile=0x1d4) returned 0x1
	[0290.187] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.187] WriteFile (in: hFile=0x1d4, lpBuffer=0x11116700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11116700*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0290.187] GetFileType (hFile=0x1d4) returned 0x1
	[0290.187] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x35f0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.187] CloseHandle (hObject=0x1d4) returned 1
	[0290.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf.tl30z")) returned 0x220
	[0290.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.200] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0290.213] SetEvent (hEvent=0x248) returned 1
	[0290.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf")) returned 0x220
	[0290.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF", dwFileAttributes=0x220) returned 1
	[0290.214] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.422] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0290.422] ReadFile (in: hFile=0x1d4, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x16b4, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x1131ce18*=0x16b4, lpOverlapped=0x0) returned 1
	[0290.430] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0290.430] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0290.430] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bf4802 | out: pbBuffer=0x11bf4802) returned 1
	[0290.430] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bf4853 | out: pbBuffer=0x11bf4853) returned 1
	[0290.430] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bf4869 | out: pbBuffer=0x11bf4869) returned 1
	[0290.430] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bf48b2 | out: pbBuffer=0x11bf48b2) returned 1
	[0290.431] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0290.431] GetFileType (hFile=0x1d4) returned 0x1
	[0290.431] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.431] WriteFile (in: hFile=0x1d4, lpBuffer=0x1136a000*, nNumberOfBytesToWrite=0x16b4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1136a000*, lpNumberOfBytesWritten=0x11031dfc*=0x16b4, lpOverlapped=0x11031e08) returned 1
	[0290.431] GetFileType (hFile=0x1d4) returned 0x1
	[0290.432] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x16b4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.432] GetFileType (hFile=0x1d4) returned 0x1
	[0290.432] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.432] WriteFile (in: hFile=0x1d4, lpBuffer=0x11c04e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c04e00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0290.433] GetFileType (hFile=0x1d4) returned 0x1
	[0290.433] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x16b4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.433] CloseHandle (hObject=0x1d4) returned 1
	[0290.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf.tl30z")) returned 0x220
	[0290.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.453] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0290.462] SetEvent (hEvent=0x248) returned 1
	[0290.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf")) returned 0x220
	[0290.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF", dwFileAttributes=0x220) returned 1
	[0290.463] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.688] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0290.688] ReadFile (in: hFile=0x1d4, lpBuffer=0x11458000, nNumberOfBytesToRead=0xd04, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11458000*, lpNumberOfBytesRead=0x1131ce18*=0xd04, lpOverlapped=0x0) returned 1
	[0290.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65b0 | out: pbBuffer=0x113e65b0) returned 1
	[0290.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1146c802 | out: pbBuffer=0x1146c802) returned 1
	[0290.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1146c87e | out: pbBuffer=0x1146c87e) returned 1
	[0290.743] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1146c8e0 | out: pbBuffer=0x1146c8e0) returned 1
	[0290.743] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65e0 | out: pbBuffer=0x113e65e0) returned 1
	[0290.743] GetFileType (hFile=0x1d4) returned 0x1
	[0290.743] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.743] WriteFile (in: hFile=0x1d4, lpBuffer=0x110e6000*, nNumberOfBytesToWrite=0xd04, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110e6000*, lpNumberOfBytesWritten=0x11031dfc*=0xd04, lpOverlapped=0x11031e08) returned 1
	[0290.744] GetFileType (hFile=0x1d4) returned 0x1
	[0290.744] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xd04, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.744] GetFileType (hFile=0x1d4) returned 0x1
	[0290.744] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.744] WriteFile (in: hFile=0x1d4, lpBuffer=0x11259880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11259880*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0290.745] GetFileType (hFile=0x1d4) returned 0x1
	[0290.745] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xd04, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.745] CloseHandle (hObject=0x1d4) returned 1
	[0290.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf.tl30z")) returned 0x220
	[0290.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.761] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0290.773] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0290.878] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0290.885] SetEvent (hEvent=0x234) returned 1
	[0290.885] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf")) returned 0x220
	[0290.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF", dwFileAttributes=0x220) returned 1
	[0290.885] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.084] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0291.085] ReadFile (in: hFile=0x1d4, lpBuffer=0x11200000, nNumberOfBytesToRead=0xbcfc, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11200000*, lpNumberOfBytesRead=0x11287e18*=0xbcfc, lpOverlapped=0x0) returned 1
	[0291.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6890 | out: pbBuffer=0x113e6890) returned 1
	[0291.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6888 | out: pbBuffer=0x113e6888) returned 1
	[0291.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1146de02 | out: pbBuffer=0x1146de02) returned 1
	[0291.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1146dee6 | out: pbBuffer=0x1146dee6) returned 1
	[0291.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e68c0 | out: pbBuffer=0x113e68c0) returned 1
	[0291.094] GetFileType (hFile=0x1d4) returned 0x1
	[0291.094] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.094] WriteFile (in: hFile=0x1d4, lpBuffer=0x11102000*, nNumberOfBytesToWrite=0xbcfc, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x11102000*, lpNumberOfBytesWritten=0x112fddfc*=0xbcfc, lpOverlapped=0x112fde08) returned 1
	[0291.095] GetFileType (hFile=0x1d4) returned 0x1
	[0291.095] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xbcfc, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.095] GetFileType (hFile=0x1d4) returned 0x1
	[0291.095] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.095] WriteFile (in: hFile=0x1d4, lpBuffer=0x11295500*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x112fddfc, lpOverlapped=0x112fde08 | out: lpBuffer=0x11295500*, lpNumberOfBytesWritten=0x112fddfc*=0x23c, lpOverlapped=0x112fde08) returned 1
	[0291.096] GetFileType (hFile=0x1d4) returned 0x1
	[0291.096] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xbcfc, lpNewFilePointer=0x0, dwMoveMethod=0x112fdde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.096] CloseHandle (hObject=0x1d4) returned 1
	[0291.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf.tl30z")) returned 0x220
	[0291.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.107] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0291.118] SetEvent (hEvent=0x234) returned 1
	[0291.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf")) returned 0x220
	[0291.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF", dwFileAttributes=0x220) returned 1
	[0291.118] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.345] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0291.345] ReadFile (in: hFile=0x1d4, lpBuffer=0x1144a000, nNumberOfBytesToRead=0x3490, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1144a000*, lpNumberOfBytesRead=0x11287e18*=0x3490, lpOverlapped=0x0) returned 1
	[0291.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0291.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11373202 | out: pbBuffer=0x11373202) returned 1
	[0291.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113732e1 | out: pbBuffer=0x113732e1) returned 1
	[0291.352] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0291.352] GetFileType (hFile=0x1d4) returned 0x1
	[0291.353] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.353] WriteFile (in: hFile=0x1d4, lpBuffer=0x11320000*, nNumberOfBytesToWrite=0x3490, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11320000*, lpNumberOfBytesWritten=0x1141ddfc*=0x3490, lpOverlapped=0x1141de08) returned 1
	[0291.353] GetFileType (hFile=0x1d4) returned 0x1
	[0291.353] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3490, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.353] GetFileType (hFile=0x1d4) returned 0x1
	[0291.353] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.354] WriteFile (in: hFile=0x1d4, lpBuffer=0x11257880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11257880*, lpNumberOfBytesWritten=0x1141ddfc*=0x227, lpOverlapped=0x1141de08) returned 1
	[0291.354] GetFileType (hFile=0x1d4) returned 0x1
	[0291.354] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3490, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.354] CloseHandle (hObject=0x1d4) returned 1
	[0291.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf.tl30z")) returned 0x220
	[0291.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.370] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0291.381] SetEvent (hEvent=0x234) returned 1
	[0291.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf")) returned 0x220
	[0291.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF", dwFileAttributes=0x220) returned 1
	[0291.382] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0291.511] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0291.511] ReadFile (in: hFile=0x224, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x11b8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x11287e18*=0x11b8, lpOverlapped=0x0) returned 1
	[0291.516] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66b0 | out: pbBuffer=0x113e66b0) returned 1
	[0291.516] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ed302 | out: pbBuffer=0x110ed302) returned 1
	[0291.517] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110ed362 | out: pbBuffer=0x110ed362) returned 1
	[0291.517] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110ed3c4 | out: pbBuffer=0x110ed3c4) returned 1
	[0291.517] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110ed3ce | out: pbBuffer=0x110ed3ce) returned 1
	[0291.517] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66e0 | out: pbBuffer=0x113e66e0) returned 1
	[0291.517] GetFileType (hFile=0x224) returned 0x1
	[0291.518] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.518] WriteFile (in: hFile=0x224, lpBuffer=0x112ca000*, nNumberOfBytesToWrite=0x11b8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112ca000*, lpNumberOfBytesWritten=0x1102bdfc*=0x11b8, lpOverlapped=0x1102be08) returned 1
	[0291.518] GetFileType (hFile=0x224) returned 0x1
	[0291.519] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x11b8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.519] GetFileType (hFile=0x224) returned 0x1
	[0291.519] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.519] WriteFile (in: hFile=0x224, lpBuffer=0x112b6700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112b6700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0291.519] GetFileType (hFile=0x224) returned 0x1
	[0291.520] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x11b8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.520] CloseHandle (hObject=0x224) returned 1
	[0291.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf.tl30z")) returned 0x220
	[0291.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.522] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0291.525] SetEvent (hEvent=0x234) returned 1
	[0291.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf")) returned 0x220
	[0291.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF", dwFileAttributes=0x220) returned 1
	[0291.525] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0291.596] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0291.597] ReadFile (in: hFile=0x1d8, lpBuffer=0x11374000, nNumberOfBytesToRead=0x1498, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11374000*, lpNumberOfBytesRead=0x1128ae18*=0x1498, lpOverlapped=0x0) returned 1
	[0291.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0291.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e368 | out: pbBuffer=0x1104e368) returned 1
	[0291.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1121f302 | out: pbBuffer=0x1121f302) returned 1
	[0291.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121f3aa | out: pbBuffer=0x1121f3aa) returned 1
	[0291.602] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3a0 | out: pbBuffer=0x1104e3a0) returned 1
	[0291.602] GetFileType (hFile=0x1d8) returned 0x1
	[0291.602] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.602] WriteFile (in: hFile=0x1d8, lpBuffer=0x11206000*, nNumberOfBytesToWrite=0x1498, lpNumberOfBytesWritten=0x110f5dfc, lpOverlapped=0x110f5e08 | out: lpBuffer=0x11206000*, lpNumberOfBytesWritten=0x110f5dfc*=0x1498, lpOverlapped=0x110f5e08) returned 1
	[0291.602] GetFileType (hFile=0x1d8) returned 0x1
	[0291.603] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1498, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.603] GetFileType (hFile=0x1d8) returned 0x1
	[0291.603] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.603] WriteFile (in: hFile=0x1d8, lpBuffer=0x11241880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x110f5dfc, lpOverlapped=0x110f5e08 | out: lpBuffer=0x11241880*, lpNumberOfBytesWritten=0x110f5dfc*=0x227, lpOverlapped=0x110f5e08) returned 1
	[0291.603] GetFileType (hFile=0x1d8) returned 0x1
	[0291.603] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1498, lpNewFilePointer=0x0, dwMoveMethod=0x110f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.603] CloseHandle (hObject=0x1d8) returned 1
	[0291.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf.tl30z")) returned 0x220
	[0291.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.606] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0291.608] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0291.610] SetEvent (hEvent=0x1b0) returned 1
	[0291.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf")) returned 0x220
	[0291.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF", dwFileAttributes=0x220) returned 1
	[0291.610] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0291.674] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0291.674] ReadFile (in: hFile=0x1d8, lpBuffer=0x110e2000, nNumberOfBytesToRead=0x3014, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x110e2000*, lpNumberOfBytesRead=0x11288e18*=0x3014, lpOverlapped=0x0) returned 1
	[0291.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0291.681] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267d02 | out: pbBuffer=0x11267d02) returned 1
	[0291.682] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267d44 | out: pbBuffer=0x11267d44) returned 1
	[0291.682] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267dc7 | out: pbBuffer=0x11267dc7) returned 1
	[0291.682] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332550 | out: pbBuffer=0x11332550) returned 1
	[0291.683] GetFileType (hFile=0x1d8) returned 0x1
	[0291.683] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.683] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c8000*, nNumberOfBytesToWrite=0x3014, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113c8000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3014, lpOverlapped=0x1102be08) returned 1
	[0291.683] GetFileType (hFile=0x1d8) returned 0x1
	[0291.683] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3014, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.683] GetFileType (hFile=0x1d8) returned 0x1
	[0291.684] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.684] WriteFile (in: hFile=0x1d8, lpBuffer=0x113aea80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113aea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0291.684] GetFileType (hFile=0x1d8) returned 0x1
	[0291.684] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3014, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.684] CloseHandle (hObject=0x1d8) returned 1
	[0291.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf.tl30z")) returned 0x220
	[0291.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.687] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0291.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf")) returned 0x220
	[0291.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF", dwFileAttributes=0x220) returned 1
	[0291.688] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0291.751] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0291.751] ReadFile (in: hFile=0x1d8, lpBuffer=0x110fc000, nNumberOfBytesToRead=0x2c18, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x110fc000*, lpNumberOfBytesRead=0x11288e18*=0x2c18, lpOverlapped=0x0) returned 1
	[0291.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0291.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3e8 | out: pbBuffer=0x1140f3e8) returned 1
	[0291.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130fd02 | out: pbBuffer=0x1130fd02) returned 1
	[0291.755] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130fd03 | out: pbBuffer=0x1130fd03) returned 1
	[0291.756] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130fd1f | out: pbBuffer=0x1130fd1f) returned 1
	[0291.756] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130fd73 | out: pbBuffer=0x1130fd73) returned 1
	[0291.756] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0291.756] GetFileType (hFile=0x1d8) returned 0x1
	[0291.757] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.757] WriteFile (in: hFile=0x1d8, lpBuffer=0x112ae000*, nNumberOfBytesToWrite=0x2c18, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x112ae000*, lpNumberOfBytesWritten=0x112f5dfc*=0x2c18, lpOverlapped=0x112f5e08) returned 1
	[0291.757] GetFileType (hFile=0x1d8) returned 0x1
	[0291.757] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2c18, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.757] GetFileType (hFile=0x1d8) returned 0x1
	[0291.758] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.758] WriteFile (in: hFile=0x1d8, lpBuffer=0x1129a700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x1129a700*, lpNumberOfBytesWritten=0x112f5dfc*=0x227, lpOverlapped=0x112f5e08) returned 1
	[0291.758] GetFileType (hFile=0x1d8) returned 0x1
	[0291.758] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2c18, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0291.758] CloseHandle (hObject=0x1d8) returned 1
	[0291.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf.tl30z")) returned 0x220
	[0291.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.771] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0291.774] SetEvent (hEvent=0x1b0) returned 1
	[0291.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf")) returned 0x220
	[0291.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF", dwFileAttributes=0x220) returned 1
	[0291.774] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.915] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0291.915] ReadFile (in: hFile=0x1d4, lpBuffer=0x11476000, nNumberOfBytesToRead=0x1f1c, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11476000*, lpNumberOfBytesRead=0x11288e18*=0x1f1c, lpOverlapped=0x0) returned 1
	[0291.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0291.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0291.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267202 | out: pbBuffer=0x11267202) returned 1
	[0291.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126721c | out: pbBuffer=0x1126721c) returned 1
	[0291.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267221 | out: pbBuffer=0x11267221) returned 1
	[0291.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0291.920] GetFileType (hFile=0x1d4) returned 0x1
	[0291.920] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.920] WriteFile (in: hFile=0x1d4, lpBuffer=0x1139c000*, nNumberOfBytesToWrite=0x1f1c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1139c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1f1c, lpOverlapped=0x1102be08) returned 1
	[0291.920] GetFileType (hFile=0x1d4) returned 0x1
	[0291.921] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1f1c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.921] GetFileType (hFile=0x1d4) returned 0x1
	[0291.921] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.921] WriteFile (in: hFile=0x1d4, lpBuffer=0x112c9c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112c9c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0291.921] GetFileType (hFile=0x1d4) returned 0x1
	[0291.921] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1f1c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0291.921] CloseHandle (hObject=0x1d4) returned 1
	[0291.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf.tl30z")) returned 0x220
	[0291.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0291.923] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0291.925] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0291.926] SetEvent (hEvent=0x248) returned 1
	[0291.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf")) returned 0x220
	[0291.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF", dwFileAttributes=0x220) returned 1
	[0291.927] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0292.033] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0292.033] ReadFile (in: hFile=0x1fc, lpBuffer=0x1119e000, nNumberOfBytesToRead=0x52e0, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1119e000*, lpNumberOfBytesRead=0x1128ae18*=0x52e0, lpOverlapped=0x0) returned 1
	[0292.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66f0 | out: pbBuffer=0x113e66f0) returned 1
	[0292.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66e8 | out: pbBuffer=0x113e66e8) returned 1
	[0292.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c3202 | out: pbBuffer=0x113c3202) returned 1
	[0292.043] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6720 | out: pbBuffer=0x113e6720) returned 1
	[0292.045] GetFileType (hFile=0x1fc) returned 0x1
	[0292.046] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.046] WriteFile (in: hFile=0x1fc, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x52e0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1102bdfc*=0x52e0, lpOverlapped=0x1102be08) returned 1
	[0292.046] GetFileType (hFile=0x1fc) returned 0x1
	[0292.047] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x52e0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.048] GetFileType (hFile=0x1fc) returned 0x1
	[0292.050] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.050] WriteFile (in: hFile=0x1fc, lpBuffer=0x112f6700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112f6700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0292.050] GetFileType (hFile=0x1fc) returned 0x1
	[0292.051] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x52e0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.052] CloseHandle (hObject=0x1fc) returned 1
	[0292.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf.tl30z")) returned 0x220
	[0292.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.061] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0292.068] SetEvent (hEvent=0x248) returned 1
	[0292.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf")) returned 0x220
	[0292.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF", dwFileAttributes=0x220) returned 1
	[0292.068] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0292.188] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0292.188] ReadFile (in: hFile=0x250, lpBuffer=0x11122000, nNumberOfBytesToRead=0x1374, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11122000*, lpNumberOfBytesRead=0x1128ae18*=0x1374, lpOverlapped=0x0) returned 1
	[0292.193] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0292.193] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1111a902 | out: pbBuffer=0x1111a902) returned 1
	[0292.194] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1111a9bc | out: pbBuffer=0x1111a9bc) returned 1
	[0292.194] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0292.194] GetFileType (hFile=0x250) returned 0x1
	[0292.195] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.195] WriteFile (in: hFile=0x250, lpBuffer=0x11142000*, nNumberOfBytesToWrite=0x1374, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x11142000*, lpNumberOfBytesWritten=0x1136fdfc*=0x1374, lpOverlapped=0x1136fe08) returned 1
	[0292.195] GetFileType (hFile=0x250) returned 0x1
	[0292.195] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1374, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.195] GetFileType (hFile=0x250) returned 0x1
	[0292.195] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.196] WriteFile (in: hFile=0x250, lpBuffer=0x11109500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x11109500*, lpNumberOfBytesWritten=0x1136fdfc*=0x22d, lpOverlapped=0x1136fe08) returned 1
	[0292.196] GetFileType (hFile=0x250) returned 0x1
	[0292.196] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1374, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.196] CloseHandle (hObject=0x250) returned 1
	[0292.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf.tl30z")) returned 0x220
	[0292.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.199] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0292.201] SetEvent (hEvent=0x118) returned 1
	[0292.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf")) returned 0x220
	[0292.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF", dwFileAttributes=0x220) returned 1
	[0292.201] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0292.290] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0292.290] ReadFile (in: hFile=0x250, lpBuffer=0x11396000, nNumberOfBytesToRead=0x1918, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x1128ae18*=0x1918, lpOverlapped=0x0) returned 1
	[0292.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0292.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11223a02 | out: pbBuffer=0x11223a02) returned 1
	[0292.295] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0292.296] GetFileType (hFile=0x250) returned 0x1
	[0292.296] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.296] WriteFile (in: hFile=0x250, lpBuffer=0x11476000*, nNumberOfBytesToWrite=0x1918, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11476000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1918, lpOverlapped=0x1102be08) returned 1
	[0292.296] GetFileType (hFile=0x250) returned 0x1
	[0292.296] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1918, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.297] GetFileType (hFile=0x250) returned 0x1
	[0292.297] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.297] WriteFile (in: hFile=0x250, lpBuffer=0x11443880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11443880*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0292.297] GetFileType (hFile=0x250) returned 0x1
	[0292.297] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1918, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.297] CloseHandle (hObject=0x250) returned 1
	[0292.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf.tl30z")) returned 0x220
	[0292.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.300] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0292.303] SetEvent (hEvent=0x1b0) returned 1
	[0292.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf")) returned 0x220
	[0292.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF", dwFileAttributes=0x220) returned 1
	[0292.304] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0293.012] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0293.012] ReadFile (in: hFile=0x224, lpBuffer=0x113f1000, nNumberOfBytesToRead=0x2fac, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113f1000*, lpNumberOfBytesRead=0x1128ae18*=0x2fac, lpOverlapped=0x0) returned 1
	[0293.017] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0293.017] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0293.017] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11063202 | out: pbBuffer=0x11063202) returned 1
	[0293.018] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0293.018] GetFileType (hFile=0x224) returned 0x1
	[0293.018] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.018] WriteFile (in: hFile=0x224, lpBuffer=0x11306000*, nNumberOfBytesToWrite=0x2fac, lpNumberOfBytesWritten=0x113addfc, lpOverlapped=0x113ade08 | out: lpBuffer=0x11306000*, lpNumberOfBytesWritten=0x113addfc*=0x2fac, lpOverlapped=0x113ade08) returned 1
	[0293.019] GetFileType (hFile=0x224) returned 0x1
	[0293.019] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2fac, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.019] GetFileType (hFile=0x224) returned 0x1
	[0293.019] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.019] WriteFile (in: hFile=0x224, lpBuffer=0x113c9880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x113addfc, lpOverlapped=0x113ade08 | out: lpBuffer=0x113c9880*, lpNumberOfBytesWritten=0x113addfc*=0x233, lpOverlapped=0x113ade08) returned 1
	[0293.020] GetFileType (hFile=0x224) returned 0x1
	[0293.020] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2fac, lpNewFilePointer=0x0, dwMoveMethod=0x113adde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.020] CloseHandle (hObject=0x224) returned 1
	[0293.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf.tl30z")) returned 0x220
	[0293.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.022] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0293.026] SetEvent (hEvent=0x210) returned 1
	[0293.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf")) returned 0x220
	[0293.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF", dwFileAttributes=0x220) returned 1
	[0293.026] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0293.116] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0293.117] ReadFile (in: hFile=0x288, lpBuffer=0x111de000, nNumberOfBytesToRead=0x1ba0, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x111de000*, lpNumberOfBytesRead=0x1128ae18*=0x1ba0, lpOverlapped=0x0) returned 1
	[0293.121] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63a0 | out: pbBuffer=0x113e63a0) returned 1
	[0293.121] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6398 | out: pbBuffer=0x113e6398) returned 1
	[0293.121] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b0e02 | out: pbBuffer=0x112b0e02) returned 1
	[0293.121] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b0e88 | out: pbBuffer=0x112b0e88) returned 1
	[0293.121] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b0e93 | out: pbBuffer=0x112b0e93) returned 1
	[0293.122] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63d0 | out: pbBuffer=0x113e63d0) returned 1
	[0293.123] GetFileType (hFile=0x288) returned 0x1
	[0293.123] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.123] WriteFile (in: hFile=0x288, lpBuffer=0x111f8000*, nNumberOfBytesToWrite=0x1ba0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111f8000*, lpNumberOfBytesWritten=0x11031dfc*=0x1ba0, lpOverlapped=0x11031e08) returned 1
	[0293.123] GetFileType (hFile=0x288) returned 0x1
	[0293.123] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1ba0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.123] GetFileType (hFile=0x288) returned 0x1
	[0293.124] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.124] WriteFile (in: hFile=0x288, lpBuffer=0x111ec380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111ec380*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0293.124] GetFileType (hFile=0x288) returned 0x1
	[0293.124] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1ba0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.124] CloseHandle (hObject=0x288) returned 1
	[0293.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf.tl30z")) returned 0x220
	[0293.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.127] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0293.131] SetEvent (hEvent=0x210) returned 1
	[0293.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf")) returned 0x220
	[0293.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF", dwFileAttributes=0x220) returned 1
	[0293.132] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0293.219] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0293.219] ReadFile (in: hFile=0x1fc, lpBuffer=0x1114e000, nNumberOfBytesToRead=0x1b68, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1114e000*, lpNumberOfBytesRead=0x1128ae18*=0x1b68, lpOverlapped=0x0) returned 1
	[0293.225] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1124c5f0 | out: pbBuffer=0x1124c5f0) returned 1
	[0293.225] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1124c5e8 | out: pbBuffer=0x1124c5e8) returned 1
	[0293.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11154602 | out: pbBuffer=0x11154602) returned 1
	[0293.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11154628 | out: pbBuffer=0x11154628) returned 1
	[0293.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111546ad | out: pbBuffer=0x111546ad) returned 1
	[0293.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1124c620 | out: pbBuffer=0x1124c620) returned 1
	[0293.227] GetFileType (hFile=0x1fc) returned 0x1
	[0293.227] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.227] WriteFile (in: hFile=0x1fc, lpBuffer=0x11172000*, nNumberOfBytesToWrite=0x1b68, lpNumberOfBytesWritten=0x113abdfc, lpOverlapped=0x113abe08 | out: lpBuffer=0x11172000*, lpNumberOfBytesWritten=0x113abdfc*=0x1b68, lpOverlapped=0x113abe08) returned 1
	[0293.227] GetFileType (hFile=0x1fc) returned 0x1
	[0293.228] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1b68, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.228] GetFileType (hFile=0x1fc) returned 0x1
	[0293.228] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.228] WriteFile (in: hFile=0x1fc, lpBuffer=0x11133c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113abdfc, lpOverlapped=0x113abe08 | out: lpBuffer=0x11133c00*, lpNumberOfBytesWritten=0x113abdfc*=0x22d, lpOverlapped=0x113abe08) returned 1
	[0293.228] GetFileType (hFile=0x1fc) returned 0x1
	[0293.228] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1b68, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.228] CloseHandle (hObject=0x1fc) returned 1
	[0293.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf.tl30z")) returned 0x220
	[0293.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.231] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0293.237] SetEvent (hEvent=0x210) returned 1
	[0293.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf")) returned 0x220
	[0293.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF", dwFileAttributes=0x220) returned 1
	[0293.238] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0293.335] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0293.336] ReadFile (in: hFile=0x224, lpBuffer=0x113fa000, nNumberOfBytesToRead=0x138c, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113fa000*, lpNumberOfBytesRead=0x1128ae18*=0x138c, lpOverlapped=0x0) returned 1
	[0293.342] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0293.342] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11419202 | out: pbBuffer=0x11419202) returned 1
	[0293.342] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11419241 | out: pbBuffer=0x11419241) returned 1
	[0293.342] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11419288 | out: pbBuffer=0x11419288) returned 1
	[0293.343] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0293.343] GetFileType (hFile=0x224) returned 0x1
	[0293.343] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.343] WriteFile (in: hFile=0x224, lpBuffer=0x11152000*, nNumberOfBytesToWrite=0x138c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11152000*, lpNumberOfBytesWritten=0x11031dfc*=0x138c, lpOverlapped=0x11031e08) returned 1
	[0293.343] GetFileType (hFile=0x224) returned 0x1
	[0293.343] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x138c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.344] GetFileType (hFile=0x224) returned 0x1
	[0293.344] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.344] WriteFile (in: hFile=0x224, lpBuffer=0x1124e380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1124e380*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0293.344] GetFileType (hFile=0x224) returned 0x1
	[0293.344] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x138c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.344] CloseHandle (hObject=0x224) returned 1
	[0293.346] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf.tl30z")) returned 0x220
	[0293.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.349] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0293.351] SetEvent (hEvent=0x218) returned 1
	[0293.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg")) returned 0x220
	[0293.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG", dwFileAttributes=0x220) returned 1
	[0293.352] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0293.429] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0293.429] ReadFile (in: hFile=0x224, lpBuffer=0x110f0000, nNumberOfBytesToRead=0x9d27, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x110f0000*, lpNumberOfBytesRead=0x1128ae18*=0x9d27, lpOverlapped=0x0) returned 1
	[0293.435] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0293.435] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11106802 | out: pbBuffer=0x11106802) returned 1
	[0293.435] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0293.436] GetFileType (hFile=0x224) returned 0x1
	[0293.436] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.437] WriteFile (in: hFile=0x224, lpBuffer=0x110d0000*, nNumberOfBytesToWrite=0x9d27, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x110d0000*, lpNumberOfBytesWritten=0x113efdfc*=0x9d27, lpOverlapped=0x113efe08) returned 1
	[0293.437] GetFileType (hFile=0x224) returned 0x1
	[0293.437] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x9d27, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.438] GetFileType (hFile=0x224) returned 0x1
	[0293.438] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.438] WriteFile (in: hFile=0x224, lpBuffer=0x111b2a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x111b2a80*, lpNumberOfBytesWritten=0x113efdfc*=0x236, lpOverlapped=0x113efe08) returned 1
	[0293.438] GetFileType (hFile=0x224) returned 0x1
	[0293.438] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x9d27, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.438] CloseHandle (hObject=0x224) returned 1
	[0293.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg.tl30z")) returned 0x220
	[0293.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.441] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0293.445] SetEvent (hEvent=0x218) returned 1
	[0293.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg")) returned 0x220
	[0293.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG", dwFileAttributes=0x220) returned 1
	[0293.446] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0293.551] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0293.551] ReadFile (in: hFile=0x1d4, lpBuffer=0x11bca800, nNumberOfBytesToRead=0x45cb, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11bca800*, lpNumberOfBytesRead=0x1128ae18*=0x45cb, lpOverlapped=0x0) returned 1
	[0293.557] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0293.557] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0293.557] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1126c802 | out: pbBuffer=0x1126c802) returned 1
	[0293.558] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126c81c | out: pbBuffer=0x1126c81c) returned 1
	[0293.558] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0293.559] GetFileType (hFile=0x1d4) returned 0x1
	[0293.559] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.559] WriteFile (in: hFile=0x1d4, lpBuffer=0x112de000*, nNumberOfBytesToWrite=0x45cb, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112de000*, lpNumberOfBytesWritten=0x11031dfc*=0x45cb, lpOverlapped=0x11031e08) returned 1
	[0293.560] GetFileType (hFile=0x1d4) returned 0x1
	[0293.560] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x45cb, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.560] GetFileType (hFile=0x1d4) returned 0x1
	[0293.560] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.560] WriteFile (in: hFile=0x1d4, lpBuffer=0x1123ae00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1123ae00*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0293.561] GetFileType (hFile=0x1d4) returned 0x1
	[0293.561] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x45cb, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.561] CloseHandle (hObject=0x1d4) returned 1
	[0293.563] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg.tl30z")) returned 0x220
	[0293.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.564] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0293.569] SetEvent (hEvent=0x210) returned 1
	[0293.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg")) returned 0x220
	[0293.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG", dwFileAttributes=0x220) returned 1
	[0293.569] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0293.754] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0293.754] ReadFile (in: hFile=0x288, lpBuffer=0x112be000, nNumberOfBytesToRead=0x84a6, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x112be000*, lpNumberOfBytesRead=0x1128ae18*=0x84a6, lpOverlapped=0x0) returned 1
	[0293.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0293.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1143a802 | out: pbBuffer=0x1143a802) returned 1
	[0293.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1143a8e7 | out: pbBuffer=0x1143a8e7) returned 1
	[0293.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0293.763] GetFileType (hFile=0x288) returned 0x1
	[0293.763] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.763] WriteFile (in: hFile=0x288, lpBuffer=0x11098000*, nNumberOfBytesToWrite=0x84a6, lpNumberOfBytesWritten=0x112a3dfc, lpOverlapped=0x112a3e08 | out: lpBuffer=0x11098000*, lpNumberOfBytesWritten=0x112a3dfc*=0x84a6, lpOverlapped=0x112a3e08) returned 1
	[0293.764] GetFileType (hFile=0x288) returned 0x1
	[0293.764] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x84a6, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.764] GetFileType (hFile=0x288) returned 0x1
	[0293.764] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.764] WriteFile (in: hFile=0x288, lpBuffer=0x1144ca80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112a3dfc, lpOverlapped=0x112a3e08 | out: lpBuffer=0x1144ca80*, lpNumberOfBytesWritten=0x112a3dfc*=0x22d, lpOverlapped=0x112a3e08) returned 1
	[0293.765] GetFileType (hFile=0x288) returned 0x1
	[0293.765] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x84a6, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.765] CloseHandle (hObject=0x288) returned 1
	[0293.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg.tl30z")) returned 0x220
	[0293.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.767] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0293.770] SetEvent (hEvent=0x210) returned 1
	[0293.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg")) returned 0x220
	[0293.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG", dwFileAttributes=0x220) returned 1
	[0293.771] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0293.864] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0293.864] ReadFile (in: hFile=0x1d8, lpBuffer=0x11090000, nNumberOfBytesToRead=0x955d, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x1128ae18*=0x955d, lpOverlapped=0x0) returned 1
	[0293.872] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0293.872] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0293.872] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137c802 | out: pbBuffer=0x1137c802) returned 1
	[0293.873] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0293.874] GetFileType (hFile=0x1d8) returned 0x1
	[0293.874] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.874] WriteFile (in: hFile=0x1d8, lpBuffer=0x113aa000*, nNumberOfBytesToWrite=0x955d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113aa000*, lpNumberOfBytesWritten=0x11031dfc*=0x955d, lpOverlapped=0x11031e08) returned 1
	[0293.875] GetFileType (hFile=0x1d8) returned 0x1
	[0293.875] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x955d, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.875] GetFileType (hFile=0x1d8) returned 0x1
	[0293.875] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.876] WriteFile (in: hFile=0x1d8, lpBuffer=0x11384a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11384a80*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0293.876] GetFileType (hFile=0x1d8) returned 0x1
	[0293.876] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x955d, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.876] CloseHandle (hObject=0x1d8) returned 1
	[0293.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg.tl30z")) returned 0x220
	[0293.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.879] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0293.884] SetEvent (hEvent=0x234) returned 1
	[0293.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf")) returned 0x220
	[0293.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF", dwFileAttributes=0x220) returned 1
	[0293.884] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0294.024] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0294.024] ReadFile (in: hFile=0x224, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x1104, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x1128ae18*=0x1104, lpOverlapped=0x0) returned 1
	[0294.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0294.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1146f302 | out: pbBuffer=0x1146f302) returned 1
	[0294.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1146f36d | out: pbBuffer=0x1146f36d) returned 1
	[0294.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0294.031] GetFileType (hFile=0x224) returned 0x1
	[0294.031] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.031] WriteFile (in: hFile=0x224, lpBuffer=0x11454000*, nNumberOfBytesToWrite=0x1104, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x11454000*, lpNumberOfBytesWritten=0x112a1dfc*=0x1104, lpOverlapped=0x112a1e08) returned 1
	[0294.031] GetFileType (hFile=0x224) returned 0x1
	[0294.031] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1104, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.032] GetFileType (hFile=0x224) returned 0x1
	[0294.032] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.032] WriteFile (in: hFile=0x224, lpBuffer=0x110e7880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x110e7880*, lpNumberOfBytesWritten=0x112a1dfc*=0x221, lpOverlapped=0x112a1e08) returned 1
	[0294.032] GetFileType (hFile=0x224) returned 0x1
	[0294.032] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1104, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.032] CloseHandle (hObject=0x224) returned 1
	[0294.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf.tl30z")) returned 0x220
	[0294.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.036] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.038] SetEvent (hEvent=0x210) returned 1
	[0294.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf")) returned 0x220
	[0294.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF", dwFileAttributes=0x220) returned 1
	[0294.039] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0294.145] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0294.145] ReadFile (in: hFile=0x224, lpBuffer=0x110bc000, nNumberOfBytesToRead=0x2988, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x110bc000*, lpNumberOfBytesRead=0x1128ae18*=0x2988, lpOverlapped=0x0) returned 1
	[0294.151] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0294.151] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11350802 | out: pbBuffer=0x11350802) returned 1
	[0294.151] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0294.152] GetFileType (hFile=0x224) returned 0x1
	[0294.152] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.152] WriteFile (in: hFile=0x224, lpBuffer=0x113a0000*, nNumberOfBytesToWrite=0x2988, lpNumberOfBytesWritten=0x112d9dfc, lpOverlapped=0x112d9e08 | out: lpBuffer=0x113a0000*, lpNumberOfBytesWritten=0x112d9dfc*=0x2988, lpOverlapped=0x112d9e08) returned 1
	[0294.152] GetFileType (hFile=0x224) returned 0x1
	[0294.152] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2988, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.152] GetFileType (hFile=0x224) returned 0x1
	[0294.152] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.152] WriteFile (in: hFile=0x224, lpBuffer=0x1121b180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112d9dfc, lpOverlapped=0x112d9e08 | out: lpBuffer=0x1121b180*, lpNumberOfBytesWritten=0x112d9dfc*=0x227, lpOverlapped=0x112d9e08) returned 1
	[0294.153] GetFileType (hFile=0x224) returned 0x1
	[0294.153] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2988, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.153] CloseHandle (hObject=0x224) returned 1
	[0294.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf.tl30z")) returned 0x220
	[0294.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.156] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.158] SetEvent (hEvent=0x234) returned 1
	[0294.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf")) returned 0x220
	[0294.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF", dwFileAttributes=0x220) returned 1
	[0294.159] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.235] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0294.235] ReadFile (in: hFile=0x1fc, lpBuffer=0x11232000, nNumberOfBytesToRead=0x3734, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11232000*, lpNumberOfBytesRead=0x1128ae18*=0x3734, lpOverlapped=0x0) returned 1
	[0294.240] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0294.241] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332658 | out: pbBuffer=0x11332658) returned 1
	[0294.241] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11472702 | out: pbBuffer=0x11472702) returned 1
	[0294.241] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0294.242] GetFileType (hFile=0x1fc) returned 0x1
	[0294.242] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.242] WriteFile (in: hFile=0x1fc, lpBuffer=0x112a8000*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0x112d9dfc, lpOverlapped=0x112d9e08 | out: lpBuffer=0x112a8000*, lpNumberOfBytesWritten=0x112d9dfc*=0x3734, lpOverlapped=0x112d9e08) returned 1
	[0294.242] GetFileType (hFile=0x1fc) returned 0x1
	[0294.242] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3734, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.242] GetFileType (hFile=0x1fc) returned 0x1
	[0294.243] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.243] WriteFile (in: hFile=0x1fc, lpBuffer=0x11293c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112d9dfc, lpOverlapped=0x112d9e08 | out: lpBuffer=0x11293c00*, lpNumberOfBytesWritten=0x112d9dfc*=0x230, lpOverlapped=0x112d9e08) returned 1
	[0294.243] GetFileType (hFile=0x1fc) returned 0x1
	[0294.243] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3734, lpNewFilePointer=0x0, dwMoveMethod=0x112d9de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.243] CloseHandle (hObject=0x1fc) returned 1
	[0294.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf.tl30z")) returned 0x220
	[0294.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.246] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf")) returned 0x220
	[0294.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF", dwFileAttributes=0x220) returned 1
	[0294.248] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.342] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0294.342] ReadFile (in: hFile=0x1fc, lpBuffer=0x111ea000, nNumberOfBytesToRead=0x2a80, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x111ea000*, lpNumberOfBytesRead=0x1128ae18*=0x2a80, lpOverlapped=0x0) returned 1
	[0294.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6800 | out: pbBuffer=0x113e6800) returned 1
	[0294.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e67f8 | out: pbBuffer=0x113e67f8) returned 1
	[0294.347] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c5002 | out: pbBuffer=0x113c5002) returned 1
	[0294.348] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6830 | out: pbBuffer=0x113e6830) returned 1
	[0294.349] GetFileType (hFile=0x1fc) returned 0x1
	[0294.349] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.349] WriteFile (in: hFile=0x1fc, lpBuffer=0x11188000*, nNumberOfBytesToWrite=0x2a80, lpNumberOfBytesWritten=0x112d5dfc, lpOverlapped=0x112d5e08 | out: lpBuffer=0x11188000*, lpNumberOfBytesWritten=0x112d5dfc*=0x2a80, lpOverlapped=0x112d5e08) returned 1
	[0294.349] GetFileType (hFile=0x1fc) returned 0x1
	[0294.350] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2a80, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.350] GetFileType (hFile=0x1fc) returned 0x1
	[0294.350] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.350] WriteFile (in: hFile=0x1fc, lpBuffer=0x11182380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112d5dfc, lpOverlapped=0x112d5e08 | out: lpBuffer=0x11182380*, lpNumberOfBytesWritten=0x112d5dfc*=0x224, lpOverlapped=0x112d5e08) returned 1
	[0294.350] GetFileType (hFile=0x1fc) returned 0x1
	[0294.350] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2a80, lpNewFilePointer=0x0, dwMoveMethod=0x112d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.350] CloseHandle (hObject=0x1fc) returned 1
	[0294.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf.tl30z")) returned 0x220
	[0294.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.354] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.358] SetEvent (hEvent=0x234) returned 1
	[0294.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf")) returned 0x220
	[0294.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF", dwFileAttributes=0x220) returned 1
	[0294.358] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.495] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0294.495] ReadFile (in: hFile=0x1fc, lpBuffer=0x113ec000, nNumberOfBytesToRead=0x2628, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113ec000*, lpNumberOfBytesRead=0x1128ae18*=0x2628, lpOverlapped=0x0) returned 1
	[0294.500] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0294.500] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1115dc02 | out: pbBuffer=0x1115dc02) returned 1
	[0294.500] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1115dc4f | out: pbBuffer=0x1115dc4f) returned 1
	[0294.500] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1115dc71 | out: pbBuffer=0x1115dc71) returned 1
	[0294.501] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0294.501] GetFileType (hFile=0x1fc) returned 0x1
	[0294.501] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.501] WriteFile (in: hFile=0x1fc, lpBuffer=0x11bc6000*, nNumberOfBytesToWrite=0x2628, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesWritten=0x11031dfc*=0x2628, lpOverlapped=0x11031e08) returned 1
	[0294.502] GetFileType (hFile=0x1fc) returned 0x1
	[0294.502] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2628, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.502] GetFileType (hFile=0x1fc) returned 0x1
	[0294.502] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.504] WriteFile (in: hFile=0x1fc, lpBuffer=0x1133e700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1133e700*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0294.504] GetFileType (hFile=0x1fc) returned 0x1
	[0294.504] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2628, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.504] CloseHandle (hObject=0x1fc) returned 1
	[0294.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf.tl30z")) returned 0x220
	[0294.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.508] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.512] SetEvent (hEvent=0x218) returned 1
	[0294.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf")) returned 0x220
	[0294.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF", dwFileAttributes=0x220) returned 1
	[0294.513] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.585] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0294.586] ReadFile (in: hFile=0x1fc, lpBuffer=0x110f2000, nNumberOfBytesToRead=0x2584, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x110f2000*, lpNumberOfBytesRead=0x1128ae18*=0x2584, lpOverlapped=0x0) returned 1
	[0294.592] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0294.592] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11463302 | out: pbBuffer=0x11463302) returned 1
	[0294.592] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0294.592] GetFileType (hFile=0x1fc) returned 0x1
	[0294.593] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11167de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.593] WriteFile (in: hFile=0x1fc, lpBuffer=0x11134000*, nNumberOfBytesToWrite=0x2584, lpNumberOfBytesWritten=0x11167dfc, lpOverlapped=0x11167e08 | out: lpBuffer=0x11134000*, lpNumberOfBytesWritten=0x11167dfc*=0x2584, lpOverlapped=0x11167e08) returned 1
	[0294.593] GetFileType (hFile=0x1fc) returned 0x1
	[0294.593] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2584, lpNewFilePointer=0x0, dwMoveMethod=0x11167de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.593] GetFileType (hFile=0x1fc) returned 0x1
	[0294.594] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11167de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.594] WriteFile (in: hFile=0x1fc, lpBuffer=0x110cd880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11167dfc, lpOverlapped=0x11167e08 | out: lpBuffer=0x110cd880*, lpNumberOfBytesWritten=0x11167dfc*=0x227, lpOverlapped=0x11167e08) returned 1
	[0294.594] GetFileType (hFile=0x1fc) returned 0x1
	[0294.594] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x2584, lpNewFilePointer=0x0, dwMoveMethod=0x11167de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.594] CloseHandle (hObject=0x1fc) returned 1
	[0294.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf.tl30z")) returned 0x220
	[0294.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.597] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.598] SetEvent (hEvent=0x218) returned 1
	[0294.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf")) returned 0x220
	[0294.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF", dwFileAttributes=0x220) returned 1
	[0294.599] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0294.668] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0294.668] ReadFile (in: hFile=0x250, lpBuffer=0x111a2000, nNumberOfBytesToRead=0x544, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x111a2000*, lpNumberOfBytesRead=0x1128ae18*=0x544, lpOverlapped=0x0) returned 1
	[0294.674] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0294.674] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0294.674] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b2802 | out: pbBuffer=0x111b2802) returned 1
	[0294.674] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0294.674] GetFileType (hFile=0x250) returned 0x1
	[0294.675] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11223de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.675] WriteFile (in: hFile=0x250, lpBuffer=0x11248000*, nNumberOfBytesToWrite=0x544, lpNumberOfBytesWritten=0x11223dfc, lpOverlapped=0x11223e08 | out: lpBuffer=0x11248000*, lpNumberOfBytesWritten=0x11223dfc*=0x544, lpOverlapped=0x11223e08) returned 1
	[0294.675] GetFileType (hFile=0x250) returned 0x1
	[0294.675] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x544, lpNewFilePointer=0x0, dwMoveMethod=0x11223de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.675] GetFileType (hFile=0x250) returned 0x1
	[0294.675] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11223de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.676] WriteFile (in: hFile=0x250, lpBuffer=0x11238a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11223dfc, lpOverlapped=0x11223e08 | out: lpBuffer=0x11238a80*, lpNumberOfBytesWritten=0x11223dfc*=0x224, lpOverlapped=0x11223e08) returned 1
	[0294.676] GetFileType (hFile=0x250) returned 0x1
	[0294.676] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x544, lpNewFilePointer=0x0, dwMoveMethod=0x11223de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.676] CloseHandle (hObject=0x250) returned 1
	[0294.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf.tl30z")) returned 0x220
	[0294.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf")) returned 0x220
	[0294.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF", dwFileAttributes=0x220) returned 1
	[0294.682] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0294.760] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0294.760] ReadFile (in: hFile=0x224, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x132c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x1131ce18*=0x132c, lpOverlapped=0x0) returned 1
	[0294.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0294.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11351202 | out: pbBuffer=0x11351202) returned 1
	[0294.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11351229 | out: pbBuffer=0x11351229) returned 1
	[0294.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1135126d | out: pbBuffer=0x1135126d) returned 1
	[0294.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113512d5 | out: pbBuffer=0x113512d5) returned 1
	[0294.767] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113512e6 | out: pbBuffer=0x113512e6) returned 1
	[0294.768] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0294.768] GetFileType (hFile=0x224) returned 0x1
	[0294.768] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.768] WriteFile (in: hFile=0x224, lpBuffer=0x11066000*, nNumberOfBytesToWrite=0x132c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11066000*, lpNumberOfBytesWritten=0x11031dfc*=0x132c, lpOverlapped=0x11031e08) returned 1
	[0294.768] GetFileType (hFile=0x224) returned 0x1
	[0294.768] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x132c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.768] GetFileType (hFile=0x224) returned 0x1
	[0294.769] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.769] WriteFile (in: hFile=0x224, lpBuffer=0x11062380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11062380*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0294.769] GetFileType (hFile=0x224) returned 0x1
	[0294.769] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x132c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.769] CloseHandle (hObject=0x224) returned 1
	[0294.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf.tl30z")) returned 0x220
	[0294.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.788] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.797] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.816] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.833] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.853] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.873] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.891] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0294.998] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.031] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.057] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.073] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.091] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.109] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.140] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.165] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.178] SetEvent (hEvent=0x218) returned 1
	[0295.178] SetEvent (hEvent=0x1b0) returned 1
	[0295.178] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0295.181] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.181] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x0
	[0295.182] SetEvent (hEvent=0x1f0) returned 1
	[0295.182] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x0
	[0295.185] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.415] SetEvent (hEvent=0x218) returned 1
	[0295.415] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.416] SetEvent (hEvent=0x218) returned 1
	[0295.416] SwitchToThread () returned 1
	[0295.418] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.423] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.440] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.459] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.475] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.496] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.510] SetEvent (hEvent=0x218) returned 1
	[0295.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf")) returned 0x220
	[0295.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF", dwFileAttributes=0x220) returned 1
	[0295.510] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0295.592] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0295.592] ReadFile (in: hFile=0x288, lpBuffer=0x110a4000, nNumberOfBytesToRead=0x72de, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110a4000*, lpNumberOfBytesRead=0x1131ce18*=0x72de, lpOverlapped=0x0) returned 1
	[0295.599] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0295.599] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6558 | out: pbBuffer=0x113e6558) returned 1
	[0295.599] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ae702 | out: pbBuffer=0x110ae702) returned 1
	[0295.600] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0295.600] GetFileType (hFile=0x288) returned 0x1
	[0295.601] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.601] WriteFile (in: hFile=0x288, lpBuffer=0x1129e000*, nNumberOfBytesToWrite=0x72de, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x1129e000*, lpNumberOfBytesWritten=0x1141fdfc*=0x72de, lpOverlapped=0x1141fe08) returned 1
	[0295.601] GetFileType (hFile=0x288) returned 0x1
	[0295.601] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x72de, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.602] GetFileType (hFile=0x288) returned 0x1
	[0295.602] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.602] WriteFile (in: hFile=0x288, lpBuffer=0x1122d500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1141fdfc, lpOverlapped=0x1141fe08 | out: lpBuffer=0x1122d500*, lpNumberOfBytesWritten=0x1141fdfc*=0x236, lpOverlapped=0x1141fe08) returned 1
	[0295.602] GetFileType (hFile=0x288) returned 0x1
	[0295.602] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x72de, lpNewFilePointer=0x0, dwMoveMethod=0x1141fde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.602] CloseHandle (hObject=0x288) returned 1
	[0295.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf.tl30z")) returned 0x220
	[0295.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.605] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.607] SetEvent (hEvent=0x118) returned 1
	[0295.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf")) returned 0x220
	[0295.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF", dwFileAttributes=0x220) returned 1
	[0295.608] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.676] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0295.687] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1133de08 | out: lpMode=0x1133de08) returned 0
	[0295.687] ReadFile (in: hFile=0x288, lpBuffer=0x1125c000, nNumberOfBytesToRead=0x1d18, lpNumberOfBytesRead=0x1133de18, lpOverlapped=0x0 | out: lpBuffer=0x1125c000*, lpNumberOfBytesRead=0x1133de18*=0x1d18, lpOverlapped=0x0) returned 1
	[0295.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0295.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0295.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112dc802 | out: pbBuffer=0x112dc802) returned 1
	[0295.693] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0295.694] GetFileType (hFile=0x288) returned 0x1
	[0295.694] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.694] WriteFile (in: hFile=0x288, lpBuffer=0x11324000*, nNumberOfBytesToWrite=0x1d18, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11324000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1d18, lpOverlapped=0x1133de08) returned 1
	[0295.694] GetFileType (hFile=0x288) returned 0x1
	[0295.694] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1d18, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.695] GetFileType (hFile=0x288) returned 0x1
	[0295.695] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.695] WriteFile (in: hFile=0x288, lpBuffer=0x11360a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11360a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0295.695] GetFileType (hFile=0x288) returned 0x1
	[0295.695] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1d18, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.695] CloseHandle (hObject=0x288) returned 1
	[0295.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf.tl30z")) returned 0x220
	[0295.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.699] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.700] SetEvent (hEvent=0x234) returned 1
	[0295.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf")) returned 0x220
	[0295.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF", dwFileAttributes=0x220) returned 1
	[0295.702] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0295.789] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0295.789] ReadFile (in: hFile=0x1d8, lpBuffer=0x1118e000, nNumberOfBytesToRead=0x13ec, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1118e000*, lpNumberOfBytesRead=0x1131ce18*=0x13ec, lpOverlapped=0x0) returned 1
	[0295.796] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0295.797] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112dde02 | out: pbBuffer=0x112dde02) returned 1
	[0295.797] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112dde57 | out: pbBuffer=0x112dde57) returned 1
	[0295.797] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332550 | out: pbBuffer=0x11332550) returned 1
	[0295.798] GetFileType (hFile=0x1d8) returned 0x1
	[0295.798] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.798] WriteFile (in: hFile=0x1d8, lpBuffer=0x1130e000*, nNumberOfBytesToWrite=0x13ec, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1130e000*, lpNumberOfBytesWritten=0x1133ddfc*=0x13ec, lpOverlapped=0x1133de08) returned 1
	[0295.798] GetFileType (hFile=0x1d8) returned 0x1
	[0295.798] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x13ec, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.799] GetFileType (hFile=0x1d8) returned 0x1
	[0295.799] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.799] WriteFile (in: hFile=0x1d8, lpBuffer=0x112f8700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112f8700*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0295.799] GetFileType (hFile=0x1d8) returned 0x1
	[0295.799] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x13ec, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.799] CloseHandle (hObject=0x1d8) returned 1
	[0295.801] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf.tl30z")) returned 0x220
	[0295.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.803] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg")) returned 0x220
	[0295.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG", dwFileAttributes=0x220) returned 1
	[0295.806] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg.tl30z"), dwFlags=0x1) returned 1
	[0295.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.930] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0295.931] ReadFile (in: hFile=0x224, lpBuffer=0x11396000, nNumberOfBytesToRead=0xd902, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x1131ce18*=0xd902, lpOverlapped=0x0) returned 1
	[0295.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0295.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1126c802 | out: pbBuffer=0x1126c802) returned 1
	[0295.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126c816 | out: pbBuffer=0x1126c816) returned 1
	[0295.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126c84f | out: pbBuffer=0x1126c84f) returned 1
	[0295.937] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126c86d | out: pbBuffer=0x1126c86d) returned 1
	[0295.938] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0295.939] GetFileType (hFile=0x224) returned 0x1
	[0295.939] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.939] WriteFile (in: hFile=0x224, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0xd902, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x11031dfc*=0xd902, lpOverlapped=0x11031e08) returned 1
	[0295.940] GetFileType (hFile=0x224) returned 0x1
	[0295.940] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xd902, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.940] GetFileType (hFile=0x224) returned 0x1
	[0295.940] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.941] WriteFile (in: hFile=0x224, lpBuffer=0x11456a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11456a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0295.941] GetFileType (hFile=0x224) returned 0x1
	[0295.941] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xd902, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.941] CloseHandle (hObject=0x224) returned 1
	[0295.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg.tl30z")) returned 0x220
	[0295.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0295.944] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0295.947] SetEvent (hEvent=0x118) returned 1
	[0295.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg")) returned 0x220
	[0295.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG", dwFileAttributes=0x220) returned 1
	[0295.948] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg.tl30z"), dwFlags=0x1) returned 1
	[0296.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0296.054] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0296.054] ReadFile (in: hFile=0x288, lpBuffer=0x11224000, nNumberOfBytesToRead=0x5b2a, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11224000*, lpNumberOfBytesRead=0x1131ce18*=0x5b2a, lpOverlapped=0x0) returned 1
	[0296.060] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0296.060] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324f8 | out: pbBuffer=0x113324f8) returned 1
	[0296.060] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141dd02 | out: pbBuffer=0x1141dd02) returned 1
	[0296.060] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1141ddc4 | out: pbBuffer=0x1141ddc4) returned 1
	[0296.061] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0296.061] GetFileType (hFile=0x288) returned 0x1
	[0296.061] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.062] WriteFile (in: hFile=0x288, lpBuffer=0x11256000*, nNumberOfBytesToWrite=0x5b2a, lpNumberOfBytesWritten=0x11327dfc, lpOverlapped=0x11327e08 | out: lpBuffer=0x11256000*, lpNumberOfBytesWritten=0x11327dfc*=0x5b2a, lpOverlapped=0x11327e08) returned 1
	[0296.062] GetFileType (hFile=0x288) returned 0x1
	[0296.062] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5b2a, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.063] GetFileType (hFile=0x288) returned 0x1
	[0296.063] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.063] WriteFile (in: hFile=0x288, lpBuffer=0x11238700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11327dfc, lpOverlapped=0x11327e08 | out: lpBuffer=0x11238700*, lpNumberOfBytesWritten=0x11327dfc*=0x230, lpOverlapped=0x11327e08) returned 1
	[0296.063] GetFileType (hFile=0x288) returned 0x1
	[0296.063] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x5b2a, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.063] CloseHandle (hObject=0x288) returned 1
	[0296.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg.tl30z")) returned 0x220
	[0296.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0296.067] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0296.070] SetEvent (hEvent=0x118) returned 1
	[0296.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf")) returned 0x220
	[0296.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF", dwFileAttributes=0x220) returned 1
	[0296.071] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0296.275] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0296.275] ReadFile (in: hFile=0x250, lpBuffer=0x1134c000, nNumberOfBytesToRead=0x5f48, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1134c000*, lpNumberOfBytesRead=0x1131ce18*=0x5f48, lpOverlapped=0x0) returned 1
	[0296.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0296.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0296.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11266802 | out: pbBuffer=0x11266802) returned 1
	[0296.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126685b | out: pbBuffer=0x1126685b) returned 1
	[0296.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0296.292] GetFileType (hFile=0x250) returned 0x1
	[0296.292] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.292] WriteFile (in: hFile=0x250, lpBuffer=0x111aa000*, nNumberOfBytesToWrite=0x5f48, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111aa000*, lpNumberOfBytesWritten=0x11031dfc*=0x5f48, lpOverlapped=0x11031e08) returned 1
	[0296.293] GetFileType (hFile=0x250) returned 0x1
	[0296.293] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x5f48, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.293] GetFileType (hFile=0x250) returned 0x1
	[0296.293] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.293] WriteFile (in: hFile=0x250, lpBuffer=0x111a8e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111a8e00*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0296.294] GetFileType (hFile=0x250) returned 0x1
	[0296.294] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x5f48, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.294] CloseHandle (hObject=0x250) returned 1
	[0296.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf.tl30z")) returned 0x220
	[0296.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.297] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0296.302] SetEvent (hEvent=0x210) returned 1
	[0296.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf")) returned 0x220
	[0296.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF", dwFileAttributes=0x220) returned 1
	[0296.303] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0296.386] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0296.386] ReadFile (in: hFile=0x1fc, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x6fd2, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x1131ce18*=0x6fd2, lpOverlapped=0x0) returned 1
	[0296.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0296.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0296.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11304802 | out: pbBuffer=0x11304802) returned 1
	[0296.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113048a2 | out: pbBuffer=0x113048a2) returned 1
	[0296.393] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0296.394] GetFileType (hFile=0x1fc) returned 0x1
	[0296.394] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.394] WriteFile (in: hFile=0x1fc, lpBuffer=0x11294000*, nNumberOfBytesToWrite=0x6fd2, lpNumberOfBytesWritten=0x11301dfc, lpOverlapped=0x11301e08 | out: lpBuffer=0x11294000*, lpNumberOfBytesWritten=0x11301dfc*=0x6fd2, lpOverlapped=0x11301e08) returned 1
	[0296.394] GetFileType (hFile=0x1fc) returned 0x1
	[0296.394] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6fd2, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.395] GetFileType (hFile=0x1fc) returned 0x1
	[0296.395] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.395] WriteFile (in: hFile=0x1fc, lpBuffer=0x11092a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11301dfc, lpOverlapped=0x11301e08 | out: lpBuffer=0x11092a80*, lpNumberOfBytesWritten=0x11301dfc*=0x236, lpOverlapped=0x11301e08) returned 1
	[0296.395] GetFileType (hFile=0x1fc) returned 0x1
	[0296.395] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x6fd2, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.395] CloseHandle (hObject=0x1fc) returned 1
	[0296.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf.tl30z")) returned 0x220
	[0296.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.399] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0296.401] SetEvent (hEvent=0x210) returned 1
	[0296.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf")) returned 0x220
	[0296.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF", dwFileAttributes=0x220) returned 1
	[0296.401] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0296.501] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0296.501] ReadFile (in: hFile=0x250, lpBuffer=0x11146000, nNumberOfBytesToRead=0x69d8, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11146000*, lpNumberOfBytesRead=0x1131ce18*=0x69d8, lpOverlapped=0x0) returned 1
	[0296.508] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f4e0 | out: pbBuffer=0x1140f4e0) returned 1
	[0296.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f4d8 | out: pbBuffer=0x1140f4d8) returned 1
	[0296.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11473102 | out: pbBuffer=0x11473102) returned 1
	[0296.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11473111 | out: pbBuffer=0x11473111) returned 1
	[0296.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f510 | out: pbBuffer=0x1140f510) returned 1
	[0296.510] GetFileType (hFile=0x250) returned 0x1
	[0296.510] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.510] WriteFile (in: hFile=0x250, lpBuffer=0x11184000*, nNumberOfBytesToWrite=0x69d8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11184000*, lpNumberOfBytesWritten=0x11031dfc*=0x69d8, lpOverlapped=0x11031e08) returned 1
	[0296.511] GetFileType (hFile=0x250) returned 0x1
	[0296.511] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x69d8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.512] GetFileType (hFile=0x250) returned 0x1
	[0296.512] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.512] WriteFile (in: hFile=0x250, lpBuffer=0x11105180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11105180*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0296.512] GetFileType (hFile=0x250) returned 0x1
	[0296.512] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x69d8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.512] CloseHandle (hObject=0x250) returned 1
	[0296.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf.tl30z")) returned 0x220
	[0296.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.515] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0296.517] SetEvent (hEvent=0x210) returned 1
	[0296.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf")) returned 0x220
	[0296.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF", dwFileAttributes=0x220) returned 1
	[0296.517] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0296.595] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0296.595] ReadFile (in: hFile=0x1d8, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x650c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x1131ce18*=0x650c, lpOverlapped=0x0) returned 1
	[0296.627] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f0f0 | out: pbBuffer=0x1140f0f0) returned 1
	[0296.627] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0e8 | out: pbBuffer=0x1140f0e8) returned 1
	[0296.627] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e8802 | out: pbBuffer=0x110e8802) returned 1
	[0296.628] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e8820 | out: pbBuffer=0x110e8820) returned 1
	[0296.628] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f120 | out: pbBuffer=0x1140f120) returned 1
	[0296.629] GetFileType (hFile=0x1d8) returned 0x1
	[0296.629] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.629] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c0000*, nNumberOfBytesToWrite=0x650c, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x113c0000*, lpNumberOfBytesWritten=0x112a1dfc*=0x650c, lpOverlapped=0x112a1e08) returned 1
	[0296.630] GetFileType (hFile=0x1d8) returned 0x1
	[0296.630] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x650c, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.630] GetFileType (hFile=0x1d8) returned 0x1
	[0296.630] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.631] WriteFile (in: hFile=0x1d8, lpBuffer=0x1124ca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x1124ca80*, lpNumberOfBytesWritten=0x112a1dfc*=0x22a, lpOverlapped=0x112a1e08) returned 1
	[0296.631] GetFileType (hFile=0x1d8) returned 0x1
	[0296.631] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x650c, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.631] CloseHandle (hObject=0x1d8) returned 1
	[0296.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf.tl30z")) returned 0x220
	[0296.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.634] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0296.638] SetEvent (hEvent=0x1f0) returned 1
	[0296.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf")) returned 0x220
	[0296.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF", dwFileAttributes=0x220) returned 1
	[0296.639] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0296.705] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0296.705] ReadFile (in: hFile=0x1fc, lpBuffer=0x1146a000, nNumberOfBytesToRead=0x1e74, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1146a000*, lpNumberOfBytesRead=0x1131ce18*=0x1e74, lpOverlapped=0x0) returned 1
	[0296.714] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0296.714] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137d202 | out: pbBuffer=0x1137d202) returned 1
	[0296.714] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137d287 | out: pbBuffer=0x1137d287) returned 1
	[0296.714] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0296.714] GetFileType (hFile=0x1fc) returned 0x1
	[0296.714] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.715] WriteFile (in: hFile=0x1fc, lpBuffer=0x111a0000*, nNumberOfBytesToWrite=0x1e74, lpNumberOfBytesWritten=0x112a5dfc, lpOverlapped=0x112a5e08 | out: lpBuffer=0x111a0000*, lpNumberOfBytesWritten=0x112a5dfc*=0x1e74, lpOverlapped=0x112a5e08) returned 1
	[0296.715] GetFileType (hFile=0x1fc) returned 0x1
	[0296.715] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1e74, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.715] GetFileType (hFile=0x1fc) returned 0x1
	[0296.715] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.715] WriteFile (in: hFile=0x1fc, lpBuffer=0x11387880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112a5dfc, lpOverlapped=0x112a5e08 | out: lpBuffer=0x11387880*, lpNumberOfBytesWritten=0x112a5dfc*=0x230, lpOverlapped=0x112a5e08) returned 1
	[0296.716] GetFileType (hFile=0x1fc) returned 0x1
	[0296.716] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1e74, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.716] CloseHandle (hObject=0x1fc) returned 1
	[0296.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf.tl30z")) returned 0x220
	[0296.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.719] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0296.723] SetEvent (hEvent=0x218) returned 1
	[0296.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf")) returned 0x220
	[0296.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF", dwFileAttributes=0x220) returned 1
	[0296.724] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0296.804] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0296.804] ReadFile (in: hFile=0x250, lpBuffer=0x111c9000, nNumberOfBytesToRead=0x44fe, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x111c9000*, lpNumberOfBytesRead=0x1131ce18*=0x44fe, lpOverlapped=0x0) returned 1
	[0296.808] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0296.809] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f5e02 | out: pbBuffer=0x111f5e02) returned 1
	[0296.809] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f5e44 | out: pbBuffer=0x111f5e44) returned 1
	[0296.809] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f430 | out: pbBuffer=0x1140f430) returned 1
	[0296.810] GetFileType (hFile=0x250) returned 0x1
	[0296.810] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.810] WriteFile (in: hFile=0x250, lpBuffer=0x111b2000*, nNumberOfBytesToWrite=0x44fe, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111b2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x44fe, lpOverlapped=0x1102be08) returned 1
	[0296.810] GetFileType (hFile=0x250) returned 0x1
	[0296.810] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x44fe, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.810] GetFileType (hFile=0x250) returned 0x1
	[0296.810] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.811] WriteFile (in: hFile=0x250, lpBuffer=0x1137ca80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1137ca80*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0296.811] GetFileType (hFile=0x250) returned 0x1
	[0296.811] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x44fe, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.811] CloseHandle (hObject=0x250) returned 1
	[0296.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf.tl30z")) returned 0x220
	[0296.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.815] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0296.832] SetEvent (hEvent=0x234) returned 1
	[0296.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf")) returned 0x220
	[0296.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF", dwFileAttributes=0x220) returned 1
	[0296.833] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0296.914] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0296.914] ReadFile (in: hFile=0x288, lpBuffer=0x110d4a80, nNumberOfBytesToRead=0x2870, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110d4a80*, lpNumberOfBytesRead=0x1131ce18*=0x2870, lpOverlapped=0x0) returned 1
	[0296.918] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f860 | out: pbBuffer=0x1140f860) returned 1
	[0296.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f858 | out: pbBuffer=0x1140f858) returned 1
	[0296.953] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e3e02 | out: pbBuffer=0x113e3e02) returned 1
	[0296.953] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e3e7c | out: pbBuffer=0x113e3e7c) returned 1
	[0296.953] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f890 | out: pbBuffer=0x1140f890) returned 1
	[0296.953] GetFileType (hFile=0x288) returned 0x1
	[0296.953] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.954] WriteFile (in: hFile=0x288, lpBuffer=0x110a2000*, nNumberOfBytesToWrite=0x2870, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110a2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2870, lpOverlapped=0x1102be08) returned 1
	[0296.954] GetFileType (hFile=0x288) returned 0x1
	[0296.954] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x2870, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.955] GetFileType (hFile=0x288) returned 0x1
	[0296.955] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.955] WriteFile (in: hFile=0x288, lpBuffer=0x1132d500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1132d500*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0296.955] GetFileType (hFile=0x288) returned 0x1
	[0296.955] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x2870, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0296.955] CloseHandle (hObject=0x288) returned 1
	[0296.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf.tl30z")) returned 0x220
	[0296.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.960] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0296.962] SetEvent (hEvent=0x234) returned 1
	[0296.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf")) returned 0x220
	[0296.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF", dwFileAttributes=0x220) returned 1
	[0296.963] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0297.045] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0297.046] ReadFile (in: hFile=0x288, lpBuffer=0x11234000, nNumberOfBytesToRead=0x14fc, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11234000*, lpNumberOfBytesRead=0x1131ce18*=0x14fc, lpOverlapped=0x0) returned 1
	[0297.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332640 | out: pbBuffer=0x11332640) returned 1
	[0297.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332638 | out: pbBuffer=0x11332638) returned 1
	[0297.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123a702 | out: pbBuffer=0x1123a702) returned 1
	[0297.055] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0297.055] GetFileType (hFile=0x288) returned 0x1
	[0297.056] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.056] WriteFile (in: hFile=0x288, lpBuffer=0x1125a000*, nNumberOfBytesToWrite=0x14fc, lpNumberOfBytesWritten=0x111e3dfc, lpOverlapped=0x111e3e08 | out: lpBuffer=0x1125a000*, lpNumberOfBytesWritten=0x111e3dfc*=0x14fc, lpOverlapped=0x111e3e08) returned 1
	[0297.056] GetFileType (hFile=0x288) returned 0x1
	[0297.057] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x14fc, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.057] GetFileType (hFile=0x288) returned 0x1
	[0297.057] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.057] WriteFile (in: hFile=0x288, lpBuffer=0x1146f500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x111e3dfc, lpOverlapped=0x111e3e08 | out: lpBuffer=0x1146f500*, lpNumberOfBytesWritten=0x111e3dfc*=0x230, lpOverlapped=0x111e3e08) returned 1
	[0297.057] GetFileType (hFile=0x288) returned 0x1
	[0297.057] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x14fc, lpNewFilePointer=0x0, dwMoveMethod=0x111e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.058] CloseHandle (hObject=0x288) returned 1
	[0297.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf.tl30z")) returned 0x220
	[0297.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.061] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0297.064] SetEvent (hEvent=0x234) returned 1
	[0297.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf")) returned 0x220
	[0297.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF", dwFileAttributes=0x220) returned 1
	[0297.065] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0297.189] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0297.189] ReadFile (in: hFile=0x224, lpBuffer=0x111a4000, nNumberOfBytesToRead=0x2394, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x111a4000*, lpNumberOfBytesRead=0x1131ce18*=0x2394, lpOverlapped=0x0) returned 1
	[0297.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0297.209] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261202 | out: pbBuffer=0x11261202) returned 1
	[0297.209] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112612c8 | out: pbBuffer=0x112612c8) returned 1
	[0297.209] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0297.210] GetFileType (hFile=0x224) returned 0x1
	[0297.210] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.210] WriteFile (in: hFile=0x224, lpBuffer=0x1119c000*, nNumberOfBytesToWrite=0x2394, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1119c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2394, lpOverlapped=0x1102be08) returned 1
	[0297.210] GetFileType (hFile=0x224) returned 0x1
	[0297.211] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2394, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.211] GetFileType (hFile=0x224) returned 0x1
	[0297.211] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.211] WriteFile (in: hFile=0x224, lpBuffer=0x11167c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11167c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0297.211] GetFileType (hFile=0x224) returned 0x1
	[0297.211] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2394, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.211] CloseHandle (hObject=0x224) returned 1
	[0297.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf.tl30z")) returned 0x220
	[0297.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.221] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0297.228] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0297.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf")) returned 0x220
	[0297.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF", dwFileAttributes=0x220) returned 1
	[0297.238] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0297.393] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0297.393] ReadFile (in: hFile=0x250, lpBuffer=0x1130e000, nNumberOfBytesToRead=0x29dc, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1130e000*, lpNumberOfBytesRead=0x11423e18*=0x29dc, lpOverlapped=0x0) returned 1
	[0297.399] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0297.399] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b3302 | out: pbBuffer=0x113b3302) returned 1
	[0297.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0297.400] GetFileType (hFile=0x250) returned 0x1
	[0297.400] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.401] WriteFile (in: hFile=0x250, lpBuffer=0x1110c000*, nNumberOfBytesToWrite=0x29dc, lpNumberOfBytesWritten=0x11107dfc, lpOverlapped=0x11107e08 | out: lpBuffer=0x1110c000*, lpNumberOfBytesWritten=0x11107dfc*=0x29dc, lpOverlapped=0x11107e08) returned 1
	[0297.401] GetFileType (hFile=0x250) returned 0x1
	[0297.401] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x29dc, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.401] GetFileType (hFile=0x250) returned 0x1
	[0297.401] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.402] WriteFile (in: hFile=0x250, lpBuffer=0x113c9880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11107dfc, lpOverlapped=0x11107e08 | out: lpBuffer=0x113c9880*, lpNumberOfBytesWritten=0x11107dfc*=0x230, lpOverlapped=0x11107e08) returned 1
	[0297.402] GetFileType (hFile=0x250) returned 0x1
	[0297.402] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x29dc, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.402] CloseHandle (hObject=0x250) returned 1
	[0297.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf.tl30z")) returned 0x220
	[0297.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.406] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0297.409] SetEvent (hEvent=0x218) returned 1
	[0297.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf")) returned 0x220
	[0297.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF", dwFileAttributes=0x220) returned 1
	[0297.410] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0297.527] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0297.527] ReadFile (in: hFile=0x1d4, lpBuffer=0x111e4000, nNumberOfBytesToRead=0x73a2, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x111e4000*, lpNumberOfBytesRead=0x11423e18*=0x73a2, lpOverlapped=0x0) returned 1
	[0297.533] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0297.533] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144a902 | out: pbBuffer=0x1144a902) returned 1
	[0297.534] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144a9ae | out: pbBuffer=0x1144a9ae) returned 1
	[0297.534] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144a9b2 | out: pbBuffer=0x1144a9b2) returned 1
	[0297.534] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e680 | out: pbBuffer=0x1104e680) returned 1
	[0297.535] GetFileType (hFile=0x1d4) returned 0x1
	[0297.536] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.536] WriteFile (in: hFile=0x1d4, lpBuffer=0x11228000*, nNumberOfBytesToWrite=0x73a2, lpNumberOfBytesWritten=0x11107dfc, lpOverlapped=0x11107e08 | out: lpBuffer=0x11228000*, lpNumberOfBytesWritten=0x11107dfc*=0x73a2, lpOverlapped=0x11107e08) returned 1
	[0297.536] GetFileType (hFile=0x1d4) returned 0x1
	[0297.536] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x73a2, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.537] GetFileType (hFile=0x1d4) returned 0x1
	[0297.537] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.537] WriteFile (in: hFile=0x1d4, lpBuffer=0x1143f500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11107dfc, lpOverlapped=0x11107e08 | out: lpBuffer=0x1143f500*, lpNumberOfBytesWritten=0x11107dfc*=0x230, lpOverlapped=0x11107e08) returned 1
	[0297.537] GetFileType (hFile=0x1d4) returned 0x1
	[0297.537] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x73a2, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.537] CloseHandle (hObject=0x1d4) returned 1
	[0297.538] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf.tl30z")) returned 0x220
	[0297.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.545] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0297.549] SetEvent (hEvent=0x218) returned 1
	[0297.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf")) returned 0x220
	[0297.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF", dwFileAttributes=0x220) returned 1
	[0297.554] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0297.698] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0297.698] ReadFile (in: hFile=0x250, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x72f8, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x11423e18*=0x72f8, lpOverlapped=0x0) returned 1
	[0297.705] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6560 | out: pbBuffer=0x113e6560) returned 1
	[0297.705] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6558 | out: pbBuffer=0x113e6558) returned 1
	[0297.705] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11372802 | out: pbBuffer=0x11372802) returned 1
	[0297.706] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0297.707] GetFileType (hFile=0x250) returned 0x1
	[0297.707] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.708] WriteFile (in: hFile=0x250, lpBuffer=0x11232000*, nNumberOfBytesToWrite=0x72f8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11232000*, lpNumberOfBytesWritten=0x1102bdfc*=0x72f8, lpOverlapped=0x1102be08) returned 1
	[0297.708] GetFileType (hFile=0x250) returned 0x1
	[0297.708] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x72f8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.708] GetFileType (hFile=0x250) returned 0x1
	[0297.708] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.709] WriteFile (in: hFile=0x250, lpBuffer=0x1137f880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1137f880*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0297.709] GetFileType (hFile=0x250) returned 0x1
	[0297.709] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x72f8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.709] CloseHandle (hObject=0x250) returned 1
	[0297.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf.tl30z")) returned 0x220
	[0297.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.712] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0297.715] SetEvent (hEvent=0x218) returned 1
	[0297.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf")) returned 0x220
	[0297.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF", dwFileAttributes=0x220) returned 1
	[0297.715] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0297.813] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0297.813] ReadFile (in: hFile=0x224, lpBuffer=0x11098000, nNumberOfBytesToRead=0x128e, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11098000*, lpNumberOfBytesRead=0x11423e18*=0x128e, lpOverlapped=0x0) returned 1
	[0297.820] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e650 | out: pbBuffer=0x1104e650) returned 1
	[0297.820] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a0702 | out: pbBuffer=0x110a0702) returned 1
	[0297.820] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110a0757 | out: pbBuffer=0x110a0757) returned 1
	[0297.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e680 | out: pbBuffer=0x1104e680) returned 1
	[0297.821] GetFileType (hFile=0x224) returned 0x1
	[0297.821] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.821] WriteFile (in: hFile=0x224, lpBuffer=0x110bc000*, nNumberOfBytesToWrite=0x128e, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x110bc000*, lpNumberOfBytesWritten=0x1129ddfc*=0x128e, lpOverlapped=0x1129de08) returned 1
	[0297.822] GetFileType (hFile=0x224) returned 0x1
	[0297.822] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x128e, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.822] GetFileType (hFile=0x224) returned 0x1
	[0297.822] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.822] WriteFile (in: hFile=0x224, lpBuffer=0x11311500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x11311500*, lpNumberOfBytesWritten=0x1129ddfc*=0x22a, lpOverlapped=0x1129de08) returned 1
	[0297.822] GetFileType (hFile=0x224) returned 0x1
	[0297.823] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x128e, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.823] CloseHandle (hObject=0x224) returned 1
	[0297.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf.tl30z")) returned 0x220
	[0297.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.826] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0297.828] SetEvent (hEvent=0x218) returned 1
	[0297.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf")) returned 0x220
	[0297.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF", dwFileAttributes=0x220) returned 1
	[0297.829] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0297.970] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0297.970] ReadFile (in: hFile=0x1fc, lpBuffer=0x11204000, nNumberOfBytesToRead=0x164c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11204000*, lpNumberOfBytesRead=0x11423e18*=0x164c, lpOverlapped=0x0) returned 1
	[0297.977] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0297.977] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1120c802 | out: pbBuffer=0x1120c802) returned 1
	[0297.977] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1120c80b | out: pbBuffer=0x1120c80b) returned 1
	[0297.977] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1120c86d | out: pbBuffer=0x1120c86d) returned 1
	[0297.978] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0297.978] GetFileType (hFile=0x1fc) returned 0x1
	[0297.978] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.979] WriteFile (in: hFile=0x1fc, lpBuffer=0x11220000*, nNumberOfBytesToWrite=0x164c, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x11220000*, lpNumberOfBytesWritten=0x112a1dfc*=0x164c, lpOverlapped=0x112a1e08) returned 1
	[0297.979] GetFileType (hFile=0x1fc) returned 0x1
	[0297.981] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x164c, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.981] GetFileType (hFile=0x1fc) returned 0x1
	[0297.981] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.981] WriteFile (in: hFile=0x1fc, lpBuffer=0x11101500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x11101500*, lpNumberOfBytesWritten=0x112a1dfc*=0x22a, lpOverlapped=0x112a1e08) returned 1
	[0297.981] GetFileType (hFile=0x1fc) returned 0x1
	[0297.982] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x164c, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.982] CloseHandle (hObject=0x1fc) returned 1
	[0297.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf.tl30z")) returned 0x220
	[0297.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.984] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0297.989] SetEvent (hEvent=0x218) returned 1
	[0297.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf")) returned 0x220
	[0297.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF", dwFileAttributes=0x220) returned 1
	[0297.990] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0298.094] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0298.094] ReadFile (in: hFile=0x1d8, lpBuffer=0x11090000, nNumberOfBytesToRead=0x8860, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x11423e18*=0x8860, lpOverlapped=0x0) returned 1
	[0298.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0298.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0298.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113fb202 | out: pbBuffer=0x113fb202) returned 1
	[0298.101] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0298.104] GetFileType (hFile=0x1d8) returned 0x1
	[0298.104] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.104] WriteFile (in: hFile=0x1d8, lpBuffer=0x110d4000*, nNumberOfBytesToWrite=0x8860, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x110d4000*, lpNumberOfBytesWritten=0x1138bdfc*=0x8860, lpOverlapped=0x1138be08) returned 1
	[0298.105] GetFileType (hFile=0x1d8) returned 0x1
	[0298.105] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8860, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.105] GetFileType (hFile=0x1d8) returned 0x1
	[0298.105] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.105] WriteFile (in: hFile=0x1d8, lpBuffer=0x1132f880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x1132f880*, lpNumberOfBytesWritten=0x1138bdfc*=0x227, lpOverlapped=0x1138be08) returned 1
	[0298.105] GetFileType (hFile=0x1d8) returned 0x1
	[0298.105] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8860, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.106] CloseHandle (hObject=0x1d8) returned 1
	[0298.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf.tl30z")) returned 0x220
	[0298.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.141] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0298.143] SetEvent (hEvent=0x234) returned 1
	[0298.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf")) returned 0x220
	[0298.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF", dwFileAttributes=0x220) returned 1
	[0298.144] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0298.232] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0298.232] ReadFile (in: hFile=0x224, lpBuffer=0x112d4000, nNumberOfBytesToRead=0xa3b2, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11423e18*=0xa3b2, lpOverlapped=0x0) returned 1
	[0298.238] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0298.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11274802 | out: pbBuffer=0x11274802) returned 1
	[0298.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0298.242] GetFileType (hFile=0x224) returned 0x1
	[0298.242] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.242] WriteFile (in: hFile=0x224, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0xa3b2, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x111c7dfc*=0xa3b2, lpOverlapped=0x111c7e08) returned 1
	[0298.243] GetFileType (hFile=0x224) returned 0x1
	[0298.243] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa3b2, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.243] GetFileType (hFile=0x224) returned 0x1
	[0298.244] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.244] WriteFile (in: hFile=0x224, lpBuffer=0x11436a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x11436a80*, lpNumberOfBytesWritten=0x111c7dfc*=0x233, lpOverlapped=0x111c7e08) returned 1
	[0298.244] GetFileType (hFile=0x224) returned 0x1
	[0298.244] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa3b2, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.244] CloseHandle (hObject=0x224) returned 1
	[0298.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf.tl30z")) returned 0x220
	[0298.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.247] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0298.250] SetEvent (hEvent=0x218) returned 1
	[0298.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf")) returned 0x220
	[0298.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF", dwFileAttributes=0x220) returned 1
	[0298.251] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0298.364] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0298.364] ReadFile (in: hFile=0x1fc, lpBuffer=0x1145a000, nNumberOfBytesToRead=0xae08, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1145a000*, lpNumberOfBytesRead=0x11423e18*=0xae08, lpOverlapped=0x0) returned 1
	[0298.371] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0298.371] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63f8 | out: pbBuffer=0x113e63f8) returned 1
	[0298.372] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11275e02 | out: pbBuffer=0x11275e02) returned 1
	[0298.372] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11275e76 | out: pbBuffer=0x11275e76) returned 1
	[0298.372] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6430 | out: pbBuffer=0x113e6430) returned 1
	[0298.373] GetFileType (hFile=0x1fc) returned 0x1
	[0298.373] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.373] WriteFile (in: hFile=0x1fc, lpBuffer=0x111f6000*, nNumberOfBytesToWrite=0xae08, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x111f6000*, lpNumberOfBytesWritten=0x111c7dfc*=0xae08, lpOverlapped=0x111c7e08) returned 1
	[0298.374] GetFileType (hFile=0x1fc) returned 0x1
	[0298.374] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xae08, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.374] GetFileType (hFile=0x1fc) returned 0x1
	[0298.374] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.375] WriteFile (in: hFile=0x1fc, lpBuffer=0x1146aa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x1146aa80*, lpNumberOfBytesWritten=0x111c7dfc*=0x22d, lpOverlapped=0x111c7e08) returned 1
	[0298.375] GetFileType (hFile=0x1fc) returned 0x1
	[0298.375] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xae08, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.375] CloseHandle (hObject=0x1fc) returned 1
	[0298.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf.tl30z")) returned 0x220
	[0298.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.379] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0298.381] SetEvent (hEvent=0x218) returned 1
	[0298.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf")) returned 0x220
	[0298.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF", dwFileAttributes=0x220) returned 1
	[0298.382] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0298.477] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0298.477] ReadFile (in: hFile=0x1fc, lpBuffer=0x11430000, nNumberOfBytesToRead=0x662a, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11423e18*=0x662a, lpOverlapped=0x0) returned 1
	[0298.630] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0298.631] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11157d02 | out: pbBuffer=0x11157d02) returned 1
	[0298.631] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11157da7 | out: pbBuffer=0x11157da7) returned 1
	[0298.631] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11157dd1 | out: pbBuffer=0x11157dd1) returned 1
	[0298.631] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62c0 | out: pbBuffer=0x113e62c0) returned 1
	[0298.632] GetFileType (hFile=0x1fc) returned 0x1
	[0298.632] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.632] WriteFile (in: hFile=0x1fc, lpBuffer=0x1135e000*, nNumberOfBytesToWrite=0x662a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1135e000*, lpNumberOfBytesWritten=0x11031dfc*=0x662a, lpOverlapped=0x11031e08) returned 1
	[0298.633] GetFileType (hFile=0x1fc) returned 0x1
	[0298.633] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x662a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.633] GetFileType (hFile=0x1fc) returned 0x1
	[0298.633] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.633] WriteFile (in: hFile=0x1fc, lpBuffer=0x11344700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11344700*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0298.633] GetFileType (hFile=0x1fc) returned 0x1
	[0298.633] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x662a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.634] CloseHandle (hObject=0x1fc) returned 1
	[0298.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf.tl30z")) returned 0x220
	[0298.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.643] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0298.644] SetEvent (hEvent=0x118) returned 1
	[0298.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf")) returned 0x220
	[0298.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF", dwFileAttributes=0x220) returned 1
	[0298.645] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0298.717] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0298.717] ReadFile (in: hFile=0x1d4, lpBuffer=0x112f0000, nNumberOfBytesToRead=0x1484, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112f0000*, lpNumberOfBytesRead=0x11423e18*=0x1484, lpOverlapped=0x0) returned 1
	[0298.722] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0298.723] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332388 | out: pbBuffer=0x11332388) returned 1
	[0298.723] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e3202 | out: pbBuffer=0x113e3202) returned 1
	[0298.723] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0298.723] GetFileType (hFile=0x1d4) returned 0x1
	[0298.723] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.724] WriteFile (in: hFile=0x1d4, lpBuffer=0x1130e000*, nNumberOfBytesToWrite=0x1484, lpNumberOfBytesWritten=0x112b7dfc, lpOverlapped=0x112b7e08 | out: lpBuffer=0x1130e000*, lpNumberOfBytesWritten=0x112b7dfc*=0x1484, lpOverlapped=0x112b7e08) returned 1
	[0298.724] GetFileType (hFile=0x1d4) returned 0x1
	[0298.724] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1484, lpNewFilePointer=0x0, dwMoveMethod=0x112b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.724] GetFileType (hFile=0x1d4) returned 0x1
	[0298.724] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.724] WriteFile (in: hFile=0x1d4, lpBuffer=0x1119f880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112b7dfc, lpOverlapped=0x112b7e08 | out: lpBuffer=0x1119f880*, lpNumberOfBytesWritten=0x112b7dfc*=0x224, lpOverlapped=0x112b7e08) returned 1
	[0298.725] GetFileType (hFile=0x1d4) returned 0x1
	[0298.725] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1484, lpNewFilePointer=0x0, dwMoveMethod=0x112b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.725] CloseHandle (hObject=0x1d4) returned 1
	[0298.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf.tl30z")) returned 0x220
	[0298.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.728] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0298.729] SetEvent (hEvent=0x118) returned 1
	[0298.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf")) returned 0x220
	[0298.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF", dwFileAttributes=0x220) returned 1
	[0298.729] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0298.801] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0298.801] ReadFile (in: hFile=0x1d4, lpBuffer=0x11419500, nNumberOfBytesToRead=0x14c0, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11419500*, lpNumberOfBytesRead=0x11423e18*=0x14c0, lpOverlapped=0x0) returned 1
	[0298.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0298.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e628 | out: pbBuffer=0x1104e628) returned 1
	[0298.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11177e02 | out: pbBuffer=0x11177e02) returned 1
	[0298.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0298.807] SetEvent (hEvent=0x234) returned 1
	[0298.807] GetFileType (hFile=0x1d4) returned 0x1
	[0298.807] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.807] WriteFile (in: hFile=0x1d4, lpBuffer=0x11210000*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x11210000*, lpNumberOfBytesWritten=0x112bbdfc*=0x14c0, lpOverlapped=0x112bbe08) returned 1
	[0298.808] GetFileType (hFile=0x1d4) returned 0x1
	[0298.808] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x14c0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.808] GetFileType (hFile=0x1d4) returned 0x1
	[0298.808] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.808] WriteFile (in: hFile=0x1d4, lpBuffer=0x111f6700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x111f6700*, lpNumberOfBytesWritten=0x112bbdfc*=0x224, lpOverlapped=0x112bbe08) returned 1
	[0298.808] GetFileType (hFile=0x1d4) returned 0x1
	[0298.808] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x14c0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.809] CloseHandle (hObject=0x1d4) returned 1
	[0298.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf.tl30z")) returned 0x220
	[0298.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.813] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0298.815] SetEvent (hEvent=0x234) returned 1
	[0298.815] SetEvent (hEvent=0x218) returned 1
	[0298.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf")) returned 0x220
	[0298.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF", dwFileAttributes=0x220) returned 1
	[0298.816] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0298.889] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0298.889] ReadFile (in: hFile=0x224, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x4f08, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x1131be18*=0x4f08, lpOverlapped=0x0) returned 1
	[0298.893] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0298.893] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e358 | out: pbBuffer=0x1104e358) returned 1
	[0298.893] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111fb302 | out: pbBuffer=0x111fb302) returned 1
	[0298.893] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111fb3de | out: pbBuffer=0x111fb3de) returned 1
	[0298.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0298.894] GetFileType (hFile=0x224) returned 0x1
	[0298.894] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.895] WriteFile (in: hFile=0x224, lpBuffer=0x110d6000*, nNumberOfBytesToWrite=0x4f08, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110d6000*, lpNumberOfBytesWritten=0x11031dfc*=0x4f08, lpOverlapped=0x11031e08) returned 1
	[0298.895] GetFileType (hFile=0x224) returned 0x1
	[0298.895] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4f08, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.895] GetFileType (hFile=0x224) returned 0x1
	[0298.895] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.895] WriteFile (in: hFile=0x224, lpBuffer=0x111f7c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111f7c00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0298.896] GetFileType (hFile=0x224) returned 0x1
	[0298.896] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4f08, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.896] CloseHandle (hObject=0x224) returned 1
	[0298.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf.tl30z")) returned 0x220
	[0298.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.898] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0298.901] SetEvent (hEvent=0x218) returned 1
	[0298.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg")) returned 0x220
	[0298.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG", dwFileAttributes=0x220) returned 1
	[0298.902] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg.tl30z"), dwFlags=0x1) returned 1
	[0299.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0299.181] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0299.181] ReadFile (in: hFile=0x1d4, lpBuffer=0x11244000, nNumberOfBytesToRead=0xa50e, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11244000*, lpNumberOfBytesRead=0x1131be18*=0xa50e, lpOverlapped=0x0) returned 1
	[0299.188] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0299.188] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f598 | out: pbBuffer=0x1140f598) returned 1
	[0299.188] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11250802 | out: pbBuffer=0x11250802) returned 1
	[0299.188] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11250817 | out: pbBuffer=0x11250817) returned 1
	[0299.188] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5d0 | out: pbBuffer=0x1140f5d0) returned 1
	[0299.189] GetFileType (hFile=0x1d4) returned 0x1
	[0299.189] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.190] WriteFile (in: hFile=0x1d4, lpBuffer=0x11130000*, nNumberOfBytesToWrite=0xa50e, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x11130000*, lpNumberOfBytesWritten=0x110c3dfc*=0xa50e, lpOverlapped=0x110c3e08) returned 1
	[0299.190] GetFileType (hFile=0x1d4) returned 0x1
	[0299.190] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xa50e, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.190] GetFileType (hFile=0x1d4) returned 0x1
	[0299.191] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.191] WriteFile (in: hFile=0x1d4, lpBuffer=0x11229500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x110c3dfc, lpOverlapped=0x110c3e08 | out: lpBuffer=0x11229500*, lpNumberOfBytesWritten=0x110c3dfc*=0x230, lpOverlapped=0x110c3e08) returned 1
	[0299.191] GetFileType (hFile=0x1d4) returned 0x1
	[0299.191] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xa50e, lpNewFilePointer=0x0, dwMoveMethod=0x110c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.191] CloseHandle (hObject=0x1d4) returned 1
	[0299.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg.tl30z")) returned 0x220
	[0299.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0299.195] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0299.198] SetEvent (hEvent=0x118) returned 1
	[0299.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf")) returned 0x220
	[0299.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF", dwFileAttributes=0x220) returned 1
	[0299.199] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0299.312] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0299.312] ReadFile (in: hFile=0x1d4, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x80c, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x1131be18*=0x80c, lpOverlapped=0x0) returned 1
	[0299.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0299.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4c8 | out: pbBuffer=0x1104e4c8) returned 1
	[0299.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bdf02 | out: pbBuffer=0x110bdf02) returned 1
	[0299.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bdf88 | out: pbBuffer=0x110bdf88) returned 1
	[0299.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0299.319] GetFileType (hFile=0x1d4) returned 0x1
	[0299.319] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.319] WriteFile (in: hFile=0x1d4, lpBuffer=0x11387000*, nNumberOfBytesToWrite=0x80c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11387000*, lpNumberOfBytesWritten=0x11031dfc*=0x80c, lpOverlapped=0x11031e08) returned 1
	[0299.319] GetFileType (hFile=0x1d4) returned 0x1
	[0299.319] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x80c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.320] GetFileType (hFile=0x1d4) returned 0x1
	[0299.320] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.320] WriteFile (in: hFile=0x1d4, lpBuffer=0x1137ce00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1137ce00*, lpNumberOfBytesWritten=0x11031dfc*=0x221, lpOverlapped=0x11031e08) returned 1
	[0299.320] GetFileType (hFile=0x1d4) returned 0x1
	[0299.320] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x80c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.320] CloseHandle (hObject=0x1d4) returned 1
	[0299.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf.tl30z")) returned 0x220
	[0299.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.323] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0299.326] SetEvent (hEvent=0x234) returned 1
	[0299.327] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf")) returned 0x220
	[0299.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF", dwFileAttributes=0x220) returned 1
	[0299.327] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.402] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0299.402] ReadFile (in: hFile=0x250, lpBuffer=0x112a4000, nNumberOfBytesToRead=0xaefa, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x112a4000*, lpNumberOfBytesRead=0x1131be18*=0xaefa, lpOverlapped=0x0) returned 1
	[0299.408] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113321f0 | out: pbBuffer=0x113321f0) returned 1
	[0299.408] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113321e8 | out: pbBuffer=0x113321e8) returned 1
	[0299.408] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c5302 | out: pbBuffer=0x110c5302) returned 1
	[0299.408] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c5333 | out: pbBuffer=0x110c5333) returned 1
	[0299.408] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c5358 | out: pbBuffer=0x110c5358) returned 1
	[0299.409] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332220 | out: pbBuffer=0x11332220) returned 1
	[0299.410] GetFileType (hFile=0x250) returned 0x1
	[0299.410] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.410] WriteFile (in: hFile=0x250, lpBuffer=0x1144c000*, nNumberOfBytesToWrite=0xaefa, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1144c000*, lpNumberOfBytesWritten=0x11031dfc*=0xaefa, lpOverlapped=0x11031e08) returned 1
	[0299.411] GetFileType (hFile=0x250) returned 0x1
	[0299.411] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xaefa, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.411] GetFileType (hFile=0x250) returned 0x1
	[0299.411] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.411] WriteFile (in: hFile=0x250, lpBuffer=0x112b4a80*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112b4a80*, lpNumberOfBytesWritten=0x11031dfc*=0x23c, lpOverlapped=0x11031e08) returned 1
	[0299.412] GetFileType (hFile=0x250) returned 0x1
	[0299.412] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xaefa, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.412] CloseHandle (hObject=0x250) returned 1
	[0299.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf.tl30z")) returned 0x220
	[0299.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.416] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0299.419] SetEvent (hEvent=0x234) returned 1
	[0299.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf")) returned 0x220
	[0299.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF", dwFileAttributes=0x220) returned 1
	[0299.420] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.496] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0299.496] ReadFile (in: hFile=0x250, lpBuffer=0x1116c800, nNumberOfBytesToRead=0x45a2, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1116c800*, lpNumberOfBytesRead=0x1131be18*=0x45a2, lpOverlapped=0x0) returned 1
	[0299.501] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6d0 | out: pbBuffer=0x1140f6d0) returned 1
	[0299.501] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f6c8 | out: pbBuffer=0x1140f6c8) returned 1
	[0299.501] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1118d302 | out: pbBuffer=0x1118d302) returned 1
	[0299.501] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f700 | out: pbBuffer=0x1140f700) returned 1
	[0299.502] SetEvent (hEvent=0x234) returned 1
	[0299.502] GetFileType (hFile=0x250) returned 0x1
	[0299.502] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.503] WriteFile (in: hFile=0x250, lpBuffer=0x11248000*, nNumberOfBytesToWrite=0x45a2, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x11248000*, lpNumberOfBytesWritten=0x1138bdfc*=0x45a2, lpOverlapped=0x1138be08) returned 1
	[0299.503] GetFileType (hFile=0x250) returned 0x1
	[0299.503] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x45a2, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.504] GetFileType (hFile=0x250) returned 0x1
	[0299.504] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.504] WriteFile (in: hFile=0x250, lpBuffer=0x11230380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1138bdfc, lpOverlapped=0x1138be08 | out: lpBuffer=0x11230380*, lpNumberOfBytesWritten=0x1138bdfc*=0x22a, lpOverlapped=0x1138be08) returned 1
	[0299.504] GetFileType (hFile=0x250) returned 0x1
	[0299.504] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x45a2, lpNewFilePointer=0x0, dwMoveMethod=0x1138bde0 | out: lpNewFilePointer=0x0) returned 1
	[0299.504] CloseHandle (hObject=0x250) returned 1
	[0299.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf.tl30z")) returned 0x220
	[0299.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.510] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0299.511] SetEvent (hEvent=0x234) returned 1
	[0299.512] SetEvent (hEvent=0x118) returned 1
	[0299.512] SwitchToThread () returned 1
	[0299.513] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0299.515] SetEvent (hEvent=0x118) returned 1
	[0299.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf")) returned 0x220
	[0299.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF", dwFileAttributes=0x220) returned 1
	[0299.516] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.724] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0299.724] ReadFile (in: hFile=0x250, lpBuffer=0x112fe000, nNumberOfBytesToRead=0x60dc, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112fe000*, lpNumberOfBytesRead=0x1128be18*=0x60dc, lpOverlapped=0x0) returned 1
	[0299.729] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0299.729] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267d02 | out: pbBuffer=0x11267d02) returned 1
	[0299.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267d18 | out: pbBuffer=0x11267d18) returned 1
	[0299.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267db2 | out: pbBuffer=0x11267db2) returned 1
	[0299.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0299.731] GetFileType (hFile=0x250) returned 0x1
	[0299.731] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.731] WriteFile (in: hFile=0x250, lpBuffer=0x110b6000*, nNumberOfBytesToWrite=0x60dc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110b6000*, lpNumberOfBytesWritten=0x11031dfc*=0x60dc, lpOverlapped=0x11031e08) returned 1
	[0299.732] GetFileType (hFile=0x250) returned 0x1
	[0299.732] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x60dc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.732] GetFileType (hFile=0x250) returned 0x1
	[0299.732] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.732] WriteFile (in: hFile=0x250, lpBuffer=0x113caa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113caa80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0299.733] GetFileType (hFile=0x250) returned 0x1
	[0299.733] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x60dc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.733] CloseHandle (hObject=0x250) returned 1
	[0299.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf.tl30z")) returned 0x220
	[0299.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.736] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0299.739] SetEvent (hEvent=0x118) returned 1
	[0299.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf")) returned 0x220
	[0299.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF", dwFileAttributes=0x220) returned 1
	[0299.739] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0299.822] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0299.822] ReadFile (in: hFile=0x250, lpBuffer=0x11137000, nNumberOfBytesToRead=0xd9a, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11137000*, lpNumberOfBytesRead=0x1128be18*=0xd9a, lpOverlapped=0x0) returned 1
	[0299.827] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6700 | out: pbBuffer=0x113e6700) returned 1
	[0299.827] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1111d202 | out: pbBuffer=0x1111d202) returned 1
	[0299.828] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1111d2c2 | out: pbBuffer=0x1111d2c2) returned 1
	[0299.828] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1111d2eb | out: pbBuffer=0x1111d2eb) returned 1
	[0299.828] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6730 | out: pbBuffer=0x113e6730) returned 1
	[0299.829] GetFileType (hFile=0x250) returned 0x1
	[0299.829] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.829] WriteFile (in: hFile=0x250, lpBuffer=0x1122a000*, nNumberOfBytesToWrite=0xd9a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1122a000*, lpNumberOfBytesWritten=0x11031dfc*=0xd9a, lpOverlapped=0x11031e08) returned 1
	[0299.829] GetFileType (hFile=0x250) returned 0x1
	[0299.830] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xd9a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.830] GetFileType (hFile=0x250) returned 0x1
	[0299.830] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.830] WriteFile (in: hFile=0x250, lpBuffer=0x1121c700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1121c700*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0299.830] GetFileType (hFile=0x250) returned 0x1
	[0299.830] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xd9a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.831] CloseHandle (hObject=0x250) returned 1
	[0299.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf.tl30z")) returned 0x220
	[0299.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.833] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0299.837] SetEvent (hEvent=0x118) returned 1
	[0299.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf")) returned 0x220
	[0299.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF", dwFileAttributes=0x220) returned 1
	[0299.838] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf.tl30z"), dwFlags=0x1) returned 1
	[0299.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0299.956] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0299.956] ReadFile (in: hFile=0x288, lpBuffer=0x11058000, nNumberOfBytesToRead=0x918c, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x1128be18*=0x918c, lpOverlapped=0x0) returned 1
	[0299.963] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158280 | out: pbBuffer=0x11158280) returned 1
	[0299.963] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158278 | out: pbBuffer=0x11158278) returned 1
	[0299.964] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bd202 | out: pbBuffer=0x111bd202) returned 1
	[0299.964] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582b0 | out: pbBuffer=0x111582b0) returned 1
	[0299.965] GetFileType (hFile=0x288) returned 0x1
	[0299.965] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.965] WriteFile (in: hFile=0x288, lpBuffer=0x1115a000*, nNumberOfBytesToWrite=0x918c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1115a000*, lpNumberOfBytesWritten=0x11031dfc*=0x918c, lpOverlapped=0x11031e08) returned 1
	[0299.966] GetFileType (hFile=0x288) returned 0x1
	[0299.966] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x918c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.966] GetFileType (hFile=0x288) returned 0x1
	[0299.966] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.966] WriteFile (in: hFile=0x288, lpBuffer=0x112bdc00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112bdc00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0299.967] GetFileType (hFile=0x288) returned 0x1
	[0299.967] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x918c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0299.967] CloseHandle (hObject=0x288) returned 1
	[0299.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf.tl30z")) returned 0x220
	[0299.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0299.971] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0299.973] SetEvent (hEvent=0x234) returned 1
	[0299.974] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf")) returned 0x220
	[0299.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF", dwFileAttributes=0x220) returned 1
	[0299.974] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0300.062] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0300.062] ReadFile (in: hFile=0x288, lpBuffer=0x11144000, nNumberOfBytesToRead=0xa086, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11144000*, lpNumberOfBytesRead=0x1128be18*=0xa086, lpOverlapped=0x0) returned 1
	[0300.362] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0300.362] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332238 | out: pbBuffer=0x11332238) returned 1
	[0300.362] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c5e802 | out: pbBuffer=0x11c5e802) returned 1
	[0300.362] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c5e865 | out: pbBuffer=0x11c5e865) returned 1
	[0300.362] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c5e8ad | out: pbBuffer=0x11c5e8ad) returned 1
	[0300.363] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332270 | out: pbBuffer=0x11332270) returned 1
	[0300.366] GetFileType (hFile=0x288) returned 0x1
	[0300.366] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11c55de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.366] WriteFile (in: hFile=0x288, lpBuffer=0x11cba000*, nNumberOfBytesToWrite=0xa086, lpNumberOfBytesWritten=0x11c55dfc, lpOverlapped=0x11c55e08 | out: lpBuffer=0x11cba000*, lpNumberOfBytesWritten=0x11c55dfc*=0xa086, lpOverlapped=0x11c55e08) returned 1
	[0300.367] GetFileType (hFile=0x288) returned 0x1
	[0300.367] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xa086, lpNewFilePointer=0x0, dwMoveMethod=0x11c55de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.367] GetFileType (hFile=0x288) returned 0x1
	[0300.367] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11c55de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.367] WriteFile (in: hFile=0x288, lpBuffer=0x11c72a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11c55dfc, lpOverlapped=0x11c55e08 | out: lpBuffer=0x11c72a80*, lpNumberOfBytesWritten=0x11c55dfc*=0x22a, lpOverlapped=0x11c55e08) returned 1
	[0300.367] GetFileType (hFile=0x288) returned 0x1
	[0300.368] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xa086, lpNewFilePointer=0x0, dwMoveMethod=0x11c55de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.368] CloseHandle (hObject=0x288) returned 1
	[0300.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf.tl30z")) returned 0x220
	[0300.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf")) returned 0x220
	[0300.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF", dwFileAttributes=0x220) returned 1
	[0300.413] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0300.416] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0300.416] ReadFile (in: hFile=0x1d8, lpBuffer=0x1146f500, nNumberOfBytesToRead=0x1418, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1146f500*, lpNumberOfBytesRead=0x11287e18*=0x1418, lpOverlapped=0x0) returned 1
	[0300.998] SetEvent (hEvent=0x264) returned 1
	[0300.998] SetEvent (hEvent=0x2a8) returned 1
	[0300.998] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0301.013] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.013] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0301.019] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.019] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0301.021] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.022] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0301.027] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.027] SetEvent (hEvent=0x150) returned 1
	[0301.027] SetEvent (hEvent=0x1bc) returned 1
	[0301.027] SetEvent (hEvent=0x12c) returned 1
	[0301.028] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0x1) returned 0x102
	[0301.032] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.033] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111580f0 | out: pbBuffer=0x111580f0) returned 1
	[0301.033] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111580e8 | out: pbBuffer=0x111580e8) returned 1
	[0301.033] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112d8802 | out: pbBuffer=0x112d8802) returned 1
	[0301.034] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158120 | out: pbBuffer=0x11158120) returned 1
	[0301.034] GetFileType (hFile=0x1d0) returned 0x1
	[0301.034] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.034] WriteFile (in: hFile=0x1d0, lpBuffer=0x11c16000*, nNumberOfBytesToWrite=0x1998, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11c16000*, lpNumberOfBytesWritten=0x113b3dfc*=0x1998, lpOverlapped=0x113b3e08) returned 1
	[0301.035] GetFileType (hFile=0x1d0) returned 0x1
	[0301.035] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x1998, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.035] GetFileType (hFile=0x1d0) returned 0x1
	[0301.035] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.036] WriteFile (in: hFile=0x1d0, lpBuffer=0x11caca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11caca80*, lpNumberOfBytesWritten=0x113b3dfc*=0x22a, lpOverlapped=0x113b3e08) returned 1
	[0301.036] GetFileType (hFile=0x1d0) returned 0x1
	[0301.036] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x1998, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.036] CloseHandle (hObject=0x1d0) returned 1
	[0301.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf.tl30z")) returned 0x220
	[0301.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.039] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158270 | out: pbBuffer=0x11158270) returned 1
	[0301.039] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158268 | out: pbBuffer=0x11158268) returned 1
	[0301.039] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112d9e02 | out: pbBuffer=0x112d9e02) returned 1
	[0301.040] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582a0 | out: pbBuffer=0x111582a0) returned 1
	[0301.040] GetFileType (hFile=0x1f4) returned 0x1
	[0301.041] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.041] WriteFile (in: hFile=0x1f4, lpBuffer=0x11c36000*, nNumberOfBytesToWrite=0x1348, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11c36000*, lpNumberOfBytesWritten=0x113b3dfc*=0x1348, lpOverlapped=0x113b3e08) returned 1
	[0301.041] GetFileType (hFile=0x1f4) returned 0x1
	[0301.041] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1348, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.041] GetFileType (hFile=0x1f4) returned 0x1
	[0301.042] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.042] WriteFile (in: hFile=0x1f4, lpBuffer=0x11c09500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11c09500*, lpNumberOfBytesWritten=0x113b3dfc*=0x227, lpOverlapped=0x113b3e08) returned 1
	[0301.042] GetFileType (hFile=0x1f4) returned 0x1
	[0301.042] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1348, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.042] CloseHandle (hObject=0x1f4) returned 1
	[0301.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf.tl30z")) returned 0x220
	[0301.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.044] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111583e0 | out: pbBuffer=0x111583e0) returned 1
	[0301.044] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c4f302 | out: pbBuffer=0x11c4f302) returned 1
	[0301.044] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c4f3c0 | out: pbBuffer=0x11c4f3c0) returned 1
	[0301.044] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c4f3e1 | out: pbBuffer=0x11c4f3e1) returned 1
	[0301.044] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c4f3eb | out: pbBuffer=0x11c4f3eb) returned 1
	[0301.045] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158410 | out: pbBuffer=0x11158410) returned 1
	[0301.045] GetFileType (hFile=0x204) returned 0x1
	[0301.045] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.046] WriteFile (in: hFile=0x204, lpBuffer=0x11cda000*, nNumberOfBytesToWrite=0xa4e, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11cda000*, lpNumberOfBytesWritten=0x113b3dfc*=0xa4e, lpOverlapped=0x113b3e08) returned 1
	[0301.046] GetFileType (hFile=0x204) returned 0x1
	[0301.046] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xa4e, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.046] GetFileType (hFile=0x204) returned 0x1
	[0301.046] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.046] WriteFile (in: hFile=0x204, lpBuffer=0x113e2380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x113e2380*, lpNumberOfBytesWritten=0x113b3dfc*=0x22a, lpOverlapped=0x113b3e08) returned 1
	[0301.047] GetFileType (hFile=0x204) returned 0x1
	[0301.047] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xa4e, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.047] CloseHandle (hObject=0x204) returned 1
	[0301.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf.tl30z")) returned 0x220
	[0301.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158560 | out: pbBuffer=0x11158560) returned 1
	[0301.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158558 | out: pbBuffer=0x11158558) returned 1
	[0301.049] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c4fd02 | out: pbBuffer=0x11c4fd02) returned 1
	[0301.050] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158590 | out: pbBuffer=0x11158590) returned 1
	[0301.050] GetFileType (hFile=0x288) returned 0x1
	[0301.050] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.050] WriteFile (in: hFile=0x288, lpBuffer=0x11bf0000*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11bf0000*, lpNumberOfBytesWritten=0x113b3dfc*=0x1c40, lpOverlapped=0x113b3e08) returned 1
	[0301.051] GetFileType (hFile=0x288) returned 0x1
	[0301.051] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1c40, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.051] GetFileType (hFile=0x288) returned 0x1
	[0301.052] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.052] WriteFile (in: hFile=0x288, lpBuffer=0x11ce4000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11ce4000*, lpNumberOfBytesWritten=0x113b3dfc*=0x224, lpOverlapped=0x113b3e08) returned 1
	[0301.052] GetFileType (hFile=0x288) returned 0x1
	[0301.052] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x1c40, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.052] CloseHandle (hObject=0x288) returned 1
	[0301.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf.tl30z")) returned 0x220
	[0301.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111586c0 | out: pbBuffer=0x111586c0) returned 1
	[0301.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122e702 | out: pbBuffer=0x1122e702) returned 1
	[0301.055] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111586f0 | out: pbBuffer=0x111586f0) returned 1
	[0301.055] GetFileType (hFile=0x1d4) returned 0x1
	[0301.055] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.056] WriteFile (in: hFile=0x1d4, lpBuffer=0x11ca8000*, nNumberOfBytesToWrite=0x1476, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11ca8000*, lpNumberOfBytesWritten=0x113b3dfc*=0x1476, lpOverlapped=0x113b3e08) returned 1
	[0301.056] GetFileType (hFile=0x1d4) returned 0x1
	[0301.056] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1476, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.056] GetFileType (hFile=0x1d4) returned 0x1
	[0301.057] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.057] WriteFile (in: hFile=0x1d4, lpBuffer=0x11ce4e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11ce4e00*, lpNumberOfBytesWritten=0x113b3dfc*=0x22d, lpOverlapped=0x113b3e08) returned 1
	[0301.057] GetFileType (hFile=0x1d4) returned 0x1
	[0301.057] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1476, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.057] CloseHandle (hObject=0x1d4) returned 1
	[0301.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf.tl30z")) returned 0x220
	[0301.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158830 | out: pbBuffer=0x11158830) returned 1
	[0301.060] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122fc02 | out: pbBuffer=0x1122fc02) returned 1
	[0301.060] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1122fc23 | out: pbBuffer=0x1122fc23) returned 1
	[0301.060] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158860 | out: pbBuffer=0x11158860) returned 1
	[0301.061] GetFileType (hFile=0x28c) returned 0x1
	[0301.061] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.061] WriteFile (in: hFile=0x28c, lpBuffer=0x11412000*, nNumberOfBytesToWrite=0xdc4, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11412000*, lpNumberOfBytesWritten=0x113b3dfc*=0xdc4, lpOverlapped=0x113b3e08) returned 1
	[0301.061] GetFileType (hFile=0x28c) returned 0x1
	[0301.061] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0xdc4, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.061] GetFileType (hFile=0x28c) returned 0x1
	[0301.061] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.062] WriteFile (in: hFile=0x28c, lpBuffer=0x11ce5c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11ce5c00*, lpNumberOfBytesWritten=0x113b3dfc*=0x22a, lpOverlapped=0x113b3e08) returned 1
	[0301.062] GetFileType (hFile=0x28c) returned 0x1
	[0301.062] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0xdc4, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.062] CloseHandle (hObject=0x28c) returned 1
	[0301.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf.tl30z")) returned 0x220
	[0301.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158b00 | out: pbBuffer=0x11158b00) returned 1
	[0301.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125d202 | out: pbBuffer=0x1125d202) returned 1
	[0301.084] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158b30 | out: pbBuffer=0x11158b30) returned 1
	[0301.085] GetFileType (hFile=0x2a0) returned 0x1
	[0301.085] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.086] WriteFile (in: hFile=0x2a0, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x113b3dfc*=0xa410, lpOverlapped=0x113b3e08) returned 1
	[0301.096] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.122] GetFileType (hFile=0x2a0) returned 0x1
	[0301.122] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xa410, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.122] SetEvent (hEvent=0x1e8) returned 1
	[0301.122] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.694] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid")) returned 0x220
	[0308.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID", dwFileAttributes=0x220) returned 1
	[0308.705] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0308.760] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x110ade08 | out: lpMode=0x110ade08) returned 0
	[0308.760] ReadFile (in: hFile=0x1b4, lpBuffer=0x110b6000, nNumberOfBytesToRead=0x1a6b, lpNumberOfBytesRead=0x110ade18, lpOverlapped=0x0 | out: lpBuffer=0x110b6000*, lpNumberOfBytesRead=0x110ade18*=0x1a6b, lpOverlapped=0x0) returned 1
	[0308.879] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f920 | out: pbBuffer=0x1140f920) returned 1
	[0309.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f918 | out: pbBuffer=0x1140f918) returned 1
	[0309.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1140ba02 | out: pbBuffer=0x1140ba02) returned 1
	[0309.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140ba31 | out: pbBuffer=0x1140ba31) returned 1
	[0309.030] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140babe | out: pbBuffer=0x1140babe) returned 1
	[0309.031] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f950 | out: pbBuffer=0x1140f950) returned 1
	[0309.031] GetFileType (hFile=0x1b4) returned 0x1
	[0309.031] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.031] WriteFile (in: hFile=0x1b4, lpBuffer=0x113f6000*, nNumberOfBytesToWrite=0x1a6b, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x113f6000*, lpNumberOfBytesWritten=0x1145bdfc*=0x1a6b, lpOverlapped=0x1145be08) returned 1
	[0309.032] GetFileType (hFile=0x1b4) returned 0x1
	[0309.032] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1a6b, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.033] GetFileType (hFile=0x1b4) returned 0x1
	[0309.033] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.034] WriteFile (in: hFile=0x1b4, lpBuffer=0x112d9880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x112d9880*, lpNumberOfBytesWritten=0x1145bdfc*=0x230, lpOverlapped=0x1145be08) returned 1
	[0309.034] GetFileType (hFile=0x1b4) returned 0x1
	[0309.034] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1a6b, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.034] CloseHandle (hObject=0x1b4) returned 1
	[0309.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid.tl30z")) returned 0x220
	[0309.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0309.035] SetEvent (hEvent=0x22c) returned 1
	[0309.035] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf")) returned 0x220
	[0309.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF", dwFileAttributes=0x220) returned 1
	[0309.067] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0309.071] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0309.071] ReadFile (in: hFile=0x1f4, lpBuffer=0x11188000, nNumberOfBytesToRead=0x6140, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11188000*, lpNumberOfBytesRead=0x11022e18*=0x6140, lpOverlapped=0x0) returned 1
	[0309.087] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126270 | out: pbBuffer=0x11126270) returned 1
	[0309.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126268 | out: pbBuffer=0x11126268) returned 1
	[0309.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11165602 | out: pbBuffer=0x11165602) returned 1
	[0309.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111262a0 | out: pbBuffer=0x111262a0) returned 1
	[0309.254] GetFileType (hFile=0x1f4) returned 0x1
	[0309.254] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11459de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.254] WriteFile (in: hFile=0x1f4, lpBuffer=0x1123a000*, nNumberOfBytesToWrite=0x6140, lpNumberOfBytesWritten=0x11459dfc, lpOverlapped=0x11459e08 | out: lpBuffer=0x1123a000*, lpNumberOfBytesWritten=0x11459dfc*=0x6140, lpOverlapped=0x11459e08) returned 1
	[0309.255] GetFileType (hFile=0x1f4) returned 0x1
	[0309.255] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x6140, lpNewFilePointer=0x0, dwMoveMethod=0x11459de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.255] GetFileType (hFile=0x1f4) returned 0x1
	[0309.255] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11459de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.255] WriteFile (in: hFile=0x1f4, lpBuffer=0x1138b880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11459dfc, lpOverlapped=0x11459e08 | out: lpBuffer=0x1138b880*, lpNumberOfBytesWritten=0x11459dfc*=0x224, lpOverlapped=0x11459e08) returned 1
	[0309.255] GetFileType (hFile=0x1f4) returned 0x1
	[0309.256] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x6140, lpNewFilePointer=0x0, dwMoveMethod=0x11459de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.256] CloseHandle (hObject=0x1f4) returned 1
	[0309.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf.tl30z")) returned 0x220
	[0309.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.274] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.280] SetEvent (hEvent=0x164) returned 1
	[0309.281] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.315] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.337] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.667] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp")) returned 0x220
	[0313.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP", dwFileAttributes=0x220) returned 1
	[0313.675] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.722] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x29c
	[0313.726] GetConsoleMode (in: hConsoleHandle=0x29c, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0313.726] ReadFile (in: hFile=0x29c, lpBuffer=0x111f2000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x111f2000*, lpNumberOfBytesRead=0x1128ce18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0313.829] SetEvent (hEvent=0x284) returned 1
	[0313.829] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.690] SetEvent (hEvent=0x22c) returned 1
	[0317.690] WaitForSingleObject (hHandle=0x26c, dwMilliseconds=0xffffffff) 

Thread:
	id = 39
	os_tid = 0x270

	[0212.903] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x32abff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x32abff30*=0x228) returned 1
	[0212.903] VirtualQuery (in: lpAddress=0x32abff40, lpBuffer=0x32abff40, dwLength=0x1c | out: lpBuffer=0x32abff40*(BaseAddress=0x32abf000, AllocationBase=0x329c0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0212.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x112d01c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x22c
	[0212.905] CloseHandle (hObject=0x22c) returned 1
	[0212.905] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x22c
	[0212.905] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x102
	[0213.023] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0213.023] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x0
	[0213.035] SetEvent (hEvent=0x240) returned 1
	[0213.035] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x102
	[0213.061] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0213.061] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 0x20
	[0213.061] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", dwFileAttributes=0x20) returned 1
	[0213.062] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.tl30z"), dwFlags=0x1) returned 1
	[0220.978] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244
	[0221.213] GetConsoleMode (in: hConsoleHandle=0x244, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0221.214] ReadFile (in: hFile=0x244, lpBuffer=0x115b2000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x115b2000*, lpNumberOfBytesRead=0x11316e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0221.399] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e450 | out: pbBuffer=0x1104e450) returned 1
	[0221.399] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107bd02 | out: pbBuffer=0x1107bd02) returned 1
	[0221.399] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107bd4a | out: pbBuffer=0x1107bd4a) returned 1
	[0221.399] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e480 | out: pbBuffer=0x1104e480) returned 1
	[0221.401] GetFileType (hFile=0x244) returned 0x1
	[0221.401] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0221.401] WriteFile (in: hFile=0x244, lpBuffer=0x110a8000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x110a8000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0221.402] GetFileType (hFile=0x244) returned 0x1
	[0221.402] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0221.402] GetFileType (hFile=0x244) returned 0x1
	[0221.402] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0221.403] WriteFile (in: hFile=0x244, lpBuffer=0x115c4a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x115c4a80*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0221.403] GetFileType (hFile=0x244) returned 0x1
	[0221.403] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0221.404] CloseHandle (hObject=0x244) returned 1
	[0221.626] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.tl30z")) returned 0x20
	[0221.626] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0221.941] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0222.102] SetEvent (hEvent=0x210) returned 1
	[0222.103] SetEvent (hEvent=0x240) returned 1
	[0222.103] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x102
	[0222.127] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0222.127] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x102
	[0222.134] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0222.135] SetEvent (hEvent=0x23c) returned 1
	[0222.135] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x102
	[0222.165] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0222.166] ReadFile (in: hFile=0x25c, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1129de18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x1129de18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0222.240] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0222.240] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11058802 | out: pbBuffer=0x11058802) returned 1
	[0222.241] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105886c | out: pbBuffer=0x1105886c) returned 1
	[0222.241] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0222.242] GetFileType (hFile=0x25c) returned 0x1
	[0222.242] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.243] WriteFile (in: hFile=0x25c, lpBuffer=0x11628000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x11628000*, lpNumberOfBytesWritten=0x1129ddfc*=0x6ccc, lpOverlapped=0x1129de08) returned 1
	[0222.244] GetFileType (hFile=0x25c) returned 0x1
	[0222.244] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.244] GetFileType (hFile=0x25c) returned 0x1
	[0222.244] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.244] WriteFile (in: hFile=0x25c, lpBuffer=0x11602e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x11602e00*, lpNumberOfBytesWritten=0x1129ddfc*=0x230, lpOverlapped=0x1129de08) returned 1
	[0222.245] GetFileType (hFile=0x25c) returned 0x1
	[0222.245] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.245] CloseHandle (hObject=0x25c) returned 1
	[0222.298] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.tl30z")) returned 0x20
	[0222.298] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0222.376] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0242.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 0x20
	[0242.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", dwFileAttributes=0x20) returned 1
	[0242.217] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.tl30z"), dwFlags=0x1) returned 1
	[0244.796] SetEvent (hEvent=0x12c) returned 1
	[0244.796] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x102
	[0244.801] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.801] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x102
	[0244.808] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.809] SetEvent (hEvent=0x1e8) returned 1
	[0244.809] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x102
	[0244.816] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0244.816] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0244.832] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x112f3e08 | out: lpMode=0x112f3e08) returned 0
	[0244.832] ReadFile (in: hFile=0x1fc, lpBuffer=0x1140c000, nNumberOfBytesToRead=0xa4c9, lpNumberOfBytesRead=0x112f3e18, lpOverlapped=0x0 | out: lpBuffer=0x1140c000*, lpNumberOfBytesRead=0x112f3e18*=0xa4c9, lpOverlapped=0x0) returned 1
	[0244.862] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0244.862] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e3b8 | out: pbBuffer=0x1104e3b8) returned 1
	[0244.862] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11344902 | out: pbBuffer=0x11344902) returned 1
	[0244.862] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0244.863] GetFileType (hFile=0x1fc) returned 0x1
	[0244.863] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.864] WriteFile (in: hFile=0x1fc, lpBuffer=0x1131e000*, nNumberOfBytesToWrite=0xa4c9, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1131e000*, lpNumberOfBytesWritten=0x112f3dfc*=0xa4c9, lpOverlapped=0x112f3e08) returned 1
	[0244.864] GetFileType (hFile=0x1fc) returned 0x1
	[0244.864] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xa4c9, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.864] GetFileType (hFile=0x1fc) returned 0x1
	[0244.864] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.865] WriteFile (in: hFile=0x1fc, lpBuffer=0x1141ea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1141ea80*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0244.865] GetFileType (hFile=0x1fc) returned 0x1
	[0244.866] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xa4c9, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.866] CloseHandle (hObject=0x1fc) returned 1
	[0244.907] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.136] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf")) returned 0x220
	[0300.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF", dwFileAttributes=0x220) returned 1
	[0300.148] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0300.193] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11445e08 | out: lpMode=0x11445e08) returned 0
	[0300.193] ReadFile (in: hFile=0x250, lpBuffer=0x111d6000, nNumberOfBytesToRead=0x60c2, lpNumberOfBytesRead=0x11445e18, lpOverlapped=0x0 | out: lpBuffer=0x111d6000*, lpNumberOfBytesRead=0x11445e18*=0x60c2, lpOverlapped=0x0) returned 1
	[0300.541] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x102
	[0300.548] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.548] SetEvent (hEvent=0x150) returned 1
	[0300.548] SetEvent (hEvent=0x210) returned 1
	[0300.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111586f0 | out: pbBuffer=0x111586f0) returned 1
	[0300.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113f2002 | out: pbBuffer=0x113f2002) returned 1
	[0300.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113f2028 | out: pbBuffer=0x113f2028) returned 1
	[0300.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113f20a7 | out: pbBuffer=0x113f20a7) returned 1
	[0300.550] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158720 | out: pbBuffer=0x11158720) returned 1
	[0300.550] GetFileType (hFile=0x250) returned 0x1
	[0300.550] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.550] WriteFile (in: hFile=0x250, lpBuffer=0x110f2000*, nNumberOfBytesToWrite=0x60c2, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x110f2000*, lpNumberOfBytesWritten=0x112bfdfc*=0x60c2, lpOverlapped=0x112bfe08) returned 1
	[0300.551] GetFileType (hFile=0x250) returned 0x1
	[0300.551] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x60c2, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.551] GetFileType (hFile=0x250) returned 0x1
	[0300.551] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.551] WriteFile (in: hFile=0x250, lpBuffer=0x11311500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x11311500*, lpNumberOfBytesWritten=0x112bfdfc*=0x227, lpOverlapped=0x112bfe08) returned 1
	[0300.551] GetFileType (hFile=0x250) returned 0x1
	[0300.552] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x60c2, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.552] CloseHandle (hObject=0x250) returned 1
	[0300.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf.tl30z")) returned 0x220
	[0300.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.560] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.565] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.601] SetEvent (hEvent=0x1e0) returned 1
	[0300.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf")) returned 0x220
	[0300.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF", dwFileAttributes=0x220) returned 1
	[0300.601] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0300.645] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0300.646] ReadFile (in: hFile=0x1d4, lpBuffer=0x1146e000, nNumberOfBytesToRead=0x1476, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1146e000*, lpNumberOfBytesRead=0x1128ae18*=0x1476, lpOverlapped=0x0) returned 1
	[0301.003] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.020] SetEvent (hEvent=0x160) returned 1
	[0301.020] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.117] SetEvent (hEvent=0x234) returned 1
	[0301.117] SetEvent (hEvent=0x27c) returned 1
	[0301.117] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.719] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.728] SetEvent (hEvent=0x234) returned 1
	[0308.728] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.729] SetEvent (hEvent=0x1f0) returned 1
	[0308.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid")) returned 0x220
	[0308.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID", dwFileAttributes=0x220) returned 1
	[0308.730] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0308.776] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x110afe08 | out: lpMode=0x110afe08) returned 0
	[0308.776] ReadFile (in: hFile=0x290, lpBuffer=0x110c0000, nNumberOfBytesToRead=0x1652, lpNumberOfBytesRead=0x110afe18, lpOverlapped=0x0 | out: lpBuffer=0x110c0000*, lpNumberOfBytesRead=0x110afe18*=0x1652, lpOverlapped=0x0) returned 1
	[0308.880] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.047] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fa90 | out: pbBuffer=0x1140fa90) returned 1
	[0309.047] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140fa88 | out: pbBuffer=0x1140fa88) returned 1
	[0309.047] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11304402 | out: pbBuffer=0x11304402) returned 1
	[0309.047] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11304434 | out: pbBuffer=0x11304434) returned 1
	[0309.047] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11304470 | out: pbBuffer=0x11304470) returned 1
	[0309.048] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140fac0 | out: pbBuffer=0x1140fac0) returned 1
	[0309.048] GetFileType (hFile=0x290) returned 0x1
	[0309.048] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.048] WriteFile (in: hFile=0x290, lpBuffer=0x1111c000*, nNumberOfBytesToWrite=0x1652, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x1111c000*, lpNumberOfBytesWritten=0x1145bdfc*=0x1652, lpOverlapped=0x1145be08) returned 1
	[0309.049] GetFileType (hFile=0x290) returned 0x1
	[0309.049] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x1652, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.049] GetFileType (hFile=0x290) returned 0x1
	[0309.049] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.049] WriteFile (in: hFile=0x290, lpBuffer=0x11308700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x11308700*, lpNumberOfBytesWritten=0x1145bdfc*=0x22a, lpOverlapped=0x1145be08) returned 1
	[0309.049] GetFileType (hFile=0x290) returned 0x1
	[0309.050] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x1652, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.050] CloseHandle (hObject=0x290) returned 1
	[0309.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid.tl30z")) returned 0x220
	[0309.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0309.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1102ba18 | out: lpFileInformation=0x1102ba18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10123d5b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10123d5b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6)) returned 1
	[0309.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf")) returned 0x220
	[0309.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF", dwFileAttributes=0x220) returned 1
	[0309.051] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0309.055] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x110afe08 | out: lpMode=0x110afe08) returned 0
	[0309.055] ReadFile (in: hFile=0x290, lpBuffer=0x11120000, nNumberOfBytesToRead=0x5670, lpNumberOfBytesRead=0x110afe18, lpOverlapped=0x0 | out: lpBuffer=0x11120000*, lpNumberOfBytesRead=0x110afe18*=0x5670, lpOverlapped=0x0) returned 1
	[0309.077] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126100 | out: pbBuffer=0x11126100) returned 1
	[0309.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11164802 | out: pbBuffer=0x11164802) returned 1
	[0309.226] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116480c | out: pbBuffer=0x1116480c) returned 1
	[0309.227] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126130 | out: pbBuffer=0x11126130) returned 1
	[0309.227] GetFileType (hFile=0x290) returned 0x1
	[0309.227] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11459de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.228] WriteFile (in: hFile=0x290, lpBuffer=0x11bfe000*, nNumberOfBytesToWrite=0x5670, lpNumberOfBytesWritten=0x11459dfc, lpOverlapped=0x11459e08 | out: lpBuffer=0x11bfe000*, lpNumberOfBytesWritten=0x11459dfc*=0x5670, lpOverlapped=0x11459e08) returned 1
	[0309.228] GetFileType (hFile=0x290) returned 0x1
	[0309.228] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x5670, lpNewFilePointer=0x0, dwMoveMethod=0x11459de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.228] GetFileType (hFile=0x290) returned 0x1
	[0309.229] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11459de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.229] WriteFile (in: hFile=0x290, lpBuffer=0x1138aa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11459dfc, lpOverlapped=0x11459e08 | out: lpBuffer=0x1138aa80*, lpNumberOfBytesWritten=0x11459dfc*=0x22d, lpOverlapped=0x11459e08) returned 1
	[0309.229] GetFileType (hFile=0x290) returned 0x1
	[0309.229] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x5670, lpNewFilePointer=0x0, dwMoveMethod=0x11459de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.229] CloseHandle (hObject=0x290) returned 1
	[0309.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf.tl30z")) returned 0x220
	[0309.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.248] SetEvent (hEvent=0x26c) returned 1
	[0309.248] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf")) returned 0x220
	[0309.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF", dwFileAttributes=0x220) returned 1
	[0309.262] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254
	[0309.404] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0309.404] ReadFile (in: hFile=0x254, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x5aa4, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x11023e18*=0x5aa4, lpOverlapped=0x0) returned 1
	[0309.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0309.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324f8 | out: pbBuffer=0x113324f8) returned 1
	[0309.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c45e02 | out: pbBuffer=0x11c45e02) returned 1
	[0309.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c45e69 | out: pbBuffer=0x11c45e69) returned 1
	[0309.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c45e7e | out: pbBuffer=0x11c45e7e) returned 1
	[0309.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0309.411] GetFileType (hFile=0x254) returned 0x1
	[0309.411] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.412] WriteFile (in: hFile=0x254, lpBuffer=0x1129a000*, nNumberOfBytesToWrite=0x5aa4, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1129a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5aa4, lpOverlapped=0x1102be08) returned 1
	[0309.423] GetFileType (hFile=0x254) returned 0x1
	[0309.424] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x5aa4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.425] GetFileType (hFile=0x254) returned 0x1
	[0309.425] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.425] WriteFile (in: hFile=0x254, lpBuffer=0x112e8a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112e8a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0309.426] GetFileType (hFile=0x254) returned 0x1
	[0309.426] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x5aa4, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.426] CloseHandle (hObject=0x254) returned 1
	[0309.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf.tl30z")) returned 0x220
	[0309.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf")) returned 0x220
	[0309.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF", dwFileAttributes=0x220) returned 1
	[0309.435] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0309.541] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0309.541] ReadFile (in: hFile=0x1f4, lpBuffer=0x11070600, nNumberOfBytesToRead=0x112e, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11070600*, lpNumberOfBytesRead=0x11023e18*=0x112e, lpOverlapped=0x0) returned 1
	[0309.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111266c0 | out: pbBuffer=0x111266c0) returned 1
	[0309.549] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11143002 | out: pbBuffer=0x11143002) returned 1
	[0309.550] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111266f0 | out: pbBuffer=0x111266f0) returned 1
	[0309.550] GetFileType (hFile=0x1f4) returned 0x1
	[0309.550] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.551] WriteFile (in: hFile=0x1f4, lpBuffer=0x11bc6000*, nNumberOfBytesToWrite=0x112e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesWritten=0x11031dfc*=0x112e, lpOverlapped=0x11031e08) returned 1
	[0309.551] GetFileType (hFile=0x1f4) returned 0x1
	[0309.551] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x112e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.552] GetFileType (hFile=0x1f4) returned 0x1
	[0309.552] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.552] WriteFile (in: hFile=0x1f4, lpBuffer=0x11470380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11470380*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0309.552] GetFileType (hFile=0x1f4) returned 0x1
	[0309.552] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x112e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.552] CloseHandle (hObject=0x1f4) returned 1
	[0309.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf.tl30z")) returned 0x220
	[0309.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf")) returned 0x220
	[0309.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF", dwFileAttributes=0x220) returned 1
	[0309.560] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0309.647] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x110abe08 | out: lpMode=0x110abe08) returned 0
	[0309.647] ReadFile (in: hFile=0x200, lpBuffer=0x112c0000, nNumberOfBytesToRead=0x9e2c, lpNumberOfBytesRead=0x110abe18, lpOverlapped=0x0 | out: lpBuffer=0x112c0000*, lpNumberOfBytesRead=0x110abe18*=0x9e2c, lpOverlapped=0x0) returned 1
	[0309.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0309.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11309302 | out: pbBuffer=0x11309302) returned 1
	[0309.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11309355 | out: pbBuffer=0x11309355) returned 1
	[0309.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0309.655] GetFileType (hFile=0x200) returned 0x1
	[0309.655] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.655] WriteFile (in: hFile=0x200, lpBuffer=0x112dc000*, nNumberOfBytesToWrite=0x9e2c, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112dc000*, lpNumberOfBytesWritten=0x1133ddfc*=0x9e2c, lpOverlapped=0x1133de08) returned 1
	[0309.656] GetFileType (hFile=0x200) returned 0x1
	[0309.656] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x9e2c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.656] GetFileType (hFile=0x200) returned 0x1
	[0309.656] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.657] WriteFile (in: hFile=0x200, lpBuffer=0x110a0700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110a0700*, lpNumberOfBytesWritten=0x1133ddfc*=0x233, lpOverlapped=0x1133de08) returned 1
	[0309.657] GetFileType (hFile=0x200) returned 0x1
	[0309.657] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x9e2c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.657] CloseHandle (hObject=0x200) returned 1
	[0309.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf.tl30z")) returned 0x220
	[0309.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf")) returned 0x220
	[0309.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF", dwFileAttributes=0x220) returned 1
	[0309.660] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0310.851] SetEvent (hEvent=0x150) returned 1
	[0310.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0310.865] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x110abe08 | out: lpMode=0x110abe08) returned 0
	[0310.865] ReadFile (in: hFile=0x200, lpBuffer=0x11438000, nNumberOfBytesToRead=0x984, lpNumberOfBytesRead=0x110abe18, lpOverlapped=0x0 | out: lpBuffer=0x11438000*, lpNumberOfBytesRead=0x110abe18*=0x984, lpOverlapped=0x0) returned 1
	[0310.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6520 | out: pbBuffer=0x113e6520) returned 1
	[0310.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1143a802 | out: pbBuffer=0x1143a802) returned 1
	[0310.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1143a891 | out: pbBuffer=0x1143a891) returned 1
	[0310.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0310.877] GetFileType (hFile=0x200) returned 0x1
	[0310.878] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0310.878] WriteFile (in: hFile=0x200, lpBuffer=0x11441000*, nNumberOfBytesToWrite=0x984, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x11441000*, lpNumberOfBytesWritten=0x11251dfc*=0x984, lpOverlapped=0x11251e08) returned 1
	[0310.878] GetFileType (hFile=0x200) returned 0x1
	[0310.878] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x984, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0310.879] GetFileType (hFile=0x200) returned 0x1
	[0310.879] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0310.879] WriteFile (in: hFile=0x200, lpBuffer=0x11115500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x11115500*, lpNumberOfBytesWritten=0x11251dfc*=0x224, lpOverlapped=0x11251e08) returned 1
	[0310.879] GetFileType (hFile=0x200) returned 0x1
	[0310.879] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x984, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0310.879] CloseHandle (hObject=0x200) returned 1
	[0310.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf.tl30z")) returned 0x220
	[0310.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0310.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf")) returned 0x220
	[0310.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF", dwFileAttributes=0x220) returned 1
	[0310.892] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0310.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0310.965] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11094e08 | out: lpMode=0x11094e08) returned 0
	[0310.965] ReadFile (in: hFile=0x200, lpBuffer=0x11c0aa00, nNumberOfBytesToRead=0x23d4, lpNumberOfBytesRead=0x11094e18, lpOverlapped=0x0 | out: lpBuffer=0x11c0aa00*, lpNumberOfBytesRead=0x11094e18*=0x23d4, lpOverlapped=0x0) returned 1
	[0311.013] SetEvent (hEvent=0x1e0) returned 1
	[0311.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6800 | out: pbBuffer=0x113e6800) returned 1
	[0311.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1143be02 | out: pbBuffer=0x1143be02) returned 1
	[0311.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1143be8a | out: pbBuffer=0x1143be8a) returned 1
	[0311.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1143bedb | out: pbBuffer=0x1143bedb) returned 1
	[0311.015] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6830 | out: pbBuffer=0x113e6830) returned 1
	[0311.015] GetFileType (hFile=0x200) returned 0x1
	[0311.015] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.016] WriteFile (in: hFile=0x200, lpBuffer=0x11146000*, nNumberOfBytesToWrite=0x23d4, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x11146000*, lpNumberOfBytesWritten=0x11251dfc*=0x23d4, lpOverlapped=0x11251e08) returned 1
	[0311.016] GetFileType (hFile=0x200) returned 0x1
	[0311.016] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x23d4, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.016] GetFileType (hFile=0x200) returned 0x1
	[0311.016] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.017] WriteFile (in: hFile=0x200, lpBuffer=0x11461180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x11461180*, lpNumberOfBytesWritten=0x11251dfc*=0x22d, lpOverlapped=0x11251e08) returned 1
	[0311.020] GetFileType (hFile=0x200) returned 0x1
	[0311.021] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x23d4, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.021] CloseHandle (hObject=0x200) returned 1
	[0311.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf.tl30z")) returned 0x220
	[0311.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.028] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.031] SetEvent (hEvent=0x1e0) returned 1
	[0311.031] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.033] SetEvent (hEvent=0x1e0) returned 1
	[0311.033] SetEvent (hEvent=0x1e8) returned 1
	[0311.034] SwitchToThread () returned 1
	[0311.035] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.051] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.069] SetEvent (hEvent=0x1e8) returned 1
	[0311.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf")) returned 0x220
	[0311.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF", dwFileAttributes=0x220) returned 1
	[0311.070] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0311.631] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11096e08 | out: lpMode=0x11096e08) returned 0
	[0311.631] ReadFile (in: hFile=0x224, lpBuffer=0x110cc000, nNumberOfBytesToRead=0xb9c4, lpNumberOfBytesRead=0x11096e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11096e18*=0xb9c4, lpOverlapped=0x0) returned 1
	[0311.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66c0 | out: pbBuffer=0x113e66c0) returned 1
	[0311.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cda02 | out: pbBuffer=0x113cda02) returned 1
	[0311.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cda15 | out: pbBuffer=0x113cda15) returned 1
	[0311.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cda5b | out: pbBuffer=0x113cda5b) returned 1
	[0311.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cda90 | out: pbBuffer=0x113cda90) returned 1
	[0311.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cdae0 | out: pbBuffer=0x113cdae0) returned 1
	[0311.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66f0 | out: pbBuffer=0x113e66f0) returned 1
	[0311.639] GetFileType (hFile=0x224) returned 0x1
	[0311.639] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.640] WriteFile (in: hFile=0x224, lpBuffer=0x112bc000*, nNumberOfBytesToWrite=0xb9c4, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112bc000*, lpNumberOfBytesWritten=0x1133ddfc*=0xb9c4, lpOverlapped=0x1133de08) returned 1
	[0311.640] GetFileType (hFile=0x224) returned 0x1
	[0311.640] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xb9c4, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.640] GetFileType (hFile=0x224) returned 0x1
	[0311.640] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.641] WriteFile (in: hFile=0x224, lpBuffer=0x112e8e00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112e8e00*, lpNumberOfBytesWritten=0x1133ddfc*=0x233, lpOverlapped=0x1133de08) returned 1
	[0311.641] GetFileType (hFile=0x224) returned 0x1
	[0311.641] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xb9c4, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.641] CloseHandle (hObject=0x224) returned 1
	[0311.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf.tl30z")) returned 0x220
	[0311.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf")) returned 0x220
	[0311.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF", dwFileAttributes=0x220) returned 1
	[0311.645] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0311.704] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0311.704] ReadFile (in: hFile=0x184, lpBuffer=0x11174000, nNumberOfBytesToRead=0x76e0, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11174000*, lpNumberOfBytesRead=0x1128ce18*=0x76e0, lpOverlapped=0x0) returned 1
	[0311.715] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111260f0 | out: pbBuffer=0x111260f0) returned 1
	[0311.715] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111260e8 | out: pbBuffer=0x111260e8) returned 1
	[0311.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c36802 | out: pbBuffer=0x11c36802) returned 1
	[0311.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c368c3 | out: pbBuffer=0x11c368c3) returned 1
	[0311.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126120 | out: pbBuffer=0x11126120) returned 1
	[0311.717] GetFileType (hFile=0x184) returned 0x1
	[0311.718] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11c2fde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.718] WriteFile (in: hFile=0x184, lpBuffer=0x11c84000*, nNumberOfBytesToWrite=0x76e0, lpNumberOfBytesWritten=0x11c2fdfc, lpOverlapped=0x11c2fe08 | out: lpBuffer=0x11c84000*, lpNumberOfBytesWritten=0x11c2fdfc*=0x76e0, lpOverlapped=0x11c2fe08) returned 1
	[0311.718] GetFileType (hFile=0x184) returned 0x1
	[0311.718] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x76e0, lpNewFilePointer=0x0, dwMoveMethod=0x11c2fde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.718] GetFileType (hFile=0x184) returned 0x1
	[0311.719] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11c2fde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.719] WriteFile (in: hFile=0x184, lpBuffer=0x11c48a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11c2fdfc, lpOverlapped=0x11c2fe08 | out: lpBuffer=0x11c48a80*, lpNumberOfBytesWritten=0x11c2fdfc*=0x230, lpOverlapped=0x11c2fe08) returned 1
	[0311.719] GetFileType (hFile=0x184) returned 0x1
	[0311.719] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x76e0, lpNewFilePointer=0x0, dwMoveMethod=0x11c2fde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.719] CloseHandle (hObject=0x184) returned 1
	[0311.721] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf.tl30z")) returned 0x220
	[0311.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.728] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.729] SetEvent (hEvent=0x1e8) returned 1
	[0311.729] SetEvent (hEvent=0x234) returned 1
	[0311.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf")) returned 0x220
	[0311.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF", dwFileAttributes=0x220) returned 1
	[0311.730] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0311.801] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0311.801] ReadFile (in: hFile=0x290, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x1d2a, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x1128ce18*=0x1d2a, lpOverlapped=0x0) returned 1
	[0311.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332630 | out: pbBuffer=0x11332630) returned 1
	[0311.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c37002 | out: pbBuffer=0x11c37002) returned 1
	[0311.806] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c37081 | out: pbBuffer=0x11c37081) returned 1
	[0311.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c370a9 | out: pbBuffer=0x11c370a9) returned 1
	[0311.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0311.808] GetFileType (hFile=0x290) returned 0x1
	[0311.808] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.808] WriteFile (in: hFile=0x290, lpBuffer=0x113c4000*, nNumberOfBytesToWrite=0x1d2a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113c4000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1d2a, lpOverlapped=0x1133be08) returned 1
	[0311.808] GetFileType (hFile=0x290) returned 0x1
	[0311.808] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x1d2a, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.809] GetFileType (hFile=0x290) returned 0x1
	[0311.809] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.809] WriteFile (in: hFile=0x290, lpBuffer=0x11392a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11392a80*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0311.809] GetFileType (hFile=0x290) returned 0x1
	[0311.809] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x1d2a, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.809] CloseHandle (hObject=0x290) returned 1
	[0311.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf.tl30z")) returned 0x220
	[0311.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.827] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.835] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.851] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.868] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.893] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.912] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.930] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.947] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.966] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.015] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.032] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.042] SetEvent (hEvent=0x1e8) returned 1
	[0312.043] SetEvent (hEvent=0x1b0) returned 1
	[0312.043] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x102
	[0312.046] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.046] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x0
	[0312.047] SetEvent (hEvent=0x234) returned 1
	[0312.048] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x1) returned 0x102
	[0312.050] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.051] SetEvent (hEvent=0x164) returned 1
	[0312.051] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.105] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.252] SetEvent (hEvent=0x218) returned 1
	[0312.252] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.260] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.344] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.347] SetEvent (hEvent=0x218) returned 1
	[0312.347] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp")) returned 0x220
	[0312.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP", dwFileAttributes=0x220) returned 1
	[0312.352] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0312.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0312.465] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0312.465] ReadFile (in: hFile=0x200, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x1128be18*=0x7db8, lpOverlapped=0x0) returned 1
	[0312.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0312.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e8802 | out: pbBuffer=0x112e8802) returned 1
	[0312.470] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e88bf | out: pbBuffer=0x112e88bf) returned 1
	[0312.471] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0312.472] GetFileType (hFile=0x200) returned 0x1
	[0312.472] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.472] WriteFile (in: hFile=0x200, lpBuffer=0x1129a000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1129a000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7db8, lpOverlapped=0x1102de08) returned 1
	[0312.472] GetFileType (hFile=0x200) returned 0x1
	[0312.473] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.473] GetFileType (hFile=0x200) returned 0x1
	[0312.473] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.473] WriteFile (in: hFile=0x200, lpBuffer=0x1130aa80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1130aa80*, lpNumberOfBytesWritten=0x1102ddfc*=0x236, lpOverlapped=0x1102de08) returned 1
	[0312.473] GetFileType (hFile=0x200) returned 0x1
	[0312.473] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.473] CloseHandle (hObject=0x200) returned 1
	[0312.474] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp.tl30z")) returned 0x220
	[0312.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0312.487] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.513] SetEvent (hEvent=0x164) returned 1
	[0313.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp")) returned 0x220
	[0313.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP", dwFileAttributes=0x220) returned 1
	[0313.514] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0313.608] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0313.608] ReadFile (in: hFile=0x200, lpBuffer=0x11176000, nNumberOfBytesToRead=0x7c08, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11176000*, lpNumberOfBytesRead=0x1128be18*=0x7c08, lpOverlapped=0x0) returned 1
	[0313.614] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126270 | out: pbBuffer=0x11126270) returned 1
	[0313.614] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111eb202 | out: pbBuffer=0x111eb202) returned 1
	[0313.614] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111eb20c | out: pbBuffer=0x111eb20c) returned 1
	[0313.614] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111262a0 | out: pbBuffer=0x111262a0) returned 1
	[0313.615] GetFileType (hFile=0x200) returned 0x1
	[0313.615] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.616] WriteFile (in: hFile=0x200, lpBuffer=0x11216000*, nNumberOfBytesToWrite=0x7c08, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11216000*, lpNumberOfBytesWritten=0x1133ddfc*=0x7c08, lpOverlapped=0x1133de08) returned 1
	[0313.616] GetFileType (hFile=0x200) returned 0x1
	[0313.616] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7c08, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.617] GetFileType (hFile=0x200) returned 0x1
	[0313.617] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.617] WriteFile (in: hFile=0x200, lpBuffer=0x11155c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11155c00*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0313.617] GetFileType (hFile=0x200) returned 0x1
	[0313.617] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7c08, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.617] CloseHandle (hObject=0x200) returned 1
	[0313.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp.tl30z")) returned 0x220
	[0313.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0313.622] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.624] SetEvent (hEvent=0x164) returned 1
	[0313.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg")) returned 0x220
	[0313.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG", dwFileAttributes=0x220) returned 1
	[0313.625] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg.tl30z"), dwFlags=0x1) returned 1
	[0313.655] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0313.658] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0313.658] SetEvent (hEvent=0x1e0) returned 1
	[0313.658] ReadFile (in: hFile=0x2a0, lpBuffer=0x1124e000, nNumberOfBytesToRead=0x9abe, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1124e000*, lpNumberOfBytesRead=0x1128be18*=0x9abe, lpOverlapped=0x0) returned 1
	[0313.783] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126100 | out: pbBuffer=0x11126100) returned 1
	[0313.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111260f8 | out: pbBuffer=0x111260f8) returned 1
	[0313.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d6802 | out: pbBuffer=0x111d6802) returned 1
	[0313.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d6825 | out: pbBuffer=0x111d6825) returned 1
	[0313.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d686f | out: pbBuffer=0x111d686f) returned 1
	[0313.784] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126130 | out: pbBuffer=0x11126130) returned 1
	[0313.786] GetFileType (hFile=0x2a0) returned 0x1
	[0313.786] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.786] WriteFile (in: hFile=0x2a0, lpBuffer=0x110d4000*, nNumberOfBytesToWrite=0x9abe, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110d4000*, lpNumberOfBytesWritten=0x1133fdfc*=0x9abe, lpOverlapped=0x1133fe08) returned 1
	[0313.786] GetFileType (hFile=0x2a0) returned 0x1
	[0313.786] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x9abe, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.787] GetFileType (hFile=0x2a0) returned 0x1
	[0313.787] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.787] WriteFile (in: hFile=0x2a0, lpBuffer=0x112fca80*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112fca80*, lpNumberOfBytesWritten=0x1133fdfc*=0x239, lpOverlapped=0x1133fe08) returned 1
	[0313.787] GetFileType (hFile=0x2a0) returned 0x1
	[0313.787] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x9abe, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.787] CloseHandle (hObject=0x2a0) returned 1
	[0313.829] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.881] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.892] SetEvent (hEvent=0x27c) returned 1
	[0313.892] SetEvent (hEvent=0x1bc) returned 1
	[0313.893] SetEvent (hEvent=0x160) returned 1
	[0313.893] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.065] SetEvent (hEvent=0x134) returned 1
	[0314.065] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.070] SetEvent (hEvent=0x12c) returned 1
	[0314.070] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.218] SetEvent (hEvent=0x160) returned 1
	[0314.218] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg")) returned 0x220
	[0314.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG", dwFileAttributes=0x220) returned 1
	[0314.268] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg.tl30z"), dwFlags=0x1) returned 1
	[0314.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0314.530] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0314.530] ReadFile (in: hFile=0x250, lpBuffer=0x11340000, nNumberOfBytesToRead=0xdd5, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11340000*, lpNumberOfBytesRead=0x11023e18*=0xdd5, lpOverlapped=0x0) returned 1
	[0314.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126270 | out: pbBuffer=0x11126270) returned 1
	[0314.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11151302 | out: pbBuffer=0x11151302) returned 1
	[0314.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11151327 | out: pbBuffer=0x11151327) returned 1
	[0314.574] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11151347 | out: pbBuffer=0x11151347) returned 1
	[0314.575] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111262a0 | out: pbBuffer=0x111262a0) returned 1
	[0314.575] GetFileType (hFile=0x250) returned 0x1
	[0314.575] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.575] WriteFile (in: hFile=0x250, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0xdd5, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x1133ddfc*=0xdd5, lpOverlapped=0x1133de08) returned 1
	[0314.618] GetFileType (hFile=0x250) returned 0x1
	[0314.618] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xdd5, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.618] GetFileType (hFile=0x250) returned 0x1
	[0314.618] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.618] WriteFile (in: hFile=0x250, lpBuffer=0x112e9c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112e9c00*, lpNumberOfBytesWritten=0x1133ddfc*=0x230, lpOverlapped=0x1133de08) returned 1
	[0314.620] GetFileType (hFile=0x250) returned 0x1
	[0314.620] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xdd5, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.620] CloseHandle (hObject=0x250) returned 1
	[0314.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg.tl30z")) returned 0x220
	[0314.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0314.653] SetEvent (hEvent=0x1e0) returned 1
	[0314.653] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.851] SetEvent (hEvent=0x160) returned 1
	[0314.852] SetEvent (hEvent=0x27c) returned 1
	[0314.852] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.613] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.586] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf")) returned 0x220
	[0317.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF", dwFileAttributes=0x220) returned 1
	[0317.589] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0317.631] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x1123ee08 | out: lpMode=0x1123ee08) returned 0
	[0317.631] ReadFile (in: hFile=0x298, lpBuffer=0x11254000, nNumberOfBytesToRead=0xcdc, lpNumberOfBytesRead=0x1123ee18, lpOverlapped=0x0 | out: lpBuffer=0x11254000*, lpNumberOfBytesRead=0x1123ee18*=0xcdc, lpOverlapped=0x0) returned 1
	[0317.688] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.694] SetEvent (hEvent=0x164) returned 1
	[0317.694] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.863] SetEvent (hEvent=0x118) returned 1
	[0317.864] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0xffffffff) 

Thread:
	id = 40
	os_tid = 0xdcc

	[0212.906] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x32bfff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x32bfff30*=0x230) returned 1
	[0212.906] VirtualQuery (in: lpAddress=0x32bfff40, lpBuffer=0x32bfff40, dwLength=0x1c | out: lpBuffer=0x32bfff40*(BaseAddress=0x32bff000, AllocationBase=0x32b00000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0212.906] SetEvent (hEvent=0x1e0) returned 1
	[0212.906] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x234
	[0212.906] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0213.114] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 0x20
	[0213.114] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx", dwFileAttributes=0x20) returned 1
	[0213.115] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.tl30z"), dwFlags=0x1) returned 1
	[0221.937] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c
	[0222.106] GetConsoleMode (in: hConsoleHandle=0x25c, lpMode=0x1129de08 | out: lpMode=0x1129de08) returned 0
	[0222.106] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0242.235] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar")) returned 0x20
	[0242.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", dwFileAttributes=0x20) returned 1
	[0242.235] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.tl30z"), dwFlags=0x1) returned 1
	[0244.831] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0244.879] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0244.879] ReadFile (in: hFile=0x1d0, lpBuffer=0x11430000, nNumberOfBytesToRead=0x41f9b, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x1128ce18*=0x41f9b, lpOverlapped=0x0) returned 1
	[0244.895] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e540 | out: pbBuffer=0x1104e540) returned 1
	[0244.895] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e538 | out: pbBuffer=0x1104e538) returned 1
	[0244.895] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11345302 | out: pbBuffer=0x11345302) returned 1
	[0244.895] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134534b | out: pbBuffer=0x1134534b) returned 1
	[0244.895] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e570 | out: pbBuffer=0x1104e570) returned 1
	[0244.901] SetEvent (hEvent=0x1e8) returned 1
	[0244.901] GetFileType (hFile=0x1d0) returned 0x1
	[0244.901] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0244.901] WriteFile (in: hFile=0x1d0, lpBuffer=0x11c46000*, nNumberOfBytesToWrite=0x41f9b, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c46000*, lpNumberOfBytesWritten=0x1102bdfc*=0x41f9b, lpOverlapped=0x1102be08) returned 1
	[0244.902] GetFileType (hFile=0x1d0) returned 0x1
	[0244.902] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x41f9b, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0244.902] GetFileType (hFile=0x1d0) returned 0x1
	[0244.903] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0244.903] WriteFile (in: hFile=0x1d0, lpBuffer=0x112e2800*, nNumberOfBytesToWrite=0x266, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112e2800*, lpNumberOfBytesWritten=0x1102bdfc*=0x266, lpOverlapped=0x1102be08) returned 1
	[0244.932] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0244.936] GetFileType (hFile=0x1d0) returned 0x1
	[0244.937] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x41f9b, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0244.937] CloseHandle (hObject=0x1d0) returned 1
	[0245.802] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0246.766] SetEvent (hEvent=0x248) returned 1
	[0246.766] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0247.169] SetEvent (hEvent=0x218) returned 1
	[0247.169] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0247.214] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0247.214] SetEvent (hEvent=0x150) returned 1
	[0247.214] SetEvent (hEvent=0x218) returned 1
	[0247.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20
	[0247.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x20) returned 1
	[0247.215] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.tl30z"), dwFlags=0x1) returned 1
	[0248.596] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0248.600] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0248.600] ReadFile (in: hFile=0x1d4, lpBuffer=0x1136e790, nNumberOfBytesToRead=0xa5, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1136e790*, lpNumberOfBytesRead=0x11022e18*=0xa5, lpOverlapped=0x0) returned 1
	[0248.603] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e400 | out: pbBuffer=0x1142e400) returned 1
	[0248.603] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e3f8 | out: pbBuffer=0x1142e3f8) returned 1
	[0248.603] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11393c02 | out: pbBuffer=0x11393c02) returned 1
	[0248.603] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e430 | out: pbBuffer=0x1142e430) returned 1
	[0248.603] GetFileType (hFile=0x1d4) returned 0x1
	[0248.603] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.603] WriteFile (in: hFile=0x1d4, lpBuffer=0x110d0000*, nNumberOfBytesToWrite=0xa5, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110d0000*, lpNumberOfBytesWritten=0x1102bdfc*=0xa5, lpOverlapped=0x1102be08) returned 1
	[0248.604] GetFileType (hFile=0x1d4) returned 0x1
	[0248.604] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xa5, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.604] GetFileType (hFile=0x1d4) returned 0x1
	[0248.604] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.604] WriteFile (in: hFile=0x1d4, lpBuffer=0x113d5180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d5180*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0248.628] GetFileType (hFile=0x1d4) returned 0x1
	[0248.628] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xa5, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0248.628] CloseHandle (hObject=0x1d4) returned 1
	[0248.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.tl30z")) returned 0x20
	[0248.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.tl30z", dwFileAttributes=0x21) returned 1
	[0248.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0x20
	[0248.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", dwFileAttributes=0x20) returned 1
	[0248.854] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.tl30z"), dwFlags=0x1) returned 1
	[0249.247] SetEvent (hEvent=0x150) returned 1
	[0249.247] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0249.275] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0249.275] ReadFile (in: hFile=0x1d4, lpBuffer=0x11430000, nNumberOfBytesToRead=0x170d0, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11022e18*=0x170d0, lpOverlapped=0x0) returned 1
	[0249.285] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142eb80 | out: pbBuffer=0x1142eb80) returned 1
	[0249.285] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142eb78 | out: pbBuffer=0x1142eb78) returned 1
	[0249.285] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1149f102 | out: pbBuffer=0x1149f102) returned 1
	[0249.285] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1149f134 | out: pbBuffer=0x1149f134) returned 1
	[0249.286] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142ebb0 | out: pbBuffer=0x1142ebb0) returned 1
	[0249.287] SetEvent (hEvent=0x210) returned 1
	[0249.288] GetFileType (hFile=0x1d4) returned 0x1
	[0249.289] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0249.289] WriteFile (in: hFile=0x1d4, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x170d0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x170d0, lpOverlapped=0x1102be08) returned 1
	[0249.290] GetFileType (hFile=0x1d4) returned 0x1
	[0249.290] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x170d0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0249.290] GetFileType (hFile=0x1d4) returned 0x1
	[0249.291] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0249.291] WriteFile (in: hFile=0x1d4, lpBuffer=0x11284380*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11284380*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0249.302] GetFileType (hFile=0x1d4) returned 0x1
	[0249.302] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x170d0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0249.303] CloseHandle (hObject=0x1d4) returned 1
	[0249.366] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.tl30z")) returned 0x20
	[0249.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0249.367] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0249.374] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0249.773] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0249.790] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0249.890] SetEvent (hEvent=0x210) returned 1
	[0249.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 0x20
	[0249.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", dwFileAttributes=0x20) returned 1
	[0249.891] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.tl30z"), dwFlags=0x1) returned 1
	[0250.214] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0250.285] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0250.285] ReadFile (in: hFile=0x1d0, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x1082, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x11423e18*=0x1082, lpOverlapped=0x0) returned 1
	[0250.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e830 | out: pbBuffer=0x1104e830) returned 1
	[0250.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e828 | out: pbBuffer=0x1104e828) returned 1
	[0250.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f8802 | out: pbBuffer=0x111f8802) returned 1
	[0250.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f882c | out: pbBuffer=0x111f882c) returned 1
	[0250.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e860 | out: pbBuffer=0x1104e860) returned 1
	[0250.297] GetFileType (hFile=0x1d0) returned 0x1
	[0250.297] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.298] WriteFile (in: hFile=0x1d0, lpBuffer=0x1120c000*, nNumberOfBytesToWrite=0x1082, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1120c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1082, lpOverlapped=0x1102be08) returned 1
	[0250.298] GetFileType (hFile=0x1d0) returned 0x1
	[0250.298] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x1082, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.298] GetFileType (hFile=0x1d0) returned 0x1
	[0250.298] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.299] WriteFile (in: hFile=0x1d0, lpBuffer=0x110c9500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110c9500*, lpNumberOfBytesWritten=0x1102bdfc*=0x221, lpOverlapped=0x1102be08) returned 1
	[0250.299] GetFileType (hFile=0x1d0) returned 0x1
	[0250.299] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x1082, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0250.299] CloseHandle (hObject=0x1d0) returned 1
	[0250.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.tl30z")) returned 0x20
	[0250.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.tl30z", dwFileAttributes=0x21) returned 1
	[0250.324] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0250.521] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0250.803] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0250.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 0x20
	[0250.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja", dwFileAttributes=0x20) returned 1
	[0250.813] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.tl30z"), dwFlags=0x1) returned 1
	[0251.601] SetEvent (hEvent=0x150) returned 1
	[0251.601] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0251.611] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0251.611] ReadFile (in: hFile=0x204, lpBuffer=0x1145a000, nNumberOfBytesToRead=0xaec, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1145a000*, lpNumberOfBytesRead=0x11428e18*=0xaec, lpOverlapped=0x0) returned 1
	[0251.616] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332560 | out: pbBuffer=0x11332560) returned 1
	[0251.616] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332558 | out: pbBuffer=0x11332558) returned 1
	[0251.616] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11479e02 | out: pbBuffer=0x11479e02) returned 1
	[0251.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332590 | out: pbBuffer=0x11332590) returned 1
	[0251.618] GetFileType (hFile=0x204) returned 0x1
	[0251.618] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0251.618] WriteFile (in: hFile=0x204, lpBuffer=0x1130e000*, nNumberOfBytesToWrite=0xaec, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1130e000*, lpNumberOfBytesWritten=0x11031dfc*=0xaec, lpOverlapped=0x11031e08) returned 1
	[0251.618] GetFileType (hFile=0x204) returned 0x1
	[0251.618] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xaec, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0251.619] GetFileType (hFile=0x204) returned 0x1
	[0251.619] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0251.619] WriteFile (in: hFile=0x204, lpBuffer=0x11302700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11302700*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0251.620] GetFileType (hFile=0x204) returned 0x1
	[0251.620] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0xaec, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0251.620] CloseHandle (hObject=0x204) returned 1
	[0251.629] SetEvent (hEvent=0x150) returned 1
	[0251.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.tl30z")) returned 0x20
	[0251.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.tl30z", dwFileAttributes=0x21) returned 1
	[0251.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 0x20
	[0251.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar", dwFileAttributes=0x20) returned 1
	[0251.635] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.tl30z"), dwFlags=0x1) returned 1
	[0251.991] SwitchToThread () returned 1
	[0251.995] SetEvent (hEvent=0x24c) returned 1
	[0251.995] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0252.004] SetEvent (hEvent=0x24c) returned 1
	[0252.004] SetEvent (hEvent=0x248) returned 1
	[0252.005] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0252.005] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x112efe08 | out: lpMode=0x112efe08) returned 0
	[0252.005] ReadFile (in: hFile=0x288, lpBuffer=0x11382000, nNumberOfBytesToRead=0xbd2, lpNumberOfBytesRead=0x112efe18, lpOverlapped=0x0 | out: lpBuffer=0x11382000*, lpNumberOfBytesRead=0x112efe18*=0xbd2, lpOverlapped=0x0) returned 1
	[0252.023] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0252.330] SwitchToThread () returned 1
	[0252.372] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0252.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 0x20
	[0252.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", dwFileAttributes=0x20) returned 1
	[0252.396] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.tl30z"), dwFlags=0x1) returned 1
	[0252.579] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0252.586] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0252.586] ReadFile (in: hFile=0x1d8, lpBuffer=0x1105c000, nNumberOfBytesToRead=0x86ac, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1105c000*, lpNumberOfBytesRead=0x11423e18*=0x86ac, lpOverlapped=0x0) returned 1
	[0252.599] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0252.599] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e3302 | out: pbBuffer=0x113e3302) returned 1
	[0252.600] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0252.601] VirtualAlloc (lpAddress=0x11e52000, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x11e52000
	[0252.604] GetFileType (hFile=0x1d8) returned 0x1
	[0252.604] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.605] WriteFile (in: hFile=0x1d8, lpBuffer=0x11e52000*, nNumberOfBytesToWrite=0x86ac, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x11e52000*, lpNumberOfBytesWritten=0x113efdfc*=0x86ac, lpOverlapped=0x113efe08) returned 1
	[0252.780] GetFileType (hFile=0x1d8) returned 0x1
	[0252.780] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x86ac, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.780] GetFileType (hFile=0x1d8) returned 0x1
	[0252.780] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.780] WriteFile (in: hFile=0x1d8, lpBuffer=0x1148f880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x1148f880*, lpNumberOfBytesWritten=0x113efdfc*=0x230, lpOverlapped=0x113efe08) returned 1
	[0252.781] GetFileType (hFile=0x1d8) returned 0x1
	[0252.781] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x86ac, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.781] CloseHandle (hObject=0x1d8) returned 1
	[0252.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.tl30z")) returned 0x20
	[0252.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.tl30z", dwFileAttributes=0x21) returned 1
	[0252.810] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0253.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 0x220
	[0253.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", dwFileAttributes=0x220) returned 1
	[0253.136] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.tl30z"), dwFlags=0x1) returned 1
	[0253.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0253.137] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0253.137] ReadFile (in: hFile=0x1d8, lpBuffer=0x1133e360, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1133e360*, lpNumberOfBytesRead=0x11022e18*=0x119, lpOverlapped=0x0) returned 1
	[0253.141] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0253.141] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0253.141] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e4a02 | out: pbBuffer=0x111e4a02) returned 1
	[0253.142] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e4a43 | out: pbBuffer=0x111e4a43) returned 1
	[0253.143] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0253.143] GetFileType (hFile=0x1d8) returned 0x1
	[0253.143] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1109bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.144] WriteFile (in: hFile=0x1d8, lpBuffer=0x110a2600*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x1109bdfc, lpOverlapped=0x1109be08 | out: lpBuffer=0x110a2600*, lpNumberOfBytesWritten=0x1109bdfc*=0x119, lpOverlapped=0x1109be08) returned 1
	[0253.144] GetFileType (hFile=0x1d8) returned 0x1
	[0253.144] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x119, lpNewFilePointer=0x0, dwMoveMethod=0x1109bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.144] GetFileType (hFile=0x1d8) returned 0x1
	[0253.144] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1109bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.144] WriteFile (in: hFile=0x1d8, lpBuffer=0x110aea80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1109bdfc, lpOverlapped=0x1109be08 | out: lpBuffer=0x110aea80*, lpNumberOfBytesWritten=0x1109bdfc*=0x224, lpOverlapped=0x1109be08) returned 1
	[0253.206] GetFileType (hFile=0x1d8) returned 0x1
	[0253.206] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x119, lpNewFilePointer=0x0, dwMoveMethod=0x1109bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.206] CloseHandle (hObject=0x1d8) returned 1
	[0253.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.tl30z")) returned 0x220
	[0253.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0253.208] SetEvent (hEvent=0x1e8) returned 1
	[0253.208] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0253.296] SetEvent (hEvent=0x210) returned 1
	[0253.296] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0253.317] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0253.317] SetEvent (hEvent=0x210) returned 1
	[0253.317] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0253.335] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0253.335] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0253.479] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0253.480] SetEvent (hEvent=0x150) returned 1
	[0253.480] SetEvent (hEvent=0x1e8) returned 1
	[0253.480] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0253.496] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0253.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 0x20
	[0253.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", dwFileAttributes=0x20) returned 1
	[0253.497] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.tl30z" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.tl30z"), dwFlags=0x1) returned 1
	[0253.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.tl30z" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0253.498] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0253.499] ReadFile (in: hFile=0x1fc, lpBuffer=0x11478000, nNumberOfBytesToRead=0xcc86, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11478000*, lpNumberOfBytesRead=0x11425e18*=0xcc86, lpOverlapped=0x0) returned 1
	[0253.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0253.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11ef8802 | out: pbBuffer=0x11ef8802) returned 1
	[0253.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11ef8845 | out: pbBuffer=0x11ef8845) returned 1
	[0253.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0253.571] GetFileType (hFile=0x1fc) returned 0x1
	[0253.571] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11095de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.572] WriteFile (in: hFile=0x1fc, lpBuffer=0x1126a000*, nNumberOfBytesToWrite=0xcc86, lpNumberOfBytesWritten=0x11095dfc, lpOverlapped=0x11095e08 | out: lpBuffer=0x1126a000*, lpNumberOfBytesWritten=0x11095dfc*=0xcc86, lpOverlapped=0x11095e08) returned 1
	[0253.572] GetFileType (hFile=0x1fc) returned 0x1
	[0253.572] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xcc86, lpNewFilePointer=0x0, dwMoveMethod=0x11095de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.573] GetFileType (hFile=0x1fc) returned 0x1
	[0253.573] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11095de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.573] WriteFile (in: hFile=0x1fc, lpBuffer=0x11372a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11095dfc, lpOverlapped=0x11095e08 | out: lpBuffer=0x11372a80*, lpNumberOfBytesWritten=0x11095dfc*=0x230, lpOverlapped=0x11095e08) returned 1
	[0253.578] GetFileType (hFile=0x1fc) returned 0x1
	[0253.578] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xcc86, lpNewFilePointer=0x0, dwMoveMethod=0x11095de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.578] CloseHandle (hObject=0x1fc) returned 1
	[0253.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.tl30z" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.tl30z")) returned 0x20
	[0253.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.tl30z", dwFileAttributes=0x21) returned 1
	[0253.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 0x20
	[0253.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", dwFileAttributes=0x20) returned 1
	[0253.580] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.tl30z" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.tl30z"), dwFlags=0x1) returned 1
	[0253.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.tl30z" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0253.581] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0253.581] ReadFile (in: hFile=0x1fc, lpBuffer=0x113e8000, nNumberOfBytesToRead=0x8df0, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x113e8000*, lpNumberOfBytesRead=0x1131de18*=0x8df0, lpOverlapped=0x0) returned 1
	[0253.594] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0253.595] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0253.595] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11ef9402 | out: pbBuffer=0x11ef9402) returned 1
	[0253.595] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0253.596] VirtualAlloc (lpAddress=0x11f84000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11f84000
	[0253.597] VirtualAlloc (lpAddress=0x11f88000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0x11f88000
	[0253.600] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0253.603] SetEvent (hEvent=0x150) returned 1
	[0253.603] SetEvent (hEvent=0x210) returned 1
	[0253.603] SetEvent (hEvent=0x24c) returned 1
	[0253.604] SetEvent (hEvent=0x118) returned 1
	[0253.604] GetFileType (hFile=0x1fc) returned 0x1
	[0253.604] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11095de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.604] WriteFile (in: hFile=0x1fc, lpBuffer=0x11402000*, nNumberOfBytesToWrite=0x8df0, lpNumberOfBytesWritten=0x11095dfc, lpOverlapped=0x11095e08 | out: lpBuffer=0x11402000*, lpNumberOfBytesWritten=0x11095dfc*=0x8df0, lpOverlapped=0x11095e08) returned 1
	[0253.604] GetFileType (hFile=0x1fc) returned 0x1
	[0253.605] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x8df0, lpNewFilePointer=0x0, dwMoveMethod=0x11095de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.605] GetFileType (hFile=0x1fc) returned 0x1
	[0253.605] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11095de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.605] WriteFile (in: hFile=0x1fc, lpBuffer=0x11373880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11095dfc, lpOverlapped=0x11095e08 | out: lpBuffer=0x11373880*, lpNumberOfBytesWritten=0x11095dfc*=0x233, lpOverlapped=0x11095e08) returned 1
	[0253.606] GetFileType (hFile=0x1fc) returned 0x1
	[0253.606] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x8df0, lpNewFilePointer=0x0, dwMoveMethod=0x11095de0 | out: lpNewFilePointer=0x0) returned 1
	[0253.606] CloseHandle (hObject=0x1fc) returned 1
	[0253.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.tl30z" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.tl30z")) returned 0x20
	[0253.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.tl30z", dwFileAttributes=0x21) returned 1
	[0253.607] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0253.619] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0253.619] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0253.632] SetEvent (hEvent=0x134) returned 1
	[0253.632] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0253.649] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0253.649] VirtualAlloc (lpAddress=0x11f96000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x11f96000
	[0253.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e100 | out: pbBuffer=0x1142e100) returned 1
	[0253.765] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e0f8 | out: pbBuffer=0x1142e0f8) returned 1
	[0253.765] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136e802 | out: pbBuffer=0x1136e802) returned 1
	[0253.765] SwitchToThread () returned 1
	[0253.809] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0253.878] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e130 | out: pbBuffer=0x1142e130) returned 1
	[0253.878] GetFileType (hFile=0x1f4) returned 0x1
	[0253.878] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f9bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.878] WriteFile (in: hFile=0x1f4, lpBuffer=0x11f90000*, nNumberOfBytesToWrite=0x4ba, lpNumberOfBytesWritten=0x11f9bdfc, lpOverlapped=0x11f9be08 | out: lpBuffer=0x11f90000*, lpNumberOfBytesWritten=0x11f9bdfc*=0x4ba, lpOverlapped=0x11f9be08) returned 1
	[0253.879] GetFileType (hFile=0x1f4) returned 0x1
	[0253.879] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x4ba, lpNewFilePointer=0x0, dwMoveMethod=0x11f9bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.879] GetFileType (hFile=0x1f4) returned 0x1
	[0253.879] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f9bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.879] WriteFile (in: hFile=0x1f4, lpBuffer=0x110c8a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11f9bdfc, lpOverlapped=0x11f9be08 | out: lpBuffer=0x110c8a80*, lpNumberOfBytesWritten=0x11f9bdfc*=0x22a, lpOverlapped=0x11f9be08) returned 1
	[0253.880] GetFileType (hFile=0x1f4) returned 0x1
	[0253.880] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x4ba, lpNewFilePointer=0x0, dwMoveMethod=0x11f9bde0 | out: lpNewFilePointer=0x0) returned 1
	[0253.880] CloseHandle (hObject=0x1f4) returned 1
	[0253.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.tl30z")) returned 0x20
	[0253.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0253.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0253.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0253.882] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0254.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0254.768] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x110abe08 | out: lpMode=0x110abe08) returned 0
	[0254.768] ReadFile (in: hFile=0x1d4, lpBuffer=0x1127e500, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x110abe18, lpOverlapped=0x0 | out: lpBuffer=0x1127e500*, lpNumberOfBytesRead=0x110abe18*=0x4ed, lpOverlapped=0x0) returned 1
	[0254.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0254.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0254.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11363202 | out: pbBuffer=0x11363202) returned 1
	[0254.779] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0254.779] GetFileType (hFile=0x1d4) returned 0x1
	[0254.779] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.779] WriteFile (in: hFile=0x1d4, lpBuffer=0x11099000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x110abdfc, lpOverlapped=0x110abe08 | out: lpBuffer=0x11099000*, lpNumberOfBytesWritten=0x110abdfc*=0x4ed, lpOverlapped=0x110abe08) returned 1
	[0254.780] GetFileType (hFile=0x1d4) returned 0x1
	[0254.780] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.780] GetFileType (hFile=0x1d4) returned 0x1
	[0254.780] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.780] WriteFile (in: hFile=0x1d4, lpBuffer=0x11339880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x110abdfc, lpOverlapped=0x110abe08 | out: lpBuffer=0x11339880*, lpNumberOfBytesWritten=0x110abdfc*=0x22d, lpOverlapped=0x110abe08) returned 1
	[0254.781] GetFileType (hFile=0x1d4) returned 0x1
	[0254.781] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0254.783] CloseHandle (hObject=0x1d4) returned 1
	[0254.793] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0254.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0254.858] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0254.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 0x220
	[0254.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0254.896] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0255.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0255.436] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0255.436] ReadFile (in: hFile=0x224, lpBuffer=0x11202000, nNumberOfBytesToRead=0x863, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11202000*, lpNumberOfBytesRead=0x11428e18*=0x863, lpOverlapped=0x0) returned 1
	[0255.442] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0255.442] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1120a602 | out: pbBuffer=0x1120a602) returned 1
	[0255.443] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65a0 | out: pbBuffer=0x113e65a0) returned 1
	[0255.443] GetFileType (hFile=0x224) returned 0x1
	[0255.443] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.443] WriteFile (in: hFile=0x224, lpBuffer=0x1120f000*, nNumberOfBytesToWrite=0x863, lpNumberOfBytesWritten=0x110abdfc, lpOverlapped=0x110abe08 | out: lpBuffer=0x1120f000*, lpNumberOfBytesWritten=0x110abdfc*=0x863, lpOverlapped=0x110abe08) returned 1
	[0255.444] GetFileType (hFile=0x224) returned 0x1
	[0255.444] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x863, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.444] GetFileType (hFile=0x224) returned 0x1
	[0255.444] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.444] WriteFile (in: hFile=0x224, lpBuffer=0x111d5500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x110abdfc, lpOverlapped=0x110abe08 | out: lpBuffer=0x111d5500*, lpNumberOfBytesWritten=0x110abdfc*=0x227, lpOverlapped=0x110abe08) returned 1
	[0255.444] GetFileType (hFile=0x224) returned 0x1
	[0255.445] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x863, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0255.445] CloseHandle (hObject=0x224) returned 1
	[0255.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0255.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0255.456] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0255.463] SetEvent (hEvent=0x218) returned 1
	[0255.463] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0255.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0255.464] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0256.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0256.082] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0256.082] ReadFile (in: hFile=0x288, lpBuffer=0x113dc000, nNumberOfBytesToRead=0x3a41, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113dc000*, lpNumberOfBytesRead=0x11428e18*=0x3a41, lpOverlapped=0x0) returned 1
	[0256.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0256.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0256.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107b302 | out: pbBuffer=0x1107b302) returned 1
	[0256.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0256.094] GetFileType (hFile=0x288) returned 0x1
	[0256.094] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.094] WriteFile (in: hFile=0x288, lpBuffer=0x113e2000*, nNumberOfBytesToWrite=0x3a41, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113e2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3a41, lpOverlapped=0x1102be08) returned 1
	[0256.094] GetFileType (hFile=0x288) returned 0x1
	[0256.095] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x3a41, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.095] GetFileType (hFile=0x288) returned 0x1
	[0256.095] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.095] WriteFile (in: hFile=0x288, lpBuffer=0x1135bc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135bc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0256.095] GetFileType (hFile=0x288) returned 0x1
	[0256.095] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x3a41, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0256.096] CloseHandle (hObject=0x288) returned 1
	[0256.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0256.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0256.116] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0256.187] SetEvent (hEvent=0x26c) returned 1
	[0256.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0256.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0256.189] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0256.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0256.751] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0256.751] ReadFile (in: hFile=0x1d8, lpBuffer=0x110c0000, nNumberOfBytesToRead=0x4ed, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110c0000*, lpNumberOfBytesRead=0x11428e18*=0x4ed, lpOverlapped=0x0) returned 1
	[0256.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332800 | out: pbBuffer=0x11332800) returned 1
	[0256.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11103302 | out: pbBuffer=0x11103302) returned 1
	[0256.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11103315 | out: pbBuffer=0x11103315) returned 1
	[0256.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111033d6 | out: pbBuffer=0x111033d6) returned 1
	[0256.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332830 | out: pbBuffer=0x11332830) returned 1
	[0256.760] GetFileType (hFile=0x1d8) returned 0x1
	[0256.760] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.761] WriteFile (in: hFile=0x1d8, lpBuffer=0x112a4000*, nNumberOfBytesToWrite=0x4ed, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112a4000*, lpNumberOfBytesWritten=0x11031dfc*=0x4ed, lpOverlapped=0x11031e08) returned 1
	[0256.761] GetFileType (hFile=0x1d8) returned 0x1
	[0256.761] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.761] GetFileType (hFile=0x1d8) returned 0x1
	[0256.761] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.762] WriteFile (in: hFile=0x1d8, lpBuffer=0x11298700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11298700*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0256.762] GetFileType (hFile=0x1d8) returned 0x1
	[0256.762] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4ed, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0256.762] CloseHandle (hObject=0x1d8) returned 1
	[0256.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0256.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0256.842] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0256.858] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0256.899] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0257.041] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0257.212] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0257.363] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0257.410] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0257.505] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0257.610] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0257.625] SetEvent (hEvent=0x218) returned 1
	[0257.625] SetEvent (hEvent=0x1f0) returned 1
	[0257.625] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0257.634] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0257.634] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0257.639] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0257.639] SetEvent (hEvent=0x1e8) returned 1
	[0257.640] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0257.644] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0259.074] SetEvent (hEvent=0x26c) returned 1
	[0259.074] SetEvent (hEvent=0x210) returned 1
	[0259.074] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0259.115] SwitchToThread () returned 1
	[0259.122] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0259.130] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0259.146] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0259.248] SetEvent (hEvent=0x26c) returned 1
	[0259.248] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 0x220
	[0259.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", dwFileAttributes=0x220) returned 1
	[0259.249] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.tl30z"), dwFlags=0x1) returned 1
	[0259.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0259.792] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0259.792] ReadFile (in: hFile=0x1fc, lpBuffer=0x113ee000, nNumberOfBytesToRead=0x1fa1, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113ee000*, lpNumberOfBytesRead=0x11423e18*=0x1fa1, lpOverlapped=0x0) returned 1
	[0259.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296560 | out: pbBuffer=0x11296560) returned 1
	[0259.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11296558 | out: pbBuffer=0x11296558) returned 1
	[0259.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1135bc02 | out: pbBuffer=0x1135bc02) returned 1
	[0259.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296590 | out: pbBuffer=0x11296590) returned 1
	[0259.805] GetFileType (hFile=0x1fc) returned 0x1
	[0259.805] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.805] WriteFile (in: hFile=0x1fc, lpBuffer=0x113d6000*, nNumberOfBytesToWrite=0x1fa1, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x113d6000*, lpNumberOfBytesWritten=0x112bbdfc*=0x1fa1, lpOverlapped=0x112bbe08) returned 1
	[0259.806] GetFileType (hFile=0x1fc) returned 0x1
	[0259.806] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1fa1, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.806] GetFileType (hFile=0x1fc) returned 0x1
	[0259.806] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.806] WriteFile (in: hFile=0x1fc, lpBuffer=0x113fa700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x113fa700*, lpNumberOfBytesWritten=0x112bbdfc*=0x230, lpOverlapped=0x112bbe08) returned 1
	[0259.806] GetFileType (hFile=0x1fc) returned 0x1
	[0259.807] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1fa1, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0259.807] CloseHandle (hObject=0x1fc) returned 1
	[0259.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.tl30z")) returned 0x220
	[0259.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0259.818] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0259.837] SetEvent (hEvent=0x26c) returned 1
	[0259.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 0x220
	[0259.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", dwFileAttributes=0x220) returned 1
	[0259.837] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.tl30z"), dwFlags=0x1) returned 1
	[0260.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0260.285] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0260.286] ReadFile (in: hFile=0x1d4, lpBuffer=0x11190000, nNumberOfBytesToRead=0x319e, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11190000*, lpNumberOfBytesRead=0x11428e18*=0x319e, lpOverlapped=0x0) returned 1
	[0260.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0260.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e338 | out: pbBuffer=0x1104e338) returned 1
	[0260.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130b202 | out: pbBuffer=0x1130b202) returned 1
	[0260.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130b20d | out: pbBuffer=0x1130b20d) returned 1
	[0260.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130b225 | out: pbBuffer=0x1130b225) returned 1
	[0260.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0260.298] GetFileType (hFile=0x1d4) returned 0x1
	[0260.298] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.298] WriteFile (in: hFile=0x1d4, lpBuffer=0x1109e000*, nNumberOfBytesToWrite=0x319e, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x1109e000*, lpNumberOfBytesWritten=0x112bbdfc*=0x319e, lpOverlapped=0x112bbe08) returned 1
	[0260.299] GetFileType (hFile=0x1d4) returned 0x1
	[0260.299] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x319e, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.299] GetFileType (hFile=0x1d4) returned 0x1
	[0260.299] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.299] WriteFile (in: hFile=0x1d4, lpBuffer=0x110d1880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x110d1880*, lpNumberOfBytesWritten=0x112bbdfc*=0x230, lpOverlapped=0x112bbe08) returned 1
	[0260.299] GetFileType (hFile=0x1d4) returned 0x1
	[0260.299] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x319e, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.300] CloseHandle (hObject=0x1d4) returned 1
	[0260.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.tl30z")) returned 0x220
	[0260.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0260.310] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0260.322] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0260.344] SetEvent (hEvent=0x118) returned 1
	[0260.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 0x220
	[0260.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", dwFileAttributes=0x220) returned 1
	[0260.345] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.tl30z"), dwFlags=0x1) returned 1
	[0260.686] SetEvent (hEvent=0x150) returned 1
	[0260.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0260.703] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0260.703] ReadFile (in: hFile=0x1d4, lpBuffer=0x1111c000, nNumberOfBytesToRead=0xa24, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1111c000*, lpNumberOfBytesRead=0x11023e18*=0xa24, lpOverlapped=0x0) returned 1
	[0260.722] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0260.722] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130bd02 | out: pbBuffer=0x1130bd02) returned 1
	[0260.722] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130bda3 | out: pbBuffer=0x1130bda3) returned 1
	[0260.723] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0260.723] GetFileType (hFile=0x1d4) returned 0x1
	[0260.723] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.723] WriteFile (in: hFile=0x1d4, lpBuffer=0x11140000*, nNumberOfBytesToWrite=0xa24, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x11140000*, lpNumberOfBytesWritten=0x112bbdfc*=0xa24, lpOverlapped=0x112bbe08) returned 1
	[0260.724] GetFileType (hFile=0x1d4) returned 0x1
	[0260.724] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xa24, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.724] GetFileType (hFile=0x1d4) returned 0x1
	[0260.724] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.724] WriteFile (in: hFile=0x1d4, lpBuffer=0x1112c700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x1112c700*, lpNumberOfBytesWritten=0x112bbdfc*=0x224, lpOverlapped=0x112bbe08) returned 1
	[0260.724] GetFileType (hFile=0x1d4) returned 0x1
	[0260.724] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xa24, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0260.725] CloseHandle (hObject=0x1d4) returned 1
	[0260.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.tl30z")) returned 0x220
	[0260.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0260.819] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0260.891] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0260.912] SetEvent (hEvent=0x118) returned 1
	[0260.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 0x220
	[0260.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", dwFileAttributes=0x220) returned 1
	[0260.913] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.tl30z"), dwFlags=0x1) returned 1
	[0261.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0261.190] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0261.190] ReadFile (in: hFile=0x1d4, lpBuffer=0x1134ea00, nNumberOfBytesToRead=0x13a6, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1134ea00*, lpNumberOfBytesRead=0x11023e18*=0x13a6, lpOverlapped=0x0) returned 1
	[0261.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0261.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11177d02 | out: pbBuffer=0x11177d02) returned 1
	[0261.200] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0261.200] GetFileType (hFile=0x1d4) returned 0x1
	[0261.201] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.201] WriteFile (in: hFile=0x1d4, lpBuffer=0x1135e000*, nNumberOfBytesToWrite=0x13a6, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x13a6, lpOverlapped=0x1102be08) returned 1
	[0261.201] GetFileType (hFile=0x1d4) returned 0x1
	[0261.201] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x13a6, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.201] GetFileType (hFile=0x1d4) returned 0x1
	[0261.202] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.202] WriteFile (in: hFile=0x1d4, lpBuffer=0x1136aa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1136aa80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0261.202] GetFileType (hFile=0x1d4) returned 0x1
	[0261.202] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x13a6, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.202] CloseHandle (hObject=0x1d4) returned 1
	[0261.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.tl30z")) returned 0x220
	[0261.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0261.316] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0261.319] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0261.339] SetEvent (hEvent=0x248) returned 1
	[0261.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 0x220
	[0261.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", dwFileAttributes=0x220) returned 1
	[0261.340] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.tl30z"), dwFlags=0x1) returned 1
	[0261.549] SetEvent (hEvent=0x150) returned 1
	[0261.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0261.608] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0261.608] ReadFile (in: hFile=0x1d4, lpBuffer=0x113ac500, nNumberOfBytesToRead=0x2186, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x113ac500*, lpNumberOfBytesRead=0x1128ce18*=0x2186, lpOverlapped=0x0) returned 1
	[0261.615] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0261.615] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63f8 | out: pbBuffer=0x113e63f8) returned 1
	[0261.615] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11375d02 | out: pbBuffer=0x11375d02) returned 1
	[0261.616] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6430 | out: pbBuffer=0x113e6430) returned 1
	[0261.616] GetFileType (hFile=0x1d4) returned 0x1
	[0261.616] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.616] WriteFile (in: hFile=0x1d4, lpBuffer=0x112b0000*, nNumberOfBytesToWrite=0x2186, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x112b0000*, lpNumberOfBytesWritten=0x112bfdfc*=0x2186, lpOverlapped=0x112bfe08) returned 1
	[0261.617] GetFileType (hFile=0x1d4) returned 0x1
	[0261.617] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2186, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.617] GetFileType (hFile=0x1d4) returned 0x1
	[0261.617] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.617] WriteFile (in: hFile=0x1d4, lpBuffer=0x112a6700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x112a6700*, lpNumberOfBytesWritten=0x112bfdfc*=0x227, lpOverlapped=0x112bfe08) returned 1
	[0261.617] GetFileType (hFile=0x1d4) returned 0x1
	[0261.617] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2186, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0261.618] CloseHandle (hObject=0x1d4) returned 1
	[0261.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.tl30z")) returned 0x220
	[0261.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0261.629] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0261.644] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0261.661] SetEvent (hEvent=0x248) returned 1
	[0261.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 0x220
	[0261.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", dwFileAttributes=0x220) returned 1
	[0261.662] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.tl30z"), dwFlags=0x1) returned 1
	[0262.062] SetEvent (hEvent=0x150) returned 1
	[0262.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0262.066] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0262.066] ReadFile (in: hFile=0x1fc, lpBuffer=0x11181900, nNumberOfBytesToRead=0x1126, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11181900*, lpNumberOfBytesRead=0x11423e18*=0x1126, lpOverlapped=0x0) returned 1
	[0262.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0262.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130e902 | out: pbBuffer=0x1130e902) returned 1
	[0262.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130e960 | out: pbBuffer=0x1130e960) returned 1
	[0262.071] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326c0 | out: pbBuffer=0x113326c0) returned 1
	[0262.071] GetFileType (hFile=0x1fc) returned 0x1
	[0262.071] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0262.071] WriteFile (in: hFile=0x1fc, lpBuffer=0x110b2000*, nNumberOfBytesToWrite=0x1126, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x110b2000*, lpNumberOfBytesWritten=0x112bddfc*=0x1126, lpOverlapped=0x112bde08) returned 1
	[0262.072] GetFileType (hFile=0x1fc) returned 0x1
	[0262.072] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1126, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0262.072] GetFileType (hFile=0x1fc) returned 0x1
	[0262.072] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0262.072] WriteFile (in: hFile=0x1fc, lpBuffer=0x112fd500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x112fd500*, lpNumberOfBytesWritten=0x112bddfc*=0x227, lpOverlapped=0x112bde08) returned 1
	[0262.072] GetFileType (hFile=0x1fc) returned 0x1
	[0262.073] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1126, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0262.073] CloseHandle (hObject=0x1fc) returned 1
	[0262.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.tl30z")) returned 0x220
	[0262.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0262.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 0x220
	[0262.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", dwFileAttributes=0x220) returned 1
	[0262.143] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0262.515] SetEvent (hEvent=0x150) returned 1
	[0262.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0262.528] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0262.528] ReadFile (in: hFile=0x288, lpBuffer=0x1124b800, nNumberOfBytesToRead=0xbd2, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1124b800*, lpNumberOfBytesRead=0x11316e18*=0xbd2, lpOverlapped=0x0) returned 1
	[0262.534] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0262.534] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c9e02 | out: pbBuffer=0x110c9e02) returned 1
	[0262.534] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c9ed1 | out: pbBuffer=0x110c9ed1) returned 1
	[0262.534] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f430 | out: pbBuffer=0x1140f430) returned 1
	[0262.535] GetFileType (hFile=0x288) returned 0x1
	[0262.535] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.535] WriteFile (in: hFile=0x288, lpBuffer=0x11110000*, nNumberOfBytesToWrite=0xbd2, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11110000*, lpNumberOfBytesWritten=0x112b9dfc*=0xbd2, lpOverlapped=0x112b9e08) returned 1
	[0262.535] GetFileType (hFile=0x288) returned 0x1
	[0262.536] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xbd2, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.536] GetFileType (hFile=0x288) returned 0x1
	[0262.536] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.536] WriteFile (in: hFile=0x288, lpBuffer=0x11102700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11102700*, lpNumberOfBytesWritten=0x112b9dfc*=0x22d, lpOverlapped=0x112b9e08) returned 1
	[0262.536] GetFileType (hFile=0x288) returned 0x1
	[0262.536] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xbd2, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0262.536] CloseHandle (hObject=0x288) returned 1
	[0262.541] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.tl30z")) returned 0x220
	[0262.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0262.547] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0262.560] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0262.640] SetEvent (hEvent=0x210) returned 1
	[0262.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 0x220
	[0262.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", dwFileAttributes=0x220) returned 1
	[0262.641] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0263.065] SetEvent (hEvent=0x150) returned 1
	[0263.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0263.068] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0263.069] ReadFile (in: hFile=0x288, lpBuffer=0x11236000, nNumberOfBytesToRead=0x385c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11236000*, lpNumberOfBytesRead=0x1128ce18*=0x385c, lpOverlapped=0x0) returned 1
	[0263.170] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0263.170] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11274802 | out: pbBuffer=0x11274802) returned 1
	[0263.170] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11274816 | out: pbBuffer=0x11274816) returned 1
	[0263.170] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1127487d | out: pbBuffer=0x1127487d) returned 1
	[0263.171] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0263.171] GetFileType (hFile=0x288) returned 0x1
	[0263.171] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.172] WriteFile (in: hFile=0x288, lpBuffer=0x11368000*, nNumberOfBytesToWrite=0x385c, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x11368000*, lpNumberOfBytesWritten=0x112bfdfc*=0x385c, lpOverlapped=0x112bfe08) returned 1
	[0263.172] GetFileType (hFile=0x288) returned 0x1
	[0263.172] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x385c, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.172] GetFileType (hFile=0x288) returned 0x1
	[0263.173] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.173] WriteFile (in: hFile=0x288, lpBuffer=0x11bdd180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x11bdd180*, lpNumberOfBytesWritten=0x112bfdfc*=0x22d, lpOverlapped=0x112bfe08) returned 1
	[0263.175] GetFileType (hFile=0x288) returned 0x1
	[0263.175] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x385c, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.176] CloseHandle (hObject=0x288) returned 1
	[0263.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.tl30z")) returned 0x220
	[0263.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0263.190] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0263.202] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0263.232] SetEvent (hEvent=0x26c) returned 1
	[0263.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 0x220
	[0263.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", dwFileAttributes=0x220) returned 1
	[0263.233] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0263.657] SetEvent (hEvent=0x150) returned 1
	[0263.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0263.664] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0263.664] ReadFile (in: hFile=0x224, lpBuffer=0x11bcb000, nNumberOfBytesToRead=0x728, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11bcb000*, lpNumberOfBytesRead=0x1128ce18*=0x728, lpOverlapped=0x0) returned 1
	[0263.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63d0 | out: pbBuffer=0x113e63d0) returned 1
	[0263.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63c8 | out: pbBuffer=0x113e63c8) returned 1
	[0263.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122de02 | out: pbBuffer=0x1122de02) returned 1
	[0263.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1122ded8 | out: pbBuffer=0x1122ded8) returned 1
	[0263.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1122dedd | out: pbBuffer=0x1122dedd) returned 1
	[0263.673] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0263.673] GetFileType (hFile=0x224) returned 0x1
	[0263.673] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.673] WriteFile (in: hFile=0x224, lpBuffer=0x1132a000*, nNumberOfBytesToWrite=0x728, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x1132a000*, lpNumberOfBytesWritten=0x112bddfc*=0x728, lpOverlapped=0x112bde08) returned 1
	[0263.674] GetFileType (hFile=0x224) returned 0x1
	[0263.674] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x728, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.674] GetFileType (hFile=0x224) returned 0x1
	[0263.674] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.674] WriteFile (in: hFile=0x224, lpBuffer=0x11322700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11322700*, lpNumberOfBytesWritten=0x112bddfc*=0x227, lpOverlapped=0x112bde08) returned 1
	[0263.675] GetFileType (hFile=0x224) returned 0x1
	[0263.675] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x728, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0263.675] CloseHandle (hObject=0x224) returned 1
	[0263.682] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.tl30z")) returned 0x220
	[0263.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0263.700] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0263.702] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0263.810] SetEvent (hEvent=0x218) returned 1
	[0263.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 0x220
	[0263.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", dwFileAttributes=0x220) returned 1
	[0263.812] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0264.228] SetEvent (hEvent=0x150) returned 1
	[0264.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0264.232] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0264.232] ReadFile (in: hFile=0x1d8, lpBuffer=0x11249800, nNumberOfBytesToRead=0xbc4, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11249800*, lpNumberOfBytesRead=0x1131ae18*=0xbc4, lpOverlapped=0x0) returned 1
	[0264.238] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6820 | out: pbBuffer=0x113e6820) returned 1
	[0264.238] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11327d02 | out: pbBuffer=0x11327d02) returned 1
	[0264.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6850 | out: pbBuffer=0x113e6850) returned 1
	[0264.239] GetFileType (hFile=0x1d8) returned 0x1
	[0264.239] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.239] WriteFile (in: hFile=0x1d8, lpBuffer=0x111ac000*, nNumberOfBytesToWrite=0xbc4, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x111ac000*, lpNumberOfBytesWritten=0x112bddfc*=0xbc4, lpOverlapped=0x112bde08) returned 1
	[0264.240] GetFileType (hFile=0x1d8) returned 0x1
	[0264.240] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xbc4, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.240] GetFileType (hFile=0x1d8) returned 0x1
	[0264.240] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.240] WriteFile (in: hFile=0x1d8, lpBuffer=0x11311180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11311180*, lpNumberOfBytesWritten=0x112bddfc*=0x22a, lpOverlapped=0x112bde08) returned 1
	[0264.240] GetFileType (hFile=0x1d8) returned 0x1
	[0264.241] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xbc4, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.241] CloseHandle (hObject=0x1d8) returned 1
	[0264.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.tl30z")) returned 0x220
	[0264.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0264.250] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0264.279] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0264.339] SetEvent (hEvent=0x1b0) returned 1
	[0264.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 0x220
	[0264.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", dwFileAttributes=0x220) returned 1
	[0264.340] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0264.750] SetEvent (hEvent=0x150) returned 1
	[0264.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0264.760] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0264.760] ReadFile (in: hFile=0x1fc, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x83c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x1131ce18*=0x83c, lpOverlapped=0x0) returned 1
	[0264.768] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0264.768] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261302 | out: pbBuffer=0x11261302) returned 1
	[0264.768] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0264.768] GetFileType (hFile=0x1fc) returned 0x1
	[0264.769] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.769] WriteFile (in: hFile=0x1fc, lpBuffer=0x1133e000*, nNumberOfBytesToWrite=0x83c, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x1133e000*, lpNumberOfBytesWritten=0x112bfdfc*=0x83c, lpOverlapped=0x112bfe08) returned 1
	[0264.769] GetFileType (hFile=0x1fc) returned 0x1
	[0264.769] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x83c, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.769] GetFileType (hFile=0x1fc) returned 0x1
	[0264.769] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.770] WriteFile (in: hFile=0x1fc, lpBuffer=0x112eb880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112bfdfc, lpOverlapped=0x112bfe08 | out: lpBuffer=0x112eb880*, lpNumberOfBytesWritten=0x112bfdfc*=0x227, lpOverlapped=0x112bfe08) returned 1
	[0264.770] GetFileType (hFile=0x1fc) returned 0x1
	[0264.770] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x83c, lpNewFilePointer=0x0, dwMoveMethod=0x112bfde0 | out: lpNewFilePointer=0x0) returned 1
	[0264.770] CloseHandle (hObject=0x1fc) returned 1
	[0264.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.tl30z")) returned 0x220
	[0264.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0264.781] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0264.790] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0264.802] SetEvent (hEvent=0x248) returned 1
	[0264.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 0x220
	[0264.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", dwFileAttributes=0x220) returned 1
	[0264.803] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0265.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0265.464] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0265.464] ReadFile (in: hFile=0x1d8, lpBuffer=0x110ea000, nNumberOfBytesToRead=0xa4c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110ea000*, lpNumberOfBytesRead=0x1131ce18*=0xa4c, lpOverlapped=0x0) returned 1
	[0265.468] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296100 | out: pbBuffer=0x11296100) returned 1
	[0265.468] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a2802 | out: pbBuffer=0x112a2802) returned 1
	[0265.468] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a2848 | out: pbBuffer=0x112a2848) returned 1
	[0265.469] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a28eb | out: pbBuffer=0x112a28eb) returned 1
	[0265.469] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296130 | out: pbBuffer=0x11296130) returned 1
	[0265.469] GetFileType (hFile=0x1d8) returned 0x1
	[0265.470] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.470] WriteFile (in: hFile=0x1d8, lpBuffer=0x113bc000*, nNumberOfBytesToWrite=0xa4c, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x113bc000*, lpNumberOfBytesWritten=0x112b9dfc*=0xa4c, lpOverlapped=0x112b9e08) returned 1
	[0265.470] GetFileType (hFile=0x1d8) returned 0x1
	[0265.470] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa4c, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.470] GetFileType (hFile=0x1d8) returned 0x1
	[0265.470] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.471] WriteFile (in: hFile=0x1d8, lpBuffer=0x112b4a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x112b4a80*, lpNumberOfBytesWritten=0x112b9dfc*=0x227, lpOverlapped=0x112b9e08) returned 1
	[0265.471] GetFileType (hFile=0x1d8) returned 0x1
	[0265.471] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa4c, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0265.471] CloseHandle (hObject=0x1d8) returned 1
	[0265.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.tl30z")) returned 0x220
	[0265.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0265.589] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0265.604] SetEvent (hEvent=0x1b0) returned 1
	[0265.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 0x220
	[0265.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", dwFileAttributes=0x220) returned 1
	[0265.605] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0266.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.055] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0266.055] ReadFile (in: hFile=0x1d8, lpBuffer=0x110f2000, nNumberOfBytesToRead=0x212c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110f2000*, lpNumberOfBytesRead=0x1131ce18*=0x212c, lpOverlapped=0x0) returned 1
	[0266.061] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112966b0 | out: pbBuffer=0x112966b0) returned 1
	[0266.061] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bf102 | out: pbBuffer=0x110bf102) returned 1
	[0266.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bf1a4 | out: pbBuffer=0x110bf1a4) returned 1
	[0266.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112966e0 | out: pbBuffer=0x112966e0) returned 1
	[0266.062] GetFileType (hFile=0x1d8) returned 0x1
	[0266.063] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.063] WriteFile (in: hFile=0x1d8, lpBuffer=0x1110a000*, nNumberOfBytesToWrite=0x212c, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x1110a000*, lpNumberOfBytesWritten=0x112b9dfc*=0x212c, lpOverlapped=0x112b9e08) returned 1
	[0266.063] GetFileType (hFile=0x1d8) returned 0x1
	[0266.063] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x212c, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.063] GetFileType (hFile=0x1d8) returned 0x1
	[0266.064] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.064] WriteFile (in: hFile=0x1d8, lpBuffer=0x11102380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x11102380*, lpNumberOfBytesWritten=0x112b9dfc*=0x227, lpOverlapped=0x112b9e08) returned 1
	[0266.064] GetFileType (hFile=0x1d8) returned 0x1
	[0266.064] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x212c, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.064] CloseHandle (hObject=0x1d8) returned 1
	[0266.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.tl30z")) returned 0x220
	[0266.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0266.083] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0266.095] SetEvent (hEvent=0x1b0) returned 1
	[0266.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 0x220
	[0266.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", dwFileAttributes=0x220) returned 1
	[0266.096] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0266.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.371] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0266.371] ReadFile (in: hFile=0x1d8, lpBuffer=0x111d0000, nNumberOfBytesToRead=0xd14, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x111d0000*, lpNumberOfBytesRead=0x1131ce18*=0xd14, lpOverlapped=0x0) returned 1
	[0266.379] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112969a0 | out: pbBuffer=0x112969a0) returned 1
	[0266.380] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111da602 | out: pbBuffer=0x111da602) returned 1
	[0266.380] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112969d0 | out: pbBuffer=0x112969d0) returned 1
	[0266.380] GetFileType (hFile=0x1d8) returned 0x1
	[0266.381] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.381] WriteFile (in: hFile=0x1d8, lpBuffer=0x111ea000*, nNumberOfBytesToWrite=0xd14, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x111ea000*, lpNumberOfBytesWritten=0x112b9dfc*=0xd14, lpOverlapped=0x112b9e08) returned 1
	[0266.381] GetFileType (hFile=0x1d8) returned 0x1
	[0266.381] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xd14, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.381] GetFileType (hFile=0x1d8) returned 0x1
	[0266.382] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.382] WriteFile (in: hFile=0x1d8, lpBuffer=0x111ec000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112b9dfc, lpOverlapped=0x112b9e08 | out: lpBuffer=0x111ec000*, lpNumberOfBytesWritten=0x112b9dfc*=0x227, lpOverlapped=0x112b9e08) returned 1
	[0266.382] GetFileType (hFile=0x1d8) returned 0x1
	[0266.382] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xd14, lpNewFilePointer=0x0, dwMoveMethod=0x112b9de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.382] CloseHandle (hObject=0x1d8) returned 1
	[0266.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.tl30z")) returned 0x220
	[0266.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0266.389] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0266.396] SetEvent (hEvent=0x1b0) returned 1
	[0266.396] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 0x220
	[0266.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", dwFileAttributes=0x220) returned 1
	[0266.397] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0266.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0266.935] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0266.935] ReadFile (in: hFile=0x1d8, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x138c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x1131ce18*=0x138c, lpOverlapped=0x0) returned 1
	[0266.940] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0266.941] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1123a802 | out: pbBuffer=0x1123a802) returned 1
	[0266.941] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0266.941] GetFileType (hFile=0x1d8) returned 0x1
	[0266.942] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.942] WriteFile (in: hFile=0x1d8, lpBuffer=0x11412000*, nNumberOfBytesToWrite=0x138c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11412000*, lpNumberOfBytesWritten=0x11031dfc*=0x138c, lpOverlapped=0x11031e08) returned 1
	[0266.942] GetFileType (hFile=0x1d8) returned 0x1
	[0266.942] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x138c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.942] GetFileType (hFile=0x1d8) returned 0x1
	[0266.943] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.943] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bc8e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bc8e00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0266.943] GetFileType (hFile=0x1d8) returned 0x1
	[0266.944] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x138c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0266.944] CloseHandle (hObject=0x1d8) returned 1
	[0266.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.tl30z")) returned 0x220
	[0266.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0266.961] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0266.976] SetEvent (hEvent=0x118) returned 1
	[0266.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x220
	[0266.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", dwFileAttributes=0x220) returned 1
	[0266.977] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.459] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0267.459] ReadFile (in: hFile=0x1d8, lpBuffer=0x11438000, nNumberOfBytesToRead=0x2d74, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11438000*, lpNumberOfBytesRead=0x1131ce18*=0x2d74, lpOverlapped=0x0) returned 1
	[0267.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112963d0 | out: pbBuffer=0x112963d0) returned 1
	[0267.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112963c8 | out: pbBuffer=0x112963c8) returned 1
	[0267.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11391e02 | out: pbBuffer=0x11391e02) returned 1
	[0267.464] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11296400 | out: pbBuffer=0x11296400) returned 1
	[0267.464] GetFileType (hFile=0x1d8) returned 0x1
	[0267.464] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0267.465] WriteFile (in: hFile=0x1d8, lpBuffer=0x11304000*, nNumberOfBytesToWrite=0x2d74, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x11304000*, lpNumberOfBytesWritten=0x1136fdfc*=0x2d74, lpOverlapped=0x1136fe08) returned 1
	[0267.465] GetFileType (hFile=0x1d8) returned 0x1
	[0267.465] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2d74, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0267.465] GetFileType (hFile=0x1d8) returned 0x1
	[0267.466] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0267.466] WriteFile (in: hFile=0x1d8, lpBuffer=0x1144a700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x1144a700*, lpNumberOfBytesWritten=0x1136fdfc*=0x230, lpOverlapped=0x1136fe08) returned 1
	[0267.466] GetFileType (hFile=0x1d8) returned 0x1
	[0267.466] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2d74, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0267.466] CloseHandle (hObject=0x1d8) returned 1
	[0267.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.tl30z")) returned 0x220
	[0267.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.479] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0267.494] SetEvent (hEvent=0x26c) returned 1
	[0267.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x220
	[0267.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", dwFileAttributes=0x220) returned 1
	[0267.494] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.740] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0267.740] ReadFile (in: hFile=0x1d8, lpBuffer=0x11466800, nNumberOfBytesToRead=0x4124, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11466800*, lpNumberOfBytesRead=0x1131ce18*=0x4124, lpOverlapped=0x0) returned 1
	[0267.745] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0267.745] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11216902 | out: pbBuffer=0x11216902) returned 1
	[0267.745] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11216955 | out: pbBuffer=0x11216955) returned 1
	[0267.745] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121698c | out: pbBuffer=0x1121698c) returned 1
	[0267.745] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0267.746] GetFileType (hFile=0x1d8) returned 0x1
	[0267.746] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.746] WriteFile (in: hFile=0x1d8, lpBuffer=0x11114000*, nNumberOfBytesToWrite=0x4124, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11114000*, lpNumberOfBytesWritten=0x11031dfc*=0x4124, lpOverlapped=0x11031e08) returned 1
	[0267.747] GetFileType (hFile=0x1d8) returned 0x1
	[0267.747] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4124, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.747] GetFileType (hFile=0x1d8) returned 0x1
	[0267.747] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.747] WriteFile (in: hFile=0x1d8, lpBuffer=0x11207880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11207880*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0267.747] GetFileType (hFile=0x1d8) returned 0x1
	[0267.747] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4124, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0267.747] CloseHandle (hObject=0x1d8) returned 1
	[0267.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.tl30z")) returned 0x220
	[0267.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.765] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0267.774] SetEvent (hEvent=0x26c) returned 1
	[0267.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x220
	[0267.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", dwFileAttributes=0x220) returned 1
	[0267.774] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0267.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0267.959] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0267.959] ReadFile (in: hFile=0x1d8, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x60ca, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x1131ce18*=0x60ca, lpOverlapped=0x0) returned 1
	[0267.966] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0267.966] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137c802 | out: pbBuffer=0x1137c802) returned 1
	[0267.966] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0267.967] GetFileType (hFile=0x1d8) returned 0x1
	[0267.967] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0267.967] WriteFile (in: hFile=0x1d8, lpBuffer=0x11060000*, nNumberOfBytesToWrite=0x60ca, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x11060000*, lpNumberOfBytesWritten=0x1138ddfc*=0x60ca, lpOverlapped=0x1138de08) returned 1
	[0267.968] GetFileType (hFile=0x1d8) returned 0x1
	[0267.968] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x60ca, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0267.968] GetFileType (hFile=0x1d8) returned 0x1
	[0267.968] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0267.968] WriteFile (in: hFile=0x1d8, lpBuffer=0x11372a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x11372a80*, lpNumberOfBytesWritten=0x1138ddfc*=0x22a, lpOverlapped=0x1138de08) returned 1
	[0267.968] GetFileType (hFile=0x1d8) returned 0x1
	[0267.968] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x60ca, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0267.969] CloseHandle (hObject=0x1d8) returned 1
	[0267.973] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.tl30z")) returned 0x220
	[0267.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0267.978] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0267.993] SetEvent (hEvent=0x210) returned 1
	[0267.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x220
	[0267.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", dwFileAttributes=0x220) returned 1
	[0267.993] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0268.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.177] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0268.177] ReadFile (in: hFile=0x1d4, lpBuffer=0x110a6000, nNumberOfBytesToRead=0x504a, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110a6000*, lpNumberOfBytesRead=0x1131ce18*=0x504a, lpOverlapped=0x0) returned 1
	[0268.183] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0268.183] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b8702 | out: pbBuffer=0x110b8702) returned 1
	[0268.183] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0268.184] GetFileType (hFile=0x1d4) returned 0x1
	[0268.184] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.184] WriteFile (in: hFile=0x1d4, lpBuffer=0x11242000*, nNumberOfBytesToWrite=0x504a, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x11242000*, lpNumberOfBytesWritten=0x1138ddfc*=0x504a, lpOverlapped=0x1138de08) returned 1
	[0268.185] GetFileType (hFile=0x1d4) returned 0x1
	[0268.185] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x504a, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.185] GetFileType (hFile=0x1d4) returned 0x1
	[0268.185] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.186] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ff500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1138ddfc, lpOverlapped=0x1138de08 | out: lpBuffer=0x112ff500*, lpNumberOfBytesWritten=0x1138ddfc*=0x227, lpOverlapped=0x1138de08) returned 1
	[0268.186] GetFileType (hFile=0x1d4) returned 0x1
	[0268.186] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x504a, lpNewFilePointer=0x0, dwMoveMethod=0x1138dde0 | out: lpNewFilePointer=0x0) returned 1
	[0268.186] CloseHandle (hObject=0x1d4) returned 1
	[0268.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.tl30z")) returned 0x220
	[0268.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.198] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.205] SetEvent (hEvent=0x210) returned 1
	[0268.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 0x220
	[0268.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", dwFileAttributes=0x220) returned 1
	[0268.206] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.tl30z"), dwFlags=0x1) returned 1
	[0268.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0268.373] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0268.373] ReadFile (in: hFile=0x1d4, lpBuffer=0x11150000, nNumberOfBytesToRead=0x3d75, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11150000*, lpNumberOfBytesRead=0x1131ce18*=0x3d75, lpOverlapped=0x0) returned 1
	[0268.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f890 | out: pbBuffer=0x1140f890) returned 1
	[0268.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f888 | out: pbBuffer=0x1140f888) returned 1
	[0268.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1145be02 | out: pbBuffer=0x1145be02) returned 1
	[0268.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1145be66 | out: pbBuffer=0x1145be66) returned 1
	[0268.377] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f8c0 | out: pbBuffer=0x1140f8c0) returned 1
	[0268.378] SetEvent (hEvent=0x210) returned 1
	[0268.378] GetFileType (hFile=0x1d4) returned 0x1
	[0268.378] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.379] WriteFile (in: hFile=0x1d4, lpBuffer=0x11bee000*, nNumberOfBytesToWrite=0x3d75, lpNumberOfBytesWritten=0x11391dfc, lpOverlapped=0x11391e08 | out: lpBuffer=0x11bee000*, lpNumberOfBytesWritten=0x11391dfc*=0x3d75, lpOverlapped=0x11391e08) returned 1
	[0268.379] GetFileType (hFile=0x1d4) returned 0x1
	[0268.379] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3d75, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.379] GetFileType (hFile=0x1d4) returned 0x1
	[0268.379] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.380] WriteFile (in: hFile=0x1d4, lpBuffer=0x1121f500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11391dfc, lpOverlapped=0x11391e08 | out: lpBuffer=0x1121f500*, lpNumberOfBytesWritten=0x11391dfc*=0x236, lpOverlapped=0x11391e08) returned 1
	[0268.380] GetFileType (hFile=0x1d4) returned 0x1
	[0268.380] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3d75, lpNewFilePointer=0x0, dwMoveMethod=0x11391de0 | out: lpNewFilePointer=0x0) returned 1
	[0268.380] CloseHandle (hObject=0x1d4) returned 1
	[0268.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.tl30z")) returned 0x220
	[0268.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0268.398] SwitchToThread () returned 1
	[0268.401] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.415] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.458] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.494] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.532] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.566] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.595] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.638] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.679] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.736] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.772] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.924] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.957] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0268.984] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0269.032] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0269.069] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0269.116] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0269.146] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0269.188] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0269.222] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0269.249] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0269.258] SetEvent (hEvent=0x218) returned 1
	[0269.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x220
	[0269.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", dwFileAttributes=0x220) returned 1
	[0269.259] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.458] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0269.459] ReadFile (in: hFile=0x1d8, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x30c2, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x1128ae18*=0x30c2, lpOverlapped=0x0) returned 1
	[0269.462] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0269.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11344802 | out: pbBuffer=0x11344802) returned 1
	[0269.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11344862 | out: pbBuffer=0x11344862) returned 1
	[0269.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11344866 | out: pbBuffer=0x11344866) returned 1
	[0269.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0269.464] GetFileType (hFile=0x1d8) returned 0x1
	[0269.464] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.464] WriteFile (in: hFile=0x1d8, lpBuffer=0x11106000*, nNumberOfBytesToWrite=0x30c2, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x11106000*, lpNumberOfBytesWritten=0x113afdfc*=0x30c2, lpOverlapped=0x113afe08) returned 1
	[0269.464] GetFileType (hFile=0x1d8) returned 0x1
	[0269.465] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x30c2, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.465] GetFileType (hFile=0x1d8) returned 0x1
	[0269.465] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.465] WriteFile (in: hFile=0x1d8, lpBuffer=0x11418a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x11418a80*, lpNumberOfBytesWritten=0x113afdfc*=0x227, lpOverlapped=0x113afe08) returned 1
	[0269.465] GetFileType (hFile=0x1d8) returned 0x1
	[0269.465] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x30c2, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.465] CloseHandle (hObject=0x1d8) returned 1
	[0269.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.tl30z")) returned 0x220
	[0269.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.480] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0269.493] SetEvent (hEvent=0x210) returned 1
	[0269.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x220
	[0269.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF", dwFileAttributes=0x220) returned 1
	[0269.494] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.616] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0269.616] ReadFile (in: hFile=0x1d8, lpBuffer=0x1128f800, nNumberOfBytesToRead=0xbc8, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1128f800*, lpNumberOfBytesRead=0x1128ae18*=0xbc8, lpOverlapped=0x0) returned 1
	[0269.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0269.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e638 | out: pbBuffer=0x1104e638) returned 1
	[0269.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e3102 | out: pbBuffer=0x113e3102) returned 1
	[0269.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e314c | out: pbBuffer=0x113e314c) returned 1
	[0269.620] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0269.620] GetFileType (hFile=0x1d8) returned 0x1
	[0269.620] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.620] WriteFile (in: hFile=0x1d8, lpBuffer=0x113fa000*, nNumberOfBytesToWrite=0xbc8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113fa000*, lpNumberOfBytesWritten=0x11031dfc*=0xbc8, lpOverlapped=0x11031e08) returned 1
	[0269.621] GetFileType (hFile=0x1d8) returned 0x1
	[0269.621] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xbc8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.621] GetFileType (hFile=0x1d8) returned 0x1
	[0269.621] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.621] WriteFile (in: hFile=0x1d8, lpBuffer=0x113f6380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113f6380*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0269.621] GetFileType (hFile=0x1d8) returned 0x1
	[0269.621] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xbc8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0269.621] CloseHandle (hObject=0x1d8) returned 1
	[0269.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf.tl30z")) returned 0x220
	[0269.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.632] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0269.641] SetEvent (hEvent=0x210) returned 1
	[0269.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x220
	[0269.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", dwFileAttributes=0x220) returned 1
	[0269.642] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0269.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0269.833] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0269.833] ReadFile (in: hFile=0x1d8, lpBuffer=0x11300000, nNumberOfBytesToRead=0x69aa, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11300000*, lpNumberOfBytesRead=0x1128ae18*=0x69aa, lpOverlapped=0x0) returned 1
	[0269.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f830 | out: pbBuffer=0x1140f830) returned 1
	[0269.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a1b02 | out: pbBuffer=0x113a1b02) returned 1
	[0269.839] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a1be0 | out: pbBuffer=0x113a1be0) returned 1
	[0269.840] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f860 | out: pbBuffer=0x1140f860) returned 1
	[0269.840] GetFileType (hFile=0x1d8) returned 0x1
	[0269.840] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.841] WriteFile (in: hFile=0x1d8, lpBuffer=0x11194000*, nNumberOfBytesToWrite=0x69aa, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x11194000*, lpNumberOfBytesWritten=0x113afdfc*=0x69aa, lpOverlapped=0x113afe08) returned 1
	[0269.841] GetFileType (hFile=0x1d8) returned 0x1
	[0269.841] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x69aa, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.842] GetFileType (hFile=0x1d8) returned 0x1
	[0269.842] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.842] WriteFile (in: hFile=0x1d8, lpBuffer=0x113bd500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113afdfc, lpOverlapped=0x113afe08 | out: lpBuffer=0x113bd500*, lpNumberOfBytesWritten=0x113afdfc*=0x230, lpOverlapped=0x113afe08) returned 1
	[0269.842] GetFileType (hFile=0x1d8) returned 0x1
	[0269.843] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x69aa, lpNewFilePointer=0x0, dwMoveMethod=0x113afde0 | out: lpNewFilePointer=0x0) returned 1
	[0269.843] CloseHandle (hObject=0x1d8) returned 1
	[0269.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf.tl30z")) returned 0x220
	[0269.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0269.858] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0269.863] SetEvent (hEvent=0x210) returned 1
	[0269.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x220
	[0269.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", dwFileAttributes=0x220) returned 1
	[0269.863] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.070] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0270.070] ReadFile (in: hFile=0x1d8, lpBuffer=0x11072c00, nNumberOfBytesToRead=0x1138, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11072c00*, lpNumberOfBytesRead=0x1128ae18*=0x1138, lpOverlapped=0x0) returned 1
	[0270.074] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6750 | out: pbBuffer=0x113e6750) returned 1
	[0270.074] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1117a702 | out: pbBuffer=0x1117a702) returned 1
	[0270.074] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117a758 | out: pbBuffer=0x1117a758) returned 1
	[0270.075] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6780 | out: pbBuffer=0x113e6780) returned 1
	[0270.075] GetFileType (hFile=0x1d8) returned 0x1
	[0270.075] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.075] WriteFile (in: hFile=0x1d8, lpBuffer=0x112ae000*, nNumberOfBytesToWrite=0x1138, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112ae000*, lpNumberOfBytesWritten=0x11031dfc*=0x1138, lpOverlapped=0x11031e08) returned 1
	[0270.076] GetFileType (hFile=0x1d8) returned 0x1
	[0270.076] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1138, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.076] GetFileType (hFile=0x1d8) returned 0x1
	[0270.076] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.076] WriteFile (in: hFile=0x1d8, lpBuffer=0x11298a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11298a80*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0270.076] GetFileType (hFile=0x1d8) returned 0x1
	[0270.076] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1138, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.076] CloseHandle (hObject=0x1d8) returned 1
	[0270.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf.tl30z")) returned 0x220
	[0270.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.094] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0270.099] SetEvent (hEvent=0x248) returned 1
	[0270.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf")) returned 0x220
	[0270.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", dwFileAttributes=0x220) returned 1
	[0270.100] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.231] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0270.231] ReadFile (in: hFile=0x1d8, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x714c, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x1128ae18*=0x714c, lpOverlapped=0x0) returned 1
	[0270.235] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0270.235] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0270.235] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1126d202 | out: pbBuffer=0x1126d202) returned 1
	[0270.235] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126d248 | out: pbBuffer=0x1126d248) returned 1
	[0270.235] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0270.236] GetFileType (hFile=0x1d8) returned 0x1
	[0270.236] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.236] WriteFile (in: hFile=0x1d8, lpBuffer=0x1139c000*, nNumberOfBytesToWrite=0x714c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1139c000*, lpNumberOfBytesWritten=0x11031dfc*=0x714c, lpOverlapped=0x11031e08) returned 1
	[0270.236] GetFileType (hFile=0x1d8) returned 0x1
	[0270.237] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x714c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.237] GetFileType (hFile=0x1d8) returned 0x1
	[0270.237] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.237] WriteFile (in: hFile=0x1d8, lpBuffer=0x11299c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11299c00*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0270.237] GetFileType (hFile=0x1d8) returned 0x1
	[0270.237] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x714c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.237] CloseHandle (hObject=0x1d8) returned 1
	[0270.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf.tl30z")) returned 0x220
	[0270.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.265] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0270.283] SetEvent (hEvent=0x218) returned 1
	[0270.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x220
	[0270.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF", dwFileAttributes=0x220) returned 1
	[0270.283] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.435] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0270.435] ReadFile (in: hFile=0x1d8, lpBuffer=0x11076480, nNumberOfBytesToRead=0x414, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11076480*, lpNumberOfBytesRead=0x1128ae18*=0x414, lpOverlapped=0x0) returned 1
	[0270.440] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0270.440] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d8902 | out: pbBuffer=0x110d8902) returned 1
	[0270.440] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0270.440] GetFileType (hFile=0x1d8) returned 0x1
	[0270.440] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.441] WriteFile (in: hFile=0x1d8, lpBuffer=0x110be000*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x113f1dfc, lpOverlapped=0x113f1e08 | out: lpBuffer=0x110be000*, lpNumberOfBytesWritten=0x113f1dfc*=0x414, lpOverlapped=0x113f1e08) returned 1
	[0270.441] GetFileType (hFile=0x1d8) returned 0x1
	[0270.441] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x414, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.441] GetFileType (hFile=0x1d8) returned 0x1
	[0270.441] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.441] WriteFile (in: hFile=0x1d8, lpBuffer=0x113e5500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x113f1dfc, lpOverlapped=0x113f1e08 | out: lpBuffer=0x113e5500*, lpNumberOfBytesWritten=0x113f1dfc*=0x221, lpOverlapped=0x113f1e08) returned 1
	[0270.442] GetFileType (hFile=0x1d8) returned 0x1
	[0270.442] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x414, lpNewFilePointer=0x0, dwMoveMethod=0x113f1de0 | out: lpNewFilePointer=0x0) returned 1
	[0270.442] CloseHandle (hObject=0x1d8) returned 1
	[0270.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf.tl30z")) returned 0x220
	[0270.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.463] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0270.471] SetEvent (hEvent=0x218) returned 1
	[0270.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x220
	[0270.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", dwFileAttributes=0x220) returned 1
	[0270.472] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.763] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0270.763] ReadFile (in: hFile=0x1d8, lpBuffer=0x11458000, nNumberOfBytesToRead=0x31f4, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11458000*, lpNumberOfBytesRead=0x1128ae18*=0x31f4, lpOverlapped=0x0) returned 1
	[0270.769] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11452100 | out: pbBuffer=0x11452100) returned 1
	[0270.770] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c4802 | out: pbBuffer=0x111c4802) returned 1
	[0270.770] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11452130 | out: pbBuffer=0x11452130) returned 1
	[0270.771] GetFileType (hFile=0x1d8) returned 0x1
	[0270.771] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.771] WriteFile (in: hFile=0x1d8, lpBuffer=0x11202000*, nNumberOfBytesToWrite=0x31f4, lpNumberOfBytesWritten=0x1146fdfc, lpOverlapped=0x1146fe08 | out: lpBuffer=0x11202000*, lpNumberOfBytesWritten=0x1146fdfc*=0x31f4, lpOverlapped=0x1146fe08) returned 1
	[0270.771] GetFileType (hFile=0x1d8) returned 0x1
	[0270.771] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x31f4, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.771] GetFileType (hFile=0x1d8) returned 0x1
	[0270.772] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.772] WriteFile (in: hFile=0x1d8, lpBuffer=0x111d8a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1146fdfc, lpOverlapped=0x1146fe08 | out: lpBuffer=0x111d8a80*, lpNumberOfBytesWritten=0x1146fdfc*=0x230, lpOverlapped=0x1146fe08) returned 1
	[0270.772] GetFileType (hFile=0x1d8) returned 0x1
	[0270.772] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x31f4, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.772] CloseHandle (hObject=0x1d8) returned 1
	[0270.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf.tl30z")) returned 0x220
	[0270.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.785] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0270.797] SetEvent (hEvent=0x218) returned 1
	[0270.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x220
	[0270.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", dwFileAttributes=0x220) returned 1
	[0270.797] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0270.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0270.947] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0270.947] ReadFile (in: hFile=0x1d8, lpBuffer=0x11150000, nNumberOfBytesToRead=0x15cc, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11150000*, lpNumberOfBytesRead=0x1128ae18*=0x15cc, lpOverlapped=0x0) returned 1
	[0270.951] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x114526c0 | out: pbBuffer=0x114526c0) returned 1
	[0270.951] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11121102 | out: pbBuffer=0x11121102) returned 1
	[0270.951] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11121163 | out: pbBuffer=0x11121163) returned 1
	[0270.952] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x114526f0 | out: pbBuffer=0x114526f0) returned 1
	[0270.952] GetFileType (hFile=0x1d8) returned 0x1
	[0270.952] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.952] WriteFile (in: hFile=0x1d8, lpBuffer=0x1117a000*, nNumberOfBytesToWrite=0x15cc, lpNumberOfBytesWritten=0x1146fdfc, lpOverlapped=0x1146fe08 | out: lpBuffer=0x1117a000*, lpNumberOfBytesWritten=0x1146fdfc*=0x15cc, lpOverlapped=0x1146fe08) returned 1
	[0270.952] GetFileType (hFile=0x1d8) returned 0x1
	[0270.952] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x15cc, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.952] GetFileType (hFile=0x1d8) returned 0x1
	[0270.953] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.953] WriteFile (in: hFile=0x1d8, lpBuffer=0x11168380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1146fdfc, lpOverlapped=0x1146fe08 | out: lpBuffer=0x11168380*, lpNumberOfBytesWritten=0x1146fdfc*=0x22d, lpOverlapped=0x1146fe08) returned 1
	[0270.961] GetFileType (hFile=0x1d8) returned 0x1
	[0270.961] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x15cc, lpNewFilePointer=0x0, dwMoveMethod=0x1146fde0 | out: lpNewFilePointer=0x0) returned 1
	[0270.961] CloseHandle (hObject=0x1d8) returned 1
	[0270.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf.tl30z")) returned 0x220
	[0270.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0270.971] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0270.976] SetEvent (hEvent=0x218) returned 1
	[0270.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x220
	[0270.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF", dwFileAttributes=0x220) returned 1
	[0270.976] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.131] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0271.132] ReadFile (in: hFile=0x1d8, lpBuffer=0x1119c000, nNumberOfBytesToRead=0xed4, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1119c000*, lpNumberOfBytesRead=0x1128ae18*=0xed4, lpOverlapped=0x0) returned 1
	[0271.136] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0271.136] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11186902 | out: pbBuffer=0x11186902) returned 1
	[0271.136] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111869ae | out: pbBuffer=0x111869ae) returned 1
	[0271.136] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65a0 | out: pbBuffer=0x113e65a0) returned 1
	[0271.137] GetFileType (hFile=0x1d8) returned 0x1
	[0271.137] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.137] WriteFile (in: hFile=0x1d8, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0xed4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x11031dfc*=0xed4, lpOverlapped=0x11031e08) returned 1
	[0271.137] GetFileType (hFile=0x1d8) returned 0x1
	[0271.138] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xed4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.138] GetFileType (hFile=0x1d8) returned 0x1
	[0271.138] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.138] WriteFile (in: hFile=0x1d8, lpBuffer=0x11387880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11387880*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0271.139] GetFileType (hFile=0x1d8) returned 0x1
	[0271.139] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xed4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.139] CloseHandle (hObject=0x1d8) returned 1
	[0271.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf.tl30z")) returned 0x220
	[0271.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.148] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0271.164] SetEvent (hEvent=0x26c) returned 1
	[0271.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x220
	[0271.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", dwFileAttributes=0x220) returned 1
	[0271.165] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0271.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.512] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0271.512] ReadFile (in: hFile=0x1d8, lpBuffer=0x113ae000, nNumberOfBytesToRead=0x3a94, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113ae000*, lpNumberOfBytesRead=0x1128ae18*=0x3a94, lpOverlapped=0x0) returned 1
	[0271.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69b0 | out: pbBuffer=0x113e69b0) returned 1
	[0271.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e4802 | out: pbBuffer=0x113e4802) returned 1
	[0271.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e48b2 | out: pbBuffer=0x113e48b2) returned 1
	[0271.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e48df | out: pbBuffer=0x113e48df) returned 1
	[0271.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69e0 | out: pbBuffer=0x113e69e0) returned 1
	[0271.521] GetFileType (hFile=0x1d8) returned 0x1
	[0271.521] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.521] WriteFile (in: hFile=0x1d8, lpBuffer=0x110e4000*, nNumberOfBytesToWrite=0x3a94, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110e4000*, lpNumberOfBytesWritten=0x11031dfc*=0x3a94, lpOverlapped=0x11031e08) returned 1
	[0271.522] GetFileType (hFile=0x1d8) returned 0x1
	[0271.522] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3a94, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.522] GetFileType (hFile=0x1d8) returned 0x1
	[0271.522] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.522] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c0380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113c0380*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0271.522] GetFileType (hFile=0x1d8) returned 0x1
	[0271.522] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3a94, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.522] CloseHandle (hObject=0x1d8) returned 1
	[0271.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf.tl30z")) returned 0x220
	[0271.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0271.541] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0271.557] SetEvent (hEvent=0x26c) returned 1
	[0271.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid")) returned 0x220
	[0271.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", dwFileAttributes=0x220) returned 1
	[0271.558] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0271.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.745] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0271.745] ReadFile (in: hFile=0x1d8, lpBuffer=0x112f2500, nNumberOfBytesToRead=0x246a, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x112f2500*, lpNumberOfBytesRead=0x1128ae18*=0x246a, lpOverlapped=0x0) returned 1
	[0271.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332060 | out: pbBuffer=0x11332060) returned 1
	[0271.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11441302 | out: pbBuffer=0x11441302) returned 1
	[0271.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11441348 | out: pbBuffer=0x11441348) returned 1
	[0271.750] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144137d | out: pbBuffer=0x1144137d) returned 1
	[0271.750] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114413b5 | out: pbBuffer=0x114413b5) returned 1
	[0271.750] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113320f0 | out: pbBuffer=0x113320f0) returned 1
	[0271.751] GetFileType (hFile=0x1d8) returned 0x1
	[0271.751] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.751] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bc6000*, nNumberOfBytesToWrite=0x246a, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesWritten=0x1105ddfc*=0x246a, lpOverlapped=0x1105de08) returned 1
	[0271.751] GetFileType (hFile=0x1d8) returned 0x1
	[0271.751] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x246a, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.752] GetFileType (hFile=0x1d8) returned 0x1
	[0271.752] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.752] WriteFile (in: hFile=0x1d8, lpBuffer=0x11178380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1105ddfc, lpOverlapped=0x1105de08 | out: lpBuffer=0x11178380*, lpNumberOfBytesWritten=0x1105ddfc*=0x22a, lpOverlapped=0x1105de08) returned 1
	[0271.752] GetFileType (hFile=0x1d8) returned 0x1
	[0271.753] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x246a, lpNewFilePointer=0x0, dwMoveMethod=0x1105dde0 | out: lpNewFilePointer=0x0) returned 1
	[0271.753] CloseHandle (hObject=0x1d8) returned 1
	[0271.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid.tl30z")) returned 0x220
	[0271.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0271.766] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0271.780] SetEvent (hEvent=0x26c) returned 1
	[0271.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x220
	[0271.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", dwFileAttributes=0x220) returned 1
	[0271.781] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0271.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0271.906] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0271.906] ReadFile (in: hFile=0x1d8, lpBuffer=0x110b6000, nNumberOfBytesToRead=0x1b3a, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x110b6000*, lpNumberOfBytesRead=0x1128ae18*=0x1b3a, lpOverlapped=0x0) returned 1
	[0271.915] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e70f0 | out: pbBuffer=0x113e70f0) returned 1
	[0271.915] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e70e8 | out: pbBuffer=0x113e70e8) returned 1
	[0271.915] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1128fc02 | out: pbBuffer=0x1128fc02) returned 1
	[0271.915] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1128fc98 | out: pbBuffer=0x1128fc98) returned 1
	[0271.915] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1128fc9b | out: pbBuffer=0x1128fc9b) returned 1
	[0271.915] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1128fcad | out: pbBuffer=0x1128fcad) returned 1
	[0271.916] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e7120 | out: pbBuffer=0x113e7120) returned 1
	[0271.916] GetFileType (hFile=0x1d8) returned 0x1
	[0271.916] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.916] WriteFile (in: hFile=0x1d8, lpBuffer=0x110f6000*, nNumberOfBytesToWrite=0x1b3a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110f6000*, lpNumberOfBytesWritten=0x11031dfc*=0x1b3a, lpOverlapped=0x11031e08) returned 1
	[0271.917] GetFileType (hFile=0x1d8) returned 0x1
	[0271.917] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b3a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.917] GetFileType (hFile=0x1d8) returned 0x1
	[0271.917] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.917] WriteFile (in: hFile=0x1d8, lpBuffer=0x110c0a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110c0a80*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0271.917] GetFileType (hFile=0x1d8) returned 0x1
	[0271.917] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1b3a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0271.917] CloseHandle (hObject=0x1d8) returned 1
	[0271.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid.tl30z")) returned 0x220
	[0271.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0271.930] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0271.936] SetEvent (hEvent=0x26c) returned 1
	[0271.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x220
	[0271.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF", dwFileAttributes=0x220) returned 1
	[0271.937] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.087] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0272.087] ReadFile (in: hFile=0x1d8, lpBuffer=0x1136e000, nNumberOfBytesToRead=0x7992, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x1128ae18*=0x7992, lpOverlapped=0x0) returned 1
	[0272.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0272.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0272.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11266802 | out: pbBuffer=0x11266802) returned 1
	[0272.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11266821 | out: pbBuffer=0x11266821) returned 1
	[0272.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126684e | out: pbBuffer=0x1126684e) returned 1
	[0272.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11266852 | out: pbBuffer=0x11266852) returned 1
	[0272.091] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11266852 | out: pbBuffer=0x11266852) returned 1
	[0272.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0272.093] GetFileType (hFile=0x1d8) returned 0x1
	[0272.093] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.093] WriteFile (in: hFile=0x1d8, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x7992, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x112c9dfc*=0x7992, lpOverlapped=0x112c9e08) returned 1
	[0272.093] GetFileType (hFile=0x1d8) returned 0x1
	[0272.093] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7992, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.094] GetFileType (hFile=0x1d8) returned 0x1
	[0272.094] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.094] WriteFile (in: hFile=0x1d8, lpBuffer=0x1123ee00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x1123ee00*, lpNumberOfBytesWritten=0x112c9dfc*=0x230, lpOverlapped=0x112c9e08) returned 1
	[0272.094] GetFileType (hFile=0x1d8) returned 0x1
	[0272.094] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7992, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.094] CloseHandle (hObject=0x1d8) returned 1
	[0272.099] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf.tl30z")) returned 0x220
	[0272.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.106] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0272.110] SetEvent (hEvent=0x1b0) returned 1
	[0272.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x220
	[0272.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF", dwFileAttributes=0x220) returned 1
	[0272.111] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.316] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0272.316] ReadFile (in: hFile=0x1d8, lpBuffer=0x113bc000, nNumberOfBytesToRead=0x9456, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113bc000*, lpNumberOfBytesRead=0x1128ae18*=0x9456, lpOverlapped=0x0) returned 1
	[0272.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4a0 | out: pbBuffer=0x1104e4a0) returned 1
	[0272.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e498 | out: pbBuffer=0x1104e498) returned 1
	[0272.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11251c02 | out: pbBuffer=0x11251c02) returned 1
	[0272.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11251c71 | out: pbBuffer=0x11251c71) returned 1
	[0272.331] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11251c86 | out: pbBuffer=0x11251c86) returned 1
	[0272.332] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0272.333] GetFileType (hFile=0x1d8) returned 0x1
	[0272.333] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.333] WriteFile (in: hFile=0x1d8, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x9456, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x112c5dfc*=0x9456, lpOverlapped=0x112c5e08) returned 1
	[0272.334] GetFileType (hFile=0x1d8) returned 0x1
	[0272.334] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9456, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.334] GetFileType (hFile=0x1d8) returned 0x1
	[0272.334] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.335] WriteFile (in: hFile=0x1d8, lpBuffer=0x110d2700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x110d2700*, lpNumberOfBytesWritten=0x112c5dfc*=0x230, lpOverlapped=0x112c5e08) returned 1
	[0272.335] GetFileType (hFile=0x1d8) returned 0x1
	[0272.335] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x9456, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.335] CloseHandle (hObject=0x1d8) returned 1
	[0272.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf.tl30z")) returned 0x220
	[0272.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.347] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0272.355] SetEvent (hEvent=0x1b0) returned 1
	[0272.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x220
	[0272.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF", dwFileAttributes=0x220) returned 1
	[0272.355] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.571] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0272.571] ReadFile (in: hFile=0x1d8, lpBuffer=0x111e8000, nNumberOfBytesToRead=0xa7f0, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x111e8000*, lpNumberOfBytesRead=0x1128ae18*=0xa7f0, lpOverlapped=0x0) returned 1
	[0272.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113322d0 | out: pbBuffer=0x113322d0) returned 1
	[0272.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113322c8 | out: pbBuffer=0x113322c8) returned 1
	[0272.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112aba02 | out: pbBuffer=0x112aba02) returned 1
	[0272.576] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112aba4e | out: pbBuffer=0x112aba4e) returned 1
	[0272.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332300 | out: pbBuffer=0x11332300) returned 1
	[0272.578] GetFileType (hFile=0x1d8) returned 0x1
	[0272.578] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.578] WriteFile (in: hFile=0x1d8, lpBuffer=0x110f2000*, nNumberOfBytesToWrite=0xa7f0, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x110f2000*, lpNumberOfBytesWritten=0x112c5dfc*=0xa7f0, lpOverlapped=0x112c5e08) returned 1
	[0272.579] GetFileType (hFile=0x1d8) returned 0x1
	[0272.579] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa7f0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.579] GetFileType (hFile=0x1d8) returned 0x1
	[0272.579] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.579] WriteFile (in: hFile=0x1d8, lpBuffer=0x1144d180*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x112c5dfc, lpOverlapped=0x112c5e08 | out: lpBuffer=0x1144d180*, lpNumberOfBytesWritten=0x112c5dfc*=0x236, lpOverlapped=0x112c5e08) returned 1
	[0272.580] GetFileType (hFile=0x1d8) returned 0x1
	[0272.580] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xa7f0, lpNewFilePointer=0x0, dwMoveMethod=0x112c5de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.580] CloseHandle (hObject=0x1d8) returned 1
	[0272.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf.tl30z")) returned 0x220
	[0272.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.585] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0272.597] SetEvent (hEvent=0x1b0) returned 1
	[0272.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x220
	[0272.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF", dwFileAttributes=0x220) returned 1
	[0272.598] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.783] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0272.783] ReadFile (in: hFile=0x1d8, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x2708, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x1128ae18*=0x2708, lpOverlapped=0x0) returned 1
	[0272.788] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0272.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11260802 | out: pbBuffer=0x11260802) returned 1
	[0272.789] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0272.789] GetFileType (hFile=0x1d8) returned 0x1
	[0272.789] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.789] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bcc000*, nNumberOfBytesToWrite=0x2708, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bcc000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2708, lpOverlapped=0x1102be08) returned 1
	[0272.790] GetFileType (hFile=0x1d8) returned 0x1
	[0272.790] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2708, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.790] GetFileType (hFile=0x1d8) returned 0x1
	[0272.790] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.790] WriteFile (in: hFile=0x1d8, lpBuffer=0x11176a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11176a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0272.790] GetFileType (hFile=0x1d8) returned 0x1
	[0272.790] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2708, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0272.791] CloseHandle (hObject=0x1d8) returned 1
	[0272.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf.tl30z")) returned 0x220
	[0272.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0272.802] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0272.811] SetEvent (hEvent=0x218) returned 1
	[0272.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x220
	[0272.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF", dwFileAttributes=0x220) returned 1
	[0272.812] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0272.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0272.986] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0272.986] ReadFile (in: hFile=0x1d8, lpBuffer=0x110eb000, nNumberOfBytesToRead=0xe6c, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x110eb000*, lpNumberOfBytesRead=0x1128ae18*=0xe6c, lpOverlapped=0x0) returned 1
	[0272.992] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0272.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4b8 | out: pbBuffer=0x1104e4b8) returned 1
	[0272.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136bd02 | out: pbBuffer=0x1136bd02) returned 1
	[0272.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136bdc8 | out: pbBuffer=0x1136bdc8) returned 1
	[0272.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0272.993] GetFileType (hFile=0x1d8) returned 0x1
	[0272.993] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.994] WriteFile (in: hFile=0x1d8, lpBuffer=0x113be000*, nNumberOfBytesToWrite=0xe6c, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x113be000*, lpNumberOfBytesWritten=0x112c9dfc*=0xe6c, lpOverlapped=0x112c9e08) returned 1
	[0272.994] GetFileType (hFile=0x1d8) returned 0x1
	[0272.994] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xe6c, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.994] GetFileType (hFile=0x1d8) returned 0x1
	[0272.994] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.994] WriteFile (in: hFile=0x1d8, lpBuffer=0x113aa700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x113aa700*, lpNumberOfBytesWritten=0x112c9dfc*=0x22d, lpOverlapped=0x112c9e08) returned 1
	[0272.994] GetFileType (hFile=0x1d8) returned 0x1
	[0272.995] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xe6c, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0272.995] CloseHandle (hObject=0x1d8) returned 1
	[0273.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf.tl30z")) returned 0x220
	[0273.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.008] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0273.015] SetEvent (hEvent=0x218) returned 1
	[0273.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x220
	[0273.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF", dwFileAttributes=0x220) returned 1
	[0273.016] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.156] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0273.156] ReadFile (in: hFile=0x1d8, lpBuffer=0x11297800, nNumberOfBytesToRead=0xaec, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11297800*, lpNumberOfBytesRead=0x1128ae18*=0xaec, lpOverlapped=0x0) returned 1
	[0273.159] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332970 | out: pbBuffer=0x11332970) returned 1
	[0273.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332968 | out: pbBuffer=0x11332968) returned 1
	[0273.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c7c02 | out: pbBuffer=0x113c7c02) returned 1
	[0273.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c7c23 | out: pbBuffer=0x113c7c23) returned 1
	[0273.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c7cba | out: pbBuffer=0x113c7cba) returned 1
	[0273.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c7cc0 | out: pbBuffer=0x113c7cc0) returned 1
	[0273.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113329a0 | out: pbBuffer=0x113329a0) returned 1
	[0273.160] GetFileType (hFile=0x1d8) returned 0x1
	[0273.160] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.161] WriteFile (in: hFile=0x1d8, lpBuffer=0x1143a000*, nNumberOfBytesToWrite=0xaec, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1143a000*, lpNumberOfBytesWritten=0x1102bdfc*=0xaec, lpOverlapped=0x1102be08) returned 1
	[0273.161] GetFileType (hFile=0x1d8) returned 0x1
	[0273.161] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xaec, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.161] GetFileType (hFile=0x1d8) returned 0x1
	[0273.161] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.161] WriteFile (in: hFile=0x1d8, lpBuffer=0x1109d500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1109d500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0273.161] GetFileType (hFile=0x1d8) returned 0x1
	[0273.162] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xaec, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0273.162] CloseHandle (hObject=0x1d8) returned 1
	[0273.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf.tl30z")) returned 0x220
	[0273.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.177] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0273.188] SetEvent (hEvent=0x218) returned 1
	[0273.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x220
	[0273.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF", dwFileAttributes=0x220) returned 1
	[0273.189] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.356] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0273.356] ReadFile (in: hFile=0x1d8, lpBuffer=0x1107d200, nNumberOfBytesToRead=0x8fc, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x1107d200*, lpNumberOfBytesRead=0x1128ae18*=0x8fc, lpOverlapped=0x0) returned 1
	[0273.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6480 | out: pbBuffer=0x113e6480) returned 1
	[0273.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6478 | out: pbBuffer=0x113e6478) returned 1
	[0273.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110f5002 | out: pbBuffer=0x110f5002) returned 1
	[0273.361] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110f5013 | out: pbBuffer=0x110f5013) returned 1
	[0273.362] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e64b0 | out: pbBuffer=0x113e64b0) returned 1
	[0273.362] GetFileType (hFile=0x1d8) returned 0x1
	[0273.362] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.362] WriteFile (in: hFile=0x1d8, lpBuffer=0x11123000*, nNumberOfBytesToWrite=0x8fc, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11123000*, lpNumberOfBytesWritten=0x112c9dfc*=0x8fc, lpOverlapped=0x112c9e08) returned 1
	[0273.362] GetFileType (hFile=0x1d8) returned 0x1
	[0273.362] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8fc, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.362] GetFileType (hFile=0x1d8) returned 0x1
	[0273.362] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.363] WriteFile (in: hFile=0x1d8, lpBuffer=0x11104e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11104e00*, lpNumberOfBytesWritten=0x112c9dfc*=0x22d, lpOverlapped=0x112c9e08) returned 1
	[0273.363] GetFileType (hFile=0x1d8) returned 0x1
	[0273.363] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x8fc, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.363] CloseHandle (hObject=0x1d8) returned 1
	[0273.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf.tl30z")) returned 0x220
	[0273.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.381] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0273.387] SetEvent (hEvent=0x218) returned 1
	[0273.388] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x220
	[0273.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF", dwFileAttributes=0x220) returned 1
	[0273.388] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0273.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0273.655] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0273.655] ReadFile (in: hFile=0x1d8, lpBuffer=0x111e8000, nNumberOfBytesToRead=0x7e4, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x111e8000*, lpNumberOfBytesRead=0x1128ae18*=0x7e4, lpOverlapped=0x0) returned 1
	[0273.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0273.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f6802 | out: pbBuffer=0x111f6802) returned 1
	[0273.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f6827 | out: pbBuffer=0x111f6827) returned 1
	[0273.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f6895 | out: pbBuffer=0x111f6895) returned 1
	[0273.662] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0273.662] GetFileType (hFile=0x1d8) returned 0x1
	[0273.662] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.662] WriteFile (in: hFile=0x1d8, lpBuffer=0x11219000*, nNumberOfBytesToWrite=0x7e4, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11219000*, lpNumberOfBytesWritten=0x112c9dfc*=0x7e4, lpOverlapped=0x112c9e08) returned 1
	[0273.662] GetFileType (hFile=0x1d8) returned 0x1
	[0273.663] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7e4, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.663] GetFileType (hFile=0x1d8) returned 0x1
	[0273.663] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.663] WriteFile (in: hFile=0x1d8, lpBuffer=0x11208a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112c9dfc, lpOverlapped=0x112c9e08 | out: lpBuffer=0x11208a80*, lpNumberOfBytesWritten=0x112c9dfc*=0x22d, lpOverlapped=0x112c9e08) returned 1
	[0273.663] GetFileType (hFile=0x1d8) returned 0x1
	[0273.663] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x7e4, lpNewFilePointer=0x0, dwMoveMethod=0x112c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0273.663] CloseHandle (hObject=0x1d8) returned 1
	[0273.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf.tl30z")) returned 0x220
	[0273.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0273.689] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0273.699] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0273.752] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0273.767] SetEvent (hEvent=0x1b0) returned 1
	[0273.768] SetEvent (hEvent=0x1f0) returned 1
	[0273.768] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0273.772] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0273.772] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0273.778] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0273.779] SetEvent (hEvent=0x1b0) returned 1
	[0273.779] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0273.783] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0273.783] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0275.098] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0275.104] SetEvent (hEvent=0x210) returned 1
	[0275.104] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0275.109] SetEvent (hEvent=0x210) returned 1
	[0275.109] SwitchToThread () returned 1
	[0275.115] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0275.128] SetEvent (hEvent=0x26c) returned 1
	[0275.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf")) returned 0x220
	[0275.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF", dwFileAttributes=0x220) returned 1
	[0275.129] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0275.377] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0275.377] ReadFile (in: hFile=0x224, lpBuffer=0x113a0000, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x113a0000*, lpNumberOfBytesRead=0x11023e18*=0x2e0, lpOverlapped=0x0) returned 1
	[0275.413] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0275.413] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11369202 | out: pbBuffer=0x11369202) returned 1
	[0275.413] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113692b5 | out: pbBuffer=0x113692b5) returned 1
	[0275.413] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0275.413] GetFileType (hFile=0x224) returned 0x1
	[0275.413] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.414] WriteFile (in: hFile=0x224, lpBuffer=0x11066000*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x11066000*, lpNumberOfBytesWritten=0x113efdfc*=0x2e0, lpOverlapped=0x113efe08) returned 1
	[0275.414] GetFileType (hFile=0x224) returned 0x1
	[0275.414] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.414] GetFileType (hFile=0x224) returned 0x1
	[0275.414] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.414] WriteFile (in: hFile=0x224, lpBuffer=0x1134d880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x1134d880*, lpNumberOfBytesWritten=0x113efdfc*=0x224, lpOverlapped=0x113efe08) returned 1
	[0275.415] GetFileType (hFile=0x224) returned 0x1
	[0275.415] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2e0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0275.415] CloseHandle (hObject=0x224) returned 1
	[0275.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf.tl30z")) returned 0x220
	[0275.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.435] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0275.445] SetEvent (hEvent=0x26c) returned 1
	[0275.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x220
	[0275.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF", dwFileAttributes=0x220) returned 1
	[0275.446] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0275.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0275.673] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0275.673] ReadFile (in: hFile=0x224, lpBuffer=0x112dd000, nNumberOfBytesToRead=0x45ba, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x112dd000*, lpNumberOfBytesRead=0x11023e18*=0x45ba, lpOverlapped=0x0) returned 1
	[0275.679] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6850 | out: pbBuffer=0x113e6850) returned 1
	[0275.679] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bc7d02 | out: pbBuffer=0x11bc7d02) returned 1
	[0275.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6880 | out: pbBuffer=0x113e6880) returned 1
	[0275.680] GetFileType (hFile=0x224) returned 0x1
	[0275.680] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.682] WriteFile (in: hFile=0x224, lpBuffer=0x11162000*, nNumberOfBytesToWrite=0x45ba, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x11162000*, lpNumberOfBytesWritten=0x113f3dfc*=0x45ba, lpOverlapped=0x113f3e08) returned 1
	[0275.682] GetFileType (hFile=0x224) returned 0x1
	[0275.682] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x45ba, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.682] GetFileType (hFile=0x224) returned 0x1
	[0275.682] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.683] WriteFile (in: hFile=0x224, lpBuffer=0x110d3500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113f3dfc, lpOverlapped=0x113f3e08 | out: lpBuffer=0x110d3500*, lpNumberOfBytesWritten=0x113f3dfc*=0x230, lpOverlapped=0x113f3e08) returned 1
	[0275.683] GetFileType (hFile=0x224) returned 0x1
	[0275.683] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x45ba, lpNewFilePointer=0x0, dwMoveMethod=0x113f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0275.683] CloseHandle (hObject=0x224) returned 1
	[0275.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf.tl30z")) returned 0x220
	[0275.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0275.700] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0275.746] SetEvent (hEvent=0x26c) returned 1
	[0275.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x220
	[0275.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF", dwFileAttributes=0x220) returned 1
	[0275.746] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.017] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0276.017] ReadFile (in: hFile=0x224, lpBuffer=0x11436000, nNumberOfBytesToRead=0x920e, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11436000*, lpNumberOfBytesRead=0x11023e18*=0x920e, lpOverlapped=0x0) returned 1
	[0276.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f330 | out: pbBuffer=0x1140f330) returned 1
	[0276.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11446502 | out: pbBuffer=0x11446502) returned 1
	[0276.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144650e | out: pbBuffer=0x1144650e) returned 1
	[0276.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144655f | out: pbBuffer=0x1144655f) returned 1
	[0276.024] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f360 | out: pbBuffer=0x1140f360) returned 1
	[0276.025] GetFileType (hFile=0x224) returned 0x1
	[0276.025] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.026] WriteFile (in: hFile=0x224, lpBuffer=0x11bf6000*, nNumberOfBytesToWrite=0x920e, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x11bf6000*, lpNumberOfBytesWritten=0x113efdfc*=0x920e, lpOverlapped=0x113efe08) returned 1
	[0276.026] GetFileType (hFile=0x224) returned 0x1
	[0276.026] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x920e, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.026] GetFileType (hFile=0x224) returned 0x1
	[0276.026] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.027] WriteFile (in: hFile=0x224, lpBuffer=0x11470000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x11470000*, lpNumberOfBytesWritten=0x113efdfc*=0x22d, lpOverlapped=0x113efe08) returned 1
	[0276.027] GetFileType (hFile=0x224) returned 0x1
	[0276.027] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x920e, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.027] CloseHandle (hObject=0x224) returned 1
	[0276.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf.tl30z")) returned 0x220
	[0276.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.044] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0276.056] SetEvent (hEvent=0x118) returned 1
	[0276.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x220
	[0276.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF", dwFileAttributes=0x220) returned 1
	[0276.056] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.230] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0276.230] ReadFile (in: hFile=0x224, lpBuffer=0x110d8000, nNumberOfBytesToRead=0xfea, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x110d8000*, lpNumberOfBytesRead=0x11023e18*=0xfea, lpOverlapped=0x0) returned 1
	[0276.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0276.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d4902 | out: pbBuffer=0x110d4902) returned 1
	[0276.240] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65a0 | out: pbBuffer=0x113e65a0) returned 1
	[0276.240] GetFileType (hFile=0x224) returned 0x1
	[0276.240] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.240] WriteFile (in: hFile=0x224, lpBuffer=0x11360000*, nNumberOfBytesToWrite=0xfea, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11360000*, lpNumberOfBytesWritten=0x11031dfc*=0xfea, lpOverlapped=0x11031e08) returned 1
	[0276.241] GetFileType (hFile=0x224) returned 0x1
	[0276.241] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xfea, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.241] GetFileType (hFile=0x224) returned 0x1
	[0276.241] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.241] WriteFile (in: hFile=0x224, lpBuffer=0x1141b880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1141b880*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0276.242] GetFileType (hFile=0x224) returned 0x1
	[0276.242] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xfea, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.242] CloseHandle (hObject=0x224) returned 1
	[0276.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf.tl30z")) returned 0x220
	[0276.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.258] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0276.264] SetEvent (hEvent=0x218) returned 1
	[0276.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x220
	[0276.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF", dwFileAttributes=0x220) returned 1
	[0276.265] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.502] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0276.502] ReadFile (in: hFile=0x224, lpBuffer=0x110bf000, nNumberOfBytesToRead=0x2afa, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x110bf000*, lpNumberOfBytesRead=0x11023e18*=0x2afa, lpOverlapped=0x0) returned 1
	[0276.508] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0276.508] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11315c02 | out: pbBuffer=0x11315c02) returned 1
	[0276.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0276.509] GetFileType (hFile=0x224) returned 0x1
	[0276.509] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.509] WriteFile (in: hFile=0x224, lpBuffer=0x112aa000*, nNumberOfBytesToWrite=0x2afa, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x112aa000*, lpNumberOfBytesWritten=0x1139fdfc*=0x2afa, lpOverlapped=0x1139fe08) returned 1
	[0276.510] GetFileType (hFile=0x224) returned 0x1
	[0276.510] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2afa, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.510] GetFileType (hFile=0x224) returned 0x1
	[0276.510] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.510] WriteFile (in: hFile=0x224, lpBuffer=0x112a0700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x112a0700*, lpNumberOfBytesWritten=0x1139fdfc*=0x233, lpOverlapped=0x1139fe08) returned 1
	[0276.510] GetFileType (hFile=0x224) returned 0x1
	[0276.510] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2afa, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.510] CloseHandle (hObject=0x224) returned 1
	[0276.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf.tl30z")) returned 0x220
	[0276.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.524] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0276.535] SetEvent (hEvent=0x218) returned 1
	[0276.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x220
	[0276.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF", dwFileAttributes=0x220) returned 1
	[0276.536] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.680] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0276.680] ReadFile (in: hFile=0x224, lpBuffer=0x113b2a00, nNumberOfBytesToRead=0x22de, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x113b2a00*, lpNumberOfBytesRead=0x11023e18*=0x22de, lpOverlapped=0x0) returned 1
	[0276.686] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113322d0 | out: pbBuffer=0x113322d0) returned 1
	[0276.686] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c7a02 | out: pbBuffer=0x112c7a02) returned 1
	[0276.687] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332300 | out: pbBuffer=0x11332300) returned 1
	[0276.687] GetFileType (hFile=0x224) returned 0x1
	[0276.687] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.687] WriteFile (in: hFile=0x224, lpBuffer=0x11232000*, nNumberOfBytesToWrite=0x22de, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x11232000*, lpNumberOfBytesWritten=0x1139fdfc*=0x22de, lpOverlapped=0x1139fe08) returned 1
	[0276.688] GetFileType (hFile=0x224) returned 0x1
	[0276.688] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x22de, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.688] GetFileType (hFile=0x224) returned 0x1
	[0276.688] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.688] WriteFile (in: hFile=0x224, lpBuffer=0x111f5180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x111f5180*, lpNumberOfBytesWritten=0x1139fdfc*=0x230, lpOverlapped=0x1139fe08) returned 1
	[0276.688] GetFileType (hFile=0x224) returned 0x1
	[0276.688] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x22de, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0276.689] CloseHandle (hObject=0x224) returned 1
	[0276.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf.tl30z")) returned 0x220
	[0276.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.702] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0276.706] SetEvent (hEvent=0x218) returned 1
	[0276.706] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x220
	[0276.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF", dwFileAttributes=0x220) returned 1
	[0276.707] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0276.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0276.874] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0276.874] ReadFile (in: hFile=0x224, lpBuffer=0x11476000, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11476000*, lpNumberOfBytesRead=0x11023e18*=0x2f0, lpOverlapped=0x0) returned 1
	[0276.878] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0276.878] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137c802 | out: pbBuffer=0x1137c802) returned 1
	[0276.878] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137c8ba | out: pbBuffer=0x1137c8ba) returned 1
	[0276.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137c8e1 | out: pbBuffer=0x1137c8e1) returned 1
	[0276.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137c8e9 | out: pbBuffer=0x1137c8e9) returned 1
	[0276.879] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0276.879] GetFileType (hFile=0x224) returned 0x1
	[0276.879] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.879] WriteFile (in: hFile=0x224, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x113a1dfc*=0x2f0, lpOverlapped=0x113a1e08) returned 1
	[0276.880] GetFileType (hFile=0x224) returned 0x1
	[0276.880] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.880] GetFileType (hFile=0x224) returned 0x1
	[0276.880] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.880] WriteFile (in: hFile=0x224, lpBuffer=0x11350a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11350a80*, lpNumberOfBytesWritten=0x113a1dfc*=0x227, lpOverlapped=0x113a1e08) returned 1
	[0276.880] GetFileType (hFile=0x224) returned 0x1
	[0276.880] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2f0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0276.880] CloseHandle (hObject=0x224) returned 1
	[0276.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf.tl30z")) returned 0x220
	[0276.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0276.890] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0276.899] SetEvent (hEvent=0x1b0) returned 1
	[0276.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf")) returned 0x220
	[0276.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF", dwFileAttributes=0x220) returned 1
	[0276.900] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0277.247] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0277.247] ReadFile (in: hFile=0x224, lpBuffer=0x11216000, nNumberOfBytesToRead=0x3b3c, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11216000*, lpNumberOfBytesRead=0x11023e18*=0x3b3c, lpOverlapped=0x0) returned 1
	[0277.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0277.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0277.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113bc802 | out: pbBuffer=0x113bc802) returned 1
	[0277.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113bc89a | out: pbBuffer=0x113bc89a) returned 1
	[0277.253] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113bc8e0 | out: pbBuffer=0x113bc8e0) returned 1
	[0277.254] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0277.254] GetFileType (hFile=0x224) returned 0x1
	[0277.255] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.255] WriteFile (in: hFile=0x224, lpBuffer=0x110a8000*, nNumberOfBytesToWrite=0x3b3c, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x110a8000*, lpNumberOfBytesWritten=0x113b7dfc*=0x3b3c, lpOverlapped=0x113b7e08) returned 1
	[0277.256] GetFileType (hFile=0x224) returned 0x1
	[0277.256] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3b3c, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.256] GetFileType (hFile=0x224) returned 0x1
	[0277.256] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.256] WriteFile (in: hFile=0x224, lpBuffer=0x112f0a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x113b7dfc, lpOverlapped=0x113b7e08 | out: lpBuffer=0x112f0a80*, lpNumberOfBytesWritten=0x113b7dfc*=0x233, lpOverlapped=0x113b7e08) returned 1
	[0277.256] GetFileType (hFile=0x224) returned 0x1
	[0277.257] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x3b3c, lpNewFilePointer=0x0, dwMoveMethod=0x113b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.257] CloseHandle (hObject=0x224) returned 1
	[0277.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf.tl30z")) returned 0x220
	[0277.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.287] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0277.305] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0277.348] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0277.380] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0277.409] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0277.431] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0277.448] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0277.482] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0277.519] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0277.565] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0277.572] SetEvent (hEvent=0x248) returned 1
	[0277.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf")) returned 0x220
	[0277.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF", dwFileAttributes=0x220) returned 1
	[0277.573] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0277.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0277.727] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0277.728] ReadFile (in: hFile=0x1fc, lpBuffer=0x11230000, nNumberOfBytesToRead=0x9b8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11230000*, lpNumberOfBytesRead=0x11287e18*=0x9b8, lpOverlapped=0x0) returned 1
	[0277.734] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0277.734] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0277.734] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111dd302 | out: pbBuffer=0x111dd302) returned 1
	[0277.734] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111dd349 | out: pbBuffer=0x111dd349) returned 1
	[0277.734] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0277.734] GetFileType (hFile=0x1fc) returned 0x1
	[0277.735] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.735] WriteFile (in: hFile=0x1fc, lpBuffer=0x11295000*, nNumberOfBytesToWrite=0x9b8, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11295000*, lpNumberOfBytesWritten=0x113a1dfc*=0x9b8, lpOverlapped=0x113a1e08) returned 1
	[0277.735] GetFileType (hFile=0x1fc) returned 0x1
	[0277.735] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x9b8, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.735] GetFileType (hFile=0x1fc) returned 0x1
	[0277.735] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.735] WriteFile (in: hFile=0x1fc, lpBuffer=0x112e4700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x112e4700*, lpNumberOfBytesWritten=0x113a1dfc*=0x22a, lpOverlapped=0x113a1e08) returned 1
	[0277.735] GetFileType (hFile=0x1fc) returned 0x1
	[0277.736] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x9b8, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0277.736] CloseHandle (hObject=0x1fc) returned 1
	[0277.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf.tl30z")) returned 0x220
	[0277.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0277.744] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0277.785] SetEvent (hEvent=0x26c) returned 1
	[0277.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf")) returned 0x220
	[0277.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF", dwFileAttributes=0x220) returned 1
	[0277.785] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.034] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0278.034] ReadFile (in: hFile=0x224, lpBuffer=0x11071900, nNumberOfBytesToRead=0x1234, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11071900*, lpNumberOfBytesRead=0x11287e18*=0x1234, lpOverlapped=0x0) returned 1
	[0278.039] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6050 | out: pbBuffer=0x113e6050) returned 1
	[0278.040] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f9d02 | out: pbBuffer=0x111f9d02) returned 1
	[0278.040] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6080 | out: pbBuffer=0x113e6080) returned 1
	[0278.040] GetFileType (hFile=0x224) returned 0x1
	[0278.040] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.040] WriteFile (in: hFile=0x224, lpBuffer=0x11bd6000*, nNumberOfBytesToWrite=0x1234, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11bd6000*, lpNumberOfBytesWritten=0x113a1dfc*=0x1234, lpOverlapped=0x113a1e08) returned 1
	[0278.041] GetFileType (hFile=0x224) returned 0x1
	[0278.041] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1234, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.041] GetFileType (hFile=0x224) returned 0x1
	[0278.041] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.041] WriteFile (in: hFile=0x224, lpBuffer=0x1135b180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x1135b180*, lpNumberOfBytesWritten=0x113a1dfc*=0x227, lpOverlapped=0x113a1e08) returned 1
	[0278.041] GetFileType (hFile=0x224) returned 0x1
	[0278.042] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1234, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.042] CloseHandle (hObject=0x224) returned 1
	[0278.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf.tl30z")) returned 0x220
	[0278.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.060] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0278.078] SetEvent (hEvent=0x26c) returned 1
	[0278.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf")) returned 0x220
	[0278.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF", dwFileAttributes=0x220) returned 1
	[0278.079] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.347] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0278.347] ReadFile (in: hFile=0x224, lpBuffer=0x110de000, nNumberOfBytesToRead=0xc38, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110de000*, lpNumberOfBytesRead=0x11287e18*=0xc38, lpOverlapped=0x0) returned 1
	[0278.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0278.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e4702 | out: pbBuffer=0x110e4702) returned 1
	[0278.351] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0278.351] GetFileType (hFile=0x224) returned 0x1
	[0278.351] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.351] WriteFile (in: hFile=0x224, lpBuffer=0x11214000*, nNumberOfBytesToWrite=0xc38, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11214000*, lpNumberOfBytesWritten=0x1102bdfc*=0xc38, lpOverlapped=0x1102be08) returned 1
	[0278.352] GetFileType (hFile=0x224) returned 0x1
	[0278.352] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xc38, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.352] GetFileType (hFile=0x224) returned 0x1
	[0278.352] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.352] WriteFile (in: hFile=0x224, lpBuffer=0x110d7500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110d7500*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0278.352] GetFileType (hFile=0x224) returned 0x1
	[0278.353] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xc38, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.353] CloseHandle (hObject=0x224) returned 1
	[0278.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf.tl30z")) returned 0x220
	[0278.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.371] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0278.382] SetEvent (hEvent=0x26c) returned 1
	[0278.382] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid")) returned 0x220
	[0278.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID", dwFileAttributes=0x220) returned 1
	[0278.382] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0278.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.633] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0278.633] ReadFile (in: hFile=0x224, lpBuffer=0x1112e000, nNumberOfBytesToRead=0x18bb, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1112e000*, lpNumberOfBytesRead=0x11287e18*=0x18bb, lpOverlapped=0x0) returned 1
	[0278.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202b60 | out: pbBuffer=0x11202b60) returned 1
	[0278.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202b58 | out: pbBuffer=0x11202b58) returned 1
	[0278.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bd002 | out: pbBuffer=0x112bd002) returned 1
	[0278.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112bd0d2 | out: pbBuffer=0x112bd0d2) returned 1
	[0278.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202b90 | out: pbBuffer=0x11202b90) returned 1
	[0278.639] GetFileType (hFile=0x224) returned 0x1
	[0278.639] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.639] WriteFile (in: hFile=0x224, lpBuffer=0x1114c000*, nNumberOfBytesToWrite=0x18bb, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x1114c000*, lpNumberOfBytesWritten=0x1139fdfc*=0x18bb, lpOverlapped=0x1139fe08) returned 1
	[0278.639] GetFileType (hFile=0x224) returned 0x1
	[0278.639] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x18bb, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.639] GetFileType (hFile=0x224) returned 0x1
	[0278.639] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.640] WriteFile (in: hFile=0x224, lpBuffer=0x1112ce00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1139fdfc, lpOverlapped=0x1139fe08 | out: lpBuffer=0x1112ce00*, lpNumberOfBytesWritten=0x1139fdfc*=0x230, lpOverlapped=0x1139fe08) returned 1
	[0278.640] GetFileType (hFile=0x224) returned 0x1
	[0278.640] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x18bb, lpNewFilePointer=0x0, dwMoveMethod=0x1139fde0 | out: lpNewFilePointer=0x0) returned 1
	[0278.640] CloseHandle (hObject=0x224) returned 1
	[0278.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid.tl30z")) returned 0x220
	[0278.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0278.650] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0278.656] SetEvent (hEvent=0x26c) returned 1
	[0278.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf")) returned 0x220
	[0278.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF", dwFileAttributes=0x220) returned 1
	[0278.657] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0278.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0278.896] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0278.896] ReadFile (in: hFile=0x224, lpBuffer=0x1134c000, nNumberOfBytesToRead=0xcd6, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1134c000*, lpNumberOfBytesRead=0x11287e18*=0xcd6, lpOverlapped=0x0) returned 1
	[0278.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0278.902] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0278.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e5e02 | out: pbBuffer=0x110e5e02) returned 1
	[0278.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e5ed2 | out: pbBuffer=0x110e5ed2) returned 1
	[0278.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0278.903] GetFileType (hFile=0x224) returned 0x1
	[0278.903] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.904] WriteFile (in: hFile=0x224, lpBuffer=0x1137c000*, nNumberOfBytesToWrite=0xcd6, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x1137c000*, lpNumberOfBytesWritten=0x113a1dfc*=0xcd6, lpOverlapped=0x113a1e08) returned 1
	[0278.904] GetFileType (hFile=0x224) returned 0x1
	[0278.904] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xcd6, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.904] GetFileType (hFile=0x224) returned 0x1
	[0278.904] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.904] WriteFile (in: hFile=0x224, lpBuffer=0x11412e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113a1dfc, lpOverlapped=0x113a1e08 | out: lpBuffer=0x11412e00*, lpNumberOfBytesWritten=0x113a1dfc*=0x22d, lpOverlapped=0x113a1e08) returned 1
	[0278.904] GetFileType (hFile=0x224) returned 0x1
	[0278.905] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xcd6, lpNewFilePointer=0x0, dwMoveMethod=0x113a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0278.905] CloseHandle (hObject=0x224) returned 1
	[0278.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf.tl30z")) returned 0x220
	[0278.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0278.916] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0278.921] SetEvent (hEvent=0x26c) returned 1
	[0278.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf")) returned 0x220
	[0278.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF", dwFileAttributes=0x220) returned 1
	[0278.922] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.077] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0279.077] ReadFile (in: hFile=0x224, lpBuffer=0x11430000, nNumberOfBytesToRead=0xce2, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11287e18*=0xce2, lpOverlapped=0x0) returned 1
	[0279.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332680 | out: pbBuffer=0x11332680) returned 1
	[0279.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332678 | out: pbBuffer=0x11332678) returned 1
	[0279.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11436802 | out: pbBuffer=0x11436802) returned 1
	[0279.081] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326b0 | out: pbBuffer=0x113326b0) returned 1
	[0279.081] GetFileType (hFile=0x224) returned 0x1
	[0279.081] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.081] WriteFile (in: hFile=0x224, lpBuffer=0x110fa000*, nNumberOfBytesToWrite=0xce2, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110fa000*, lpNumberOfBytesWritten=0x1102bdfc*=0xce2, lpOverlapped=0x1102be08) returned 1
	[0279.082] GetFileType (hFile=0x224) returned 0x1
	[0279.082] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xce2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.082] GetFileType (hFile=0x224) returned 0x1
	[0279.082] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.082] WriteFile (in: hFile=0x224, lpBuffer=0x11329500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11329500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0279.082] GetFileType (hFile=0x224) returned 0x1
	[0279.082] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xce2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.083] CloseHandle (hObject=0x224) returned 1
	[0279.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf.tl30z")) returned 0x220
	[0279.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.091] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0279.100] SetEvent (hEvent=0x26c) returned 1
	[0279.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf")) returned 0x220
	[0279.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF", dwFileAttributes=0x220) returned 1
	[0279.101] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.287] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0279.287] ReadFile (in: hFile=0x224, lpBuffer=0x11218000, nNumberOfBytesToRead=0xe86, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11218000*, lpNumberOfBytesRead=0x11287e18*=0xe86, lpOverlapped=0x0) returned 1
	[0279.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202270 | out: pbBuffer=0x11202270) returned 1
	[0279.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b1202 | out: pbBuffer=0x110b1202) returned 1
	[0279.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b121c | out: pbBuffer=0x110b121c) returned 1
	[0279.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b1258 | out: pbBuffer=0x110b1258) returned 1
	[0279.291] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112022a0 | out: pbBuffer=0x112022a0) returned 1
	[0279.292] GetFileType (hFile=0x224) returned 0x1
	[0279.292] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.292] WriteFile (in: hFile=0x224, lpBuffer=0x11232000*, nNumberOfBytesToWrite=0xe86, lpNumberOfBytesWritten=0x110abdfc, lpOverlapped=0x110abe08 | out: lpBuffer=0x11232000*, lpNumberOfBytesWritten=0x110abdfc*=0xe86, lpOverlapped=0x110abe08) returned 1
	[0279.292] GetFileType (hFile=0x224) returned 0x1
	[0279.292] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe86, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.293] GetFileType (hFile=0x224) returned 0x1
	[0279.293] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.293] WriteFile (in: hFile=0x224, lpBuffer=0x113bd880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x110abdfc, lpOverlapped=0x110abe08 | out: lpBuffer=0x113bd880*, lpNumberOfBytesWritten=0x110abdfc*=0x22a, lpOverlapped=0x110abe08) returned 1
	[0279.293] GetFileType (hFile=0x224) returned 0x1
	[0279.293] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe86, lpNewFilePointer=0x0, dwMoveMethod=0x110abde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.294] CloseHandle (hObject=0x224) returned 1
	[0279.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf.tl30z")) returned 0x220
	[0279.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.303] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0279.314] SetEvent (hEvent=0x26c) returned 1
	[0279.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf")) returned 0x220
	[0279.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF", dwFileAttributes=0x220) returned 1
	[0279.315] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.479] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0279.479] ReadFile (in: hFile=0x224, lpBuffer=0x11116000, nNumberOfBytesToRead=0x844, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11116000*, lpNumberOfBytesRead=0x11287e18*=0x844, lpOverlapped=0x0) returned 1
	[0279.484] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f040 | out: pbBuffer=0x1140f040) returned 1
	[0279.484] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11235302 | out: pbBuffer=0x11235302) returned 1
	[0279.484] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11235351 | out: pbBuffer=0x11235351) returned 1
	[0279.485] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112353c7 | out: pbBuffer=0x112353c7) returned 1
	[0279.485] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f070 | out: pbBuffer=0x1140f070) returned 1
	[0279.485] GetFileType (hFile=0x224) returned 0x1
	[0279.485] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.486] WriteFile (in: hFile=0x224, lpBuffer=0x1111f000*, nNumberOfBytesToWrite=0x844, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x1111f000*, lpNumberOfBytesWritten=0x113a3dfc*=0x844, lpOverlapped=0x113a3e08) returned 1
	[0279.486] GetFileType (hFile=0x224) returned 0x1
	[0279.486] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x844, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.486] GetFileType (hFile=0x224) returned 0x1
	[0279.486] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.486] WriteFile (in: hFile=0x224, lpBuffer=0x11122700*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x113a3dfc, lpOverlapped=0x113a3e08 | out: lpBuffer=0x11122700*, lpNumberOfBytesWritten=0x113a3dfc*=0x221, lpOverlapped=0x113a3e08) returned 1
	[0279.487] GetFileType (hFile=0x224) returned 0x1
	[0279.487] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x844, lpNewFilePointer=0x0, dwMoveMethod=0x113a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.487] CloseHandle (hObject=0x224) returned 1
	[0279.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf.tl30z")) returned 0x220
	[0279.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.498] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0279.509] SetEvent (hEvent=0x26c) returned 1
	[0279.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf")) returned 0x220
	[0279.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF", dwFileAttributes=0x220) returned 1
	[0279.509] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.646] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0279.647] ReadFile (in: hFile=0x224, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x10f4, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x11287e18*=0x10f4, lpOverlapped=0x0) returned 1
	[0279.660] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0279.660] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0279.660] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1142c802 | out: pbBuffer=0x1142c802) returned 1
	[0279.660] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0279.661] GetFileType (hFile=0x224) returned 0x1
	[0279.661] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.661] WriteFile (in: hFile=0x224, lpBuffer=0x11176000*, nNumberOfBytesToWrite=0x10f4, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x11176000*, lpNumberOfBytesWritten=0x1121ddfc*=0x10f4, lpOverlapped=0x1121de08) returned 1
	[0279.661] GetFileType (hFile=0x224) returned 0x1
	[0279.661] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x10f4, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.661] GetFileType (hFile=0x224) returned 0x1
	[0279.662] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.662] WriteFile (in: hFile=0x224, lpBuffer=0x111b8a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x111b8a80*, lpNumberOfBytesWritten=0x1121ddfc*=0x22a, lpOverlapped=0x1121de08) returned 1
	[0279.662] GetFileType (hFile=0x224) returned 0x1
	[0279.662] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x10f4, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0279.662] CloseHandle (hObject=0x224) returned 1
	[0279.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf.tl30z")) returned 0x220
	[0279.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0279.671] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0279.678] SetEvent (hEvent=0x218) returned 1
	[0279.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf")) returned 0x220
	[0279.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF", dwFileAttributes=0x220) returned 1
	[0279.679] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0279.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0279.980] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0279.980] ReadFile (in: hFile=0x224, lpBuffer=0x112d8000, nNumberOfBytesToRead=0xac4, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x112d8000*, lpNumberOfBytesRead=0x11287e18*=0xac4, lpOverlapped=0x0) returned 1
	[0279.987] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202100 | out: pbBuffer=0x11202100) returned 1
	[0279.987] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112020f8 | out: pbBuffer=0x112020f8) returned 1
	[0279.987] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11320802 | out: pbBuffer=0x11320802) returned 1
	[0279.987] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202130 | out: pbBuffer=0x11202130) returned 1
	[0279.988] GetFileType (hFile=0x224) returned 0x1
	[0279.988] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.988] WriteFile (in: hFile=0x224, lpBuffer=0x113f8000*, nNumberOfBytesToWrite=0xac4, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x113f8000*, lpNumberOfBytesWritten=0x11219dfc*=0xac4, lpOverlapped=0x11219e08) returned 1
	[0279.988] GetFileType (hFile=0x224) returned 0x1
	[0279.988] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xac4, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.988] GetFileType (hFile=0x224) returned 0x1
	[0279.988] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.988] WriteFile (in: hFile=0x224, lpBuffer=0x1139aa80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11219dfc, lpOverlapped=0x11219e08 | out: lpBuffer=0x1139aa80*, lpNumberOfBytesWritten=0x11219dfc*=0x227, lpOverlapped=0x11219e08) returned 1
	[0279.989] GetFileType (hFile=0x224) returned 0x1
	[0279.989] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xac4, lpNewFilePointer=0x0, dwMoveMethod=0x11219de0 | out: lpNewFilePointer=0x0) returned 1
	[0279.989] CloseHandle (hObject=0x224) returned 1
	[0279.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf.tl30z")) returned 0x220
	[0279.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.000] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0280.010] SetEvent (hEvent=0x210) returned 1
	[0280.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf")) returned 0x220
	[0280.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF", dwFileAttributes=0x220) returned 1
	[0280.011] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0280.165] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0280.165] ReadFile (in: hFile=0x224, lpBuffer=0x11120000, nNumberOfBytesToRead=0x1780, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11120000*, lpNumberOfBytesRead=0x11287e18*=0x1780, lpOverlapped=0x0) returned 1
	[0280.170] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113320a0 | out: pbBuffer=0x113320a0) returned 1
	[0280.170] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11065202 | out: pbBuffer=0x11065202) returned 1
	[0280.170] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11065284 | out: pbBuffer=0x11065284) returned 1
	[0280.170] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113321a0 | out: pbBuffer=0x113321a0) returned 1
	[0280.171] GetFileType (hFile=0x224) returned 0x1
	[0280.171] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.171] WriteFile (in: hFile=0x224, lpBuffer=0x11440000*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x11440000*, lpNumberOfBytesWritten=0x1121ddfc*=0x1780, lpOverlapped=0x1121de08) returned 1
	[0280.172] GetFileType (hFile=0x224) returned 0x1
	[0280.172] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1780, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.172] GetFileType (hFile=0x224) returned 0x1
	[0280.172] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.172] WriteFile (in: hFile=0x224, lpBuffer=0x1113a380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x1113a380*, lpNumberOfBytesWritten=0x1121ddfc*=0x227, lpOverlapped=0x1121de08) returned 1
	[0280.172] GetFileType (hFile=0x224) returned 0x1
	[0280.173] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1780, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.173] CloseHandle (hObject=0x224) returned 1
	[0280.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf.tl30z")) returned 0x220
	[0280.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.187] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0280.195] SetEvent (hEvent=0x210) returned 1
	[0280.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf")) returned 0x220
	[0280.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF", dwFileAttributes=0x220) returned 1
	[0280.196] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0280.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0280.424] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0280.424] ReadFile (in: hFile=0x1d8, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x6852, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x11287e18*=0x6852, lpOverlapped=0x0) returned 1
	[0280.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332710 | out: pbBuffer=0x11332710) returned 1
	[0280.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f5d02 | out: pbBuffer=0x112f5d02) returned 1
	[0280.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332760 | out: pbBuffer=0x11332760) returned 1
	[0280.429] GetFileType (hFile=0x1d8) returned 0x1
	[0280.430] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.430] WriteFile (in: hFile=0x1d8, lpBuffer=0x11238000*, nNumberOfBytesToWrite=0x6852, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x11238000*, lpNumberOfBytesWritten=0x1121ddfc*=0x6852, lpOverlapped=0x1121de08) returned 1
	[0280.430] GetFileType (hFile=0x1d8) returned 0x1
	[0280.430] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6852, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.430] GetFileType (hFile=0x1d8) returned 0x1
	[0280.430] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.430] WriteFile (in: hFile=0x1d8, lpBuffer=0x11315c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1121ddfc, lpOverlapped=0x1121de08 | out: lpBuffer=0x11315c00*, lpNumberOfBytesWritten=0x1121ddfc*=0x22a, lpOverlapped=0x1121de08) returned 1
	[0280.431] GetFileType (hFile=0x1d8) returned 0x1
	[0280.431] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6852, lpNewFilePointer=0x0, dwMoveMethod=0x1121dde0 | out: lpNewFilePointer=0x0) returned 1
	[0280.431] CloseHandle (hObject=0x1d8) returned 1
	[0280.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf.tl30z")) returned 0x220
	[0280.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0280.468] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0280.504] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0280.591] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0280.621] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0280.648] SetEvent (hEvent=0x26c) returned 1
	[0280.649] SetEvent (hEvent=0x1f0) returned 1
	[0280.649] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0280.652] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0280.653] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0280.654] SetEvent (hEvent=0x1b0) returned 1
	[0280.655] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0280.658] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0280.658] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0281.416] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0281.418] SetEvent (hEvent=0x248) returned 1
	[0281.418] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0281.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid")) returned 0x220
	[0281.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID", dwFileAttributes=0x220) returned 1
	[0281.459] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0282.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0282.058] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0282.058] ReadFile (in: hFile=0x1d8, lpBuffer=0x1135a500, nNumberOfBytesToRead=0x2178, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1135a500*, lpNumberOfBytesRead=0x11425e18*=0x2178, lpOverlapped=0x0) returned 1
	[0282.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6030 | out: pbBuffer=0x113e6030) returned 1
	[0282.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11377302 | out: pbBuffer=0x11377302) returned 1
	[0282.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137730e | out: pbBuffer=0x1137730e) returned 1
	[0282.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113773aa | out: pbBuffer=0x113773aa) returned 1
	[0282.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113773b0 | out: pbBuffer=0x113773b0) returned 1
	[0282.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113773ca | out: pbBuffer=0x113773ca) returned 1
	[0282.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113773d5 | out: pbBuffer=0x113773d5) returned 1
	[0282.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6060 | out: pbBuffer=0x113e6060) returned 1
	[0282.064] GetFileType (hFile=0x1d8) returned 0x1
	[0282.064] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.064] WriteFile (in: hFile=0x1d8, lpBuffer=0x113f0000*, nNumberOfBytesToWrite=0x2178, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113f0000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2178, lpOverlapped=0x1102be08) returned 1
	[0282.064] GetFileType (hFile=0x1d8) returned 0x1
	[0282.064] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2178, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.065] GetFileType (hFile=0x1d8) returned 0x1
	[0282.065] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.065] WriteFile (in: hFile=0x1d8, lpBuffer=0x11140700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11140700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0282.065] GetFileType (hFile=0x1d8) returned 0x1
	[0282.065] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2178, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.065] CloseHandle (hObject=0x1d8) returned 1
	[0282.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid.tl30z")) returned 0x220
	[0282.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0282.077] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0282.084] SetEvent (hEvent=0x1b0) returned 1
	[0282.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf")) returned 0x220
	[0282.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF", dwFileAttributes=0x220) returned 1
	[0282.085] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0282.232] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0282.233] ReadFile (in: hFile=0x1d8, lpBuffer=0x110d8000, nNumberOfBytesToRead=0x5516, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x110d8000*, lpNumberOfBytesRead=0x11425e18*=0x5516, lpOverlapped=0x0) returned 1
	[0282.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112023f0 | out: pbBuffer=0x112023f0) returned 1
	[0282.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111cfd02 | out: pbBuffer=0x111cfd02) returned 1
	[0282.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111cfd7f | out: pbBuffer=0x111cfd7f) returned 1
	[0282.239] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202420 | out: pbBuffer=0x11202420) returned 1
	[0282.240] GetFileType (hFile=0x1d8) returned 0x1
	[0282.240] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.240] WriteFile (in: hFile=0x1d8, lpBuffer=0x1109e000*, nNumberOfBytesToWrite=0x5516, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x1109e000*, lpNumberOfBytesWritten=0x111c7dfc*=0x5516, lpOverlapped=0x111c7e08) returned 1
	[0282.241] GetFileType (hFile=0x1d8) returned 0x1
	[0282.241] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5516, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.241] GetFileType (hFile=0x1d8) returned 0x1
	[0282.241] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.241] WriteFile (in: hFile=0x1d8, lpBuffer=0x110ec700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x110ec700*, lpNumberOfBytesWritten=0x111c7dfc*=0x22d, lpOverlapped=0x111c7e08) returned 1
	[0282.241] GetFileType (hFile=0x1d8) returned 0x1
	[0282.241] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5516, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0282.242] CloseHandle (hObject=0x1d8) returned 1
	[0282.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf.tl30z")) returned 0x220
	[0282.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.381] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0282.395] SetEvent (hEvent=0x1b0) returned 1
	[0282.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf")) returned 0x220
	[0282.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF", dwFileAttributes=0x220) returned 1
	[0282.396] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0282.682] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0282.682] ReadFile (in: hFile=0x288, lpBuffer=0x1137c000, nNumberOfBytesToRead=0x3d40, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1137c000*, lpNumberOfBytesRead=0x11425e18*=0x3d40, lpOverlapped=0x0) returned 1
	[0282.689] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202100 | out: pbBuffer=0x11202100) returned 1
	[0282.689] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11128802 | out: pbBuffer=0x11128802) returned 1
	[0282.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11128819 | out: pbBuffer=0x11128819) returned 1
	[0282.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1112881f | out: pbBuffer=0x1112881f) returned 1
	[0282.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11128823 | out: pbBuffer=0x11128823) returned 1
	[0282.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11128851 | out: pbBuffer=0x11128851) returned 1
	[0282.690] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202130 | out: pbBuffer=0x11202130) returned 1
	[0282.691] GetFileType (hFile=0x288) returned 0x1
	[0282.691] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.691] WriteFile (in: hFile=0x288, lpBuffer=0x113aa000*, nNumberOfBytesToWrite=0x3d40, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113aa000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3d40, lpOverlapped=0x1102be08) returned 1
	[0282.692] GetFileType (hFile=0x288) returned 0x1
	[0282.692] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x3d40, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.692] GetFileType (hFile=0x288) returned 0x1
	[0282.692] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.692] WriteFile (in: hFile=0x288, lpBuffer=0x1119ce00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1119ce00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0282.692] GetFileType (hFile=0x288) returned 0x1
	[0282.693] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x3d40, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.693] CloseHandle (hObject=0x288) returned 1
	[0282.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf.tl30z")) returned 0x220
	[0282.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.714] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0282.729] SetEvent (hEvent=0x210) returned 1
	[0282.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf")) returned 0x220
	[0282.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF", dwFileAttributes=0x220) returned 1
	[0282.730] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf.tl30z"), dwFlags=0x1) returned 1
	[0282.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0282.957] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0282.957] ReadFile (in: hFile=0x288, lpBuffer=0x113ba800, nNumberOfBytesToRead=0x44e6, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x113ba800*, lpNumberOfBytesRead=0x11425e18*=0x44e6, lpOverlapped=0x0) returned 1
	[0282.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0282.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324f8 | out: pbBuffer=0x113324f8) returned 1
	[0282.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11441d02 | out: pbBuffer=0x11441d02) returned 1
	[0282.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11441d85 | out: pbBuffer=0x11441d85) returned 1
	[0282.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0282.962] GetFileType (hFile=0x288) returned 0x1
	[0282.962] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111afde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.963] WriteFile (in: hFile=0x288, lpBuffer=0x110e6000*, nNumberOfBytesToWrite=0x44e6, lpNumberOfBytesWritten=0x111afdfc, lpOverlapped=0x111afe08 | out: lpBuffer=0x110e6000*, lpNumberOfBytesWritten=0x111afdfc*=0x44e6, lpOverlapped=0x111afe08) returned 1
	[0282.964] GetFileType (hFile=0x288) returned 0x1
	[0282.964] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x44e6, lpNewFilePointer=0x0, dwMoveMethod=0x111afde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.964] GetFileType (hFile=0x288) returned 0x1
	[0282.964] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111afde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.964] WriteFile (in: hFile=0x288, lpBuffer=0x110cc700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x111afdfc, lpOverlapped=0x111afe08 | out: lpBuffer=0x110cc700*, lpNumberOfBytesWritten=0x111afdfc*=0x22d, lpOverlapped=0x111afe08) returned 1
	[0282.964] GetFileType (hFile=0x288) returned 0x1
	[0282.964] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x44e6, lpNewFilePointer=0x0, dwMoveMethod=0x111afde0 | out: lpNewFilePointer=0x0) returned 1
	[0282.965] CloseHandle (hObject=0x288) returned 1
	[0282.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf.tl30z")) returned 0x220
	[0282.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0282.978] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0282.988] SetEvent (hEvent=0x210) returned 1
	[0282.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf")) returned 0x220
	[0282.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF", dwFileAttributes=0x220) returned 1
	[0282.989] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf.tl30z"), dwFlags=0x1) returned 1
	[0283.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.156] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0283.156] ReadFile (in: hFile=0x288, lpBuffer=0x11188000, nNumberOfBytesToRead=0xa442, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11188000*, lpNumberOfBytesRead=0x11425e18*=0xa442, lpOverlapped=0x0) returned 1
	[0283.164] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202860 | out: pbBuffer=0x11202860) returned 1
	[0283.164] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202858 | out: pbBuffer=0x11202858) returned 1
	[0283.164] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112aff02 | out: pbBuffer=0x112aff02) returned 1
	[0283.164] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112aff63 | out: pbBuffer=0x112aff63) returned 1
	[0283.164] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112aff9c | out: pbBuffer=0x112aff9c) returned 1
	[0283.165] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202890 | out: pbBuffer=0x11202890) returned 1
	[0283.167] GetFileType (hFile=0x288) returned 0x1
	[0283.167] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.167] WriteFile (in: hFile=0x288, lpBuffer=0x11bd2000*, nNumberOfBytesToWrite=0xa442, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bd2000*, lpNumberOfBytesWritten=0x1102bdfc*=0xa442, lpOverlapped=0x1102be08) returned 1
	[0283.168] GetFileType (hFile=0x288) returned 0x1
	[0283.168] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xa442, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.168] GetFileType (hFile=0x288) returned 0x1
	[0283.168] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.168] WriteFile (in: hFile=0x288, lpBuffer=0x1116f500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1116f500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0283.168] GetFileType (hFile=0x288) returned 0x1
	[0283.169] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xa442, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.169] CloseHandle (hObject=0x288) returned 1
	[0283.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf.tl30z")) returned 0x220
	[0283.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0283.183] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0283.194] SetEvent (hEvent=0x210) returned 1
	[0283.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg")) returned 0x220
	[0283.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG", dwFileAttributes=0x220) returned 1
	[0283.195] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg.tl30z"), dwFlags=0x1) returned 1
	[0283.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.419] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0283.419] ReadFile (in: hFile=0x288, lpBuffer=0x112fd000, nNumberOfBytesToRead=0x4752, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x112fd000*, lpNumberOfBytesRead=0x11425e18*=0x4752, lpOverlapped=0x0) returned 1
	[0283.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0283.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0283.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d5c02 | out: pbBuffer=0x111d5c02) returned 1
	[0283.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d5c5c | out: pbBuffer=0x111d5c5c) returned 1
	[0283.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0283.429] GetFileType (hFile=0x288) returned 0x1
	[0283.429] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.430] WriteFile (in: hFile=0x288, lpBuffer=0x11306000*, nNumberOfBytesToWrite=0x4752, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11306000*, lpNumberOfBytesWritten=0x1133fdfc*=0x4752, lpOverlapped=0x1133fe08) returned 1
	[0283.430] GetFileType (hFile=0x288) returned 0x1
	[0283.430] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x4752, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.430] GetFileType (hFile=0x288) returned 0x1
	[0283.430] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.431] WriteFile (in: hFile=0x288, lpBuffer=0x1130e000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1130e000*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0283.431] GetFileType (hFile=0x288) returned 0x1
	[0283.431] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x4752, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.431] CloseHandle (hObject=0x288) returned 1
	[0283.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg.tl30z")) returned 0x220
	[0283.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0283.450] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0283.454] SetEvent (hEvent=0x26c) returned 1
	[0283.454] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 0x220
	[0283.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF", dwFileAttributes=0x220) returned 1
	[0283.454] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.tl30z"), dwFlags=0x1) returned 1
	[0283.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0283.687] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0283.688] ReadFile (in: hFile=0x288, lpBuffer=0x111ee000, nNumberOfBytesToRead=0x3632, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x111ee000*, lpNumberOfBytesRead=0x11423e18*=0x3632, lpOverlapped=0x0) returned 1
	[0283.699] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0283.700] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122c902 | out: pbBuffer=0x1122c902) returned 1
	[0283.700] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1122c94b | out: pbBuffer=0x1122c94b) returned 1
	[0283.700] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1122c99c | out: pbBuffer=0x1122c99c) returned 1
	[0283.700] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e6a0 | out: pbBuffer=0x1104e6a0) returned 1
	[0283.701] GetFileType (hFile=0x288) returned 0x1
	[0283.701] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.701] WriteFile (in: hFile=0x288, lpBuffer=0x110a6000*, nNumberOfBytesToWrite=0x3632, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110a6000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3632, lpOverlapped=0x1102be08) returned 1
	[0283.701] GetFileType (hFile=0x288) returned 0x1
	[0283.702] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x3632, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.702] GetFileType (hFile=0x288) returned 0x1
	[0283.702] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.702] WriteFile (in: hFile=0x288, lpBuffer=0x1144fc00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1144fc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0283.702] GetFileType (hFile=0x288) returned 0x1
	[0283.702] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x3632, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0283.702] CloseHandle (hObject=0x288) returned 1
	[0283.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.tl30z")) returned 0x220
	[0283.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0283.713] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0283.717] SetEvent (hEvent=0x26c) returned 1
	[0283.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 0x220
	[0283.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF", dwFileAttributes=0x220) returned 1
	[0283.717] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.tl30z"), dwFlags=0x1) returned 1
	[0283.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0283.871] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0283.871] ReadFile (in: hFile=0x1d4, lpBuffer=0x1123b500, nNumberOfBytesToRead=0x6630, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1123b500*, lpNumberOfBytesRead=0x11423e18*=0x6630, lpOverlapped=0x0) returned 1
	[0283.875] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332960 | out: pbBuffer=0x11332960) returned 1
	[0283.875] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332958 | out: pbBuffer=0x11332958) returned 1
	[0283.875] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11102702 | out: pbBuffer=0x11102702) returned 1
	[0283.875] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111027eb | out: pbBuffer=0x111027eb) returned 1
	[0283.876] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332990 | out: pbBuffer=0x11332990) returned 1
	[0283.876] SetEvent (hEvent=0x26c) returned 1
	[0283.878] GetFileType (hFile=0x1d4) returned 0x1
	[0283.878] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.878] WriteFile (in: hFile=0x1d4, lpBuffer=0x11136000*, nNumberOfBytesToWrite=0x6630, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11136000*, lpNumberOfBytesWritten=0x11031dfc*=0x6630, lpOverlapped=0x11031e08) returned 1
	[0283.878] GetFileType (hFile=0x1d4) returned 0x1
	[0283.878] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6630, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.879] GetFileType (hFile=0x1d4) returned 0x1
	[0283.879] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.879] WriteFile (in: hFile=0x1d4, lpBuffer=0x112bf880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112bf880*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0283.879] GetFileType (hFile=0x1d4) returned 0x1
	[0283.879] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6630, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0283.879] CloseHandle (hObject=0x1d4) returned 1
	[0283.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.tl30z")) returned 0x220
	[0283.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0283.894] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0283.897] SetEvent (hEvent=0x26c) returned 1
	[0283.897] SetEvent (hEvent=0x210) returned 1
	[0283.897] SwitchToThread () returned 1
	[0283.907] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0283.912] SetEvent (hEvent=0x210) returned 1
	[0283.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 0x220
	[0283.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF", dwFileAttributes=0x220) returned 1
	[0283.912] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.054] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0284.054] ReadFile (in: hFile=0x1d4, lpBuffer=0x111c8000, nNumberOfBytesToRead=0x5754, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x111c8000*, lpNumberOfBytesRead=0x11428e18*=0x5754, lpOverlapped=0x0) returned 1
	[0284.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0284.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267e02 | out: pbBuffer=0x11267e02) returned 1
	[0284.059] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0284.060] GetFileType (hFile=0x1d4) returned 0x1
	[0284.060] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.061] WriteFile (in: hFile=0x1d4, lpBuffer=0x11446000*, nNumberOfBytesToWrite=0x5754, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11446000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5754, lpOverlapped=0x1102be08) returned 1
	[0284.061] GetFileType (hFile=0x1d4) returned 0x1
	[0284.061] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5754, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.061] GetFileType (hFile=0x1d4) returned 0x1
	[0284.061] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.062] WriteFile (in: hFile=0x1d4, lpBuffer=0x111a2a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111a2a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0284.062] GetFileType (hFile=0x1d4) returned 0x1
	[0284.062] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5754, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.062] CloseHandle (hObject=0x1d4) returned 1
	[0284.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.tl30z")) returned 0x220
	[0284.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.073] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0284.078] SetEvent (hEvent=0x210) returned 1
	[0284.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 0x220
	[0284.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG", dwFileAttributes=0x220) returned 1
	[0284.078] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.tl30z"), dwFlags=0x1) returned 1
	[0284.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.291] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0284.291] ReadFile (in: hFile=0x1d4, lpBuffer=0x112e3000, nNumberOfBytesToRead=0x4ed3, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x112e3000*, lpNumberOfBytesRead=0x11428e18*=0x4ed3, lpOverlapped=0x0) returned 1
	[0284.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202070 | out: pbBuffer=0x11202070) returned 1
	[0284.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11202068 | out: pbBuffer=0x11202068) returned 1
	[0284.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112af202 | out: pbBuffer=0x112af202) returned 1
	[0284.296] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112af26c | out: pbBuffer=0x112af26c) returned 1
	[0284.297] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112020a0 | out: pbBuffer=0x112020a0) returned 1
	[0284.297] SetEvent (hEvent=0x210) returned 1
	[0284.298] GetFileType (hFile=0x1d4) returned 0x1
	[0284.298] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.298] WriteFile (in: hFile=0x1d4, lpBuffer=0x11bd8000*, nNumberOfBytesToWrite=0x4ed3, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x11bd8000*, lpNumberOfBytesWritten=0x1138fdfc*=0x4ed3, lpOverlapped=0x1138fe08) returned 1
	[0284.299] GetFileType (hFile=0x1d4) returned 0x1
	[0284.299] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4ed3, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.299] GetFileType (hFile=0x1d4) returned 0x1
	[0284.299] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.299] WriteFile (in: hFile=0x1d4, lpBuffer=0x11252380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x11252380*, lpNumberOfBytesWritten=0x1138fdfc*=0x233, lpOverlapped=0x1138fe08) returned 1
	[0284.299] GetFileType (hFile=0x1d4) returned 0x1
	[0284.299] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4ed3, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.299] CloseHandle (hObject=0x1d4) returned 1
	[0284.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.tl30z")) returned 0x220
	[0284.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0284.305] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0284.308] SetEvent (hEvent=0x210) returned 1
	[0284.308] SetEvent (hEvent=0x26c) returned 1
	[0284.308] SwitchToThread () returned 1
	[0284.316] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0284.339] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0284.383] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0284.420] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0284.503] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0284.510] SetEvent (hEvent=0x118) returned 1
	[0284.510] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf")) returned 0x220
	[0284.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF", dwFileAttributes=0x220) returned 1
	[0284.511] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0284.707] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0284.708] ReadFile (in: hFile=0x1d4, lpBuffer=0x11099800, nNumberOfBytesToRead=0x150a, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11099800*, lpNumberOfBytesRead=0x11287e18*=0x150a, lpOverlapped=0x0) returned 1
	[0284.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0284.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e3302 | out: pbBuffer=0x111e3302) returned 1
	[0284.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e3311 | out: pbBuffer=0x111e3311) returned 1
	[0284.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e33e4 | out: pbBuffer=0x111e33e4) returned 1
	[0284.718] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0284.718] GetFileType (hFile=0x1d4) returned 0x1
	[0284.718] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.718] WriteFile (in: hFile=0x1d4, lpBuffer=0x110c6000*, nNumberOfBytesToWrite=0x150a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110c6000*, lpNumberOfBytesWritten=0x1102bdfc*=0x150a, lpOverlapped=0x1102be08) returned 1
	[0284.719] GetFileType (hFile=0x1d4) returned 0x1
	[0284.719] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x150a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.719] GetFileType (hFile=0x1d4) returned 0x1
	[0284.719] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.719] WriteFile (in: hFile=0x1d4, lpBuffer=0x111f5880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111f5880*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0284.719] GetFileType (hFile=0x1d4) returned 0x1
	[0284.719] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x150a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0284.719] CloseHandle (hObject=0x1d4) returned 1
	[0284.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.tl30z")) returned 0x220
	[0284.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0284.724] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0284.732] SetEvent (hEvent=0x118) returned 1
	[0284.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf")) returned 0x220
	[0284.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF", dwFileAttributes=0x220) returned 1
	[0284.732] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.tl30z"), dwFlags=0x1) returned 1
	[0284.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.008] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0285.008] ReadFile (in: hFile=0x1d4, lpBuffer=0x1118c000, nNumberOfBytesToRead=0xf00, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1118c000*, lpNumberOfBytesRead=0x11287e18*=0xf00, lpOverlapped=0x0) returned 1
	[0285.014] SetEvent (hEvent=0x118) returned 1
	[0285.016] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324e0 | out: pbBuffer=0x113324e0) returned 1
	[0285.016] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324d8 | out: pbBuffer=0x113324d8) returned 1
	[0285.016] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11243d02 | out: pbBuffer=0x11243d02) returned 1
	[0285.016] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0285.016] GetFileType (hFile=0x1d4) returned 0x1
	[0285.017] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1123bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.017] WriteFile (in: hFile=0x1d4, lpBuffer=0x111ae000*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x1123bdfc, lpOverlapped=0x1123be08 | out: lpBuffer=0x111ae000*, lpNumberOfBytesWritten=0x1123bdfc*=0xf00, lpOverlapped=0x1123be08) returned 1
	[0285.017] GetFileType (hFile=0x1d4) returned 0x1
	[0285.017] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xf00, lpNewFilePointer=0x0, dwMoveMethod=0x1123bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.017] GetFileType (hFile=0x1d4) returned 0x1
	[0285.017] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1123bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.017] WriteFile (in: hFile=0x1d4, lpBuffer=0x111a6700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1123bdfc, lpOverlapped=0x1123be08 | out: lpBuffer=0x111a6700*, lpNumberOfBytesWritten=0x1123bdfc*=0x224, lpOverlapped=0x1123be08) returned 1
	[0285.018] GetFileType (hFile=0x1d4) returned 0x1
	[0285.018] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xf00, lpNewFilePointer=0x0, dwMoveMethod=0x1123bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.018] CloseHandle (hObject=0x1d4) returned 1
	[0285.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.tl30z")) returned 0x220
	[0285.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.025] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0285.026] SetEvent (hEvent=0x118) returned 1
	[0285.026] SetEvent (hEvent=0x210) returned 1
	[0285.026] SwitchToThread () returned 1
	[0285.028] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0285.038] SetEvent (hEvent=0x210) returned 1
	[0285.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg")) returned 0x220
	[0285.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG", dwFileAttributes=0x220) returned 1
	[0285.039] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg.tl30z"), dwFlags=0x1) returned 1
	[0285.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.194] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0285.194] ReadFile (in: hFile=0x1d4, lpBuffer=0x1133c000, nNumberOfBytesToRead=0x5fd0, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1133c000*, lpNumberOfBytesRead=0x1128ce18*=0x5fd0, lpOverlapped=0x0) returned 1
	[0285.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332640 | out: pbBuffer=0x11332640) returned 1
	[0285.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332638 | out: pbBuffer=0x11332638) returned 1
	[0285.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11376802 | out: pbBuffer=0x11376802) returned 1
	[0285.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113768d6 | out: pbBuffer=0x113768d6) returned 1
	[0285.205] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0285.205] GetFileType (hFile=0x1d4) returned 0x1
	[0285.205] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.206] WriteFile (in: hFile=0x1d4, lpBuffer=0x1139a000*, nNumberOfBytesToWrite=0x5fd0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1139a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5fd0, lpOverlapped=0x1102be08) returned 1
	[0285.206] GetFileType (hFile=0x1d4) returned 0x1
	[0285.206] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5fd0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.206] GetFileType (hFile=0x1d4) returned 0x1
	[0285.206] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.207] WriteFile (in: hFile=0x1d4, lpBuffer=0x11390a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11390a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0285.207] GetFileType (hFile=0x1d4) returned 0x1
	[0285.207] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x5fd0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.207] CloseHandle (hObject=0x1d4) returned 1
	[0285.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg.tl30z")) returned 0x220
	[0285.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0285.218] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0285.223] SetEvent (hEvent=0x210) returned 1
	[0285.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif")) returned 0x220
	[0285.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF", dwFileAttributes=0x220) returned 1
	[0285.223] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif.tl30z"), dwFlags=0x1) returned 1
	[0285.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.434] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0285.434] ReadFile (in: hFile=0x1d4, lpBuffer=0x112b0000, nNumberOfBytesToRead=0x462c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112b0000*, lpNumberOfBytesRead=0x1128ce18*=0x462c, lpOverlapped=0x0) returned 1
	[0285.439] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202050 | out: pbBuffer=0x11202050) returned 1
	[0285.440] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116f302 | out: pbBuffer=0x1116f302) returned 1
	[0285.440] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116f312 | out: pbBuffer=0x1116f312) returned 1
	[0285.440] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116f32b | out: pbBuffer=0x1116f32b) returned 1
	[0285.440] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11202080 | out: pbBuffer=0x11202080) returned 1
	[0285.441] GetFileType (hFile=0x1d4) returned 0x1
	[0285.441] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.441] WriteFile (in: hFile=0x1d4, lpBuffer=0x1121e000*, nNumberOfBytesToWrite=0x462c, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x1121e000*, lpNumberOfBytesWritten=0x110ebdfc*=0x462c, lpOverlapped=0x110ebe08) returned 1
	[0285.442] GetFileType (hFile=0x1d4) returned 0x1
	[0285.442] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x462c, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.442] GetFileType (hFile=0x1d4) returned 0x1
	[0285.442] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.442] WriteFile (in: hFile=0x1d4, lpBuffer=0x11156e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x110ebdfc, lpOverlapped=0x110ebe08 | out: lpBuffer=0x11156e00*, lpNumberOfBytesWritten=0x110ebdfc*=0x22a, lpOverlapped=0x110ebe08) returned 1
	[0285.442] GetFileType (hFile=0x1d4) returned 0x1
	[0285.442] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x462c, lpNewFilePointer=0x0, dwMoveMethod=0x110ebde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.442] CloseHandle (hObject=0x1d4) returned 1
	[0285.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif.tl30z")) returned 0x220
	[0285.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.454] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0285.459] SetEvent (hEvent=0x210) returned 1
	[0285.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif")) returned 0x220
	[0285.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF", dwFileAttributes=0x220) returned 1
	[0285.459] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif.tl30z"), dwFlags=0x1) returned 1
	[0285.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.719] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0285.720] ReadFile (in: hFile=0x1d4, lpBuffer=0x11358000, nNumberOfBytesToRead=0x2a92, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11358000*, lpNumberOfBytesRead=0x1128ce18*=0x2a92, lpOverlapped=0x0) returned 1
	[0285.729] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0285.729] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130b202 | out: pbBuffer=0x1130b202) returned 1
	[0285.730] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0285.730] GetFileType (hFile=0x1d4) returned 0x1
	[0285.730] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.731] WriteFile (in: hFile=0x1d4, lpBuffer=0x11384000*, nNumberOfBytesToWrite=0x2a92, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11384000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2a92, lpOverlapped=0x1102be08) returned 1
	[0285.731] GetFileType (hFile=0x1d4) returned 0x1
	[0285.731] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2a92, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.731] GetFileType (hFile=0x1d4) returned 0x1
	[0285.731] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.732] WriteFile (in: hFile=0x1d4, lpBuffer=0x11201c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11201c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0285.732] GetFileType (hFile=0x1d4) returned 0x1
	[0285.732] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2a92, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.732] CloseHandle (hObject=0x1d4) returned 1
	[0285.735] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif.tl30z")) returned 0x220
	[0285.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0285.739] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0285.752] SetEvent (hEvent=0x210) returned 1
	[0285.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif")) returned 0x220
	[0285.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF", dwFileAttributes=0x220) returned 1
	[0285.752] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif.tl30z"), dwFlags=0x1) returned 1
	[0285.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0285.970] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0285.970] ReadFile (in: hFile=0x1d4, lpBuffer=0x1138f500, nNumberOfBytesToRead=0x1367, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1138f500*, lpNumberOfBytesRead=0x1128ce18*=0x1367, lpOverlapped=0x0) returned 1
	[0285.977] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112021c0 | out: pbBuffer=0x112021c0) returned 1
	[0285.977] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112021b8 | out: pbBuffer=0x112021b8) returned 1
	[0285.977] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133db02 | out: pbBuffer=0x1133db02) returned 1
	[0285.978] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x112021f0 | out: pbBuffer=0x112021f0) returned 1
	[0285.978] GetFileType (hFile=0x1d4) returned 0x1
	[0285.978] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.979] WriteFile (in: hFile=0x1d4, lpBuffer=0x110c2000*, nNumberOfBytesToWrite=0x1367, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110c2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1367, lpOverlapped=0x1102be08) returned 1
	[0285.979] GetFileType (hFile=0x1d4) returned 0x1
	[0285.979] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1367, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.979] GetFileType (hFile=0x1d4) returned 0x1
	[0285.979] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.980] WriteFile (in: hFile=0x1d4, lpBuffer=0x113dd500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113dd500*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0285.980] GetFileType (hFile=0x1d4) returned 0x1
	[0285.980] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1367, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0285.980] CloseHandle (hObject=0x1d4) returned 1
	[0285.995] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif.tl30z")) returned 0x220
	[0285.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0286.002] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.007] SetEvent (hEvent=0x210) returned 1
	[0286.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp")) returned 0x220
	[0286.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP", dwFileAttributes=0x220) returned 1
	[0286.007] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp.tl30z"), dwFlags=0x1) returned 1
	[0286.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0286.346] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0286.347] ReadFile (in: hFile=0x1d4, lpBuffer=0x11108000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11108000*, lpNumberOfBytesRead=0x1128ce18*=0x7db8, lpOverlapped=0x0) returned 1
	[0286.352] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0286.352] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332698 | out: pbBuffer=0x11332698) returned 1
	[0286.352] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111a2902 | out: pbBuffer=0x111a2902) returned 1
	[0286.352] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111a2981 | out: pbBuffer=0x111a2981) returned 1
	[0286.353] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326d0 | out: pbBuffer=0x113326d0) returned 1
	[0286.354] SetEvent (hEvent=0x210) returned 1
	[0286.354] GetFileType (hFile=0x1d4) returned 0x1
	[0286.354] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.355] WriteFile (in: hFile=0x1d4, lpBuffer=0x11144000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x113bddfc, lpOverlapped=0x113bde08 | out: lpBuffer=0x11144000*, lpNumberOfBytesWritten=0x113bddfc*=0x7db8, lpOverlapped=0x113bde08) returned 1
	[0286.355] GetFileType (hFile=0x1d4) returned 0x1
	[0286.355] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.356] GetFileType (hFile=0x1d4) returned 0x1
	[0286.356] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.356] WriteFile (in: hFile=0x1d4, lpBuffer=0x11177500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x113bddfc, lpOverlapped=0x113bde08 | out: lpBuffer=0x11177500*, lpNumberOfBytesWritten=0x113bddfc*=0x236, lpOverlapped=0x113bde08) returned 1
	[0286.357] GetFileType (hFile=0x1d4) returned 0x1
	[0286.357] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x113bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0286.357] CloseHandle (hObject=0x1d4) returned 1
	[0286.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp.tl30z")) returned 0x220
	[0286.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0286.377] SwitchToThread () returned 1
	[0286.386] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.399] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.441] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.503] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.555] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.600] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.645] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.702] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.750] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.795] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.849] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.906] SetEvent (hEvent=0x210) returned 1
	[0286.907] SetEvent (hEvent=0x1f0) returned 1
	[0286.907] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0286.910] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.910] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0286.912] SetEvent (hEvent=0x1b0) returned 1
	[0286.912] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0286.914] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0286.915] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0287.666] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0287.670] SetEvent (hEvent=0x1b0) returned 1
	[0287.670] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0287.685] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0287.699] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0287.735] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0287.782] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0287.815] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0287.835] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0287.884] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0287.954] SetEvent (hEvent=0x1b0) returned 1
	[0287.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf")) returned 0x220
	[0287.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF", dwFileAttributes=0x220) returned 1
	[0287.954] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.124] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0288.125] ReadFile (in: hFile=0x250, lpBuffer=0x11308000, nNumberOfBytesToRead=0x12bc, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11308000*, lpNumberOfBytesRead=0x11287e18*=0x12bc, lpOverlapped=0x0) returned 1
	[0288.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0288.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63d8 | out: pbBuffer=0x113e63d8) returned 1
	[0288.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11310802 | out: pbBuffer=0x11310802) returned 1
	[0288.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11310848 | out: pbBuffer=0x11310848) returned 1
	[0288.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11310860 | out: pbBuffer=0x11310860) returned 1
	[0288.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11310870 | out: pbBuffer=0x11310870) returned 1
	[0288.132] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113108a1 | out: pbBuffer=0x113108a1) returned 1
	[0288.133] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0288.133] GetFileType (hFile=0x250) returned 0x1
	[0288.133] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.133] WriteFile (in: hFile=0x250, lpBuffer=0x1110a000*, nNumberOfBytesToWrite=0x12bc, lpNumberOfBytesWritten=0x11133dfc, lpOverlapped=0x11133e08 | out: lpBuffer=0x1110a000*, lpNumberOfBytesWritten=0x11133dfc*=0x12bc, lpOverlapped=0x11133e08) returned 1
	[0288.134] GetFileType (hFile=0x250) returned 0x1
	[0288.134] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x12bc, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.134] GetFileType (hFile=0x250) returned 0x1
	[0288.134] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.134] WriteFile (in: hFile=0x250, lpBuffer=0x110f4700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11133dfc, lpOverlapped=0x11133e08 | out: lpBuffer=0x110f4700*, lpNumberOfBytesWritten=0x11133dfc*=0x22d, lpOverlapped=0x11133e08) returned 1
	[0288.134] GetFileType (hFile=0x250) returned 0x1
	[0288.134] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x12bc, lpNewFilePointer=0x0, dwMoveMethod=0x11133de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.135] CloseHandle (hObject=0x250) returned 1
	[0288.139] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf.tl30z")) returned 0x220
	[0288.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.146] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0288.161] SetEvent (hEvent=0x118) returned 1
	[0288.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf")) returned 0x220
	[0288.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF", dwFileAttributes=0x220) returned 1
	[0288.161] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.362] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0288.363] ReadFile (in: hFile=0x250, lpBuffer=0x11bf8000, nNumberOfBytesToRead=0x18b0, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11bf8000*, lpNumberOfBytesRead=0x11287e18*=0x18b0, lpOverlapped=0x0) returned 1
	[0288.369] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327f0 | out: pbBuffer=0x113327f0) returned 1
	[0288.369] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112bf402 | out: pbBuffer=0x112bf402) returned 1
	[0288.369] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112bf4e5 | out: pbBuffer=0x112bf4e5) returned 1
	[0288.370] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332820 | out: pbBuffer=0x11332820) returned 1
	[0288.370] GetFileType (hFile=0x250) returned 0x1
	[0288.370] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.370] WriteFile (in: hFile=0x250, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x11031dfc*=0x18b0, lpOverlapped=0x11031e08) returned 1
	[0288.371] GetFileType (hFile=0x250) returned 0x1
	[0288.371] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x18b0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.371] GetFileType (hFile=0x250) returned 0x1
	[0288.371] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.371] WriteFile (in: hFile=0x250, lpBuffer=0x11be3180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11be3180*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0288.371] GetFileType (hFile=0x250) returned 0x1
	[0288.372] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x18b0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.372] CloseHandle (hObject=0x250) returned 1
	[0288.381] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf.tl30z")) returned 0x220
	[0288.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.388] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0288.473] SetEvent (hEvent=0x118) returned 1
	[0288.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf")) returned 0x220
	[0288.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF", dwFileAttributes=0x220) returned 1
	[0288.474] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.644] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0288.644] ReadFile (in: hFile=0x250, lpBuffer=0x11372000, nNumberOfBytesToRead=0xb54, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11372000*, lpNumberOfBytesRead=0x11287e18*=0xb54, lpOverlapped=0x0) returned 1
	[0288.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0288.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e358 | out: pbBuffer=0x1104e358) returned 1
	[0288.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c11302 | out: pbBuffer=0x11c11302) returned 1
	[0288.649] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c1131c | out: pbBuffer=0x11c1131c) returned 1
	[0288.650] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c1139f | out: pbBuffer=0x11c1139f) returned 1
	[0288.650] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c113aa | out: pbBuffer=0x11c113aa) returned 1
	[0288.650] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0288.650] GetFileType (hFile=0x250) returned 0x1
	[0288.650] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.651] WriteFile (in: hFile=0x250, lpBuffer=0x112c8000*, nNumberOfBytesToWrite=0xb54, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x112c8000*, lpNumberOfBytesWritten=0x1124bdfc*=0xb54, lpOverlapped=0x1124be08) returned 1
	[0288.651] GetFileType (hFile=0x250) returned 0x1
	[0288.651] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xb54, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.651] GetFileType (hFile=0x250) returned 0x1
	[0288.651] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.651] WriteFile (in: hFile=0x250, lpBuffer=0x111ddc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x111ddc00*, lpNumberOfBytesWritten=0x1124bdfc*=0x22a, lpOverlapped=0x1124be08) returned 1
	[0288.651] GetFileType (hFile=0x250) returned 0x1
	[0288.652] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xb54, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0288.652] CloseHandle (hObject=0x250) returned 1
	[0288.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf.tl30z")) returned 0x220
	[0288.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.670] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0288.677] SetEvent (hEvent=0x1b0) returned 1
	[0288.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf")) returned 0x220
	[0288.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF", dwFileAttributes=0x220) returned 1
	[0288.677] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf.tl30z"), dwFlags=0x1) returned 1
	[0288.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0288.887] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0288.887] ReadFile (in: hFile=0x250, lpBuffer=0x11bf0000, nNumberOfBytesToRead=0x1364, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11bf0000*, lpNumberOfBytesRead=0x11287e18*=0x1364, lpOverlapped=0x0) returned 1
	[0288.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327e0 | out: pbBuffer=0x113327e0) returned 1
	[0288.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327d8 | out: pbBuffer=0x113327d8) returned 1
	[0288.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11063b02 | out: pbBuffer=0x11063b02) returned 1
	[0288.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0288.920] GetFileType (hFile=0x250) returned 0x1
	[0288.920] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.920] WriteFile (in: hFile=0x250, lpBuffer=0x1146c000*, nNumberOfBytesToWrite=0x1364, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1146c000*, lpNumberOfBytesWritten=0x11031dfc*=0x1364, lpOverlapped=0x11031e08) returned 1
	[0288.921] GetFileType (hFile=0x250) returned 0x1
	[0288.921] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1364, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.921] GetFileType (hFile=0x250) returned 0x1
	[0288.921] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.921] WriteFile (in: hFile=0x250, lpBuffer=0x11bfca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bfca80*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0288.922] GetFileType (hFile=0x250) returned 0x1
	[0288.922] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1364, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0288.922] CloseHandle (hObject=0x250) returned 1
	[0288.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf.tl30z")) returned 0x220
	[0288.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0288.945] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0288.956] SetEvent (hEvent=0x1b0) returned 1
	[0288.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf")) returned 0x220
	[0288.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF", dwFileAttributes=0x220) returned 1
	[0288.957] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.130] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0289.130] ReadFile (in: hFile=0x250, lpBuffer=0x113d4500, nNumberOfBytesToRead=0x203c, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x113d4500*, lpNumberOfBytesRead=0x11287e18*=0x203c, lpOverlapped=0x0) returned 1
	[0289.136] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f340 | out: pbBuffer=0x1140f340) returned 1
	[0289.136] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11448702 | out: pbBuffer=0x11448702) returned 1
	[0289.136] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11448776 | out: pbBuffer=0x11448776) returned 1
	[0289.137] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f370 | out: pbBuffer=0x1140f370) returned 1
	[0289.137] GetFileType (hFile=0x250) returned 0x1
	[0289.137] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.137] WriteFile (in: hFile=0x250, lpBuffer=0x112f2000*, nNumberOfBytesToWrite=0x203c, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x112f2000*, lpNumberOfBytesWritten=0x1124bdfc*=0x203c, lpOverlapped=0x1124be08) returned 1
	[0289.138] GetFileType (hFile=0x250) returned 0x1
	[0289.138] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x203c, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.138] GetFileType (hFile=0x250) returned 0x1
	[0289.138] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.138] WriteFile (in: hFile=0x250, lpBuffer=0x11452380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11452380*, lpNumberOfBytesWritten=0x1124bdfc*=0x227, lpOverlapped=0x1124be08) returned 1
	[0289.139] GetFileType (hFile=0x250) returned 0x1
	[0289.139] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x203c, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0289.139] CloseHandle (hObject=0x250) returned 1
	[0289.152] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf.tl30z")) returned 0x220
	[0289.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.163] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0289.172] SetEvent (hEvent=0x1b0) returned 1
	[0289.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf")) returned 0x220
	[0289.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF", dwFileAttributes=0x220) returned 1
	[0289.173] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.385] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0289.385] ReadFile (in: hFile=0x250, lpBuffer=0x110dd400, nNumberOfBytesToRead=0x24b8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x110dd400*, lpNumberOfBytesRead=0x11287e18*=0x24b8, lpOverlapped=0x0) returned 1
	[0289.396] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11333000 | out: pbBuffer=0x11333000) returned 1
	[0289.396] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bf102 | out: pbBuffer=0x110bf102) returned 1
	[0289.396] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bf125 | out: pbBuffer=0x110bf125) returned 1
	[0289.396] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bf1c7 | out: pbBuffer=0x110bf1c7) returned 1
	[0289.397] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11333030 | out: pbBuffer=0x11333030) returned 1
	[0289.397] GetFileType (hFile=0x250) returned 0x1
	[0289.397] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.397] WriteFile (in: hFile=0x250, lpBuffer=0x1110e000*, nNumberOfBytesToWrite=0x24b8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1110e000*, lpNumberOfBytesWritten=0x11031dfc*=0x24b8, lpOverlapped=0x11031e08) returned 1
	[0289.398] GetFileType (hFile=0x250) returned 0x1
	[0289.398] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x24b8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.398] GetFileType (hFile=0x250) returned 0x1
	[0289.398] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.398] WriteFile (in: hFile=0x250, lpBuffer=0x110c9180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110c9180*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0289.398] GetFileType (hFile=0x250) returned 0x1
	[0289.398] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x24b8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.399] CloseHandle (hObject=0x250) returned 1
	[0289.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf.tl30z")) returned 0x220
	[0289.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.417] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0289.428] SetEvent (hEvent=0x1b0) returned 1
	[0289.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf")) returned 0x220
	[0289.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF", dwFileAttributes=0x220) returned 1
	[0289.428] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0289.649] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0289.649] ReadFile (in: hFile=0x250, lpBuffer=0x1136e000, nNumberOfBytesToRead=0x1034, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x11287e18*=0x1034, lpOverlapped=0x0) returned 1
	[0289.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0289.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0289.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133c802 | out: pbBuffer=0x1133c802) returned 1
	[0289.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1133c8c5 | out: pbBuffer=0x1133c8c5) returned 1
	[0289.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0289.655] GetFileType (hFile=0x250) returned 0x1
	[0289.655] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.655] WriteFile (in: hFile=0x250, lpBuffer=0x1135c000*, nNumberOfBytesToWrite=0x1034, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1135c000*, lpNumberOfBytesWritten=0x11031dfc*=0x1034, lpOverlapped=0x11031e08) returned 1
	[0289.655] GetFileType (hFile=0x250) returned 0x1
	[0289.655] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1034, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.655] GetFileType (hFile=0x250) returned 0x1
	[0289.656] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.656] WriteFile (in: hFile=0x250, lpBuffer=0x1105ca80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1105ca80*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0289.656] GetFileType (hFile=0x250) returned 0x1
	[0289.656] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1034, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0289.656] CloseHandle (hObject=0x250) returned 1
	[0289.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf.tl30z")) returned 0x220
	[0289.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0289.672] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0289.689] SetEvent (hEvent=0x248) returned 1
	[0289.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf")) returned 0x220
	[0289.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF", dwFileAttributes=0x220) returned 1
	[0289.690] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf.tl30z"), dwFlags=0x1) returned 1
	[0289.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0289.984] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0289.984] ReadFile (in: hFile=0x1d4, lpBuffer=0x113b2000, nNumberOfBytesToRead=0x542c, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x113b2000*, lpNumberOfBytesRead=0x11287e18*=0x542c, lpOverlapped=0x0) returned 1
	[0289.997] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0289.997] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4b8 | out: pbBuffer=0x1104e4b8) returned 1
	[0289.997] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bdd02 | out: pbBuffer=0x110bdd02) returned 1
	[0289.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bdd3b | out: pbBuffer=0x110bdd3b) returned 1
	[0289.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bdd7e | out: pbBuffer=0x110bdd7e) returned 1
	[0289.998] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0289.999] GetFileType (hFile=0x1d4) returned 0x1
	[0290.000] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.000] WriteFile (in: hFile=0x1d4, lpBuffer=0x11434000*, nNumberOfBytesToWrite=0x542c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11434000*, lpNumberOfBytesWritten=0x11031dfc*=0x542c, lpOverlapped=0x11031e08) returned 1
	[0290.000] GetFileType (hFile=0x1d4) returned 0x1
	[0290.001] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x542c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.001] GetFileType (hFile=0x1d4) returned 0x1
	[0290.001] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.001] WriteFile (in: hFile=0x1d4, lpBuffer=0x11256a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11256a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0290.001] GetFileType (hFile=0x1d4) returned 0x1
	[0290.001] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x542c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.002] CloseHandle (hObject=0x1d4) returned 1
	[0290.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf.tl30z")) returned 0x220
	[0290.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.024] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0290.041] SetEvent (hEvent=0x248) returned 1
	[0290.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf")) returned 0x220
	[0290.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF", dwFileAttributes=0x220) returned 1
	[0290.043] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.271] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0290.271] ReadFile (in: hFile=0x1d4, lpBuffer=0x11249000, nNumberOfBytesToRead=0x2dc8, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11249000*, lpNumberOfBytesRead=0x11287e18*=0x2dc8, lpOverlapped=0x0) returned 1
	[0290.276] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61b0 | out: pbBuffer=0x113e61b0) returned 1
	[0290.276] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144bd02 | out: pbBuffer=0x1144bd02) returned 1
	[0290.276] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144bd6a | out: pbBuffer=0x1144bd6a) returned 1
	[0290.276] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61e0 | out: pbBuffer=0x113e61e0) returned 1
	[0290.277] GetFileType (hFile=0x1d4) returned 0x1
	[0290.277] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.277] WriteFile (in: hFile=0x1d4, lpBuffer=0x11bc8000*, nNumberOfBytesToWrite=0x2dc8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bc8000*, lpNumberOfBytesWritten=0x11031dfc*=0x2dc8, lpOverlapped=0x11031e08) returned 1
	[0290.277] GetFileType (hFile=0x1d4) returned 0x1
	[0290.277] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2dc8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.277] GetFileType (hFile=0x1d4) returned 0x1
	[0290.287] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.287] WriteFile (in: hFile=0x1d4, lpBuffer=0x11117500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11117500*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0290.287] GetFileType (hFile=0x1d4) returned 0x1
	[0290.287] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2dc8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.287] CloseHandle (hObject=0x1d4) returned 1
	[0290.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf.tl30z")) returned 0x220
	[0290.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.313] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0290.329] SetEvent (hEvent=0x248) returned 1
	[0290.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf")) returned 0x220
	[0290.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF", dwFileAttributes=0x220) returned 1
	[0290.329] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.518] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0290.518] ReadFile (in: hFile=0x1d4, lpBuffer=0x11252000, nNumberOfBytesToRead=0x2e7c, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11252000*, lpNumberOfBytesRead=0x11287e18*=0x2e7c, lpOverlapped=0x0) returned 1
	[0290.526] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0290.526] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bf5e02 | out: pbBuffer=0x11bf5e02) returned 1
	[0290.526] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bf5e47 | out: pbBuffer=0x11bf5e47) returned 1
	[0290.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6450 | out: pbBuffer=0x113e6450) returned 1
	[0290.527] GetFileType (hFile=0x1d4) returned 0x1
	[0290.527] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.528] WriteFile (in: hFile=0x1d4, lpBuffer=0x11432000*, nNumberOfBytesToWrite=0x2e7c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11432000*, lpNumberOfBytesWritten=0x11031dfc*=0x2e7c, lpOverlapped=0x11031e08) returned 1
	[0290.528] GetFileType (hFile=0x1d4) returned 0x1
	[0290.528] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2e7c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.528] GetFileType (hFile=0x1d4) returned 0x1
	[0290.528] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.528] WriteFile (in: hFile=0x1d4, lpBuffer=0x11258a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11258a80*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0290.529] GetFileType (hFile=0x1d4) returned 0x1
	[0290.529] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2e7c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.529] CloseHandle (hObject=0x1d4) returned 1
	[0290.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf.tl30z")) returned 0x220
	[0290.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.546] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0290.567] SetEvent (hEvent=0x248) returned 1
	[0290.567] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf")) returned 0x220
	[0290.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF", dwFileAttributes=0x220) returned 1
	[0290.573] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf.tl30z"), dwFlags=0x1) returned 1
	[0290.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0290.774] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0290.774] ReadFile (in: hFile=0x1d4, lpBuffer=0x1132ac00, nNumberOfBytesToRead=0xbcc, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1132ac00*, lpNumberOfBytesRead=0x11287e18*=0xbcc, lpOverlapped=0x0) returned 1
	[0290.779] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3d0 | out: pbBuffer=0x1140f3d0) returned 1
	[0290.779] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3c8 | out: pbBuffer=0x1140f3c8) returned 1
	[0290.780] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1105fc02 | out: pbBuffer=0x1105fc02) returned 1
	[0290.780] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1105fca4 | out: pbBuffer=0x1105fca4) returned 1
	[0290.780] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0290.780] GetFileType (hFile=0x1d4) returned 0x1
	[0290.780] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11455de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.780] WriteFile (in: hFile=0x1d4, lpBuffer=0x113c4000*, nNumberOfBytesToWrite=0xbcc, lpNumberOfBytesWritten=0x11455dfc, lpOverlapped=0x11455e08 | out: lpBuffer=0x113c4000*, lpNumberOfBytesWritten=0x11455dfc*=0xbcc, lpOverlapped=0x11455e08) returned 1
	[0290.781] GetFileType (hFile=0x1d4) returned 0x1
	[0290.781] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xbcc, lpNewFilePointer=0x0, dwMoveMethod=0x11455de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.781] GetFileType (hFile=0x1d4) returned 0x1
	[0290.781] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11455de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.781] WriteFile (in: hFile=0x1d4, lpBuffer=0x113b4700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11455dfc, lpOverlapped=0x11455e08 | out: lpBuffer=0x113b4700*, lpNumberOfBytesWritten=0x11455dfc*=0x22d, lpOverlapped=0x11455e08) returned 1
	[0290.782] GetFileType (hFile=0x1d4) returned 0x1
	[0290.782] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xbcc, lpNewFilePointer=0x0, dwMoveMethod=0x11455de0 | out: lpNewFilePointer=0x0) returned 1
	[0290.782] CloseHandle (hObject=0x1d4) returned 1
	[0290.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf.tl30z")) returned 0x220
	[0290.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0290.878] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0290.888] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0290.949] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0290.988] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.032] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.063] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.079] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.122] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.139] SetEvent (hEvent=0x118) returned 1
	[0291.140] SetEvent (hEvent=0x1f0) returned 1
	[0291.140] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0291.147] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.147] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0291.150] SetEvent (hEvent=0x218) returned 1
	[0291.150] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0291.154] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.193] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.244] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.301] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.343] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.385] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.421] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.461] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.493] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.510] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.527] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.541] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.554] SetEvent (hEvent=0x218) returned 1
	[0291.555] SetEvent (hEvent=0x1f0) returned 1
	[0291.555] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0291.558] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.558] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0291.559] SetEvent (hEvent=0x1b0) returned 1
	[0291.559] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0291.561] SetEvent (hEvent=0x248) returned 1
	[0291.561] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.837] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.839] SetEvent (hEvent=0x1b0) returned 1
	[0291.840] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0291.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf")) returned 0x220
	[0291.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF", dwFileAttributes=0x220) returned 1
	[0291.876] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf.tl30z"), dwFlags=0x1) returned 1
	[0291.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0291.992] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0291.992] ReadFile (in: hFile=0x1d4, lpBuffer=0x11094000, nNumberOfBytesToRead=0x7680, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11094000*, lpNumberOfBytesRead=0x11423e18*=0x7680, lpOverlapped=0x0) returned 1
	[0291.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0291.999] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0292.000] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133f202 | out: pbBuffer=0x1133f202) returned 1
	[0292.000] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1133f2c5 | out: pbBuffer=0x1133f2c5) returned 1
	[0292.000] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0292.002] GetFileType (hFile=0x1d4) returned 0x1
	[0292.002] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.002] WriteFile (in: hFile=0x1d4, lpBuffer=0x113b2000*, nNumberOfBytesToWrite=0x7680, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x113b2000*, lpNumberOfBytesWritten=0x11373dfc*=0x7680, lpOverlapped=0x11373e08) returned 1
	[0292.003] GetFileType (hFile=0x1d4) returned 0x1
	[0292.003] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7680, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.003] GetFileType (hFile=0x1d4) returned 0x1
	[0292.003] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.003] WriteFile (in: hFile=0x1d4, lpBuffer=0x1135f880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x1135f880*, lpNumberOfBytesWritten=0x11373dfc*=0x22a, lpOverlapped=0x11373e08) returned 1
	[0292.004] GetFileType (hFile=0x1d4) returned 0x1
	[0292.004] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7680, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.004] CloseHandle (hObject=0x1d4) returned 1
	[0292.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf.tl30z")) returned 0x220
	[0292.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.007] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0292.008] SetEvent (hEvent=0x248) returned 1
	[0292.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf")) returned 0x220
	[0292.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF", dwFileAttributes=0x220) returned 1
	[0292.009] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0292.148] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0292.148] ReadFile (in: hFile=0x250, lpBuffer=0x112bc000, nNumberOfBytesToRead=0x258c, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112bc000*, lpNumberOfBytesRead=0x11423e18*=0x258c, lpOverlapped=0x0) returned 1
	[0292.152] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0292.152] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0292.152] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b3302 | out: pbBuffer=0x110b3302) returned 1
	[0292.153] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0292.154] GetFileType (hFile=0x250) returned 0x1
	[0292.154] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.154] WriteFile (in: hFile=0x250, lpBuffer=0x110f0000*, nNumberOfBytesToWrite=0x258c, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x110f0000*, lpNumberOfBytesWritten=0x1136fdfc*=0x258c, lpOverlapped=0x1136fe08) returned 1
	[0292.155] GetFileType (hFile=0x250) returned 0x1
	[0292.155] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x258c, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.155] GetFileType (hFile=0x250) returned 0x1
	[0292.155] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.155] WriteFile (in: hFile=0x250, lpBuffer=0x110c7880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x110c7880*, lpNumberOfBytesWritten=0x1136fdfc*=0x22a, lpOverlapped=0x1136fe08) returned 1
	[0292.155] GetFileType (hFile=0x250) returned 0x1
	[0292.156] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x258c, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.156] CloseHandle (hObject=0x250) returned 1
	[0292.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf.tl30z")) returned 0x220
	[0292.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.158] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0292.161] SetEvent (hEvent=0x118) returned 1
	[0292.161] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf")) returned 0x220
	[0292.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF", dwFileAttributes=0x220) returned 1
	[0292.162] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0292.241] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0292.241] ReadFile (in: hFile=0x1d4, lpBuffer=0x111d5800, nNumberOfBytesToRead=0x4054, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x111d5800*, lpNumberOfBytesRead=0x11423e18*=0x4054, lpOverlapped=0x0) returned 1
	[0292.247] SetEvent (hEvent=0x248) returned 1
	[0292.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1124c030 | out: pbBuffer=0x1124c030) returned 1
	[0292.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11223102 | out: pbBuffer=0x11223102) returned 1
	[0292.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11223197 | out: pbBuffer=0x11223197) returned 1
	[0292.249] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1124c060 | out: pbBuffer=0x1124c060) returned 1
	[0292.250] GetFileType (hFile=0x1d4) returned 0x1
	[0292.250] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.250] WriteFile (in: hFile=0x1d4, lpBuffer=0x11be4000*, nNumberOfBytesToWrite=0x4054, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x11be4000*, lpNumberOfBytesWritten=0x11373dfc*=0x4054, lpOverlapped=0x11373e08) returned 1
	[0292.250] GetFileType (hFile=0x1d4) returned 0x1
	[0292.251] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4054, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.251] GetFileType (hFile=0x1d4) returned 0x1
	[0292.251] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.251] WriteFile (in: hFile=0x1d4, lpBuffer=0x11bc6380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11373dfc, lpOverlapped=0x11373e08 | out: lpBuffer=0x11bc6380*, lpNumberOfBytesWritten=0x11373dfc*=0x224, lpOverlapped=0x11373e08) returned 1
	[0292.251] GetFileType (hFile=0x1d4) returned 0x1
	[0292.251] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4054, lpNewFilePointer=0x0, dwMoveMethod=0x11373de0 | out: lpNewFilePointer=0x0) returned 1
	[0292.251] CloseHandle (hObject=0x1d4) returned 1
	[0292.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf.tl30z")) returned 0x220
	[0292.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.257] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0292.258] SetEvent (hEvent=0x248) returned 1
	[0292.258] SetEvent (hEvent=0x1b0) returned 1
	[0292.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf")) returned 0x220
	[0292.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF", dwFileAttributes=0x220) returned 1
	[0292.259] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf.tl30z"), dwFlags=0x1) returned 1
	[0292.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0292.347] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0292.347] ReadFile (in: hFile=0x250, lpBuffer=0x1139e000, nNumberOfBytesToRead=0x2a54, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1139e000*, lpNumberOfBytesRead=0x11425e18*=0x2a54, lpOverlapped=0x0) returned 1
	[0292.541] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0292.541] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11450f02 | out: pbBuffer=0x11450f02) returned 1
	[0292.541] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11450f46 | out: pbBuffer=0x11450f46) returned 1
	[0292.542] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0292.542] GetFileType (hFile=0x250) returned 0x1
	[0292.879] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.879] WriteFile (in: hFile=0x250, lpBuffer=0x112e2000*, nNumberOfBytesToWrite=0x2a54, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x112e2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2a54, lpOverlapped=0x1102be08) returned 1
	[0292.880] GetFileType (hFile=0x250) returned 0x1
	[0292.880] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2a54, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.881] GetFileType (hFile=0x250) returned 0x1
	[0292.881] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.881] WriteFile (in: hFile=0x250, lpBuffer=0x113d7880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d7880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0292.882] GetFileType (hFile=0x250) returned 0x1
	[0292.882] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x2a54, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0292.882] CloseHandle (hObject=0x250) returned 1
	[0292.959] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf.tl30z")) returned 0x220
	[0292.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0292.962] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0292.965] SetEvent (hEvent=0x1b0) returned 1
	[0292.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf")) returned 0x220
	[0292.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF", dwFileAttributes=0x220) returned 1
	[0292.966] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0293.076] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0293.076] ReadFile (in: hFile=0x224, lpBuffer=0x112bdb00, nNumberOfBytesToRead=0x1a88, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x112bdb00*, lpNumberOfBytesRead=0x1128ce18*=0x1a88, lpOverlapped=0x0) returned 1
	[0293.082] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6230 | out: pbBuffer=0x113e6230) returned 1
	[0293.082] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b0402 | out: pbBuffer=0x112b0402) returned 1
	[0293.082] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b043c | out: pbBuffer=0x112b043c) returned 1
	[0293.082] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b046d | out: pbBuffer=0x112b046d) returned 1
	[0293.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0293.083] GetFileType (hFile=0x224) returned 0x1
	[0293.083] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.083] WriteFile (in: hFile=0x224, lpBuffer=0x11096000*, nNumberOfBytesToWrite=0x1a88, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11096000*, lpNumberOfBytesWritten=0x11031dfc*=0x1a88, lpOverlapped=0x11031e08) returned 1
	[0293.084] GetFileType (hFile=0x224) returned 0x1
	[0293.084] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1a88, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.084] GetFileType (hFile=0x224) returned 0x1
	[0293.084] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.085] WriteFile (in: hFile=0x224, lpBuffer=0x11471500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11471500*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0293.086] GetFileType (hFile=0x224) returned 0x1
	[0293.086] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1a88, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.086] CloseHandle (hObject=0x224) returned 1
	[0293.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf.tl30z")) returned 0x220
	[0293.087] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.089] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0293.092] SetEvent (hEvent=0x210) returned 1
	[0293.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf")) returned 0x220
	[0293.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF", dwFileAttributes=0x220) returned 1
	[0293.093] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0293.171] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0293.171] ReadFile (in: hFile=0x1fc, lpBuffer=0x1134f000, nNumberOfBytesToRead=0xed8, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1134f000*, lpNumberOfBytesRead=0x1128ce18*=0xed8, lpOverlapped=0x0) returned 1
	[0293.176] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1124c310 | out: pbBuffer=0x1124c310) returned 1
	[0293.176] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136b202 | out: pbBuffer=0x1136b202) returned 1
	[0293.176] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136b251 | out: pbBuffer=0x1136b251) returned 1
	[0293.176] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136b2ad | out: pbBuffer=0x1136b2ad) returned 1
	[0293.176] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1124c340 | out: pbBuffer=0x1124c340) returned 1
	[0293.177] GetFileType (hFile=0x1fc) returned 0x1
	[0293.177] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.177] WriteFile (in: hFile=0x1fc, lpBuffer=0x1112e000*, nNumberOfBytesToWrite=0xed8, lpNumberOfBytesWritten=0x113abdfc, lpOverlapped=0x113abe08 | out: lpBuffer=0x1112e000*, lpNumberOfBytesWritten=0x113abdfc*=0xed8, lpOverlapped=0x113abe08) returned 1
	[0293.177] GetFileType (hFile=0x1fc) returned 0x1
	[0293.178] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xed8, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.178] GetFileType (hFile=0x1fc) returned 0x1
	[0293.178] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.178] WriteFile (in: hFile=0x1fc, lpBuffer=0x11132000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113abdfc, lpOverlapped=0x113abe08 | out: lpBuffer=0x11132000*, lpNumberOfBytesWritten=0x113abdfc*=0x22d, lpOverlapped=0x113abe08) returned 1
	[0293.178] GetFileType (hFile=0x1fc) returned 0x1
	[0293.178] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xed8, lpNewFilePointer=0x0, dwMoveMethod=0x113abde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.178] CloseHandle (hObject=0x1fc) returned 1
	[0293.180] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf.tl30z")) returned 0x220
	[0293.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.181] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0293.185] SetEvent (hEvent=0x210) returned 1
	[0293.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf")) returned 0x220
	[0293.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF", dwFileAttributes=0x220) returned 1
	[0293.186] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0293.294] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0293.294] ReadFile (in: hFile=0x1d8, lpBuffer=0x1141c000, nNumberOfBytesToRead=0xc44, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1141c000*, lpNumberOfBytesRead=0x1128ce18*=0xc44, lpOverlapped=0x0) returned 1
	[0293.300] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0293.300] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0293.300] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11155e02 | out: pbBuffer=0x11155e02) returned 1
	[0293.300] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0293.301] GetFileType (hFile=0x1d8) returned 0x1
	[0293.301] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.301] WriteFile (in: hFile=0x1d8, lpBuffer=0x113e8000*, nNumberOfBytesToWrite=0xc44, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113e8000*, lpNumberOfBytesWritten=0x11031dfc*=0xc44, lpOverlapped=0x11031e08) returned 1
	[0293.302] GetFileType (hFile=0x1d8) returned 0x1
	[0293.302] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc44, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.302] GetFileType (hFile=0x1d8) returned 0x1
	[0293.302] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.302] WriteFile (in: hFile=0x1d8, lpBuffer=0x11354700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11354700*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0293.303] GetFileType (hFile=0x1d8) returned 0x1
	[0293.303] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xc44, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.303] CloseHandle (hObject=0x1d8) returned 1
	[0293.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf.tl30z")) returned 0x220
	[0293.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.306] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0293.310] SetEvent (hEvent=0x218) returned 1
	[0293.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf")) returned 0x220
	[0293.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF", dwFileAttributes=0x220) returned 1
	[0293.311] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf.tl30z"), dwFlags=0x1) returned 1
	[0293.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0293.397] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0293.397] ReadFile (in: hFile=0x1fc, lpBuffer=0x11072c00, nNumberOfBytesToRead=0x126c, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11072c00*, lpNumberOfBytesRead=0x1128ce18*=0x126c, lpOverlapped=0x0) returned 1
	[0293.402] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61b0 | out: pbBuffer=0x113e61b0) returned 1
	[0293.402] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e4702 | out: pbBuffer=0x113e4702) returned 1
	[0293.402] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e4763 | out: pbBuffer=0x113e4763) returned 1
	[0293.403] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61e0 | out: pbBuffer=0x113e61e0) returned 1
	[0293.403] GetFileType (hFile=0x1fc) returned 0x1
	[0293.403] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.403] WriteFile (in: hFile=0x1fc, lpBuffer=0x1117a000*, nNumberOfBytesToWrite=0x126c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1117a000*, lpNumberOfBytesWritten=0x11031dfc*=0x126c, lpOverlapped=0x11031e08) returned 1
	[0293.404] GetFileType (hFile=0x1fc) returned 0x1
	[0293.404] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x126c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.404] GetFileType (hFile=0x1fc) returned 0x1
	[0293.404] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.404] WriteFile (in: hFile=0x1fc, lpBuffer=0x11132000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11132000*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0293.404] GetFileType (hFile=0x1fc) returned 0x1
	[0293.404] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x126c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.405] CloseHandle (hObject=0x1fc) returned 1
	[0293.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf.tl30z")) returned 0x220
	[0293.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0293.407] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0293.411] SetEvent (hEvent=0x218) returned 1
	[0293.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg")) returned 0x220
	[0293.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG", dwFileAttributes=0x220) returned 1
	[0293.411] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0293.493] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0293.493] ReadFile (in: hFile=0x1d4, lpBuffer=0x110bc000, nNumberOfBytesToRead=0xc056, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110bc000*, lpNumberOfBytesRead=0x1128ce18*=0xc056, lpOverlapped=0x0) returned 1
	[0293.505] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f550 | out: pbBuffer=0x1140f550) returned 1
	[0293.505] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d0802 | out: pbBuffer=0x111d0802) returned 1
	[0293.505] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d0816 | out: pbBuffer=0x111d0816) returned 1
	[0293.506] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f580 | out: pbBuffer=0x1140f580) returned 1
	[0293.508] GetFileType (hFile=0x1d4) returned 0x1
	[0293.508] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.508] WriteFile (in: hFile=0x1d4, lpBuffer=0x1120a000*, nNumberOfBytesToWrite=0xc056, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x1120a000*, lpNumberOfBytesWritten=0x113efdfc*=0xc056, lpOverlapped=0x113efe08) returned 1
	[0293.509] GetFileType (hFile=0x1d4) returned 0x1
	[0293.509] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xc056, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.509] GetFileType (hFile=0x1d4) returned 0x1
	[0293.509] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.510] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ab500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113efdfc, lpOverlapped=0x113efe08 | out: lpBuffer=0x112ab500*, lpNumberOfBytesWritten=0x113efdfc*=0x22d, lpOverlapped=0x113efe08) returned 1
	[0293.510] GetFileType (hFile=0x1d4) returned 0x1
	[0293.510] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xc056, lpNewFilePointer=0x0, dwMoveMethod=0x113efde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.510] CloseHandle (hObject=0x1d4) returned 1
	[0293.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg.tl30z")) returned 0x220
	[0293.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.514] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0293.518] SetEvent (hEvent=0x218) returned 1
	[0293.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg")) returned 0x220
	[0293.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG", dwFileAttributes=0x220) returned 1
	[0293.518] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0293.615] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0293.615] ReadFile (in: hFile=0x1fc, lpBuffer=0x1105a000, nNumberOfBytesToRead=0x8fb8, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1105a000*, lpNumberOfBytesRead=0x1128ce18*=0x8fb8, lpOverlapped=0x0) returned 1
	[0293.621] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e640 | out: pbBuffer=0x1104e640) returned 1
	[0293.621] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11066802 | out: pbBuffer=0x11066802) returned 1
	[0293.622] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1106682c | out: pbBuffer=0x1106682c) returned 1
	[0293.622] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11066887 | out: pbBuffer=0x11066887) returned 1
	[0293.622] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110668b9 | out: pbBuffer=0x110668b9) returned 1
	[0293.622] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0293.624] GetFileType (hFile=0x1fc) returned 0x1
	[0293.624] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.624] WriteFile (in: hFile=0x1fc, lpBuffer=0x11120000*, nNumberOfBytesToWrite=0x8fb8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11120000*, lpNumberOfBytesWritten=0x11031dfc*=0x8fb8, lpOverlapped=0x11031e08) returned 1
	[0293.624] GetFileType (hFile=0x1fc) returned 0x1
	[0293.625] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x8fb8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.625] GetFileType (hFile=0x1fc) returned 0x1
	[0293.625] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.625] WriteFile (in: hFile=0x1fc, lpBuffer=0x11373880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11373880*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0293.625] GetFileType (hFile=0x1fc) returned 0x1
	[0293.626] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x8fb8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.626] CloseHandle (hObject=0x1fc) returned 1
	[0293.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg.tl30z")) returned 0x220
	[0293.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.630] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0293.632] SetEvent (hEvent=0x210) returned 1
	[0293.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg")) returned 0x220
	[0293.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG", dwFileAttributes=0x220) returned 1
	[0293.632] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg.tl30z"), dwFlags=0x1) returned 1
	[0293.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0293.812] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0293.812] ReadFile (in: hFile=0x1fc, lpBuffer=0x11168000, nNumberOfBytesToRead=0xaa9a, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11168000*, lpNumberOfBytesRead=0x1128ce18*=0xaa9a, lpOverlapped=0x0) returned 1
	[0293.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f560 | out: pbBuffer=0x1140f560) returned 1
	[0293.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11176702 | out: pbBuffer=0x11176702) returned 1
	[0293.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11176703 | out: pbBuffer=0x11176703) returned 1
	[0293.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111767ba | out: pbBuffer=0x111767ba) returned 1
	[0293.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111767ce | out: pbBuffer=0x111767ce) returned 1
	[0293.821] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f590 | out: pbBuffer=0x1140f590) returned 1
	[0293.822] SetEvent (hEvent=0x210) returned 1
	[0293.824] GetFileType (hFile=0x1fc) returned 0x1
	[0293.824] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.824] WriteFile (in: hFile=0x1fc, lpBuffer=0x11bf2000*, nNumberOfBytesToWrite=0xaa9a, lpNumberOfBytesWritten=0x112a3dfc, lpOverlapped=0x112a3e08 | out: lpBuffer=0x11bf2000*, lpNumberOfBytesWritten=0x112a3dfc*=0xaa9a, lpOverlapped=0x112a3e08) returned 1
	[0293.825] GetFileType (hFile=0x1fc) returned 0x1
	[0293.825] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xaa9a, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.825] GetFileType (hFile=0x1fc) returned 0x1
	[0293.825] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.825] WriteFile (in: hFile=0x1fc, lpBuffer=0x11233500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112a3dfc, lpOverlapped=0x112a3e08 | out: lpBuffer=0x11233500*, lpNumberOfBytesWritten=0x112a3dfc*=0x233, lpOverlapped=0x112a3e08) returned 1
	[0293.825] GetFileType (hFile=0x1fc) returned 0x1
	[0293.826] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xaa9a, lpNewFilePointer=0x0, dwMoveMethod=0x112a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0293.826] CloseHandle (hObject=0x1fc) returned 1
	[0293.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg.tl30z")) returned 0x220
	[0293.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.837] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0293.839] SetEvent (hEvent=0x210) returned 1
	[0293.839] SetEvent (hEvent=0x218) returned 1
	[0293.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0293.843] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1129fe08 | out: lpMode=0x1129fe08) returned 0
	[0293.844] ReadFile (in: hFile=0x224, lpBuffer=0x11182000, nNumberOfBytesToRead=0x6988, lpNumberOfBytesRead=0x1129fe18, lpOverlapped=0x0 | out: lpBuffer=0x11182000*, lpNumberOfBytesRead=0x1129fe18*=0x6988, lpOverlapped=0x0) returned 1
	[0293.852] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0293.852] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b8802 | out: pbBuffer=0x111b8802) returned 1
	[0293.852] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b88b0 | out: pbBuffer=0x111b88b0) returned 1
	[0293.852] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0293.853] GetFileType (hFile=0x224) returned 0x1
	[0293.853] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129fde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.854] WriteFile (in: hFile=0x224, lpBuffer=0x1131e000*, nNumberOfBytesToWrite=0x6988, lpNumberOfBytesWritten=0x1129fdfc, lpOverlapped=0x1129fe08 | out: lpBuffer=0x1131e000*, lpNumberOfBytesWritten=0x1129fdfc*=0x6988, lpOverlapped=0x1129fe08) returned 1
	[0293.854] GetFileType (hFile=0x224) returned 0x1
	[0293.854] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6988, lpNewFilePointer=0x0, dwMoveMethod=0x1129fde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.855] GetFileType (hFile=0x224) returned 0x1
	[0293.855] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129fde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.855] WriteFile (in: hFile=0x224, lpBuffer=0x11232a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1129fdfc, lpOverlapped=0x1129fe08 | out: lpBuffer=0x11232a80*, lpNumberOfBytesWritten=0x1129fdfc*=0x22a, lpOverlapped=0x1129fe08) returned 1
	[0293.856] GetFileType (hFile=0x224) returned 0x1
	[0293.857] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x6988, lpNewFilePointer=0x0, dwMoveMethod=0x1129fde0 | out: lpNewFilePointer=0x0) returned 1
	[0293.857] CloseHandle (hObject=0x224) returned 1
	[0293.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg.tl30z")) returned 0x220
	[0293.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0293.868] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0293.886] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0293.954] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0293.977] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.000] SetEvent (hEvent=0x218) returned 1
	[0294.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf")) returned 0x220
	[0294.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF", dwFileAttributes=0x220) returned 1
	[0294.000] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0294.081] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0294.082] ReadFile (in: hFile=0x1fc, lpBuffer=0x11200000, nNumberOfBytesToRead=0x3928, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11200000*, lpNumberOfBytesRead=0x1128ce18*=0x3928, lpOverlapped=0x0) returned 1
	[0294.086] SetEvent (hEvent=0x210) returned 1
	[0294.087] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66d0 | out: pbBuffer=0x113e66d0) returned 1
	[0294.087] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e66c8 | out: pbBuffer=0x113e66c8) returned 1
	[0294.087] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cd402 | out: pbBuffer=0x113cd402) returned 1
	[0294.087] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cd45f | out: pbBuffer=0x113cd45f) returned 1
	[0294.088] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6700 | out: pbBuffer=0x113e6700) returned 1
	[0294.088] GetFileType (hFile=0x1fc) returned 0x1
	[0294.088] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11c09de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.089] WriteFile (in: hFile=0x1fc, lpBuffer=0x1110e000*, nNumberOfBytesToWrite=0x3928, lpNumberOfBytesWritten=0x11c09dfc, lpOverlapped=0x11c09e08 | out: lpBuffer=0x1110e000*, lpNumberOfBytesWritten=0x11c09dfc*=0x3928, lpOverlapped=0x11c09e08) returned 1
	[0294.089] GetFileType (hFile=0x1fc) returned 0x1
	[0294.089] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3928, lpNewFilePointer=0x0, dwMoveMethod=0x11c09de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.089] GetFileType (hFile=0x1fc) returned 0x1
	[0294.089] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11c09de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.090] WriteFile (in: hFile=0x1fc, lpBuffer=0x1121a380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11c09dfc, lpOverlapped=0x11c09e08 | out: lpBuffer=0x1121a380*, lpNumberOfBytesWritten=0x11c09dfc*=0x22a, lpOverlapped=0x11c09e08) returned 1
	[0294.090] GetFileType (hFile=0x1fc) returned 0x1
	[0294.090] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3928, lpNewFilePointer=0x0, dwMoveMethod=0x11c09de0 | out: lpNewFilePointer=0x0) returned 1
	[0294.090] CloseHandle (hObject=0x1fc) returned 1
	[0294.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf.tl30z")) returned 0x220
	[0294.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.096] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.098] SetEvent (hEvent=0x210) returned 1
	[0294.098] SetEvent (hEvent=0x218) returned 1
	[0294.098] SwitchToThread () returned 1
	[0294.122] SwitchToThread () returned 1
	[0294.124] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.143] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.160] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.176] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.194] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.214] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.234] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.250] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.267] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.297] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.318] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.340] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.360] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.387] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.412] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.418] SetEvent (hEvent=0x210) returned 1
	[0294.422] SetEvent (hEvent=0x1b0) returned 1
	[0294.422] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0294.425] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.425] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0294.426] SetEvent (hEvent=0x218) returned 1
	[0294.426] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0294.429] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.471] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.696] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.698] SetEvent (hEvent=0x218) returned 1
	[0294.698] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.702] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.706] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.728] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.743] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.758] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf")) returned 0x220
	[0294.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF", dwFileAttributes=0x220) returned 1
	[0294.770] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf.tl30z"), dwFlags=0x1) returned 1
	[0294.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0294.855] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0294.855] ReadFile (in: hFile=0x224, lpBuffer=0x110f2000, nNumberOfBytesToRead=0x2370, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x110f2000*, lpNumberOfBytesRead=0x11425e18*=0x2370, lpOverlapped=0x0) returned 1
	[0294.861] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0294.861] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0294.861] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ac802 | out: pbBuffer=0x113ac802) returned 1
	[0294.861] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113ac898 | out: pbBuffer=0x113ac898) returned 1
	[0294.862] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0294.862] GetFileType (hFile=0x224) returned 0x1
	[0294.862] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110dde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.862] WriteFile (in: hFile=0x224, lpBuffer=0x11448000*, nNumberOfBytesToWrite=0x2370, lpNumberOfBytesWritten=0x1110ddfc, lpOverlapped=0x1110de08 | out: lpBuffer=0x11448000*, lpNumberOfBytesWritten=0x1110ddfc*=0x2370, lpOverlapped=0x1110de08) returned 1
	[0294.863] GetFileType (hFile=0x224) returned 0x1
	[0294.863] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2370, lpNewFilePointer=0x0, dwMoveMethod=0x1110dde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.863] GetFileType (hFile=0x224) returned 0x1
	[0294.863] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110dde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.863] WriteFile (in: hFile=0x224, lpBuffer=0x113c0a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1110ddfc, lpOverlapped=0x1110de08 | out: lpBuffer=0x113c0a80*, lpNumberOfBytesWritten=0x1110ddfc*=0x22a, lpOverlapped=0x1110de08) returned 1
	[0294.864] GetFileType (hFile=0x224) returned 0x1
	[0294.864] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x2370, lpNewFilePointer=0x0, dwMoveMethod=0x1110dde0 | out: lpNewFilePointer=0x0) returned 1
	[0294.864] CloseHandle (hObject=0x224) returned 1
	[0294.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf.tl30z")) returned 0x220
	[0294.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0294.868] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0294.871] SetEvent (hEvent=0x26c) returned 1
	[0294.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf")) returned 0x220
	[0294.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF", dwFileAttributes=0x220) returned 1
	[0294.872] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.075] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0295.075] ReadFile (in: hFile=0x224, lpBuffer=0x1129e000, nNumberOfBytesToRead=0x1190, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1129e000*, lpNumberOfBytesRead=0x11425e18*=0x1190, lpOverlapped=0x0) returned 1
	[0295.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0295.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f278 | out: pbBuffer=0x1140f278) returned 1
	[0295.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ad302 | out: pbBuffer=0x113ad302) returned 1
	[0295.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113ad321 | out: pbBuffer=0x113ad321) returned 1
	[0295.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0295.080] GetFileType (hFile=0x224) returned 0x1
	[0295.080] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.081] WriteFile (in: hFile=0x224, lpBuffer=0x112b6000*, nNumberOfBytesToWrite=0x1190, lpNumberOfBytesWritten=0x1110ddfc, lpOverlapped=0x1110de08 | out: lpBuffer=0x112b6000*, lpNumberOfBytesWritten=0x1110ddfc*=0x1190, lpOverlapped=0x1110de08) returned 1
	[0295.081] GetFileType (hFile=0x224) returned 0x1
	[0295.081] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1190, lpNewFilePointer=0x0, dwMoveMethod=0x1110dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.081] GetFileType (hFile=0x224) returned 0x1
	[0295.081] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1110dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.081] WriteFile (in: hFile=0x224, lpBuffer=0x113c1880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1110ddfc, lpOverlapped=0x1110de08 | out: lpBuffer=0x113c1880*, lpNumberOfBytesWritten=0x1110ddfc*=0x224, lpOverlapped=0x1110de08) returned 1
	[0295.082] GetFileType (hFile=0x224) returned 0x1
	[0295.082] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x1190, lpNewFilePointer=0x0, dwMoveMethod=0x1110dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.083] CloseHandle (hObject=0x224) returned 1
	[0295.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf.tl30z")) returned 0x220
	[0295.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.086] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0295.089] SetEvent (hEvent=0x26c) returned 1
	[0295.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf")) returned 0x220
	[0295.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF", dwFileAttributes=0x220) returned 1
	[0295.090] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.192] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0295.192] ReadFile (in: hFile=0x224, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x22b0, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11425e18*=0x22b0, lpOverlapped=0x0) returned 1
	[0295.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0295.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0295.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1117e802 | out: pbBuffer=0x1117e802) returned 1
	[0295.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117e835 | out: pbBuffer=0x1117e835) returned 1
	[0295.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117e867 | out: pbBuffer=0x1117e867) returned 1
	[0295.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117e8b2 | out: pbBuffer=0x1117e8b2) returned 1
	[0295.198] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0295.198] GetFileType (hFile=0x224) returned 0x1
	[0295.198] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.198] WriteFile (in: hFile=0x224, lpBuffer=0x1137c000*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1137c000*, lpNumberOfBytesWritten=0x11031dfc*=0x22b0, lpOverlapped=0x11031e08) returned 1
	[0295.199] GetFileType (hFile=0x224) returned 0x1
	[0295.199] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x22b0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.199] GetFileType (hFile=0x224) returned 0x1
	[0295.199] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.199] WriteFile (in: hFile=0x224, lpBuffer=0x11bcce00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bcce00*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0295.199] GetFileType (hFile=0x224) returned 0x1
	[0295.200] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x22b0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.200] CloseHandle (hObject=0x224) returned 1
	[0295.202] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf.tl30z")) returned 0x220
	[0295.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.205] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0295.208] SetEvent (hEvent=0x218) returned 1
	[0295.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf")) returned 0x220
	[0295.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF", dwFileAttributes=0x220) returned 1
	[0295.209] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0295.275] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0295.275] ReadFile (in: hFile=0x250, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x7850, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x11425e18*=0x7850, lpOverlapped=0x0) returned 1
	[0295.293] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0295.293] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119f302 | out: pbBuffer=0x1119f302) returned 1
	[0295.293] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0295.294] GetFileType (hFile=0x250) returned 0x1
	[0295.294] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.295] WriteFile (in: hFile=0x250, lpBuffer=0x11440000*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x110a3dfc, lpOverlapped=0x110a3e08 | out: lpBuffer=0x11440000*, lpNumberOfBytesWritten=0x110a3dfc*=0x7850, lpOverlapped=0x110a3e08) returned 1
	[0295.295] GetFileType (hFile=0x250) returned 0x1
	[0295.295] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x7850, lpNewFilePointer=0x0, dwMoveMethod=0x110a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.295] GetFileType (hFile=0x250) returned 0x1
	[0295.295] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.296] WriteFile (in: hFile=0x250, lpBuffer=0x111b3880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x110a3dfc, lpOverlapped=0x110a3e08 | out: lpBuffer=0x111b3880*, lpNumberOfBytesWritten=0x110a3dfc*=0x22a, lpOverlapped=0x110a3e08) returned 1
	[0295.296] GetFileType (hFile=0x250) returned 0x1
	[0295.296] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x7850, lpNewFilePointer=0x0, dwMoveMethod=0x110a3de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.296] CloseHandle (hObject=0x250) returned 1
	[0295.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf.tl30z")) returned 0x220
	[0295.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.299] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0295.302] SetEvent (hEvent=0x218) returned 1
	[0295.302] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf")) returned 0x220
	[0295.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF", dwFileAttributes=0x220) returned 1
	[0295.302] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0295.383] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0295.383] ReadFile (in: hFile=0x288, lpBuffer=0x111e6000, nNumberOfBytesToRead=0x85d0, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x111e6000*, lpNumberOfBytesRead=0x11425e18*=0x85d0, lpOverlapped=0x0) returned 1
	[0295.389] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0295.389] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4b8 | out: pbBuffer=0x1104e4b8) returned 1
	[0295.389] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e5c02 | out: pbBuffer=0x112e5c02) returned 1
	[0295.389] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0295.390] GetFileType (hFile=0x288) returned 0x1
	[0295.390] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.391] WriteFile (in: hFile=0x288, lpBuffer=0x1122a000*, nNumberOfBytesToWrite=0x85d0, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x1122a000*, lpNumberOfBytesWritten=0x1141ddfc*=0x85d0, lpOverlapped=0x1141de08) returned 1
	[0295.391] GetFileType (hFile=0x288) returned 0x1
	[0295.391] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x85d0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.391] GetFileType (hFile=0x288) returned 0x1
	[0295.392] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.392] WriteFile (in: hFile=0x288, lpBuffer=0x11200700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x11200700*, lpNumberOfBytesWritten=0x1141ddfc*=0x22d, lpOverlapped=0x1141de08) returned 1
	[0295.392] GetFileType (hFile=0x288) returned 0x1
	[0295.392] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x85d0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.392] CloseHandle (hObject=0x288) returned 1
	[0295.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf.tl30z")) returned 0x220
	[0295.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.395] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0295.398] SetEvent (hEvent=0x218) returned 1
	[0295.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf")) returned 0x220
	[0295.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF", dwFileAttributes=0x220) returned 1
	[0295.399] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0295.476] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0295.476] ReadFile (in: hFile=0x1d8, lpBuffer=0x112d4000, nNumberOfBytesToRead=0xb66e, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11425e18*=0xb66e, lpOverlapped=0x0) returned 1
	[0295.484] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f040 | out: pbBuffer=0x1140f040) returned 1
	[0295.484] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bd7302 | out: pbBuffer=0x11bd7302) returned 1
	[0295.484] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bd737f | out: pbBuffer=0x11bd737f) returned 1
	[0295.484] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f070 | out: pbBuffer=0x1140f070) returned 1
	[0295.486] GetFileType (hFile=0x1d8) returned 0x1
	[0295.486] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.486] WriteFile (in: hFile=0x1d8, lpBuffer=0x1124e000*, nNumberOfBytesToWrite=0xb66e, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x1124e000*, lpNumberOfBytesWritten=0x1141ddfc*=0xb66e, lpOverlapped=0x1141de08) returned 1
	[0295.487] GetFileType (hFile=0x1d8) returned 0x1
	[0295.487] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb66e, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.487] GetFileType (hFile=0x1d8) returned 0x1
	[0295.487] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.488] WriteFile (in: hFile=0x1d8, lpBuffer=0x1132a380*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1141ddfc, lpOverlapped=0x1141de08 | out: lpBuffer=0x1132a380*, lpNumberOfBytesWritten=0x1141ddfc*=0x239, lpOverlapped=0x1141de08) returned 1
	[0295.488] GetFileType (hFile=0x1d8) returned 0x1
	[0295.488] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb66e, lpNewFilePointer=0x0, dwMoveMethod=0x1141dde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.488] CloseHandle (hObject=0x1d8) returned 1
	[0295.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf.tl30z")) returned 0x220
	[0295.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.491] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0295.494] SetEvent (hEvent=0x26c) returned 1
	[0295.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf")) returned 0x220
	[0295.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF", dwFileAttributes=0x220) returned 1
	[0295.495] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0295.574] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0295.574] ReadFile (in: hFile=0x288, lpBuffer=0x112fa000, nNumberOfBytesToRead=0x462e, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x112fa000*, lpNumberOfBytesRead=0x11425e18*=0x462e, lpOverlapped=0x0) returned 1
	[0295.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0295.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111c2802 | out: pbBuffer=0x111c2802) returned 1
	[0295.580] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111c28df | out: pbBuffer=0x111c28df) returned 1
	[0295.580] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0295.581] GetFileType (hFile=0x288) returned 0x1
	[0295.581] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.581] WriteFile (in: hFile=0x288, lpBuffer=0x1109a000*, nNumberOfBytesToWrite=0x462e, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1109a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x462e, lpOverlapped=0x1102be08) returned 1
	[0295.581] GetFileType (hFile=0x288) returned 0x1
	[0295.582] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x462e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.582] GetFileType (hFile=0x288) returned 0x1
	[0295.582] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.582] WriteFile (in: hFile=0x288, lpBuffer=0x111d4a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111d4a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0295.582] GetFileType (hFile=0x288) returned 0x1
	[0295.582] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x462e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0295.582] CloseHandle (hObject=0x288) returned 1
	[0295.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf.tl30z")) returned 0x220
	[0295.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.585] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0295.589] SetEvent (hEvent=0x118) returned 1
	[0295.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf")) returned 0x220
	[0295.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF", dwFileAttributes=0x220) returned 1
	[0295.590] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf.tl30z"), dwFlags=0x1) returned 1
	[0295.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0295.670] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0295.670] ReadFile (in: hFile=0x250, lpBuffer=0x11238000, nNumberOfBytesToRead=0x1ae8, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11238000*, lpNumberOfBytesRead=0x11425e18*=0x1ae8, lpOverlapped=0x0) returned 1
	[0295.677] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0295.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0295.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11350802 | out: pbBuffer=0x11350802) returned 1
	[0295.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1135081e | out: pbBuffer=0x1135081e) returned 1
	[0295.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113508e1 | out: pbBuffer=0x113508e1) returned 1
	[0295.680] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0295.681] GetFileType (hFile=0x250) returned 0x1
	[0295.681] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.682] WriteFile (in: hFile=0x250, lpBuffer=0x11254000*, nNumberOfBytesToWrite=0x1ae8, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11254000*, lpNumberOfBytesWritten=0x11339dfc*=0x1ae8, lpOverlapped=0x11339e08) returned 1
	[0295.683] GetFileType (hFile=0x250) returned 0x1
	[0295.683] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1ae8, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.683] GetFileType (hFile=0x250) returned 0x1
	[0295.683] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.683] WriteFile (in: hFile=0x250, lpBuffer=0x11152a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11152a80*, lpNumberOfBytesWritten=0x11339dfc*=0x22d, lpOverlapped=0x11339e08) returned 1
	[0295.683] GetFileType (hFile=0x250) returned 0x1
	[0295.683] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1ae8, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.683] CloseHandle (hObject=0x250) returned 1
	[0295.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf.tl30z")) returned 0x220
	[0295.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0295.697] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0295.703] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0295.735] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0295.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg")) returned 0x220
	[0295.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG", dwFileAttributes=0x220) returned 1
	[0295.744] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg.tl30z"), dwFlags=0x1) returned 1
	[0295.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0295.833] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0295.833] ReadFile (in: hFile=0x224, lpBuffer=0x112ba000, nNumberOfBytesToRead=0xb57d, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x112ba000*, lpNumberOfBytesRead=0x1131de18*=0xb57d, lpOverlapped=0x0) returned 1
	[0295.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0295.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6548 | out: pbBuffer=0x113e6548) returned 1
	[0295.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c6802 | out: pbBuffer=0x112c6802) returned 1
	[0295.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c68b6 | out: pbBuffer=0x112c68b6) returned 1
	[0295.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c68b8 | out: pbBuffer=0x112c68b8) returned 1
	[0295.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0295.843] GetFileType (hFile=0x224) returned 0x1
	[0295.843] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.843] WriteFile (in: hFile=0x224, lpBuffer=0x11438000*, nNumberOfBytesToWrite=0xb57d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11438000*, lpNumberOfBytesWritten=0x11031dfc*=0xb57d, lpOverlapped=0x11031e08) returned 1
	[0295.844] GetFileType (hFile=0x224) returned 0x1
	[0295.844] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xb57d, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.844] GetFileType (hFile=0x224) returned 0x1
	[0295.844] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.845] WriteFile (in: hFile=0x224, lpBuffer=0x113bb880*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113bb880*, lpNumberOfBytesWritten=0x11031dfc*=0x23c, lpOverlapped=0x11031e08) returned 1
	[0295.845] GetFileType (hFile=0x224) returned 0x1
	[0295.845] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xb57d, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.845] CloseHandle (hObject=0x224) returned 1
	[0295.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg.tl30z")) returned 0x220
	[0295.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0295.860] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0295.863] SetEvent (hEvent=0x218) returned 1
	[0295.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg")) returned 0x220
	[0295.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG", dwFileAttributes=0x220) returned 1
	[0295.864] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg.tl30z"), dwFlags=0x1) returned 1
	[0295.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0295.970] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0295.970] ReadFile (in: hFile=0x288, lpBuffer=0x11458000, nNumberOfBytesToRead=0x7214, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11458000*, lpNumberOfBytesRead=0x1131de18*=0x7214, lpOverlapped=0x0) returned 1
	[0295.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e340 | out: pbBuffer=0x1104e340) returned 1
	[0295.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e338 | out: pbBuffer=0x1104e338) returned 1
	[0295.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1126d302 | out: pbBuffer=0x1126d302) returned 1
	[0295.995] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0295.996] GetFileType (hFile=0x288) returned 0x1
	[0295.996] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.996] WriteFile (in: hFile=0x288, lpBuffer=0x110dc000*, nNumberOfBytesToWrite=0x7214, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110dc000*, lpNumberOfBytesWritten=0x11031dfc*=0x7214, lpOverlapped=0x11031e08) returned 1
	[0295.997] GetFileType (hFile=0x288) returned 0x1
	[0295.997] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x7214, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.997] GetFileType (hFile=0x288) returned 0x1
	[0295.997] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.997] WriteFile (in: hFile=0x288, lpBuffer=0x11457c00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11457c00*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0295.998] GetFileType (hFile=0x288) returned 0x1
	[0295.998] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x7214, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0295.998] CloseHandle (hObject=0x288) returned 1
	[0296.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg.tl30z")) returned 0x220
	[0296.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0296.002] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.012] SetEvent (hEvent=0x118) returned 1
	[0296.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg")) returned 0x220
	[0296.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG", dwFileAttributes=0x220) returned 1
	[0296.013] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg.tl30z"), dwFlags=0x1) returned 1
	[0296.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0296.094] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0296.094] ReadFile (in: hFile=0x224, lpBuffer=0x111d0000, nNumberOfBytesToRead=0x8a0c, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x111d0000*, lpNumberOfBytesRead=0x1131de18*=0x8a0c, lpOverlapped=0x0) returned 1
	[0296.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332680 | out: pbBuffer=0x11332680) returned 1
	[0296.100] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ca802 | out: pbBuffer=0x112ca802) returned 1
	[0296.101] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326b0 | out: pbBuffer=0x113326b0) returned 1
	[0296.102] GetFileType (hFile=0x224) returned 0x1
	[0296.102] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.102] WriteFile (in: hFile=0x224, lpBuffer=0x11106000*, nNumberOfBytesToWrite=0x8a0c, lpNumberOfBytesWritten=0x11327dfc, lpOverlapped=0x11327e08 | out: lpBuffer=0x11106000*, lpNumberOfBytesWritten=0x11327dfc*=0x8a0c, lpOverlapped=0x11327e08) returned 1
	[0296.103] GetFileType (hFile=0x224) returned 0x1
	[0296.103] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x8a0c, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.103] GetFileType (hFile=0x224) returned 0x1
	[0296.103] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.104] WriteFile (in: hFile=0x224, lpBuffer=0x11239500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11327dfc, lpOverlapped=0x11327e08 | out: lpBuffer=0x11239500*, lpNumberOfBytesWritten=0x11327dfc*=0x22a, lpOverlapped=0x11327e08) returned 1
	[0296.104] GetFileType (hFile=0x224) returned 0x1
	[0296.104] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x8a0c, lpNewFilePointer=0x0, dwMoveMethod=0x11327de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.104] CloseHandle (hObject=0x224) returned 1
	[0296.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg.tl30z")) returned 0x220
	[0296.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0296.183] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.186] SetEvent (hEvent=0x118) returned 1
	[0296.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf")) returned 0x220
	[0296.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF", dwFileAttributes=0x220) returned 1
	[0296.187] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0296.325] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0296.325] ReadFile (in: hFile=0x250, lpBuffer=0x11376000, nNumberOfBytesToRead=0x1e8e, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11376000*, lpNumberOfBytesRead=0x1131de18*=0x1e8e, lpOverlapped=0x0) returned 1
	[0296.329] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0296.330] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267e02 | out: pbBuffer=0x11267e02) returned 1
	[0296.330] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267ebb | out: pbBuffer=0x11267ebb) returned 1
	[0296.330] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11267ee9 | out: pbBuffer=0x11267ee9) returned 1
	[0296.330] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0296.331] GetFileType (hFile=0x250) returned 0x1
	[0296.331] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.331] WriteFile (in: hFile=0x250, lpBuffer=0x1135e000*, nNumberOfBytesToWrite=0x1e8e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1135e000*, lpNumberOfBytesWritten=0x11031dfc*=0x1e8e, lpOverlapped=0x11031e08) returned 1
	[0296.332] GetFileType (hFile=0x250) returned 0x1
	[0296.332] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1e8e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.332] GetFileType (hFile=0x250) returned 0x1
	[0296.332] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.332] WriteFile (in: hFile=0x250, lpBuffer=0x1138aa80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1138aa80*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0296.333] GetFileType (hFile=0x250) returned 0x1
	[0296.333] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1e8e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.333] CloseHandle (hObject=0x250) returned 1
	[0296.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf.tl30z")) returned 0x220
	[0296.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.337] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.341] SetEvent (hEvent=0x210) returned 1
	[0296.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf")) returned 0x220
	[0296.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF", dwFileAttributes=0x220) returned 1
	[0296.341] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0296.427] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0296.427] ReadFile (in: hFile=0x1d4, lpBuffer=0x11440000, nNumberOfBytesToRead=0x4b4a, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11440000*, lpNumberOfBytesRead=0x1131de18*=0x4b4a, lpOverlapped=0x0) returned 1
	[0296.432] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0296.433] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11305302 | out: pbBuffer=0x11305302) returned 1
	[0296.433] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11305371 | out: pbBuffer=0x11305371) returned 1
	[0296.433] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113053c2 | out: pbBuffer=0x113053c2) returned 1
	[0296.433] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0296.434] GetFileType (hFile=0x1d4) returned 0x1
	[0296.434] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.434] WriteFile (in: hFile=0x1d4, lpBuffer=0x110f0000*, nNumberOfBytesToWrite=0x4b4a, lpNumberOfBytesWritten=0x11301dfc, lpOverlapped=0x11301e08 | out: lpBuffer=0x110f0000*, lpNumberOfBytesWritten=0x11301dfc*=0x4b4a, lpOverlapped=0x11301e08) returned 1
	[0296.435] GetFileType (hFile=0x1d4) returned 0x1
	[0296.435] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4b4a, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.435] GetFileType (hFile=0x1d4) returned 0x1
	[0296.435] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.435] WriteFile (in: hFile=0x1d4, lpBuffer=0x11093880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11301dfc, lpOverlapped=0x11301e08 | out: lpBuffer=0x11093880*, lpNumberOfBytesWritten=0x11301dfc*=0x22d, lpOverlapped=0x11301e08) returned 1
	[0296.436] GetFileType (hFile=0x1d4) returned 0x1
	[0296.436] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x4b4a, lpNewFilePointer=0x0, dwMoveMethod=0x11301de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.436] CloseHandle (hObject=0x1d4) returned 1
	[0296.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf.tl30z")) returned 0x220
	[0296.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.439] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.443] SetEvent (hEvent=0x210) returned 1
	[0296.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf")) returned 0x220
	[0296.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF", dwFileAttributes=0x220) returned 1
	[0296.444] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0296.538] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0296.539] ReadFile (in: hFile=0x288, lpBuffer=0x111f6000, nNumberOfBytesToRead=0xe956, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x111f6000*, lpNumberOfBytesRead=0x1131de18*=0xe956, lpOverlapped=0x0) returned 1
	[0296.544] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f660 | out: pbBuffer=0x1140f660) returned 1
	[0296.544] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f658 | out: pbBuffer=0x1140f658) returned 1
	[0296.544] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11473c02 | out: pbBuffer=0x11473c02) returned 1
	[0296.544] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11473c9a | out: pbBuffer=0x11473c9a) returned 1
	[0296.545] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f690 | out: pbBuffer=0x1140f690) returned 1
	[0296.546] SetEvent (hEvent=0x210) returned 1
	[0296.546] GetFileType (hFile=0x288) returned 0x1
	[0296.547] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.547] WriteFile (in: hFile=0x288, lpBuffer=0x11bf4000*, nNumberOfBytesToWrite=0xe956, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bf4000*, lpNumberOfBytesWritten=0x11031dfc*=0xe956, lpOverlapped=0x11031e08) returned 1
	[0296.547] GetFileType (hFile=0x288) returned 0x1
	[0296.548] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xe956, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.548] GetFileType (hFile=0x288) returned 0x1
	[0296.548] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.548] WriteFile (in: hFile=0x288, lpBuffer=0x1125c000*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1125c000*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0296.548] GetFileType (hFile=0x288) returned 0x1
	[0296.548] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xe956, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.548] CloseHandle (hObject=0x288) returned 1
	[0296.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf.tl30z")) returned 0x220
	[0296.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.554] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.556] SetEvent (hEvent=0x210) returned 1
	[0296.556] SetEvent (hEvent=0x118) returned 1
	[0296.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf")) returned 0x220
	[0296.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF", dwFileAttributes=0x220) returned 1
	[0296.557] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0296.663] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0296.663] ReadFile (in: hFile=0x1d8, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x5eae, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x1131de18*=0x5eae, lpOverlapped=0x0) returned 1
	[0296.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0296.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f258 | out: pbBuffer=0x1140f258) returned 1
	[0296.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e9302 | out: pbBuffer=0x110e9302) returned 1
	[0296.668] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0296.669] GetFileType (hFile=0x1d8) returned 0x1
	[0296.669] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.669] WriteFile (in: hFile=0x1d8, lpBuffer=0x11150000*, nNumberOfBytesToWrite=0x5eae, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x11150000*, lpNumberOfBytesWritten=0x112a1dfc*=0x5eae, lpOverlapped=0x112a1e08) returned 1
	[0296.670] GetFileType (hFile=0x1d8) returned 0x1
	[0296.670] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5eae, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.670] GetFileType (hFile=0x1d8) returned 0x1
	[0296.670] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.670] WriteFile (in: hFile=0x1d8, lpBuffer=0x1124d880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x1124d880*, lpNumberOfBytesWritten=0x112a1dfc*=0x236, lpOverlapped=0x112a1e08) returned 1
	[0296.671] GetFileType (hFile=0x1d8) returned 0x1
	[0296.671] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x5eae, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.671] CloseHandle (hObject=0x1d8) returned 1
	[0296.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf.tl30z")) returned 0x220
	[0296.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.673] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.674] SetEvent (hEvent=0x1f0) returned 1
	[0296.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf")) returned 0x220
	[0296.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF", dwFileAttributes=0x220) returned 1
	[0296.675] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf.tl30z"), dwFlags=0x1) returned 1
	[0296.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0296.742] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0296.742] ReadFile (in: hFile=0x224, lpBuffer=0x111e4000, nNumberOfBytesToRead=0x37e4, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x111e4000*, lpNumberOfBytesRead=0x1131de18*=0x37e4, lpOverlapped=0x0) returned 1
	[0296.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0296.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111f4702 | out: pbBuffer=0x111f4702) returned 1
	[0296.749] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111f47c7 | out: pbBuffer=0x111f47c7) returned 1
	[0296.750] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0296.754] SetEvent (hEvent=0x218) returned 1
	[0296.754] GetFileType (hFile=0x224) returned 0x1
	[0296.754] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.754] WriteFile (in: hFile=0x224, lpBuffer=0x110fa000*, nNumberOfBytesToWrite=0x37e4, lpNumberOfBytesWritten=0x112a5dfc, lpOverlapped=0x112a5e08 | out: lpBuffer=0x110fa000*, lpNumberOfBytesWritten=0x112a5dfc*=0x37e4, lpOverlapped=0x112a5e08) returned 1
	[0296.754] GetFileType (hFile=0x224) returned 0x1
	[0296.755] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x37e4, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.755] GetFileType (hFile=0x224) returned 0x1
	[0296.755] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.755] WriteFile (in: hFile=0x224, lpBuffer=0x111d3500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112a5dfc, lpOverlapped=0x112a5e08 | out: lpBuffer=0x111d3500*, lpNumberOfBytesWritten=0x112a5dfc*=0x233, lpOverlapped=0x112a5e08) returned 1
	[0296.755] GetFileType (hFile=0x224) returned 0x1
	[0296.755] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x37e4, lpNewFilePointer=0x0, dwMoveMethod=0x112a5de0 | out: lpNewFilePointer=0x0) returned 1
	[0296.755] CloseHandle (hObject=0x224) returned 1
	[0296.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf.tl30z")) returned 0x220
	[0296.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0296.762] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.763] SetEvent (hEvent=0x218) returned 1
	[0296.763] SetEvent (hEvent=0x210) returned 1
	[0296.763] SwitchToThread () returned 1
	[0296.767] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.786] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.803] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.835] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.856] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.874] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.895] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.913] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.964] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0296.980] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.000] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.025] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.045] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.066] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.082] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.101] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.120] SetEvent (hEvent=0x218) returned 1
	[0297.121] SetEvent (hEvent=0x1b0) returned 1
	[0297.121] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0297.124] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.125] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0297.126] SetEvent (hEvent=0x118) returned 1
	[0297.126] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0297.129] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.166] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.188] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.197] SetEvent (hEvent=0x118) returned 1
	[0297.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf")) returned 0x220
	[0297.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF", dwFileAttributes=0x220) returned 1
	[0297.197] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0297.351] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0297.351] ReadFile (in: hFile=0x1fc, lpBuffer=0x113da000, nNumberOfBytesToRead=0xd90, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x113da000*, lpNumberOfBytesRead=0x11316e18*=0xd90, lpOverlapped=0x0) returned 1
	[0297.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0297.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b2802 | out: pbBuffer=0x113b2802) returned 1
	[0297.357] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b2876 | out: pbBuffer=0x113b2876) returned 1
	[0297.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0297.358] GetFileType (hFile=0x1fc) returned 0x1
	[0297.358] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.359] WriteFile (in: hFile=0x1fc, lpBuffer=0x110be000*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x11107dfc, lpOverlapped=0x11107e08 | out: lpBuffer=0x110be000*, lpNumberOfBytesWritten=0x11107dfc*=0xd90, lpOverlapped=0x11107e08) returned 1
	[0297.359] GetFileType (hFile=0x1fc) returned 0x1
	[0297.359] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd90, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.359] GetFileType (hFile=0x1fc) returned 0x1
	[0297.359] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.360] WriteFile (in: hFile=0x1fc, lpBuffer=0x113c8a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11107dfc, lpOverlapped=0x11107e08 | out: lpBuffer=0x113c8a80*, lpNumberOfBytesWritten=0x11107dfc*=0x227, lpOverlapped=0x11107e08) returned 1
	[0297.360] GetFileType (hFile=0x1fc) returned 0x1
	[0297.360] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xd90, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.361] CloseHandle (hObject=0x1fc) returned 1
	[0297.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf.tl30z")) returned 0x220
	[0297.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.365] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.368] SetEvent (hEvent=0x218) returned 1
	[0297.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf")) returned 0x220
	[0297.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF", dwFileAttributes=0x220) returned 1
	[0297.369] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0297.474] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0297.474] ReadFile (in: hFile=0x1d4, lpBuffer=0x111c8000, nNumberOfBytesToRead=0x3b5c, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x111c8000*, lpNumberOfBytesRead=0x11316e18*=0x3b5c, lpOverlapped=0x0) returned 1
	[0297.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0297.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b3e02 | out: pbBuffer=0x113b3e02) returned 1
	[0297.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b3e9a | out: pbBuffer=0x113b3e9a) returned 1
	[0297.482] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b3ed2 | out: pbBuffer=0x113b3ed2) returned 1
	[0297.483] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e500 | out: pbBuffer=0x1104e500) returned 1
	[0297.483] GetFileType (hFile=0x1d4) returned 0x1
	[0297.484] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.484] WriteFile (in: hFile=0x1d4, lpBuffer=0x11456000*, nNumberOfBytesToWrite=0x3b5c, lpNumberOfBytesWritten=0x11107dfc, lpOverlapped=0x11107e08 | out: lpBuffer=0x11456000*, lpNumberOfBytesWritten=0x11107dfc*=0x3b5c, lpOverlapped=0x11107e08) returned 1
	[0297.484] GetFileType (hFile=0x1d4) returned 0x1
	[0297.484] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3b5c, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.484] GetFileType (hFile=0x1d4) returned 0x1
	[0297.485] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.485] WriteFile (in: hFile=0x1d4, lpBuffer=0x1143e700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11107dfc, lpOverlapped=0x11107e08 | out: lpBuffer=0x1143e700*, lpNumberOfBytesWritten=0x11107dfc*=0x233, lpOverlapped=0x11107e08) returned 1
	[0297.485] GetFileType (hFile=0x1d4) returned 0x1
	[0297.485] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x3b5c, lpNewFilePointer=0x0, dwMoveMethod=0x11107de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.485] CloseHandle (hObject=0x1d4) returned 1
	[0297.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf.tl30z")) returned 0x220
	[0297.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.489] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.493] SetEvent (hEvent=0x218) returned 1
	[0297.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf")) returned 0x220
	[0297.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF", dwFileAttributes=0x220) returned 1
	[0297.494] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0297.655] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0297.656] ReadFile (in: hFile=0x1d8, lpBuffer=0x11070600, nNumberOfBytesToRead=0x11b6, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11070600*, lpNumberOfBytesRead=0x11316e18*=0x11b6, lpOverlapped=0x0) returned 1
	[0297.664] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0297.664] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6258 | out: pbBuffer=0x113e6258) returned 1
	[0297.664] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112af202 | out: pbBuffer=0x112af202) returned 1
	[0297.665] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0297.665] GetFileType (hFile=0x1d8) returned 0x1
	[0297.665] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.665] WriteFile (in: hFile=0x1d8, lpBuffer=0x11252000*, nNumberOfBytesToWrite=0x11b6, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11252000*, lpNumberOfBytesWritten=0x1102bdfc*=0x11b6, lpOverlapped=0x1102be08) returned 1
	[0297.666] GetFileType (hFile=0x1d8) returned 0x1
	[0297.666] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x11b6, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.666] GetFileType (hFile=0x1d8) returned 0x1
	[0297.666] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.666] WriteFile (in: hFile=0x1d8, lpBuffer=0x11471c00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11471c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0297.666] GetFileType (hFile=0x1d8) returned 0x1
	[0297.666] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x11b6, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.667] CloseHandle (hObject=0x1d8) returned 1
	[0297.668] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf.tl30z")) returned 0x220
	[0297.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.671] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.672] SetEvent (hEvent=0x218) returned 1
	[0297.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf")) returned 0x220
	[0297.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF", dwFileAttributes=0x220) returned 1
	[0297.673] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0297.769] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0297.769] ReadFile (in: hFile=0x224, lpBuffer=0x111df000, nNumberOfBytesToRead=0xe60, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x111df000*, lpNumberOfBytesRead=0x11316e18*=0xe60, lpOverlapped=0x0) returned 1
	[0297.775] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e370 | out: pbBuffer=0x1104e370) returned 1
	[0297.775] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e368 | out: pbBuffer=0x1104e368) returned 1
	[0297.775] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d5202 | out: pbBuffer=0x110d5202) returned 1
	[0297.775] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d5238 | out: pbBuffer=0x110d5238) returned 1
	[0297.776] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3a0 | out: pbBuffer=0x1104e3a0) returned 1
	[0297.776] GetFileType (hFile=0x224) returned 0x1
	[0297.776] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.776] WriteFile (in: hFile=0x224, lpBuffer=0x112fc000*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x112fc000*, lpNumberOfBytesWritten=0x1129ddfc*=0xe60, lpOverlapped=0x1129de08) returned 1
	[0297.777] GetFileType (hFile=0x224) returned 0x1
	[0297.777] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe60, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.777] GetFileType (hFile=0x224) returned 0x1
	[0297.777] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.777] WriteFile (in: hFile=0x224, lpBuffer=0x110e7880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1129ddfc, lpOverlapped=0x1129de08 | out: lpBuffer=0x110e7880*, lpNumberOfBytesWritten=0x1129ddfc*=0x227, lpOverlapped=0x1129de08) returned 1
	[0297.778] GetFileType (hFile=0x224) returned 0x1
	[0297.778] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe60, lpNewFilePointer=0x0, dwMoveMethod=0x1129dde0 | out: lpNewFilePointer=0x0) returned 1
	[0297.778] CloseHandle (hObject=0x224) returned 1
	[0297.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf.tl30z")) returned 0x220
	[0297.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.781] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.787] SetEvent (hEvent=0x218) returned 1
	[0297.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf")) returned 0x220
	[0297.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF", dwFileAttributes=0x220) returned 1
	[0297.788] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf.tl30z"), dwFlags=0x1) returned 1
	[0297.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0297.873] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0297.873] ReadFile (in: hFile=0x1fc, lpBuffer=0x11460000, nNumberOfBytesToRead=0x3586, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11460000*, lpNumberOfBytesRead=0x11316e18*=0x3586, lpOverlapped=0x0) returned 1
	[0297.881] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0297.881] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a7d02 | out: pbBuffer=0x112a7d02) returned 1
	[0297.882] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0297.883] GetFileType (hFile=0x1fc) returned 0x1
	[0297.883] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.883] WriteFile (in: hFile=0x1fc, lpBuffer=0x11120000*, nNumberOfBytesToWrite=0x3586, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x11120000*, lpNumberOfBytesWritten=0x112a1dfc*=0x3586, lpOverlapped=0x112a1e08) returned 1
	[0297.884] GetFileType (hFile=0x1fc) returned 0x1
	[0297.884] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3586, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.884] GetFileType (hFile=0x1fc) returned 0x1
	[0297.884] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.884] WriteFile (in: hFile=0x1fc, lpBuffer=0x11100700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112a1dfc, lpOverlapped=0x112a1e08 | out: lpBuffer=0x11100700*, lpNumberOfBytesWritten=0x112a1dfc*=0x22d, lpOverlapped=0x112a1e08) returned 1
	[0297.885] GetFileType (hFile=0x1fc) returned 0x1
	[0297.885] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3586, lpNewFilePointer=0x0, dwMoveMethod=0x112a1de0 | out: lpNewFilePointer=0x0) returned 1
	[0297.885] CloseHandle (hObject=0x1fc) returned 1
	[0297.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf.tl30z")) returned 0x220
	[0297.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0297.889] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0297.892] SetEvent (hEvent=0x218) returned 1
	[0297.892] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf")) returned 0x220
	[0297.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF", dwFileAttributes=0x220) returned 1
	[0297.893] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0298.050] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0298.050] ReadFile (in: hFile=0x1fc, lpBuffer=0x11058000, nNumberOfBytesToRead=0x849c, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x11316e18*=0x849c, lpOverlapped=0x0) returned 1
	[0298.061] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0298.061] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0298.061] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11066802 | out: pbBuffer=0x11066802) returned 1
	[0298.061] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0298.062] GetFileType (hFile=0x1fc) returned 0x1
	[0298.063] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.063] WriteFile (in: hFile=0x1fc, lpBuffer=0x111c0000*, nNumberOfBytesToWrite=0x849c, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x111c0000*, lpNumberOfBytesWritten=0x1138fdfc*=0x849c, lpOverlapped=0x1138fe08) returned 1
	[0298.063] GetFileType (hFile=0x1fc) returned 0x1
	[0298.064] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x849c, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.064] GetFileType (hFile=0x1fc) returned 0x1
	[0298.064] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.064] WriteFile (in: hFile=0x1fc, lpBuffer=0x1133aa80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1138fdfc, lpOverlapped=0x1138fe08 | out: lpBuffer=0x1133aa80*, lpNumberOfBytesWritten=0x1138fdfc*=0x22d, lpOverlapped=0x1138fe08) returned 1
	[0298.064] GetFileType (hFile=0x1fc) returned 0x1
	[0298.064] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x849c, lpNewFilePointer=0x0, dwMoveMethod=0x1138fde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.065] CloseHandle (hObject=0x1fc) returned 1
	[0298.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf.tl30z")) returned 0x220
	[0298.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.078] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0298.093] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0298.146] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0298.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf")) returned 0x220
	[0298.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF", dwFileAttributes=0x220) returned 1
	[0298.157] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0298.254] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0298.254] ReadFile (in: hFile=0x224, lpBuffer=0x113aa000, nNumberOfBytesToRead=0xa69e, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11022e18*=0xa69e, lpOverlapped=0x0) returned 1
	[0298.260] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0298.260] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11432802 | out: pbBuffer=0x11432802) returned 1
	[0298.260] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11432812 | out: pbBuffer=0x11432812) returned 1
	[0298.260] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11432879 | out: pbBuffer=0x11432879) returned 1
	[0298.260] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1143287a | out: pbBuffer=0x1143287a) returned 1
	[0298.261] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11432886 | out: pbBuffer=0x11432886) returned 1
	[0298.261] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11432898 | out: pbBuffer=0x11432898) returned 1
	[0298.261] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0298.262] GetFileType (hFile=0x224) returned 0x1
	[0298.262] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.262] WriteFile (in: hFile=0x224, lpBuffer=0x113b8000*, nNumberOfBytesToWrite=0xa69e, lpNumberOfBytesWritten=0x111c3dfc, lpOverlapped=0x111c3e08 | out: lpBuffer=0x113b8000*, lpNumberOfBytesWritten=0x111c3dfc*=0xa69e, lpOverlapped=0x111c3e08) returned 1
	[0298.264] GetFileType (hFile=0x224) returned 0x1
	[0298.264] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa69e, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.264] GetFileType (hFile=0x224) returned 0x1
	[0298.264] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.264] WriteFile (in: hFile=0x224, lpBuffer=0x1133ea80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x111c3dfc, lpOverlapped=0x111c3e08 | out: lpBuffer=0x1133ea80*, lpNumberOfBytesWritten=0x111c3dfc*=0x236, lpOverlapped=0x111c3e08) returned 1
	[0298.264] GetFileType (hFile=0x224) returned 0x1
	[0298.264] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa69e, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.265] CloseHandle (hObject=0x224) returned 1
	[0298.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf.tl30z")) returned 0x220
	[0298.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.268] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0298.271] SetEvent (hEvent=0x218) returned 1
	[0298.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf")) returned 0x220
	[0298.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF", dwFileAttributes=0x220) returned 1
	[0298.272] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0298.384] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0298.384] ReadFile (in: hFile=0x224, lpBuffer=0x11208000, nNumberOfBytesToRead=0xe17a, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11208000*, lpNumberOfBytesRead=0x11022e18*=0xe17a, lpOverlapped=0x0) returned 1
	[0298.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0298.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1121a702 | out: pbBuffer=0x1121a702) returned 1
	[0298.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1121a741 | out: pbBuffer=0x1121a741) returned 1
	[0298.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326c0 | out: pbBuffer=0x113326c0) returned 1
	[0298.394] GetFileType (hFile=0x224) returned 0x1
	[0298.394] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.394] WriteFile (in: hFile=0x224, lpBuffer=0x1112e000*, nNumberOfBytesToWrite=0xe17a, lpNumberOfBytesWritten=0x111c3dfc, lpOverlapped=0x111c3e08 | out: lpBuffer=0x1112e000*, lpNumberOfBytesWritten=0x111c3dfc*=0xe17a, lpOverlapped=0x111c3e08) returned 1
	[0298.395] GetFileType (hFile=0x224) returned 0x1
	[0298.395] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe17a, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.395] GetFileType (hFile=0x224) returned 0x1
	[0298.395] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.395] WriteFile (in: hFile=0x224, lpBuffer=0x110c9500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x111c3dfc, lpOverlapped=0x111c3e08 | out: lpBuffer=0x110c9500*, lpNumberOfBytesWritten=0x111c3dfc*=0x236, lpOverlapped=0x111c3e08) returned 1
	[0298.395] GetFileType (hFile=0x224) returned 0x1
	[0298.395] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xe17a, lpNewFilePointer=0x0, dwMoveMethod=0x111c3de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.398] CloseHandle (hObject=0x224) returned 1
	[0298.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf.tl30z")) returned 0x220
	[0298.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf")) returned 0x220
	[0298.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF", dwFileAttributes=0x220) returned 1
	[0298.403] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0298.648] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0298.648] ReadFile (in: hFile=0x1d8, lpBuffer=0x112a2000, nNumberOfBytesToRead=0x4124, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x112a2000*, lpNumberOfBytesRead=0x1131ae18*=0x4124, lpOverlapped=0x0) returned 1
	[0298.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0298.653] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11176802 | out: pbBuffer=0x11176802) returned 1
	[0298.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0298.654] GetFileType (hFile=0x1d8) returned 0x1
	[0298.654] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.654] WriteFile (in: hFile=0x1d8, lpBuffer=0x11142000*, nNumberOfBytesToWrite=0x4124, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x11142000*, lpNumberOfBytesWritten=0x112bbdfc*=0x4124, lpOverlapped=0x112bbe08) returned 1
	[0298.655] GetFileType (hFile=0x1d8) returned 0x1
	[0298.655] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4124, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.655] GetFileType (hFile=0x1d8) returned 0x1
	[0298.655] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.655] WriteFile (in: hFile=0x1d8, lpBuffer=0x1137ca80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x1137ca80*, lpNumberOfBytesWritten=0x112bbdfc*=0x224, lpOverlapped=0x112bbe08) returned 1
	[0298.656] GetFileType (hFile=0x1d8) returned 0x1
	[0298.656] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4124, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0298.656] CloseHandle (hObject=0x1d8) returned 1
	[0298.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf.tl30z")) returned 0x220
	[0298.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.659] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0298.661] SetEvent (hEvent=0x118) returned 1
	[0298.662] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf")) returned 0x220
	[0298.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF", dwFileAttributes=0x220) returned 1
	[0298.662] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf.tl30z"), dwFlags=0x1) returned 1
	[0298.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0298.731] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0298.731] ReadFile (in: hFile=0x1d8, lpBuffer=0x11448000, nNumberOfBytesToRead=0x27b4, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11448000*, lpNumberOfBytesRead=0x1131ae18*=0x27b4, lpOverlapped=0x0) returned 1
	[0298.741] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0298.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e3c02 | out: pbBuffer=0x113e3c02) returned 1
	[0298.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e3c1f | out: pbBuffer=0x113e3c1f) returned 1
	[0298.742] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0298.743] GetFileType (hFile=0x1d8) returned 0x1
	[0298.743] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.743] WriteFile (in: hFile=0x1d8, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0x27b4, lpNumberOfBytesWritten=0x112b7dfc, lpOverlapped=0x112b7e08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x112b7dfc*=0x27b4, lpOverlapped=0x112b7e08) returned 1
	[0298.743] GetFileType (hFile=0x1d8) returned 0x1
	[0298.743] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x27b4, lpNewFilePointer=0x0, dwMoveMethod=0x112b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.743] GetFileType (hFile=0x1d8) returned 0x1
	[0298.743] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.744] WriteFile (in: hFile=0x1d8, lpBuffer=0x1145a700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112b7dfc, lpOverlapped=0x112b7e08 | out: lpBuffer=0x1145a700*, lpNumberOfBytesWritten=0x112b7dfc*=0x230, lpOverlapped=0x112b7e08) returned 1
	[0298.744] GetFileType (hFile=0x1d8) returned 0x1
	[0298.744] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x27b4, lpNewFilePointer=0x0, dwMoveMethod=0x112b7de0 | out: lpNewFilePointer=0x0) returned 1
	[0298.744] CloseHandle (hObject=0x1d8) returned 1
	[0298.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf.tl30z")) returned 0x220
	[0298.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0298.757] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0298.765] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0298.786] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0298.801] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0298.809] SetEvent (hEvent=0x218) returned 1
	[0298.810] SetEvent (hEvent=0x1b0) returned 1
	[0298.810] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0298.812] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0298.814] SetEvent (hEvent=0x26c) returned 1
	[0298.814] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0298.817] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0298.817] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.232] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.234] SetEvent (hEvent=0x118) returned 1
	[0299.234] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.238] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.242] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.271] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.310] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.329] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.347] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.363] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.381] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.400] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.421] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.437] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.456] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.476] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.495] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.505] SetEvent (hEvent=0x118) returned 1
	[0299.506] SetEvent (hEvent=0x1b0) returned 1
	[0299.506] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0299.509] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.509] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x0
	[0299.511] SetEvent (hEvent=0x26c) returned 1
	[0299.511] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0299.512] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.512] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.870] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.872] SetEvent (hEvent=0x118) returned 1
	[0299.872] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.876] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.881] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.900] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.954] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.976] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0299.996] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0300.019] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0300.042] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0300.061] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0300.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf")) returned 0x220
	[0300.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF", dwFileAttributes=0x220) returned 1
	[0300.069] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0300.111] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0300.111] ReadFile (in: hFile=0x204, lpBuffer=0x11430000, nNumberOfBytesToRead=0x312c, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11319e18*=0x312c, lpOverlapped=0x0) returned 1
	[0300.532] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158470 | out: pbBuffer=0x11158470) returned 1
	[0300.532] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122f502 | out: pbBuffer=0x1122f502) returned 1
	[0300.532] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111584a0 | out: pbBuffer=0x111584a0) returned 1
	[0300.533] GetFileType (hFile=0x204) returned 0x1
	[0300.533] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.533] WriteFile (in: hFile=0x204, lpBuffer=0x111a8000*, nNumberOfBytesToWrite=0x312c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111a8000*, lpNumberOfBytesWritten=0x1133fdfc*=0x312c, lpOverlapped=0x1133fe08) returned 1
	[0300.533] GetFileType (hFile=0x204) returned 0x1
	[0300.533] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x312c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.533] GetFileType (hFile=0x204) returned 0x1
	[0300.534] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.534] WriteFile (in: hFile=0x204, lpBuffer=0x11310700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11310700*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0300.534] GetFileType (hFile=0x204) returned 0x1
	[0300.534] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x312c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.534] CloseHandle (hObject=0x204) returned 1
	[0300.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf.tl30z")) returned 0x220
	[0300.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.560] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0300.564] SetEvent (hEvent=0x160) returned 1
	[0300.564] SetEvent (hEvent=0x240) returned 1
	[0300.564] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0300.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf")) returned 0x220
	[0300.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF", dwFileAttributes=0x220) returned 1
	[0300.606] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0300.659] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11445e08 | out: lpMode=0x11445e08) returned 0
	[0300.659] ReadFile (in: hFile=0x204, lpBuffer=0x11266000, nNumberOfBytesToRead=0xa4e, lpNumberOfBytesRead=0x11445e18, lpOverlapped=0x0 | out: lpBuffer=0x11266000*, lpNumberOfBytesRead=0x11445e18*=0xa4e, lpOverlapped=0x0) returned 1
	[0301.005] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0301.015] SetEvent (hEvent=0x26c) returned 1
	[0301.015] SetEvent (hEvent=0x1e0) returned 1
	[0301.015] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0301.119] SetEvent (hEvent=0x26c) returned 1
	[0301.119] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0301.123] SetEvent (hEvent=0x1bc) returned 1
	[0301.123] SetEvent (hEvent=0x210) returned 1
	[0301.123] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0301.126] SetEvent (hEvent=0x1bc) returned 1
	[0301.126] SetEvent (hEvent=0x160) returned 1
	[0301.126] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0301.132] SetEvent (hEvent=0x118) returned 1
	[0301.132] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0308.660] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0308.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid")) returned 0x220
	[0308.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID", dwFileAttributes=0x220) returned 1
	[0308.674] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.727] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0308.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0308.732] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11091e08 | out: lpMode=0x11091e08) returned 0
	[0308.732] ReadFile (in: hFile=0x200, lpBuffer=0x11109800, nNumberOfBytesToRead=0x1540, lpNumberOfBytesRead=0x11091e18, lpOverlapped=0x0 | out: lpBuffer=0x11109800*, lpNumberOfBytesRead=0x11091e18*=0x1540, lpOverlapped=0x0) returned 1
	[0308.876] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0308.955] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f650 | out: pbBuffer=0x1140f650) returned 1
	[0308.955] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1140a402 | out: pbBuffer=0x1140a402) returned 1
	[0308.955] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f680 | out: pbBuffer=0x1140f680) returned 1
	[0308.956] GetFileType (hFile=0x200) returned 0x1
	[0308.956] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.956] WriteFile (in: hFile=0x200, lpBuffer=0x112ca000*, nNumberOfBytesToWrite=0x1540, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x112ca000*, lpNumberOfBytesWritten=0x1145bdfc*=0x1540, lpOverlapped=0x1145be08) returned 1
	[0308.956] GetFileType (hFile=0x200) returned 0x1
	[0308.956] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x1540, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.957] GetFileType (hFile=0x200) returned 0x1
	[0308.957] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.957] WriteFile (in: hFile=0x200, lpBuffer=0x11c0fc00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x11c0fc00*, lpNumberOfBytesWritten=0x1145bdfc*=0x224, lpOverlapped=0x1145be08) returned 1
	[0308.957] GetFileType (hFile=0x200) returned 0x1
	[0308.957] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x1540, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.957] CloseHandle (hObject=0x200) returned 1
	[0308.957] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid.tl30z")) returned 0x220
	[0308.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0308.958] SetEvent (hEvent=0x1e8) returned 1
	[0308.958] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0309.074] SetEvent (hEvent=0x27c) returned 1
	[0309.074] SetEvent (hEvent=0x164) returned 1
	[0309.074] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0309.087] SetEvent (hEvent=0x27c) returned 1
	[0309.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf")) returned 0x220
	[0309.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF", dwFileAttributes=0x220) returned 1
	[0309.088] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0309.091] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11092e08 | out: lpMode=0x11092e08) returned 0
	[0309.091] ReadFile (in: hFile=0x184, lpBuffer=0x112a6800, nNumberOfBytesToRead=0x411a, lpNumberOfBytesRead=0x11092e18, lpOverlapped=0x0 | out: lpBuffer=0x112a6800*, lpNumberOfBytesRead=0x11092e18*=0x411a, lpOverlapped=0x0) returned 1
	[0309.137] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0309.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c62602 | out: pbBuffer=0x11c62602) returned 1
	[0309.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62c0 | out: pbBuffer=0x113e62c0) returned 1
	[0309.138] GetFileType (hFile=0x184) returned 0x1
	[0309.139] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.139] WriteFile (in: hFile=0x184, lpBuffer=0x111de000*, nNumberOfBytesToWrite=0x411a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111de000*, lpNumberOfBytesWritten=0x1102bdfc*=0x411a, lpOverlapped=0x1102be08) returned 1
	[0309.139] GetFileType (hFile=0x184) returned 0x1
	[0309.139] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x411a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.140] GetFileType (hFile=0x184) returned 0x1
	[0309.140] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.140] WriteFile (in: hFile=0x184, lpBuffer=0x1124f180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1124f180*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0309.140] GetFileType (hFile=0x184) returned 0x1
	[0309.140] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x411a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.140] CloseHandle (hObject=0x184) returned 1
	[0309.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf.tl30z")) returned 0x220
	[0309.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf")) returned 0x220
	[0309.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF", dwFileAttributes=0x220) returned 1
	[0309.142] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0309.144] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0309.144] ReadFile (in: hFile=0x184, lpBuffer=0x1136e000, nNumberOfBytesToRead=0x4d18, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x1128be18*=0x4d18, lpOverlapped=0x0) returned 1
	[0309.163] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0309.163] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c63102 | out: pbBuffer=0x11c63102) returned 1
	[0309.163] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6440 | out: pbBuffer=0x113e6440) returned 1
	[0309.164] GetFileType (hFile=0x184) returned 0x1
	[0309.164] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.164] WriteFile (in: hFile=0x184, lpBuffer=0x113c2000*, nNumberOfBytesToWrite=0x4d18, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113c2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4d18, lpOverlapped=0x1102be08) returned 1
	[0309.165] GetFileType (hFile=0x184) returned 0x1
	[0309.165] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x4d18, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.165] GetFileType (hFile=0x184) returned 0x1
	[0309.165] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.165] WriteFile (in: hFile=0x184, lpBuffer=0x11bf0000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bf0000*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0309.166] GetFileType (hFile=0x184) returned 0x1
	[0309.166] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x4d18, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.166] CloseHandle (hObject=0x184) returned 1
	[0309.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf.tl30z")) returned 0x220
	[0309.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf")) returned 0x220
	[0309.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF", dwFileAttributes=0x220) returned 1
	[0309.167] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0309.321] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0309.321] ReadFile (in: hFile=0x184, lpBuffer=0x11c6e800, nNumberOfBytesToRead=0x47ec, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11c6e800*, lpNumberOfBytesRead=0x1131de18*=0x47ec, lpOverlapped=0x0) returned 1
	[0309.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0309.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0309.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c44902 | out: pbBuffer=0x11c44902) returned 1
	[0309.327] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0309.328] GetFileType (hFile=0x184) returned 0x1
	[0309.328] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.328] WriteFile (in: hFile=0x184, lpBuffer=0x11418000*, nNumberOfBytesToWrite=0x47ec, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11418000*, lpNumberOfBytesWritten=0x1102bdfc*=0x47ec, lpOverlapped=0x1102be08) returned 1
	[0309.329] GetFileType (hFile=0x184) returned 0x1
	[0309.329] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x47ec, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.329] GetFileType (hFile=0x184) returned 0x1
	[0309.329] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.329] WriteFile (in: hFile=0x184, lpBuffer=0x11c0ea80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c0ea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0309.329] GetFileType (hFile=0x184) returned 0x1
	[0309.330] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x47ec, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.330] CloseHandle (hObject=0x184) returned 1
	[0309.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf.tl30z")) returned 0x220
	[0309.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.333] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0309.335] SetEvent (hEvent=0x26c) returned 1
	[0309.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf")) returned 0x220
	[0309.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF", dwFileAttributes=0x220) returned 1
	[0309.336] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0309.504] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0309.504] ReadFile (in: hFile=0x184, lpBuffer=0x1112c000, nNumberOfBytesToRead=0x6028, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1112c000*, lpNumberOfBytesRead=0x1131de18*=0x6028, lpOverlapped=0x0) returned 1
	[0309.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126560 | out: pbBuffer=0x11126560) returned 1
	[0309.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11142602 | out: pbBuffer=0x11142602) returned 1
	[0309.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111426e0 | out: pbBuffer=0x111426e0) returned 1
	[0309.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111426e7 | out: pbBuffer=0x111426e7) returned 1
	[0309.510] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126590 | out: pbBuffer=0x11126590) returned 1
	[0309.512] GetFileType (hFile=0x184) returned 0x1
	[0309.512] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.512] WriteFile (in: hFile=0x184, lpBuffer=0x11444000*, nNumberOfBytesToWrite=0x6028, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11444000*, lpNumberOfBytesWritten=0x11031dfc*=0x6028, lpOverlapped=0x11031e08) returned 1
	[0309.513] GetFileType (hFile=0x184) returned 0x1
	[0309.513] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x6028, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.513] GetFileType (hFile=0x184) returned 0x1
	[0309.513] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.513] WriteFile (in: hFile=0x184, lpBuffer=0x110bd500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110bd500*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0309.514] GetFileType (hFile=0x184) returned 0x1
	[0309.514] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x6028, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.514] CloseHandle (hObject=0x184) returned 1
	[0309.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf.tl30z")) returned 0x220
	[0309.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf")) returned 0x220
	[0309.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF", dwFileAttributes=0x220) returned 1
	[0309.518] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0309.606] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11095e08 | out: lpMode=0x11095e08) returned 0
	[0309.606] ReadFile (in: hFile=0x184, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x1afc, lpNumberOfBytesRead=0x11095e18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x11095e18*=0x1afc, lpOverlapped=0x0) returned 1
	[0309.612] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126100 | out: pbBuffer=0x11126100) returned 1
	[0309.613] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bc6802 | out: pbBuffer=0x11bc6802) returned 1
	[0309.613] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bc6872 | out: pbBuffer=0x11bc6872) returned 1
	[0309.613] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11bc68b1 | out: pbBuffer=0x11bc68b1) returned 1
	[0309.614] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126130 | out: pbBuffer=0x11126130) returned 1
	[0309.614] GetFileType (hFile=0x184) returned 0x1
	[0309.614] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.614] WriteFile (in: hFile=0x184, lpBuffer=0x11374000*, nNumberOfBytesToWrite=0x1afc, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11374000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1afc, lpOverlapped=0x1102be08) returned 1
	[0309.615] GetFileType (hFile=0x184) returned 0x1
	[0309.615] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x1afc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.615] GetFileType (hFile=0x184) returned 0x1
	[0309.615] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.615] WriteFile (in: hFile=0x184, lpBuffer=0x1134ca80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1134ca80*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0309.616] GetFileType (hFile=0x184) returned 0x1
	[0309.616] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x1afc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.616] CloseHandle (hObject=0x184) returned 1
	[0309.617] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf.tl30z")) returned 0x220
	[0309.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf")) returned 0x220
	[0309.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF", dwFileAttributes=0x220) returned 1
	[0309.620] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0309.704] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11090e08 | out: lpMode=0x11090e08) returned 0
	[0309.704] ReadFile (in: hFile=0x184, lpBuffer=0x11bea000, nNumberOfBytesToRead=0x3100, lpNumberOfBytesRead=0x11090e18, lpOverlapped=0x0 | out: lpBuffer=0x11bea000*, lpNumberOfBytesRead=0x11090e18*=0x3100, lpOverlapped=0x0) returned 1
	[0309.711] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0309.712] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125b202 | out: pbBuffer=0x1125b202) returned 1
	[0309.712] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125b226 | out: pbBuffer=0x1125b226) returned 1
	[0309.712] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125b22d | out: pbBuffer=0x1125b22d) returned 1
	[0309.712] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0309.713] GetFileType (hFile=0x184) returned 0x1
	[0309.713] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.713] WriteFile (in: hFile=0x184, lpBuffer=0x110f8000*, nNumberOfBytesToWrite=0x3100, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x110f8000*, lpNumberOfBytesWritten=0x11251dfc*=0x3100, lpOverlapped=0x11251e08) returned 1
	[0309.713] GetFileType (hFile=0x184) returned 0x1
	[0309.713] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x3100, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.714] GetFileType (hFile=0x184) returned 0x1
	[0309.714] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.714] WriteFile (in: hFile=0x184, lpBuffer=0x112ff880*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11251dfc, lpOverlapped=0x11251e08 | out: lpBuffer=0x112ff880*, lpNumberOfBytesWritten=0x11251dfc*=0x221, lpOverlapped=0x11251e08) returned 1
	[0309.714] GetFileType (hFile=0x184) returned 0x1
	[0309.714] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x3100, lpNewFilePointer=0x0, dwMoveMethod=0x11251de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.714] CloseHandle (hObject=0x184) returned 1
	[0309.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf.tl30z")) returned 0x220
	[0309.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf")) returned 0x220
	[0309.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF", dwFileAttributes=0x220) returned 1
	[0309.721] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0310.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0310.933] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0310.933] ReadFile (in: hFile=0x290, lpBuffer=0x111e4000, nNumberOfBytesToRead=0x1418, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111e4000*, lpNumberOfBytesRead=0x11023e18*=0x1418, lpOverlapped=0x0) returned 1
	[0310.938] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0310.938] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332808 | out: pbBuffer=0x11332808) returned 1
	[0310.938] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c41e02 | out: pbBuffer=0x11c41e02) returned 1
	[0310.938] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c41e57 | out: pbBuffer=0x11c41e57) returned 1
	[0310.938] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c41e6e | out: pbBuffer=0x11c41e6e) returned 1
	[0310.938] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332840 | out: pbBuffer=0x11332840) returned 1
	[0310.939] GetFileType (hFile=0x290) returned 0x1
	[0310.939] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0310.939] WriteFile (in: hFile=0x290, lpBuffer=0x11202000*, nNumberOfBytesToWrite=0x1418, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11202000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1418, lpOverlapped=0x1133de08) returned 1
	[0310.939] GetFileType (hFile=0x290) returned 0x1
	[0310.939] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x1418, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0310.939] GetFileType (hFile=0x290) returned 0x1
	[0310.940] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0310.940] WriteFile (in: hFile=0x290, lpBuffer=0x111cb180*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111cb180*, lpNumberOfBytesWritten=0x1133ddfc*=0x224, lpOverlapped=0x1133de08) returned 1
	[0310.940] GetFileType (hFile=0x290) returned 0x1
	[0310.940] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x1418, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0310.940] CloseHandle (hObject=0x290) returned 1
	[0310.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf.tl30z")) returned 0x220
	[0310.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0310.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf")) returned 0x220
	[0310.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF", dwFileAttributes=0x220) returned 1
	[0310.944] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0311.075] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0311.075] ReadFile (in: hFile=0x1f4, lpBuffer=0x11430000, nNumberOfBytesToRead=0x824e, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x11023e18*=0x824e, lpOverlapped=0x0) returned 1
	[0311.084] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0311.084] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1143b302 | out: pbBuffer=0x1143b302) returned 1
	[0311.084] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1143b354 | out: pbBuffer=0x1143b354) returned 1
	[0311.085] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0311.086] GetFileType (hFile=0x1f4) returned 0x1
	[0311.086] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.086] WriteFile (in: hFile=0x1f4, lpBuffer=0x11058000*, nNumberOfBytesToWrite=0x824e, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11058000*, lpNumberOfBytesWritten=0x1133ddfc*=0x824e, lpOverlapped=0x1133de08) returned 1
	[0311.087] GetFileType (hFile=0x1f4) returned 0x1
	[0311.087] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x824e, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.087] GetFileType (hFile=0x1f4) returned 0x1
	[0311.087] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.087] WriteFile (in: hFile=0x1f4, lpBuffer=0x113bc380*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x113bc380*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0311.087] GetFileType (hFile=0x1f4) returned 0x1
	[0311.087] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x824e, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.088] CloseHandle (hObject=0x1f4) returned 1
	[0311.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf.tl30z")) returned 0x220
	[0311.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.093] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0311.105] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0311.506] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0311.536] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0311.625] SetEvent (hEvent=0x1e8) returned 1
	[0311.625] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf")) returned 0x220
	[0311.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF", dwFileAttributes=0x220) returned 1
	[0311.625] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0311.695] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0311.695] ReadFile (in: hFile=0x290, lpBuffer=0x1113d800, nNumberOfBytesToRead=0x4584, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1113d800*, lpNumberOfBytesRead=0x11288e18*=0x4584, lpOverlapped=0x0) returned 1
	[0311.709] SetEvent (hEvent=0x1e8) returned 1
	[0311.710] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0311.710] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11143f02 | out: pbBuffer=0x11143f02) returned 1
	[0311.711] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0311.711] GetFileType (hFile=0x290) returned 0x1
	[0311.712] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.712] WriteFile (in: hFile=0x290, lpBuffer=0x11c18000*, nNumberOfBytesToWrite=0x4584, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11c18000*, lpNumberOfBytesWritten=0x11031dfc*=0x4584, lpOverlapped=0x11031e08) returned 1
	[0311.712] GetFileType (hFile=0x290) returned 0x1
	[0311.712] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x4584, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.712] GetFileType (hFile=0x290) returned 0x1
	[0311.712] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.713] WriteFile (in: hFile=0x290, lpBuffer=0x1118e700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1118e700*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0311.713] GetFileType (hFile=0x290) returned 0x1
	[0311.713] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x4584, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.713] CloseHandle (hObject=0x290) returned 1
	[0311.721] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0311.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf.tl30z")) returned 0x220
	[0311.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.727] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0311.732] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0311.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf")) returned 0x220
	[0311.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF", dwFileAttributes=0x220) returned 1
	[0311.745] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0311.814] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0311.814] ReadFile (in: hFile=0x224, lpBuffer=0x113ca000, nNumberOfBytesToRead=0xc70, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113ca000*, lpNumberOfBytesRead=0x1128ae18*=0xc70, lpOverlapped=0x0) returned 1
	[0311.820] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126260 | out: pbBuffer=0x11126260) returned 1
	[0311.820] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e4802 | out: pbBuffer=0x113e4802) returned 1
	[0311.824] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e489b | out: pbBuffer=0x113e489b) returned 1
	[0311.824] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126290 | out: pbBuffer=0x11126290) returned 1
	[0311.825] GetFileType (hFile=0x224) returned 0x1
	[0311.825] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.825] WriteFile (in: hFile=0x224, lpBuffer=0x1132e000*, nNumberOfBytesToWrite=0xc70, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1132e000*, lpNumberOfBytesWritten=0x1102bdfc*=0xc70, lpOverlapped=0x1102be08) returned 1
	[0311.825] GetFileType (hFile=0x224) returned 0x1
	[0311.825] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xc70, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.826] GetFileType (hFile=0x224) returned 0x1
	[0311.826] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.826] WriteFile (in: hFile=0x224, lpBuffer=0x113eca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113eca80*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0311.826] GetFileType (hFile=0x224) returned 0x1
	[0311.826] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xc70, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.826] CloseHandle (hObject=0x224) returned 1
	[0311.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf.tl30z")) returned 0x220
	[0311.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.829] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0311.832] SetEvent (hEvent=0x22c) returned 1
	[0311.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf")) returned 0x220
	[0311.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF", dwFileAttributes=0x220) returned 1
	[0311.833] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0311.913] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0311.913] ReadFile (in: hFile=0x200, lpBuffer=0x11434000, nNumberOfBytesToRead=0x282c, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11434000*, lpNumberOfBytesRead=0x1128ae18*=0x282c, lpOverlapped=0x0) returned 1
	[0311.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0311.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63d8 | out: pbBuffer=0x113e63d8) returned 1
	[0311.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11193f02 | out: pbBuffer=0x11193f02) returned 1
	[0311.920] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0311.921] GetFileType (hFile=0x200) returned 0x1
	[0311.921] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.921] WriteFile (in: hFile=0x200, lpBuffer=0x1114e000*, nNumberOfBytesToWrite=0x282c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1114e000*, lpNumberOfBytesWritten=0x11031dfc*=0x282c, lpOverlapped=0x11031e08) returned 1
	[0311.921] GetFileType (hFile=0x200) returned 0x1
	[0311.922] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x282c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.922] GetFileType (hFile=0x200) returned 0x1
	[0311.922] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.922] WriteFile (in: hFile=0x200, lpBuffer=0x11452000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11452000*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0311.922] GetFileType (hFile=0x200) returned 0x1
	[0311.922] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x282c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.922] CloseHandle (hObject=0x200) returned 1
	[0311.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf.tl30z")) returned 0x220
	[0311.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.926] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0311.928] SetEvent (hEvent=0x22c) returned 1
	[0311.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf")) returned 0x220
	[0311.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF", dwFileAttributes=0x220) returned 1
	[0311.929] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0312.032] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0312.032] ReadFile (in: hFile=0x200, lpBuffer=0x11c5e800, nNumberOfBytesToRead=0x41a0, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11c5e800*, lpNumberOfBytesRead=0x1128ae18*=0x41a0, lpOverlapped=0x0) returned 1
	[0312.038] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6990 | out: pbBuffer=0x113e6990) returned 1
	[0312.038] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c4a02 | out: pbBuffer=0x110c4a02) returned 1
	[0312.038] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e69c0 | out: pbBuffer=0x113e69c0) returned 1
	[0312.038] SetEvent (hEvent=0x22c) returned 1
	[0312.039] GetFileType (hFile=0x200) returned 0x1
	[0312.039] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0312.039] WriteFile (in: hFile=0x200, lpBuffer=0x112ac000*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112ac000*, lpNumberOfBytesWritten=0x11031dfc*=0x41a0, lpOverlapped=0x11031e08) returned 1
	[0312.040] GetFileType (hFile=0x200) returned 0x1
	[0312.040] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x41a0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0312.040] GetFileType (hFile=0x200) returned 0x1
	[0312.040] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0312.040] WriteFile (in: hFile=0x200, lpBuffer=0x110bb880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110bb880*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0312.041] GetFileType (hFile=0x200) returned 0x1
	[0312.041] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x41a0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0312.041] CloseHandle (hObject=0x200) returned 1
	[0312.043] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf.tl30z")) returned 0x220
	[0312.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.047] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0312.050] SetEvent (hEvent=0x22c) returned 1
	[0312.050] SetEvent (hEvent=0x1e8) returned 1
	[0312.050] SwitchToThread () returned 1
	[0312.054] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0312.074] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0312.092] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0312.102] SetEvent (hEvent=0x22c) returned 1
	[0312.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf")) returned 0x220
	[0312.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF", dwFileAttributes=0x220) returned 1
	[0312.103] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0312.173] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11090e08 | out: lpMode=0x11090e08) returned 0
	[0312.173] ReadFile (in: hFile=0x1f4, lpBuffer=0x11456000, nNumberOfBytesToRead=0x167c, lpNumberOfBytesRead=0x11090e18, lpOverlapped=0x0 | out: lpBuffer=0x11456000*, lpNumberOfBytesRead=0x11090e18*=0x167c, lpOverlapped=0x0) returned 1
	[0312.179] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0312.179] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332388 | out: pbBuffer=0x11332388) returned 1
	[0312.179] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c5402 | out: pbBuffer=0x110c5402) returned 1
	[0312.179] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c54a9 | out: pbBuffer=0x110c54a9) returned 1
	[0312.180] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0312.180] GetFileType (hFile=0x1f4) returned 0x1
	[0312.180] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.180] WriteFile (in: hFile=0x1f4, lpBuffer=0x110a2000*, nNumberOfBytesToWrite=0x167c, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110a2000*, lpNumberOfBytesWritten=0x1102ddfc*=0x167c, lpOverlapped=0x1102de08) returned 1
	[0312.180] GetFileType (hFile=0x1f4) returned 0x1
	[0312.180] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x167c, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.181] GetFileType (hFile=0x1f4) returned 0x1
	[0312.181] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.181] WriteFile (in: hFile=0x1f4, lpBuffer=0x110bbc00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110bbc00*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0312.181] GetFileType (hFile=0x1f4) returned 0x1
	[0312.181] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x167c, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.181] CloseHandle (hObject=0x1f4) returned 1
	[0312.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf.tl30z")) returned 0x220
	[0312.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.184] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0312.187] SetEvent (hEvent=0x118) returned 1
	[0312.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf")) returned 0x220
	[0312.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF", dwFileAttributes=0x220) returned 1
	[0312.187] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0312.253] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11090e08 | out: lpMode=0x11090e08) returned 0
	[0312.253] ReadFile (in: hFile=0x224, lpBuffer=0x110f0000, nNumberOfBytesToRead=0x4048, lpNumberOfBytesRead=0x11090e18, lpOverlapped=0x0 | out: lpBuffer=0x110f0000*, lpNumberOfBytesRead=0x11090e18*=0x4048, lpOverlapped=0x0) returned 1
	[0312.262] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66c0 | out: pbBuffer=0x113e66c0) returned 1
	[0312.262] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cb202 | out: pbBuffer=0x113cb202) returned 1
	[0312.263] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cb2b7 | out: pbBuffer=0x113cb2b7) returned 1
	[0312.263] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66f0 | out: pbBuffer=0x113e66f0) returned 1
	[0312.263] GetFileType (hFile=0x224) returned 0x1
	[0312.264] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.264] WriteFile (in: hFile=0x224, lpBuffer=0x1120e000*, nNumberOfBytesToWrite=0x4048, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1120e000*, lpNumberOfBytesWritten=0x1133bdfc*=0x4048, lpOverlapped=0x1133be08) returned 1
	[0312.264] GetFileType (hFile=0x224) returned 0x1
	[0312.265] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4048, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.265] GetFileType (hFile=0x224) returned 0x1
	[0312.265] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.265] WriteFile (in: hFile=0x224, lpBuffer=0x11202380*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11202380*, lpNumberOfBytesWritten=0x1133bdfc*=0x221, lpOverlapped=0x1133be08) returned 1
	[0312.265] GetFileType (hFile=0x224) returned 0x1
	[0312.266] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x4048, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.266] CloseHandle (hObject=0x224) returned 1
	[0312.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf.tl30z")) returned 0x220
	[0312.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.270] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0312.274] SetEvent (hEvent=0x218) returned 1
	[0312.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg")) returned 0x220
	[0312.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG", dwFileAttributes=0x220) returned 1
	[0312.275] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg.tl30z"), dwFlags=0x1) returned 1
	[0312.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0312.411] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11090e08 | out: lpMode=0x11090e08) returned 0
	[0312.412] ReadFile (in: hFile=0x184, lpBuffer=0x11138000, nNumberOfBytesToRead=0xa202, lpNumberOfBytesRead=0x11090e18, lpOverlapped=0x0 | out: lpBuffer=0x11138000*, lpNumberOfBytesRead=0x11090e18*=0xa202, lpOverlapped=0x0) returned 1
	[0312.417] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0312.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1135e802 | out: pbBuffer=0x1135e802) returned 1
	[0312.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1135e835 | out: pbBuffer=0x1135e835) returned 1
	[0312.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1135e8aa | out: pbBuffer=0x1135e8aa) returned 1
	[0312.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0312.420] GetFileType (hFile=0x184) returned 0x1
	[0312.420] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.420] WriteFile (in: hFile=0x184, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0xa202, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x1102bdfc*=0xa202, lpOverlapped=0x1102be08) returned 1
	[0312.421] GetFileType (hFile=0x184) returned 0x1
	[0312.421] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xa202, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.421] GetFileType (hFile=0x184) returned 0x1
	[0312.421] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.421] WriteFile (in: hFile=0x184, lpBuffer=0x1136ea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1136ea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0312.421] GetFileType (hFile=0x184) returned 0x1
	[0312.421] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0xa202, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.422] CloseHandle (hObject=0x184) returned 1
	[0312.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg.tl30z")) returned 0x220
	[0312.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0312.426] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0312.428] SetEvent (hEvent=0x164) returned 1
	[0312.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg")) returned 0x220
	[0312.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG", dwFileAttributes=0x220) returned 1
	[0312.429] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg.tl30z"), dwFlags=0x1) returned 1
	[0313.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0313.548] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11090e08 | out: lpMode=0x11090e08) returned 0
	[0313.548] ReadFile (in: hFile=0x200, lpBuffer=0x112c0000, nNumberOfBytesToRead=0x1764, lpNumberOfBytesRead=0x11090e18, lpOverlapped=0x0 | out: lpBuffer=0x112c0000*, lpNumberOfBytesRead=0x11090e18*=0x1764, lpOverlapped=0x0) returned 1
	[0313.555] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0313.555] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324e8 | out: pbBuffer=0x113324e8) returned 1
	[0313.555] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e9d02 | out: pbBuffer=0x112e9d02) returned 1
	[0313.556] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e9d24 | out: pbBuffer=0x112e9d24) returned 1
	[0313.556] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112e9dc5 | out: pbBuffer=0x112e9dc5) returned 1
	[0313.556] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0313.556] GetFileType (hFile=0x200) returned 0x1
	[0313.556] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.557] WriteFile (in: hFile=0x200, lpBuffer=0x110ec000*, nNumberOfBytesToWrite=0x1764, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110ec000*, lpNumberOfBytesWritten=0x1102ddfc*=0x1764, lpOverlapped=0x1102de08) returned 1
	[0313.557] GetFileType (hFile=0x200) returned 0x1
	[0313.557] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x1764, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.557] GetFileType (hFile=0x200) returned 0x1
	[0313.557] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.557] WriteFile (in: hFile=0x200, lpBuffer=0x110e4700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110e4700*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0313.558] GetFileType (hFile=0x200) returned 0x1
	[0313.558] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x1764, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.558] CloseHandle (hObject=0x200) returned 1
	[0313.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg.tl30z")) returned 0x220
	[0313.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0313.560] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0313.566] SetEvent (hEvent=0x164) returned 1
	[0313.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp")) returned 0x220
	[0313.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP", dwFileAttributes=0x220) returned 1
	[0313.567] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0313.635] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11090e08 | out: lpMode=0x11090e08) returned 0
	[0313.635] ReadFile (in: hFile=0x224, lpBuffer=0x11236000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x11090e18, lpOverlapped=0x0 | out: lpBuffer=0x11236000*, lpNumberOfBytesRead=0x11090e18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0313.777] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0313.777] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324f8 | out: pbBuffer=0x113324f8) returned 1
	[0313.777] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11335d02 | out: pbBuffer=0x11335d02) returned 1
	[0313.777] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0313.778] GetFileType (hFile=0x224) returned 0x1
	[0313.778] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.778] WriteFile (in: hFile=0x224, lpBuffer=0x113d2000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113d2000*, lpNumberOfBytesWritten=0x11031dfc*=0x7ce0, lpOverlapped=0x11031e08) returned 1
	[0313.779] GetFileType (hFile=0x224) returned 0x1
	[0313.779] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.779] GetFileType (hFile=0x224) returned 0x1
	[0313.779] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.779] WriteFile (in: hFile=0x224, lpBuffer=0x112e2700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112e2700*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0313.779] GetFileType (hFile=0x224) returned 0x1
	[0313.780] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.780] CloseHandle (hObject=0x224) returned 1
	[0313.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp.tl30z")) returned 0x220
	[0313.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0313.830] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0313.837] SetEvent (hEvent=0x218) returned 1
	[0313.837] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0314.411] SetEvent (hEvent=0x1e0) returned 1
	[0314.411] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg.tl30z")) returned 0x220
	[0314.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0314.430] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0314.513] SetEvent (hEvent=0x134) returned 1
	[0314.513] SetEvent (hEvent=0x218) returned 1
	[0314.513] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0314.653] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0314.790] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0314.805] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0314.821] SetEvent (hEvent=0x218) returned 1
	[0314.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif")) returned 0x220
	[0314.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF", dwFileAttributes=0x220) returned 1
	[0314.822] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif.tl30z"), dwFlags=0x1) returned 1
	[0314.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0314.948] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0314.948] ReadFile (in: hFile=0x184, lpBuffer=0x11456000, nNumberOfBytesToRead=0x50a5, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11456000*, lpNumberOfBytesRead=0x1128ae18*=0x50a5, lpOverlapped=0x0) returned 1
	[0314.957] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126100 | out: pbBuffer=0x11126100) returned 1
	[0314.957] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111260f8 | out: pbBuffer=0x111260f8) returned 1
	[0314.957] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c18802 | out: pbBuffer=0x11c18802) returned 1
	[0314.957] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c18808 | out: pbBuffer=0x11c18808) returned 1
	[0314.958] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126130 | out: pbBuffer=0x11126130) returned 1
	[0314.958] GetFileType (hFile=0x184) returned 0x1
	[0314.959] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.959] WriteFile (in: hFile=0x184, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x50a5, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1102bdfc*=0x50a5, lpOverlapped=0x1102be08) returned 1
	[0314.959] GetFileType (hFile=0x184) returned 0x1
	[0314.959] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x50a5, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.960] GetFileType (hFile=0x184) returned 0x1
	[0314.960] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.960] WriteFile (in: hFile=0x184, lpBuffer=0x11324a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11324a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0314.960] GetFileType (hFile=0x184) returned 0x1
	[0314.960] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x50a5, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.960] CloseHandle (hObject=0x184) returned 1
	[0314.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif.tl30z")) returned 0x220
	[0314.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0314.964] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0314.966] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0314.968] SetEvent (hEvent=0x1e0) returned 1
	[0314.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp")) returned 0x220
	[0314.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP", dwFileAttributes=0x220) returned 1
	[0314.968] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0315.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0315.070] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0315.071] ReadFile (in: hFile=0x184, lpBuffer=0x11c36000, nNumberOfBytesToRead=0x7d84, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11c36000*, lpNumberOfBytesRead=0x11287e18*=0x7d84, lpOverlapped=0x0) returned 1
	[0315.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0315.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11341e02 | out: pbBuffer=0x11341e02) returned 1
	[0315.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11341e99 | out: pbBuffer=0x11341e99) returned 1
	[0315.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0315.080] GetFileType (hFile=0x184) returned 0x1
	[0315.081] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.081] WriteFile (in: hFile=0x184, lpBuffer=0x11242000*, nNumberOfBytesToWrite=0x7d84, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11242000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7d84, lpOverlapped=0x1102de08) returned 1
	[0315.081] GetFileType (hFile=0x184) returned 0x1
	[0315.081] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x7d84, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.081] GetFileType (hFile=0x184) returned 0x1
	[0315.082] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.082] WriteFile (in: hFile=0x184, lpBuffer=0x112fc700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112fc700*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0315.082] GetFileType (hFile=0x184) returned 0x1
	[0315.082] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x7d84, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.082] CloseHandle (hObject=0x184) returned 1
	[0315.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp.tl30z")) returned 0x220
	[0315.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0315.085] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0315.096] SetEvent (hEvent=0x134) returned 1
	[0315.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif")) returned 0x220
	[0315.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF", dwFileAttributes=0x220) returned 1
	[0315.097] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif.tl30z"), dwFlags=0x1) returned 1
	[0315.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0315.343] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0315.343] ReadFile (in: hFile=0x200, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x64c7, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x11425e18*=0x64c7, lpOverlapped=0x0) returned 1
	[0315.350] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0315.350] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324f8 | out: pbBuffer=0x113324f8) returned 1
	[0315.350] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11315f02 | out: pbBuffer=0x11315f02) returned 1
	[0315.350] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0315.351] GetFileType (hFile=0x200) returned 0x1
	[0315.351] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.352] WriteFile (in: hFile=0x200, lpBuffer=0x112be000*, nNumberOfBytesToWrite=0x64c7, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112be000*, lpNumberOfBytesWritten=0x1133bdfc*=0x64c7, lpOverlapped=0x1133be08) returned 1
	[0315.352] GetFileType (hFile=0x200) returned 0x1
	[0315.352] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x64c7, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.352] GetFileType (hFile=0x200) returned 0x1
	[0315.353] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.353] WriteFile (in: hFile=0x200, lpBuffer=0x113cce00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113cce00*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0315.353] GetFileType (hFile=0x200) returned 0x1
	[0315.353] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x64c7, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.353] CloseHandle (hObject=0x200) returned 1
	[0315.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif.tl30z")) returned 0x220
	[0315.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0315.396] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0315.425] SetEvent (hEvent=0x1e8) returned 1
	[0315.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp")) returned 0x220
	[0315.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP", dwFileAttributes=0x220) returned 1
	[0315.425] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0315.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0315.800] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0315.800] ReadFile (in: hFile=0x184, lpBuffer=0x1117a000, nNumberOfBytesToRead=0x7f27, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1117a000*, lpNumberOfBytesRead=0x11425e18*=0x7f27, lpOverlapped=0x0) returned 1
	[0315.811] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0315.811] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111df202 | out: pbBuffer=0x111df202) returned 1
	[0315.811] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111df24d | out: pbBuffer=0x111df24d) returned 1
	[0315.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0315.817] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x1) returned 0x102
	[0315.853] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0315.854] SetEvent (hEvent=0x150) returned 1
	[0315.854] SetEvent (hEvent=0x1e8) returned 1
	[0315.854] GetFileType (hFile=0x184) returned 0x1
	[0315.854] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.854] WriteFile (in: hFile=0x184, lpBuffer=0x11bc6000*, nNumberOfBytesToWrite=0x7f27, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7f27, lpOverlapped=0x1102be08) returned 1
	[0315.854] GetFileType (hFile=0x184) returned 0x1
	[0315.855] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x7f27, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.855] GetFileType (hFile=0x184) returned 0x1
	[0315.855] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.856] WriteFile (in: hFile=0x184, lpBuffer=0x110d5880*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110d5880*, lpNumberOfBytesWritten=0x1102bdfc*=0x239, lpOverlapped=0x1102be08) returned 1
	[0315.856] GetFileType (hFile=0x184) returned 0x1
	[0315.856] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x7f27, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.856] CloseHandle (hObject=0x184) returned 1
	[0315.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp.tl30z")) returned 0x220
	[0315.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0315.867] SwitchToThread () returned 1
	[0315.869] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0316.140] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0316.182] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0316.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg")) returned 0x220
	[0316.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG", dwFileAttributes=0x220) returned 1
	[0316.193] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg.tl30z"), dwFlags=0x1) returned 1
	[0316.480] SetEvent (hEvent=0x150) returned 1
	[0316.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0316.482] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0316.482] ReadFile (in: hFile=0x250, lpBuffer=0x110f0000, nNumberOfBytesToRead=0x3c45, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x110f0000*, lpNumberOfBytesRead=0x1128ce18*=0x3c45, lpOverlapped=0x0) returned 1
	[0316.491] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6110 | out: pbBuffer=0x113e6110) returned 1
	[0316.491] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6108 | out: pbBuffer=0x113e6108) returned 1
	[0316.491] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137c802 | out: pbBuffer=0x1137c802) returned 1
	[0316.491] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137c89e | out: pbBuffer=0x1137c89e) returned 1
	[0316.492] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6140 | out: pbBuffer=0x113e6140) returned 1
	[0316.492] GetFileType (hFile=0x250) returned 0x1
	[0316.492] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.492] WriteFile (in: hFile=0x250, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x3c45, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x1102ddfc*=0x3c45, lpOverlapped=0x1102de08) returned 1
	[0316.493] GetFileType (hFile=0x250) returned 0x1
	[0316.493] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3c45, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.493] GetFileType (hFile=0x250) returned 0x1
	[0316.493] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.494] WriteFile (in: hFile=0x250, lpBuffer=0x110d4a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110d4a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0316.494] GetFileType (hFile=0x250) returned 0x1
	[0316.494] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x3c45, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.494] CloseHandle (hObject=0x250) returned 1
	[0316.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg.tl30z")) returned 0x220
	[0316.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0316.498] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0316.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg")) returned 0x220
	[0316.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG", dwFileAttributes=0x220) returned 1
	[0316.509] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg.tl30z"), dwFlags=0x1) returned 1
	[0316.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0316.559] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0316.559] ReadFile (in: hFile=0x1f4, lpBuffer=0x111ce000, nNumberOfBytesToRead=0x7450, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x111ce000*, lpNumberOfBytesRead=0x1131ce18*=0x7450, lpOverlapped=0x0) returned 1
	[0316.605] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263f0 | out: pbBuffer=0x111263f0) returned 1
	[0316.606] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1139dc02 | out: pbBuffer=0x1139dc02) returned 1
	[0316.606] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139dc69 | out: pbBuffer=0x1139dc69) returned 1
	[0316.606] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139dcd6 | out: pbBuffer=0x1139dcd6) returned 1
	[0316.606] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126420 | out: pbBuffer=0x11126420) returned 1
	[0316.607] GetFileType (hFile=0x1f4) returned 0x1
	[0316.607] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.608] WriteFile (in: hFile=0x1f4, lpBuffer=0x11108000*, nNumberOfBytesToWrite=0x7450, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11108000*, lpNumberOfBytesWritten=0x112bddfc*=0x7450, lpOverlapped=0x112bde08) returned 1
	[0316.608] GetFileType (hFile=0x1f4) returned 0x1
	[0316.608] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x7450, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.608] GetFileType (hFile=0x1f4) returned 0x1
	[0316.608] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.609] WriteFile (in: hFile=0x1f4, lpBuffer=0x11442700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11442700*, lpNumberOfBytesWritten=0x112bddfc*=0x22a, lpOverlapped=0x112bde08) returned 1
	[0316.609] GetFileType (hFile=0x1f4) returned 0x1
	[0316.609] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x7450, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.609] CloseHandle (hObject=0x1f4) returned 1
	[0316.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg.tl30z")) returned 0x220
	[0316.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0316.630] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0316.637] SetEvent (hEvent=0x27c) returned 1
	[0316.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf")) returned 0x220
	[0316.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF", dwFileAttributes=0x220) returned 1
	[0316.637] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf.tl30z"), dwFlags=0x1) returned 1
	[0316.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0317.047] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0317.047] ReadFile (in: hFile=0x290, lpBuffer=0x11386000, nNumberOfBytesToRead=0xef6, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x11386000*, lpNumberOfBytesRead=0x11286e18*=0xef6, lpOverlapped=0x0) returned 1
	[0317.056] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0317.056] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111fb102 | out: pbBuffer=0x111fb102) returned 1
	[0317.056] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0317.056] GetFileType (hFile=0x290) returned 0x1
	[0317.056] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.057] WriteFile (in: hFile=0x290, lpBuffer=0x112ca000*, nNumberOfBytesToWrite=0xef6, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112ca000*, lpNumberOfBytesWritten=0x1133ddfc*=0xef6, lpOverlapped=0x1133de08) returned 1
	[0317.057] GetFileType (hFile=0x290) returned 0x1
	[0317.057] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0xef6, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.057] GetFileType (hFile=0x290) returned 0x1
	[0317.057] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.057] WriteFile (in: hFile=0x290, lpBuffer=0x11207180*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11207180*, lpNumberOfBytesWritten=0x1133ddfc*=0x233, lpOverlapped=0x1133de08) returned 1
	[0317.058] GetFileType (hFile=0x290) returned 0x1
	[0317.058] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0xef6, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.058] CloseHandle (hObject=0x290) returned 1
	[0317.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf.tl30z")) returned 0x220
	[0317.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.087] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0317.090] SetEvent (hEvent=0x1c4) returned 1
	[0317.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf")) returned 0x220
	[0317.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF", dwFileAttributes=0x220) returned 1
	[0317.090] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0317.200] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0317.200] ReadFile (in: hFile=0x1c8, lpBuffer=0x112ae000, nNumberOfBytesToRead=0xb12, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x112ae000*, lpNumberOfBytesRead=0x11286e18*=0xb12, lpOverlapped=0x0) returned 1
	[0317.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0317.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f288 | out: pbBuffer=0x1140f288) returned 1
	[0317.217] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137d302 | out: pbBuffer=0x1137d302) returned 1
	[0317.218] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2c0 | out: pbBuffer=0x1140f2c0) returned 1
	[0317.218] GetFileType (hFile=0x1c8) returned 0x1
	[0317.218] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.218] WriteFile (in: hFile=0x1c8, lpBuffer=0x112e8000*, nNumberOfBytesToWrite=0xb12, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112e8000*, lpNumberOfBytesWritten=0x11031dfc*=0xb12, lpOverlapped=0x11031e08) returned 1
	[0317.218] GetFileType (hFile=0x1c8) returned 0x1
	[0317.219] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xb12, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.219] GetFileType (hFile=0x1c8) returned 0x1
	[0317.219] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.219] WriteFile (in: hFile=0x1c8, lpBuffer=0x113b2000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113b2000*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0317.219] GetFileType (hFile=0x1c8) returned 0x1
	[0317.219] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xb12, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.219] CloseHandle (hObject=0x1c8) returned 1
	[0317.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf.tl30z")) returned 0x220
	[0317.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.231] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0317.236] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0317.433] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0317.563] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0317.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf")) returned 0x220
	[0317.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF", dwFileAttributes=0x220) returned 1
	[0317.569] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0317.611] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0317.612] ReadFile (in: hFile=0x250, lpBuffer=0x1124e000, nNumberOfBytesToRead=0x540, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1124e000*, lpNumberOfBytesRead=0x11319e18*=0x540, lpOverlapped=0x0) returned 1
	[0317.687] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0317.693] SetEvent (hEvent=0x1b0) returned 1
	[0317.693] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0317.864] SetEvent (hEvent=0x164) returned 1
	[0317.864] SetEvent (hEvent=0x2a8) returned 1
	[0317.864] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) returned 0x0
	[0317.882] SetEvent (hEvent=0x164) returned 1
	[0317.882] SetEvent (hEvent=0x1bc) returned 1
	[0317.882] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0xffffffff) 

Thread:
	id = 41
	os_tid = 0xeb0

	[0212.908] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x32d3ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x32d3ff30*=0x238) returned 1
	[0212.908] VirtualQuery (in: lpAddress=0x32d3ff40, lpBuffer=0x32d3ff40, dwLength=0x1c | out: lpBuffer=0x32d3ff40*(BaseAddress=0x32d3f000, AllocationBase=0x32c40000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0212.908] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x23c
	[0212.908] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0213.090] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 0x20
	[0213.090] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0213.091] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0221.619] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c
	[0221.937] GetConsoleMode (in: hConsoleHandle=0x25c, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0221.937] ReadFile (in: hFile=0x25c, lpBuffer=0x113ef000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x113ef000*, lpNumberOfBytesRead=0x11022e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0221.990] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0221.990] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332508 | out: pbBuffer=0x11332508) returned 1
	[0221.991] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141de02 | out: pbBuffer=0x1141de02) returned 1
	[0221.991] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332540 | out: pbBuffer=0x11332540) returned 1
	[0221.998] SetEvent (hEvent=0x22c) returned 1
	[0221.998] GetFileType (hFile=0x25c) returned 0x1
	[0221.998] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0222.001] WriteFile (in: hFile=0x25c, lpBuffer=0x11620000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11620000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0222.002] GetFileType (hFile=0x25c) returned 0x1
	[0222.002] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0222.003] GetFileType (hFile=0x25c) returned 0x1
	[0222.007] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0222.007] WriteFile (in: hFile=0x25c, lpBuffer=0x11602700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11602700*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0222.008] GetFileType (hFile=0x25c) returned 0x1
	[0222.022] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0222.023] CloseHandle (hObject=0x25c) returned 1
	[0222.114] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.tl30z")) returned 0x20
	[0222.114] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0222.134] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0222.155] SetEvent (hEvent=0x22c) returned 1
	[0222.155] SetEvent (hEvent=0x1e0) returned 1
	[0222.156] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c
	[0222.265] GetConsoleMode (in: hConsoleHandle=0x25c, lpMode=0x112efe08 | out: lpMode=0x112efe08) returned 0
	[0222.265] ReadFile (in: hFile=0x25c, lpBuffer=0x11396000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x112efe18, lpOverlapped=0x0 | out: lpBuffer=0x11396000*, lpNumberOfBytesRead=0x112efe18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0222.328] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0222.328] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1106a902 | out: pbBuffer=0x1106a902) returned 1
	[0222.328] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1106a957 | out: pbBuffer=0x1106a957) returned 1
	[0222.328] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1106a9be | out: pbBuffer=0x1106a9be) returned 1
	[0222.329] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0222.330] GetFileType (hFile=0x25c) returned 0x1
	[0222.330] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.330] WriteFile (in: hFile=0x25c, lpBuffer=0x112f6000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x112f6000*, lpNumberOfBytesWritten=0x112efdfc*=0x6ccc, lpOverlapped=0x112efe08) returned 1
	[0222.331] GetFileType (hFile=0x25c) returned 0x1
	[0222.331] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.331] GetFileType (hFile=0x25c) returned 0x1
	[0222.331] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.331] WriteFile (in: hFile=0x25c, lpBuffer=0x115f4a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x115f4a80*, lpNumberOfBytesWritten=0x112efdfc*=0x230, lpOverlapped=0x112efe08) returned 1
	[0222.332] GetFileType (hFile=0x25c) returned 0x1
	[0222.332] SetFilePointerEx (in: hFile=0x25c, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.332] CloseHandle (hObject=0x25c) returned 1
	[0222.377] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.tl30z")) returned 0x20
	[0222.377] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0222.419] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0222.728] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0222.816] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0224.296] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0224.328] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0224.378] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0224.728] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0224.817] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.008] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.202] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.233] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.328] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.372] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.444] SetEvent (hEvent=0x12c) returned 1
	[0225.444] SetEvent (hEvent=0x1e0) returned 1
	[0225.444] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0x1) returned 0x102
	[0225.457] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.457] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0x1) returned 0x102
	[0225.483] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.483] SetEvent (hEvent=0x284) returned 1
	[0225.483] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0x1) returned 0x102
	[0225.495] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0225.495] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 0x20
	[0225.495] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", dwFileAttributes=0x20) returned 1
	[0225.496] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0226.368] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0226.419] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0226.420] ReadFile (in: hFile=0x1cc, lpBuffer=0x110d3000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x110d3000*, lpNumberOfBytesRead=0x11319e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0226.464] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0226.464] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332388 | out: pbBuffer=0x11332388) returned 1
	[0226.464] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1106b702 | out: pbBuffer=0x1106b702) returned 1
	[0226.464] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0226.465] GetFileType (hFile=0x1cc) returned 0x1
	[0226.465] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.466] WriteFile (in: hFile=0x1cc, lpBuffer=0x1122c000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1122c000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0226.467] GetFileType (hFile=0x1cc) returned 0x1
	[0226.467] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.467] GetFileType (hFile=0x1cc) returned 0x1
	[0226.467] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.467] WriteFile (in: hFile=0x1cc, lpBuffer=0x113b1880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x113b1880*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0226.468] GetFileType (hFile=0x1cc) returned 0x1
	[0226.468] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.468] CloseHandle (hObject=0x1cc) returned 1
	[0226.482] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.tl30z")) returned 0x20
	[0226.482] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0226.486] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0226.553] SetEvent (hEvent=0x25c) returned 1
	[0226.553] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 0x20
	[0226.553] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx", dwFileAttributes=0x20) returned 1
	[0226.554] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.tl30z"), dwFlags=0x1) returned 1
	[0227.115] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0227.122] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0227.122] ReadFile (in: hFile=0x1cc, lpBuffer=0x113d9000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x113d9000*, lpNumberOfBytesRead=0x11319e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0227.159] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e450 | out: pbBuffer=0x1104e450) returned 1
	[0227.159] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bc402 | out: pbBuffer=0x111bc402) returned 1
	[0227.160] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e480 | out: pbBuffer=0x1104e480) returned 1
	[0227.161] GetFileType (hFile=0x1cc) returned 0x1
	[0227.161] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.161] WriteFile (in: hFile=0x1cc, lpBuffer=0x11458000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11458000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6ccc, lpOverlapped=0x112f5e08) returned 1
	[0227.162] GetFileType (hFile=0x1cc) returned 0x1
	[0227.162] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.162] GetFileType (hFile=0x1cc) returned 0x1
	[0227.162] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.162] WriteFile (in: hFile=0x1cc, lpBuffer=0x1143a700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x1143a700*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0227.163] GetFileType (hFile=0x1cc) returned 0x1
	[0227.163] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.163] CloseHandle (hObject=0x1cc) returned 1
	[0227.463] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.tl30z")) returned 0x20
	[0227.463] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0227.629] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.642] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.652] SetEvent (hEvent=0x26c) returned 1
	[0227.653] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0x1) returned 0x102
	[0227.668] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.668] SetEvent (hEvent=0x26c) returned 1
	[0227.669] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0x1) returned 0x102
	[0227.674] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.674] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.254] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.257] SetEvent (hEvent=0x12c) returned 1
	[0229.257] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.318] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 0x20
	[0229.318] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx", dwFileAttributes=0x20) returned 1
	[0229.319] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.tl30z"), dwFlags=0x1) returned 1
	[0229.847] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0229.863] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0229.863] ReadFile (in: hFile=0x1b4, lpBuffer=0x11090000, nNumberOfBytesToRead=0x11fd7, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11090000*, lpNumberOfBytesRead=0x1131ae18*=0x11fd7, lpOverlapped=0x0) returned 1
	[0229.871] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0229.871] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11324a02 | out: pbBuffer=0x11324a02) returned 1
	[0229.871] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11324a12 | out: pbBuffer=0x11324a12) returned 1
	[0229.872] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0229.873] GetFileType (hFile=0x1b4) returned 0x1
	[0229.874] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111cbde0 | out: lpNewFilePointer=0x0) returned 1
	[0229.874] WriteFile (in: hFile=0x1b4, lpBuffer=0x111e0000*, nNumberOfBytesToWrite=0x11fd7, lpNumberOfBytesWritten=0x111cbdfc, lpOverlapped=0x111cbe08 | out: lpBuffer=0x111e0000*, lpNumberOfBytesWritten=0x111cbdfc*=0x11fd7, lpOverlapped=0x111cbe08) returned 1
	[0229.875] GetFileType (hFile=0x1b4) returned 0x1
	[0229.875] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x11fd7, lpNewFilePointer=0x0, dwMoveMethod=0x111cbde0 | out: lpNewFilePointer=0x0) returned 1
	[0229.875] GetFileType (hFile=0x1b4) returned 0x1
	[0229.875] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111cbde0 | out: lpNewFilePointer=0x0) returned 1
	[0229.876] WriteFile (in: hFile=0x1b4, lpBuffer=0x110d6a80*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0x111cbdfc, lpOverlapped=0x111cbe08 | out: lpBuffer=0x110d6a80*, lpNumberOfBytesWritten=0x111cbdfc*=0x245, lpOverlapped=0x111cbe08) returned 1
	[0229.885] GetFileType (hFile=0x1b4) returned 0x1
	[0229.885] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x11fd7, lpNewFilePointer=0x0, dwMoveMethod=0x111cbde0 | out: lpNewFilePointer=0x0) returned 1
	[0229.885] CloseHandle (hObject=0x1b4) returned 1
	[0230.071] SetEvent (hEvent=0x150) returned 1
	[0230.071] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.tl30z")) returned 0x20
	[0230.072] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0230.150] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0230.341] SetEvent (hEvent=0x1f0) returned 1
	[0230.341] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 0x20
	[0230.341] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx", dwFileAttributes=0x20) returned 1
	[0230.342] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.tl30z"), dwFlags=0x1) returned 1
	[0230.970] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0230.984] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0231.020] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0231.056] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 0x20
	[0231.056] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0231.057] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0231.457] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0231.889] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0231.889] ReadFile (in: hFile=0x250, lpBuffer=0x111de000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x111de000*, lpNumberOfBytesRead=0x11319e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0231.924] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e3f0 | out: pbBuffer=0x1142e3f0) returned 1
	[0231.925] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1142de02 | out: pbBuffer=0x1142de02) returned 1
	[0231.925] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142de94 | out: pbBuffer=0x1142de94) returned 1
	[0231.925] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e420 | out: pbBuffer=0x1142e420) returned 1
	[0231.926] GetFileType (hFile=0x250) returned 0x1
	[0231.927] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.927] WriteFile (in: hFile=0x250, lpBuffer=0x1121c000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1121c000*, lpNumberOfBytesWritten=0x11031dfc*=0x6ccc, lpOverlapped=0x11031e08) returned 1
	[0231.928] GetFileType (hFile=0x250) returned 0x1
	[0231.928] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.928] GetFileType (hFile=0x250) returned 0x1
	[0231.928] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.929] WriteFile (in: hFile=0x250, lpBuffer=0x111fa700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111fa700*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0231.932] GetFileType (hFile=0x250) returned 0x1
	[0231.932] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.932] CloseHandle (hObject=0x250) returned 1
	[0231.958] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.tl30z")) returned 0x20
	[0231.959] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0231.974] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.248] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.261] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.348] SetEvent (hEvent=0x1f0) returned 1
	[0232.348] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 0x20
	[0232.348] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0232.349] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0232.783] SetEvent (hEvent=0x150) returned 1
	[0232.783] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0232.789] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11557e08 | out: lpMode=0x11557e08) returned 0
	[0232.789] ReadFile (in: hFile=0x1d0, lpBuffer=0x11452000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11557e18, lpOverlapped=0x0 | out: lpBuffer=0x11452000*, lpNumberOfBytesRead=0x11557e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0232.797] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332ac0 | out: pbBuffer=0x11332ac0) returned 1
	[0232.797] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332ab8 | out: pbBuffer=0x11332ab8) returned 1
	[0232.797] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11464502 | out: pbBuffer=0x11464502) returned 1
	[0232.797] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332af0 | out: pbBuffer=0x11332af0) returned 1
	[0232.798] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0x1) returned 0x0
	[0232.802] SetEvent (hEvent=0x150) returned 1
	[0232.802] SetEvent (hEvent=0x1f0) returned 1
	[0232.802] GetFileType (hFile=0x1d0) returned 0x1
	[0232.802] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111cbde0 | out: lpNewFilePointer=0x0) returned 1
	[0232.802] WriteFile (in: hFile=0x1d0, lpBuffer=0x11492000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x111cbdfc, lpOverlapped=0x111cbe08 | out: lpBuffer=0x11492000*, lpNumberOfBytesWritten=0x111cbdfc*=0x6ccc, lpOverlapped=0x111cbe08) returned 1
	[0232.803] GetFileType (hFile=0x1d0) returned 0x1
	[0232.803] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x111cbde0 | out: lpNewFilePointer=0x0) returned 1
	[0232.803] GetFileType (hFile=0x1d0) returned 0x1
	[0232.803] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111cbde0 | out: lpNewFilePointer=0x0) returned 1
	[0232.804] WriteFile (in: hFile=0x1d0, lpBuffer=0x1149a000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x111cbdfc, lpOverlapped=0x111cbe08 | out: lpBuffer=0x1149a000*, lpNumberOfBytesWritten=0x111cbdfc*=0x230, lpOverlapped=0x111cbe08) returned 1
	[0232.804] GetFileType (hFile=0x1d0) returned 0x1
	[0232.804] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x111cbde0 | out: lpNewFilePointer=0x0) returned 1
	[0232.804] CloseHandle (hObject=0x1d0) returned 1
	[0232.812] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.tl30z")) returned 0x20
	[0232.812] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0232.825] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.831] SetEvent (hEvent=0x1f0) returned 1
	[0232.831] SetEvent (hEvent=0x12c) returned 1
	[0232.831] SwitchToThread () returned 1
	[0232.837] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.914] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 0x20
	[0232.914] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx", dwFileAttributes=0x20) returned 1
	[0232.915] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.tl30z"), dwFlags=0x1) returned 1
	[0233.960] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0233.988] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0233.988] ReadFile (in: hFile=0x1cc, lpBuffer=0x1130f000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1130f000*, lpNumberOfBytesRead=0x1131ae18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0234.000] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e280 | out: pbBuffer=0x1142e280) returned 1
	[0234.001] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e278 | out: pbBuffer=0x1142e278) returned 1
	[0234.001] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b5202 | out: pbBuffer=0x113b5202) returned 1
	[0234.001] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2b0 | out: pbBuffer=0x1142e2b0) returned 1
	[0234.002] GetFileType (hFile=0x1cc) returned 0x1
	[0234.002] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0234.002] WriteFile (in: hFile=0x1cc, lpBuffer=0x110f8000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112a9dfc, lpOverlapped=0x112a9e08 | out: lpBuffer=0x110f8000*, lpNumberOfBytesWritten=0x112a9dfc*=0x6ccc, lpOverlapped=0x112a9e08) returned 1
	[0234.003] GetFileType (hFile=0x1cc) returned 0x1
	[0234.003] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0234.003] GetFileType (hFile=0x1cc) returned 0x1
	[0234.003] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0234.003] WriteFile (in: hFile=0x1cc, lpBuffer=0x113c7880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112a9dfc, lpOverlapped=0x112a9e08 | out: lpBuffer=0x113c7880*, lpNumberOfBytesWritten=0x112a9dfc*=0x230, lpOverlapped=0x112a9e08) returned 1
	[0234.004] GetFileType (hFile=0x1cc) returned 0x1
	[0234.004] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0234.004] CloseHandle (hObject=0x1cc) returned 1
	[0234.131] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.tl30z")) returned 0x20
	[0234.131] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0234.168] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0234.673] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0234.872] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0234.977] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0235.091] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0235.170] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0235.277] SetEvent (hEvent=0x12c) returned 1
	[0235.277] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0235.345] SetEvent (hEvent=0x12c) returned 1
	[0235.345] SetEvent (hEvent=0x1e8) returned 1
	[0235.345] SwitchToThread () returned 1
	[0235.363] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.622] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.631] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.092] SetEvent (hEvent=0x264) returned 1
	[0237.092] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.340] SwitchToThread () returned 1
	[0237.387] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 0x20
	[0237.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", dwFileAttributes=0x20) returned 1
	[0237.591] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.tl30z"), dwFlags=0x1) returned 1
	[0239.483] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0239.492] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0239.492] ReadFile (in: hFile=0x1c8, lpBuffer=0x1131e000, nNumberOfBytesToRead=0xd66e, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x11423e18*=0xd66e, lpOverlapped=0x0) returned 1
	[0239.526] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0239.526] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11390802 | out: pbBuffer=0x11390802) returned 1
	[0239.527] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0239.528] GetFileType (hFile=0x1c8) returned 0x1
	[0239.614] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0239.614] WriteFile (in: hFile=0x1c8, lpBuffer=0x110f2000*, nNumberOfBytesToWrite=0xd66e, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110f2000*, lpNumberOfBytesWritten=0x1102bdfc*=0xd66e, lpOverlapped=0x1102be08) returned 1
	[0239.616] GetFileType (hFile=0x1c8) returned 0x1
	[0239.616] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xd66e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0239.616] GetFileType (hFile=0x1c8) returned 0x1
	[0239.616] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0239.616] WriteFile (in: hFile=0x1c8, lpBuffer=0x1135ca80*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135ca80*, lpNumberOfBytesWritten=0x1102bdfc*=0x239, lpOverlapped=0x1102be08) returned 1
	[0239.647] GetFileType (hFile=0x1c8) returned 0x1
	[0239.648] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xd66e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0239.648] CloseHandle (hObject=0x1c8) returned 1
	[0239.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.tl30z")) returned 0x20
	[0239.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.tl30z", dwFileAttributes=0x21) returned 1
	[0239.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 0x20
	[0239.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x20) returned 1
	[0239.665] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.tl30z"), dwFlags=0x1) returned 1
	[0240.026] SetEvent (hEvent=0x150) returned 1
	[0240.026] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0240.085] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0240.085] ReadFile (in: hFile=0x1b4, lpBuffer=0x113ae000, nNumberOfBytesToRead=0x374c, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x113ae000*, lpNumberOfBytesRead=0x11022e18*=0x374c, lpOverlapped=0x0) returned 1
	[0240.088] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e540 | out: pbBuffer=0x1104e540) returned 1
	[0240.088] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11391402 | out: pbBuffer=0x11391402) returned 1
	[0240.089] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e570 | out: pbBuffer=0x1104e570) returned 1
	[0240.089] GetFileType (hFile=0x1b4) returned 0x1
	[0240.090] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.090] WriteFile (in: hFile=0x1b4, lpBuffer=0x11404000*, nNumberOfBytesToWrite=0x374c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11404000*, lpNumberOfBytesWritten=0x1102bdfc*=0x374c, lpOverlapped=0x1102be08) returned 1
	[0240.090] GetFileType (hFile=0x1b4) returned 0x1
	[0240.090] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x374c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.091] GetFileType (hFile=0x1b4) returned 0x1
	[0240.091] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.091] WriteFile (in: hFile=0x1b4, lpBuffer=0x1135d880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135d880*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0240.091] GetFileType (hFile=0x1b4) returned 0x1
	[0240.092] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x374c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.092] CloseHandle (hObject=0x1b4) returned 1
	[0240.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.tl30z")) returned 0x20
	[0240.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.tl30z", dwFileAttributes=0x21) returned 1
	[0240.119] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0240.154] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0240.185] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0240.582] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0240.619] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0240.657] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0240.771] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0240.807] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0240.973] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0241.055] SetEvent (hEvent=0x12c) returned 1
	[0241.055] SetEvent (hEvent=0x25c) returned 1
	[0241.055] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0x1) returned 0x102
	[0241.066] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0241.066] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0x1) returned 0x102
	[0241.074] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0241.074] SetEvent (hEvent=0x12c) returned 1
	[0241.074] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0x1) returned 0x102
	[0241.078] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0241.078] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0242.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0x20
	[0242.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties", dwFileAttributes=0x20) returned 1
	[0242.204] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.tl30z"), dwFlags=0x1) returned 1
	[0243.099] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0243.148] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x113abe08 | out: lpMode=0x113abe08) returned 0
	[0243.148] SwitchToThread () returned 1
	[0243.200] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0243.238] SetEvent (hEvent=0x26c) returned 1
	[0243.238] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0243.328] SetEvent (hEvent=0x26c) returned 1
	[0243.328] SetEvent (hEvent=0x1e0) returned 1
	[0243.328] SetEvent (hEvent=0x240) returned 1
	[0243.328] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.211] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.215] SetEvent (hEvent=0x25c) returned 1
	[0300.215] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf")) returned 0x220
	[0300.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF", dwFileAttributes=0x220) returned 1
	[0300.217] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x29c
	[0300.262] GetConsoleMode (in: hConsoleHandle=0x29c, lpMode=0x111d5e08 | out: lpMode=0x111d5e08) returned 0
	[0300.262] ReadFile (in: hFile=0x29c, lpBuffer=0x112dc600, nNumberOfBytesToRead=0x1284, lpNumberOfBytesRead=0x111d5e18, lpOverlapped=0x0 | out: lpBuffer=0x112dc600*, lpNumberOfBytesRead=0x111d5e18*=0x1284, lpOverlapped=0x0) returned 1
	[0300.542] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.570] SetEvent (hEvent=0x160) returned 1
	[0300.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332650 | out: pbBuffer=0x11332650) returned 1
	[0300.570] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11376f02 | out: pbBuffer=0x11376f02) returned 1
	[0300.571] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332680 | out: pbBuffer=0x11332680) returned 1
	[0300.571] GetFileType (hFile=0x29c) returned 0x1
	[0300.571] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.571] WriteFile (in: hFile=0x29c, lpBuffer=0x11108000*, nNumberOfBytesToWrite=0x1284, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11108000*, lpNumberOfBytesWritten=0x11339dfc*=0x1284, lpOverlapped=0x11339e08) returned 1
	[0300.572] GetFileType (hFile=0x29c) returned 0x1
	[0300.572] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x1284, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.572] GetFileType (hFile=0x29c) returned 0x1
	[0300.572] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.572] WriteFile (in: hFile=0x29c, lpBuffer=0x1135d500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1135d500*, lpNumberOfBytesWritten=0x11339dfc*=0x224, lpOverlapped=0x11339e08) returned 1
	[0300.573] GetFileType (hFile=0x29c) returned 0x1
	[0300.573] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x1284, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.573] CloseHandle (hObject=0x29c) returned 1
	[0300.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf.tl30z")) returned 0x220
	[0300.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.574] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.576] SetEvent (hEvent=0x160) returned 1
	[0300.576] SetEvent (hEvent=0x22c) returned 1
	[0300.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e60f0 | out: pbBuffer=0x113e60f0) returned 1
	[0300.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60e8 | out: pbBuffer=0x113e60e8) returned 1
	[0300.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113f2a02 | out: pbBuffer=0x113f2a02) returned 1
	[0300.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6120 | out: pbBuffer=0x113e6120) returned 1
	[0300.578] GetFileType (hFile=0x294) returned 0x1
	[0300.578] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.578] WriteFile (in: hFile=0x294, lpBuffer=0x11bf0000*, nNumberOfBytesToWrite=0x1d3c, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11bf0000*, lpNumberOfBytesWritten=0x1102ddfc*=0x1d3c, lpOverlapped=0x1102de08) returned 1
	[0300.578] GetFileType (hFile=0x294) returned 0x1
	[0300.578] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x1d3c, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.578] GetFileType (hFile=0x294) returned 0x1
	[0300.579] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.579] WriteFile (in: hFile=0x294, lpBuffer=0x11311880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11311880*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0300.579] GetFileType (hFile=0x294) returned 0x1
	[0300.579] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x1d3c, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.579] CloseHandle (hObject=0x294) returned 1
	[0300.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf.tl30z")) returned 0x220
	[0300.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.581] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0300.581] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113f3502 | out: pbBuffer=0x113f3502) returned 1
	[0300.581] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113f3557 | out: pbBuffer=0x113f3557) returned 1
	[0300.581] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0300.582] GetFileType (hFile=0x28c) returned 0x1
	[0300.582] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.582] WriteFile (in: hFile=0x28c, lpBuffer=0x11c1c000*, nNumberOfBytesToWrite=0x59a0, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11c1c000*, lpNumberOfBytesWritten=0x1102ddfc*=0x59a0, lpOverlapped=0x1102de08) returned 1
	[0300.583] GetFileType (hFile=0x28c) returned 0x1
	[0300.583] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x59a0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.583] GetFileType (hFile=0x28c) returned 0x1
	[0300.583] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.583] WriteFile (in: hFile=0x28c, lpBuffer=0x1135c700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1135c700*, lpNumberOfBytesWritten=0x1102ddfc*=0x22a, lpOverlapped=0x1102de08) returned 1
	[0300.583] GetFileType (hFile=0x28c) returned 0x1
	[0300.584] SetFilePointerEx (in: hFile=0x28c, liDistanceToMove=0x59a0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.584] CloseHandle (hObject=0x28c) returned 1
	[0300.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf.tl30z")) returned 0x220
	[0300.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0300.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63d8 | out: pbBuffer=0x113e63d8) returned 1
	[0300.585] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11376002 | out: pbBuffer=0x11376002) returned 1
	[0300.586] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11376031 | out: pbBuffer=0x11376031) returned 1
	[0300.586] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11376048 | out: pbBuffer=0x11376048) returned 1
	[0300.586] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137604e | out: pbBuffer=0x1137604e) returned 1
	[0300.586] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0300.587] GetFileType (hFile=0x1d4) returned 0x1
	[0300.587] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.587] WriteFile (in: hFile=0x1d4, lpBuffer=0x11cb2000*, nNumberOfBytesToWrite=0x51be, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11cb2000*, lpNumberOfBytesWritten=0x1102ddfc*=0x51be, lpOverlapped=0x1102de08) returned 1
	[0300.587] GetFileType (hFile=0x1d4) returned 0x1
	[0300.588] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x51be, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.588] GetFileType (hFile=0x1d4) returned 0x1
	[0300.588] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.588] WriteFile (in: hFile=0x1d4, lpBuffer=0x11ce4380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11ce4380*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0300.588] GetFileType (hFile=0x1d4) returned 0x1
	[0300.588] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x51be, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.588] CloseHandle (hObject=0x1d4) returned 1
	[0300.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf.tl30z")) returned 0x220
	[0300.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8)) returned 1
	[0300.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8)) returned 1
	[0300.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410)) returned 1
	[0300.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1
	[0300.591] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476)) returned 1
	[0300.591] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e)) returned 1
	[0300.591] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e)) returned 1
	[0300.591] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926)) returned 1
	[0300.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2)) returned 1
	[0300.624] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.632] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.668] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.694] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.907] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.011] SetEvent (hEvent=0x134) returned 1
	[0301.011] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xffffffff) 

Thread:
	id = 42
	os_tid = 0x824

	[0213.022] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x32e7ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x32e7ff30*=0x16c) returned 1
	[0213.022] VirtualQuery (in: lpAddress=0x32e7ff40, lpBuffer=0x32e7ff40, dwLength=0x1c | out: lpBuffer=0x32e7ff40*(BaseAddress=0x32e7f000, AllocationBase=0x32d80000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0213.022] SetEvent (hEvent=0x22c) returned 1
	[0213.022] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x240
	[0213.022] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0213.060] SetEvent (hEvent=0x22c) returned 1
	[0213.060] SetEvent (hEvent=0x1b0) returned 1
	[0213.060] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 0x20
	[0213.060] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", dwFileAttributes=0x20) returned 1
	[0213.060] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.tl30z"), dwFlags=0x1) returned 1
	[0220.696] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244
	[0220.979] GetConsoleMode (in: hConsoleHandle=0x244, lpMode=0x11557e08 | out: lpMode=0x11557e08) returned 0
	[0220.979] ReadFile (in: hFile=0x244, lpBuffer=0x113e8000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11557e18, lpOverlapped=0x0 | out: lpBuffer=0x113e8000*, lpNumberOfBytesRead=0x11557e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0221.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0221.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332398 | out: pbBuffer=0x11332398) returned 1
	[0221.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141d302 | out: pbBuffer=0x1141d302) returned 1
	[0221.071] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323d0 | out: pbBuffer=0x113323d0) returned 1
	[0221.072] GetFileType (hFile=0x244) returned 0x1
	[0221.072] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x115d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0221.072] WriteFile (in: hFile=0x244, lpBuffer=0x115aa000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x115d5dfc, lpOverlapped=0x115d5e08 | out: lpBuffer=0x115aa000*, lpNumberOfBytesWritten=0x115d5dfc*=0x6ccc, lpOverlapped=0x115d5e08) returned 1
	[0221.073] GetFileType (hFile=0x244) returned 0x1
	[0221.073] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x115d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0221.073] GetFileType (hFile=0x244) returned 0x1
	[0221.073] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x115d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0221.073] WriteFile (in: hFile=0x244, lpBuffer=0x11291880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x115d5dfc, lpOverlapped=0x115d5e08 | out: lpBuffer=0x11291880*, lpNumberOfBytesWritten=0x115d5dfc*=0x230, lpOverlapped=0x115d5e08) returned 1
	[0221.074] GetFileType (hFile=0x244) returned 0x1
	[0221.074] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x115d5de0 | out: lpNewFilePointer=0x0) returned 1
	[0221.074] CloseHandle (hObject=0x244) returned 1
	[0221.218] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.tl30z")) returned 0x20
	[0221.218] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0221.625] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0222.126] SetEvent (hEvent=0x22c) returned 1
	[0222.126] SetEvent (hEvent=0x210) returned 1
	[0222.126] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0242.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0x20
	[0242.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc", dwFileAttributes=0x20) returned 1
	[0242.224] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.tl30z"), dwFlags=0x1) returned 1
	[0243.147] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244
	[0243.238] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0243.338] SetEvent (hEvent=0x26c) returned 1
	[0243.338] GetConsoleMode (in: hConsoleHandle=0x244, lpMode=0x113ace08 | out: lpMode=0x113ace08) returned 0
	[0243.338] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0243.357] SetEvent (hEvent=0x26c) returned 1
	[0243.357] SetEvent (hEvent=0x1e0) returned 1
	[0243.357] ReadFile (in: hFile=0x244, lpBuffer=0x11482000, nNumberOfBytesToRead=0xeba, lpNumberOfBytesRead=0x113ace18, lpOverlapped=0x0 | out: lpBuffer=0x11482000*, lpNumberOfBytesRead=0x113ace18*=0xeba, lpOverlapped=0x0) returned 1
	[0243.409] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0243.409] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x114a0802 | out: pbBuffer=0x114a0802) returned 1
	[0243.409] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114a0829 | out: pbBuffer=0x114a0829) returned 1
	[0243.410] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0243.410] GetFileType (hFile=0x244) returned 0x1
	[0243.410] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0243.410] WriteFile (in: hFile=0x244, lpBuffer=0x11392000*, nNumberOfBytesToWrite=0xeba, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11392000*, lpNumberOfBytesWritten=0x1102bdfc*=0xeba, lpOverlapped=0x1102be08) returned 1
	[0243.411] GetFileType (hFile=0x244) returned 0x1
	[0243.411] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0xeba, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0243.411] GetFileType (hFile=0x244) returned 0x1
	[0243.411] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0243.411] WriteFile (in: hFile=0x244, lpBuffer=0x11370a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11370a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0243.412] GetFileType (hFile=0x244) returned 0x1
	[0243.412] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0xeba, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0243.412] CloseHandle (hObject=0x244) returned 1
	[0243.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.tl30z")) returned 0x20
	[0243.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.tl30z", dwFileAttributes=0x21) returned 1
	[0243.414] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0243.654] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0243.920] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0300.199] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0300.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf")) returned 0x220
	[0300.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF", dwFileAttributes=0x220) returned 1
	[0300.208] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0300.253] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x111d4e08 | out: lpMode=0x111d4e08) returned 0
	[0300.253] ReadFile (in: hFile=0x298, lpBuffer=0x11202000, nNumberOfBytesToRead=0x13b8, lpNumberOfBytesRead=0x111d4e18, lpOverlapped=0x0 | out: lpBuffer=0x11202000*, lpNumberOfBytesRead=0x111d4e18*=0x13b8, lpOverlapped=0x0) returned 1
	[0300.525] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6160 | out: pbBuffer=0x113e6160) returned 1
	[0300.525] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1129c802 | out: pbBuffer=0x1129c802) returned 1
	[0300.525] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6190 | out: pbBuffer=0x113e6190) returned 1
	[0300.526] GetFileType (hFile=0x298) returned 0x1
	[0300.526] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.526] WriteFile (in: hFile=0x298, lpBuffer=0x11238000*, nNumberOfBytesToWrite=0x13b8, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11238000*, lpNumberOfBytesWritten=0x1102ddfc*=0x13b8, lpOverlapped=0x1102de08) returned 1
	[0300.526] GetFileType (hFile=0x298) returned 0x1
	[0300.526] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x13b8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.526] GetFileType (hFile=0x298) returned 0x1
	[0300.526] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.527] WriteFile (in: hFile=0x298, lpBuffer=0x1124b880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1124b880*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0300.527] GetFileType (hFile=0x298) returned 0x1
	[0300.527] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x13b8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.527] CloseHandle (hObject=0x298) returned 1
	[0300.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf.tl30z")) returned 0x220
	[0300.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf")) returned 0x220
	[0300.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF", dwFileAttributes=0x220) returned 1
	[0300.528] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.564] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0300.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0300.566] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x111cfe08 | out: lpMode=0x111cfe08) returned 0
	[0300.566] ReadFile (in: hFile=0x298, lpBuffer=0x11470a00, nNumberOfBytesToRead=0x13e8, lpNumberOfBytesRead=0x111cfe18, lpOverlapped=0x0 | out: lpBuffer=0x11470a00*, lpNumberOfBytesRead=0x111cfe18*=0x13e8, lpOverlapped=0x0) returned 1
	[0300.886] SetEvent (hEvent=0x150) returned 1
	[0300.887] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6590 | out: pbBuffer=0x113e6590) returned 1
	[0300.887] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11377502 | out: pbBuffer=0x11377502) returned 1
	[0300.888] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65c0 | out: pbBuffer=0x113e65c0) returned 1
	[0300.889] GetFileType (hFile=0x298) returned 0x1
	[0300.889] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.889] WriteFile (in: hFile=0x298, lpBuffer=0x11412000*, nNumberOfBytesToWrite=0x13e8, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11412000*, lpNumberOfBytesWritten=0x1102ddfc*=0x13e8, lpOverlapped=0x1102de08) returned 1
	[0300.889] GetFileType (hFile=0x298) returned 0x1
	[0300.889] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x13e8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.889] GetFileType (hFile=0x298) returned 0x1
	[0300.890] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.890] WriteFile (in: hFile=0x298, lpBuffer=0x11ce5180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11ce5180*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0300.890] GetFileType (hFile=0x298) returned 0x1
	[0300.890] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x13e8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.890] CloseHandle (hObject=0x298) returned 1
	[0300.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf.tl30z")) returned 0x220
	[0300.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0300.891] SetEvent (hEvent=0x23c) returned 1
	[0300.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a)) returned 1
	[0301.021] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0301.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe)) returned 1
	[0301.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2)) returned 1
	[0301.201] SetEvent (hEvent=0x150) returned 1
	[0301.202] SetEvent (hEvent=0x164) returned 1
	[0301.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938)) returned 1
	[0301.216] SetEvent (hEvent=0x124) returned 1
	[0301.216] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958)) returned 1
	[0301.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c)) returned 1
	[0301.250] SetEvent (hEvent=0x24c) returned 1
	[0301.250] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2)) returned 1
	[0301.258] SetEvent (hEvent=0x284) returned 1
	[0301.258] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56)) returned 1
	[0301.276] SetEvent (hEvent=0x150) returned 1
	[0301.276] SetEvent (hEvent=0x164) returned 1
	[0301.276] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a)) returned 1
	[0301.308] SetEvent (hEvent=0x150) returned 1
	[0301.308] SetEvent (hEvent=0x124) returned 1
	[0301.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330)) returned 1
	[0301.319] SetEvent (hEvent=0x1b0) returned 1
	[0301.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee)) returned 1
	[0301.351] SetEvent (hEvent=0x150) returned 1
	[0301.351] SetEvent (hEvent=0x1e0) returned 1
	[0301.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4)) returned 1
	[0301.385] SetEvent (hEvent=0x150) returned 1
	[0301.385] SetEvent (hEvent=0x284) returned 1
	[0301.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4)) returned 1
	[0301.402] SetEvent (hEvent=0x164) returned 1
	[0301.403] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc)) returned 1
	[0301.421] SetEvent (hEvent=0x150) returned 1
	[0301.421] SetEvent (hEvent=0x124) returned 1
	[0301.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854)) returned 1
	[0301.442] SetEvent (hEvent=0x150) returned 1
	[0301.442] SetEvent (hEvent=0x1b0) returned 1
	[0301.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88)) returned 1
	[0301.464] SetEvent (hEvent=0x150) returned 1
	[0301.464] SetEvent (hEvent=0x1e0) returned 1
	[0301.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2)) returned 1
	[0301.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e)) returned 1
	[0301.547] SetEvent (hEvent=0x150) returned 1
	[0301.547] SetEvent (hEvent=0x164) returned 1
	[0301.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166)) returned 1
	[0301.568] SetEvent (hEvent=0x150) returned 1
	[0301.568] SetEvent (hEvent=0x124) returned 1
	[0301.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700)) returned 1
	[0301.587] SetEvent (hEvent=0x284) returned 1
	[0301.587] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a)) returned 1
	[0301.605] SetEvent (hEvent=0x150) returned 1
	[0301.605] SetEvent (hEvent=0x1e0) returned 1
	[0301.605] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440)) returned 1
	[0301.624] SetEvent (hEvent=0x150) returned 1
	[0301.624] SetEvent (hEvent=0x248) returned 1
	[0301.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c)) returned 1
	[0301.642] SetEvent (hEvent=0x164) returned 1
	[0301.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e)) returned 1
	[0301.662] SetEvent (hEvent=0x150) returned 1
	[0301.662] SetEvent (hEvent=0x124) returned 1
	[0301.662] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4)) returned 1
	[0301.682] SetEvent (hEvent=0x150) returned 1
	[0301.682] SetEvent (hEvent=0x1b0) returned 1
	[0301.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550)) returned 1
	[0301.699] SetEvent (hEvent=0x284) returned 1
	[0301.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1
	[0301.721] SetEvent (hEvent=0x248) returned 1
	[0301.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1
	[0301.734] SetEvent (hEvent=0x284) returned 1
	[0301.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0)) returned 1
	[0301.751] SetEvent (hEvent=0x164) returned 1
	[0301.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898)) returned 1
	[0301.773] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a)) returned 1
	[0301.802] SetEvent (hEvent=0x150) returned 1
	[0301.802] SetEvent (hEvent=0x1e0) returned 1
	[0301.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8)) returned 1
	[0301.821] SetEvent (hEvent=0x124) returned 1
	[0301.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2)) returned 1
	[0301.837] SetEvent (hEvent=0x124) returned 1
	[0301.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10)) returned 1
	[0301.873] SetEvent (hEvent=0x284) returned 1
	[0301.873] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c)) returned 1
	[0301.896] SetEvent (hEvent=0x150) returned 1
	[0301.896] SetEvent (hEvent=0x160) returned 1
	[0301.896] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc)) returned 1
	[0301.916] SetEvent (hEvent=0x164) returned 1
	[0301.916] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4)) returned 1
	[0301.950] SetEvent (hEvent=0x164) returned 1
	[0301.951] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1)) returned 1
	[0301.983] SetEvent (hEvent=0x248) returned 1
	[0301.983] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91)) returned 1
	[0302.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5)) returned 1
	[0302.088] SetEvent (hEvent=0x248) returned 1
	[0302.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86)) returned 1
	[0302.110] SetEvent (hEvent=0x248) returned 1
	[0302.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21)) returned 1
	[0302.129] SetEvent (hEvent=0x248) returned 1
	[0302.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a)) returned 1
	[0302.150] SetEvent (hEvent=0x150) returned 1
	[0302.150] SetEvent (hEvent=0x124) returned 1
	[0302.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1
	[0302.169] SetEvent (hEvent=0x150) returned 1
	[0302.169] SetEvent (hEvent=0x24c) returned 1
	[0302.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1
	[0302.188] SetEvent (hEvent=0x160) returned 1
	[0302.189] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa6)) returned 1
	[0302.208] SetEvent (hEvent=0x150) returned 1
	[0302.208] SetEvent (hEvent=0x1e0) returned 1
	[0302.208] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b64)) returned 1
	[0302.217] SetEvent (hEvent=0x248) returned 1
	[0302.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3658)) returned 1
	[0302.239] SetEvent (hEvent=0x284) returned 1
	[0302.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b56)) returned 1
	[0302.268] SetEvent (hEvent=0x150) returned 1
	[0302.268] SetEvent (hEvent=0x24c) returned 1
	[0302.268] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a6)) returned 1
	[0302.301] SetEvent (hEvent=0x164) returned 1
	[0302.301] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1
	[0302.321] SetEvent (hEvent=0x164) returned 1
	[0302.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37de)) returned 1
	[0302.342] SetEvent (hEvent=0x164) returned 1
	[0302.342] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1
	[0302.414] SetEvent (hEvent=0x150) returned 1
	[0302.414] SetEvent (hEvent=0x284) returned 1
	[0302.414] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b2)) returned 1
	[0302.437] SetEvent (hEvent=0x150) returned 1
	[0302.437] SetEvent (hEvent=0x24c) returned 1
	[0302.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe42c)) returned 1
	[0302.458] SetEvent (hEvent=0x150) returned 1
	[0302.458] SetEvent (hEvent=0x160) returned 1
	[0302.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088e)) returned 1
	[0302.479] SetEvent (hEvent=0x150) returned 1
	[0302.479] SetEvent (hEvent=0x1e0) returned 1
	[0302.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107ec)) returned 1
	[0302.497] SetEvent (hEvent=0x150) returned 1
	[0302.498] SetEvent (hEvent=0x164) returned 1
	[0302.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ce)) returned 1
	[0302.519] SetEvent (hEvent=0x150) returned 1
	[0302.519] SetEvent (hEvent=0x284) returned 1
	[0302.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d24)) returned 1
	[0302.542] SetEvent (hEvent=0x150) returned 1
	[0302.542] SetEvent (hEvent=0x24c) returned 1
	[0302.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4236)) returned 1
	[0302.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9c)) returned 1
	[0302.590] SetEvent (hEvent=0x1e0) returned 1
	[0302.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x493e)) returned 1
	[0302.610] SetEvent (hEvent=0x150) returned 1
	[0302.610] SetEvent (hEvent=0x164) returned 1
	[0302.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4960)) returned 1
	[0302.640] SetEvent (hEvent=0x284) returned 1
	[0302.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1
	[0302.658] SetEvent (hEvent=0x150) returned 1
	[0302.658] SetEvent (hEvent=0x24c) returned 1
	[0302.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0e)) returned 1
	[0302.679] SetEvent (hEvent=0x150) returned 1
	[0302.679] SetEvent (hEvent=0x1b0) returned 1
	[0302.679] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae8)) returned 1
	[0302.699] SetEvent (hEvent=0x1e0) returned 1
	[0302.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1
	[0302.717] SetEvent (hEvent=0x150) returned 1
	[0302.717] SetEvent (hEvent=0x164) returned 1
	[0302.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa)) returned 1
	[0302.735] SetEvent (hEvent=0x150) returned 1
	[0302.735] SetEvent (hEvent=0x284) returned 1
	[0302.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1
	[0302.754] SetEvent (hEvent=0x150) returned 1
	[0302.754] SetEvent (hEvent=0x24c) returned 1
	[0302.754] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3e0b76, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x103e)) returned 1
	[0302.770] SetEvent (hEvent=0x1b0) returned 1
	[0302.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a0e)) returned 1
	[0302.787] SetEvent (hEvent=0x1e0) returned 1
	[0302.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cf8)) returned 1
	[0302.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8e)) returned 1
	[0302.863] SetEvent (hEvent=0x150) returned 1
	[0302.863] SetEvent (hEvent=0x284) returned 1
	[0302.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29c4)) returned 1
	[0302.886] SetEvent (hEvent=0x150) returned 1
	[0302.886] SetEvent (hEvent=0x24c) returned 1
	[0302.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544c)) returned 1
	[0302.905] SetEvent (hEvent=0x1b0) returned 1
	[0302.906] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8b)) returned 1
	[0302.945] SetEvent (hEvent=0x1e0) returned 1
	[0302.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81f0)) returned 1
	[0302.962] SetEvent (hEvent=0x248) returned 1
	[0302.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaabb)) returned 1
	[0302.982] SetEvent (hEvent=0x150) returned 1
	[0302.982] SetEvent (hEvent=0x284) returned 1
	[0302.983] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf406dcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf406dcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1
	[0303.003] SetEvent (hEvent=0x150) returned 1
	[0303.003] SetEvent (hEvent=0x24c) returned 1
	[0303.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3e0b76, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3e0b76, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf406dcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
	[0303.023] SetEvent (hEvent=0x150) returned 1
	[0303.023] SetEvent (hEvent=0x1b0) returned 1
	[0303.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1
	[0303.046] SetEvent (hEvent=0x150) returned 1
	[0303.046] SetEvent (hEvent=0x1e0) returned 1
	[0303.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1
	[0303.066] SetEvent (hEvent=0x150) returned 1
	[0303.066] SetEvent (hEvent=0x248) returned 1
	[0303.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x911a)) returned 1
	[0303.088] SetEvent (hEvent=0x150) returned 1
	[0303.088] SetEvent (hEvent=0x284) returned 1
	[0303.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa75a)) returned 1
	[0303.107] SetEvent (hEvent=0x150) returned 1
	[0303.107] SetEvent (hEvent=0x24c) returned 1
	[0303.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ab)) returned 1
	[0303.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9d1)) returned 1
	[0303.385] SetEvent (hEvent=0x150) returned 1
	[0303.385] SetEvent (hEvent=0x1e0) returned 1
	[0303.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f2)) returned 1
	[0303.408] SetEvent (hEvent=0x1b0) returned 1
	[0303.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b02)) returned 1
	[0303.433] SetEvent (hEvent=0x150) returned 1
	[0303.433] SetEvent (hEvent=0x284) returned 1
	[0303.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x423a)) returned 1
	[0303.455] SetEvent (hEvent=0x24c) returned 1
	[0303.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4180)) returned 1
	[0303.474] SetEvent (hEvent=0x150) returned 1
	[0303.474] SetEvent (hEvent=0x164) returned 1
	[0303.475] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1
	[0303.494] SetEvent (hEvent=0x150) returned 1
	[0303.494] SetEvent (hEvent=0x1e0) returned 1
	[0303.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28be)) returned 1
	[0303.526] SetEvent (hEvent=0x150) returned 1
	[0303.526] SetEvent (hEvent=0x248) returned 1
	[0303.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24d7)) returned 1
	[0303.551] SetEvent (hEvent=0x150) returned 1
	[0303.551] SetEvent (hEvent=0x284) returned 1
	[0303.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8)) returned 1
	[0303.568] SetEvent (hEvent=0x24c) returned 1
	[0303.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7e)) returned 1
	[0303.586] SetEvent (hEvent=0x164) returned 1
	[0303.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3260)) returned 1
	[0303.606] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d4)) returned 1
	[0303.647] SetEvent (hEvent=0x150) returned 1
	[0303.647] SetEvent (hEvent=0x248) returned 1
	[0303.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cdd)) returned 1
	[0303.656] SetEvent (hEvent=0x1b0) returned 1
	[0303.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d)) returned 1
	[0303.680] SetEvent (hEvent=0x150) returned 1
	[0303.681] SetEvent (hEvent=0x24c) returned 1
	[0303.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad8)) returned 1
	[0303.692] SetEvent (hEvent=0x284) returned 1
	[0303.693] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c3)) returned 1
	[0303.729] SetEvent (hEvent=0x164) returned 1
	[0303.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7457)) returned 1
	[0303.748] SetEvent (hEvent=0x248) returned 1
	[0303.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9e2)) returned 1
	[0303.765] SetEvent (hEvent=0x164) returned 1
	[0303.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee3)) returned 1
	[0303.783] SetEvent (hEvent=0x164) returned 1
	[0303.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8a)) returned 1
	[0303.795] SetEvent (hEvent=0x164) returned 1
	[0303.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a56)) returned 1
	[0303.817] SetEvent (hEvent=0x160) returned 1
	[0303.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f43)) returned 1
	[0303.826] SetEvent (hEvent=0x284) returned 1
	[0303.826] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6aa8)) returned 1
	[0303.850] SetEvent (hEvent=0x150) returned 1
	[0303.850] SetEvent (hEvent=0x248) returned 1
	[0303.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6873)) returned 1
	[0303.870] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa497)) returned 1
	[0303.910] SetEvent (hEvent=0x150) returned 1
	[0303.910] SetEvent (hEvent=0x164) returned 1
	[0303.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7b)) returned 1
	[0303.952] SetEvent (hEvent=0x150) returned 1
	[0303.952] SetEvent (hEvent=0x160) returned 1
	[0303.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3615)) returned 1
	[0303.969] SetEvent (hEvent=0x284) returned 1
	[0303.969] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1
	[0303.986] SetEvent (hEvent=0x150) returned 1
	[0303.986] SetEvent (hEvent=0x248) returned 1
	[0303.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df7)) returned 1
	[0304.007] SetEvent (hEvent=0x150) returned 1
	[0304.007] SetEvent (hEvent=0x1e0) returned 1
	[0304.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d7f)) returned 1
	[0304.043] SetEvent (hEvent=0x150) returned 1
	[0304.043] SetEvent (hEvent=0x164) returned 1
	[0304.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec6)) returned 1
	[0304.064] SetEvent (hEvent=0x1b0) returned 1
	[0304.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba)) returned 1
	[0304.079] SetEvent (hEvent=0x1b0) returned 1
	[0304.079] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc)) returned 1
	[0304.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5a)) returned 1
	[0304.135] SetEvent (hEvent=0x284) returned 1
	[0304.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4794eb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4794eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1672c)) returned 1
	[0304.225] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86c)) returned 1
	[0304.276] SetEvent (hEvent=0x284) returned 1
	[0304.276] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b83a)) returned 1
	[0304.298] SetEvent (hEvent=0x150) returned 1
	[0304.299] SetEvent (hEvent=0x160) returned 1
	[0304.299] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df43)) returned 1
	[0304.327] SetEvent (hEvent=0x164) returned 1
	[0304.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184d3)) returned 1
	[0304.374] SetEvent (hEvent=0x150) returned 1
	[0304.374] SetEvent (hEvent=0x1e0) returned 1
	[0304.375] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba5)) returned 1
	[0304.397] SetEvent (hEvent=0x24c) returned 1
	[0304.397] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653a)) returned 1
	[0304.414] SetEvent (hEvent=0x248) returned 1
	[0304.414] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49f727, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf49f727, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e1d)) returned 1
	[0304.593] SetEvent (hEvent=0x150) returned 1
	[0304.593] SetEvent (hEvent=0x160) returned 1
	[0304.593] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1531c)) returned 1
	[0304.613] SetEvent (hEvent=0x150) returned 1
	[0304.613] SetEvent (hEvent=0x1b0) returned 1
	[0304.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad37)) returned 1
	[0304.634] SetEvent (hEvent=0x150) returned 1
	[0304.634] SetEvent (hEvent=0x1e0) returned 1
	[0304.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d2)) returned 1
	[0304.664] SetEvent (hEvent=0x24c) returned 1
	[0304.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17749)) returned 1
	[0304.676] SetEvent (hEvent=0x164) returned 1
	[0304.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a7f)) returned 1
	[0304.713] SetEvent (hEvent=0x248) returned 1
	[0304.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fef)) returned 1
	[0304.736] SetEvent (hEvent=0x1b0) returned 1
	[0304.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a9ed)) returned 1
	[0304.756] SetEvent (hEvent=0x1e0) returned 1
	[0304.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x193e7)) returned 1
	[0304.764] SetEvent (hEvent=0x160) returned 1
	[0304.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14f8a)) returned 1
	[0304.792] SetEvent (hEvent=0x24c) returned 1
	[0304.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a3f4)) returned 1
	[0304.801] SetEvent (hEvent=0x24c) returned 1
	[0304.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4)) returned 1
	[0304.817] SetEvent (hEvent=0x248) returned 1
	[0304.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bef7)) returned 1
	[0304.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c596d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4c596d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4c596d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17dee)) returned 1
	[0304.867] SetEvent (hEvent=0x150) returned 1
	[0304.867] SetEvent (hEvent=0x1e0) returned 1
	[0304.867] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bb02)) returned 1
	[0304.891] SetEvent (hEvent=0x150) returned 1
	[0304.891] SetEvent (hEvent=0x164) returned 1
	[0304.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18888)) returned 1
	[0304.912] SetEvent (hEvent=0x160) returned 1
	[0304.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d08)) returned 1
	[0304.926] SetEvent (hEvent=0x24c) returned 1
	[0304.926] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75f)) returned 1
	[0304.995] SetEvent (hEvent=0x150) returned 1
	[0304.995] SetEvent (hEvent=0x1b0) returned 1
	[0304.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779f)) returned 1
	[0305.018] SetEvent (hEvent=0x150) returned 1
	[0305.018] SetEvent (hEvent=0x1e0) returned 1
	[0305.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b94)) returned 1
	[0305.078] SetEvent (hEvent=0x150) returned 1
	[0305.078] SetEvent (hEvent=0x164) returned 1
	[0305.078] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x190e9)) returned 1
	[0305.125] SetEvent (hEvent=0x174) returned 1
	[0305.125] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b79)) returned 1
	[0305.149] SetEvent (hEvent=0x150) returned 1
	[0305.149] SetEvent (hEvent=0x24c) returned 1
	[0305.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14033)) returned 1
	[0305.173] SetEvent (hEvent=0x1b0) returned 1
	[0305.173] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ebbf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf4ebbf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4ebbf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6)) returned 1
	[0305.181] SetEvent (hEvent=0x174) returned 1
	[0305.182] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11780)) returned 1
	[0305.215] SetEvent (hEvent=0x164) returned 1
	[0305.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x787a)) returned 1
	[0305.245] SetEvent (hEvent=0x150) returned 1
	[0305.245] SetEvent (hEvent=0x160) returned 1
	[0305.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa91e)) returned 1
	[0305.276] SetEvent (hEvent=0x150) returned 1
	[0305.276] SetEvent (hEvent=0x24c) returned 1
	[0305.276] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b43)) returned 1
	[0305.312] SetEvent (hEvent=0x150) returned 1
	[0305.312] SetEvent (hEvent=0x1b0) returned 1
	[0305.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396a)) returned 1
	[0305.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x693e)) returned 1
	[0305.363] SetEvent (hEvent=0x150) returned 1
	[0305.363] SetEvent (hEvent=0x164) returned 1
	[0305.363] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb0a)) returned 1
	[0305.383] SetEvent (hEvent=0x150) returned 1
	[0305.383] SetEvent (hEvent=0x160) returned 1
	[0305.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cec)) returned 1
	[0305.404] SetEvent (hEvent=0x150) returned 1
	[0305.404] SetEvent (hEvent=0x24c) returned 1
	[0305.404] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98c7)) returned 1
	[0305.431] SetEvent (hEvent=0x150) returned 1
	[0305.431] SetEvent (hEvent=0x1b0) returned 1
	[0305.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9bf)) returned 1
	[0305.450] SetEvent (hEvent=0x150) returned 1
	[0305.450] SetEvent (hEvent=0x284) returned 1
	[0305.450] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98ec)) returned 1
	[0305.470] SetEvent (hEvent=0x150) returned 1
	[0305.470] SetEvent (hEvent=0x164) returned 1
	[0305.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df3)) returned 1
	[0305.495] SetEvent (hEvent=0x150) returned 1
	[0305.495] SetEvent (hEvent=0x160) returned 1
	[0305.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x351c)) returned 1
	[0305.516] SetEvent (hEvent=0x150) returned 1
	[0305.516] SetEvent (hEvent=0x24c) returned 1
	[0305.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31883)) returned 1
	[0305.541] SetEvent (hEvent=0x150) returned 1
	[0305.541] SetEvent (hEvent=0x1b0) returned 1
	[0305.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15d49)) returned 1
	[0305.554] SetEvent (hEvent=0x174) returned 1
	[0305.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e836)) returned 1
	[0305.590] SetEvent (hEvent=0x150) returned 1
	[0305.590] SetEvent (hEvent=0x284) returned 1
	[0305.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a5d)) returned 1
	[0305.750] SetEvent (hEvent=0x150) returned 1
	[0305.750] SetEvent (hEvent=0x160) returned 1
	[0305.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17742)) returned 1
	[0305.774] SetEvent (hEvent=0x150) returned 1
	[0305.774] SetEvent (hEvent=0x24c) returned 1
	[0305.774] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2645)) returned 1
	[0305.787] SetEvent (hEvent=0x164) returned 1
	[0305.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf511e53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf511e53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf511e53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3)) returned 1
	[0305.899] SetEvent (hEvent=0x150) returned 1
	[0305.899] SetEvent (hEvent=0x174) returned 1
	[0305.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f6)) returned 1
	[0305.922] SetEvent (hEvent=0x284) returned 1
	[0305.922] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1090)) returned 1
	[0305.962] SetEvent (hEvent=0x150) returned 1
	[0305.962] SetEvent (hEvent=0x1b0) returned 1
	[0305.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31e2)) returned 1
	[0306.011] SetEvent (hEvent=0x150) returned 1
	[0306.011] SetEvent (hEvent=0x24c) returned 1
	[0306.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0)) returned 1
	[0306.032] SetEvent (hEvent=0x150) returned 1
	[0306.032] SetEvent (hEvent=0x164) returned 1
	[0306.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5044)) returned 1
	[0306.053] SetEvent (hEvent=0x150) returned 1
	[0306.053] SetEvent (hEvent=0x174) returned 1
	[0306.053] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42)) returned 1
	[0306.071] SetEvent (hEvent=0x284) returned 1
	[0306.071] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1
	[0306.089] SetEvent (hEvent=0x150) returned 1
	[0306.089] SetEvent (hEvent=0x1b0) returned 1
	[0306.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1324)) returned 1
	[0306.098] SetEvent (hEvent=0x248) returned 1
	[0306.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1
	[0306.123] SetEvent (hEvent=0x150) returned 1
	[0306.123] SetEvent (hEvent=0x164) returned 1
	[0306.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5380be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5380be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5380be, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864)) returned 1
	[0306.142] SetEvent (hEvent=0x150) returned 1
	[0306.142] SetEvent (hEvent=0x174) returned 1
	[0306.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1172)) returned 1
	[0306.166] SetEvent (hEvent=0x150) returned 1
	[0306.166] SetEvent (hEvent=0x284) returned 1
	[0306.166] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ca)) returned 1
	[0306.185] SetEvent (hEvent=0x150) returned 1
	[0306.185] SetEvent (hEvent=0x1b0) returned 1
	[0306.186] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c2)) returned 1
	[0306.206] SetEvent (hEvent=0x150) returned 1
	[0306.206] SetEvent (hEvent=0x248) returned 1
	[0306.206] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21ec)) returned 1
	[0306.228] SetEvent (hEvent=0x150) returned 1
	[0306.228] SetEvent (hEvent=0x164) returned 1
	[0306.228] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ad4)) returned 1
	[0306.247] SetEvent (hEvent=0x150) returned 1
	[0306.247] SetEvent (hEvent=0x174) returned 1
	[0306.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x194a)) returned 1
	[0306.266] SetEvent (hEvent=0x150) returned 1
	[0306.266] SetEvent (hEvent=0x284) returned 1
	[0306.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c6)) returned 1
	[0306.303] SetEvent (hEvent=0x150) returned 1
	[0306.303] SetEvent (hEvent=0x1b0) returned 1
	[0306.303] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173e)) returned 1
	[0306.330] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4696)) returned 1
	[0306.387] SetEvent (hEvent=0x150) returned 1
	[0306.387] SetEvent (hEvent=0x164) returned 1
	[0306.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f38)) returned 1
	[0306.407] SetEvent (hEvent=0x174) returned 1
	[0306.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14bc)) returned 1
	[0306.428] SetEvent (hEvent=0x150) returned 1
	[0306.428] SetEvent (hEvent=0x284) returned 1
	[0306.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1
	[0306.446] SetEvent (hEvent=0x150) returned 1
	[0306.446] SetEvent (hEvent=0x1b0) returned 1
	[0306.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a4)) returned 1
	[0306.466] SetEvent (hEvent=0x150) returned 1
	[0306.466] SetEvent (hEvent=0x160) returned 1
	[0306.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f6c)) returned 1
	[0306.484] SetEvent (hEvent=0x150) returned 1
	[0306.484] SetEvent (hEvent=0x164) returned 1
	[0306.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1
	[0306.504] SetEvent (hEvent=0x150) returned 1
	[0306.504] SetEvent (hEvent=0x174) returned 1
	[0306.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938)) returned 1
	[0306.521] SetEvent (hEvent=0x150) returned 1
	[0306.521] SetEvent (hEvent=0x284) returned 1
	[0306.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1
	[0306.542] SetEvent (hEvent=0x150) returned 1
	[0306.542] SetEvent (hEvent=0x1b0) returned 1
	[0306.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6efa)) returned 1
	[0306.563] SetEvent (hEvent=0x150) returned 1
	[0306.563] SetEvent (hEvent=0x160) returned 1
	[0306.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5880)) returned 1
	[0306.582] SetEvent (hEvent=0x150) returned 1
	[0306.582] SetEvent (hEvent=0x164) returned 1
	[0306.582] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf55e30d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf55e30d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf55e30d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x477c)) returned 1
	[0306.599] SetEvent (hEvent=0x174) returned 1
	[0306.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1
	[0306.630] SetEvent (hEvent=0x150) returned 1
	[0306.630] SetEvent (hEvent=0x284) returned 1
	[0306.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d14)) returned 1
	[0306.655] SetEvent (hEvent=0x150) returned 1
	[0306.655] SetEvent (hEvent=0x1b0) returned 1
	[0306.655] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c)) returned 1
	[0306.678] SetEvent (hEvent=0x150) returned 1
	[0306.678] SetEvent (hEvent=0x160) returned 1
	[0306.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7658)) returned 1
	[0306.705] SetEvent (hEvent=0x150) returned 1
	[0306.705] SetEvent (hEvent=0x164) returned 1
	[0306.705] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f8)) returned 1
	[0306.724] SetEvent (hEvent=0x150) returned 1
	[0306.725] SetEvent (hEvent=0x174) returned 1
	[0306.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788)) returned 1
	[0306.751] SetEvent (hEvent=0x150) returned 1
	[0306.751] SetEvent (hEvent=0x284) returned 1
	[0306.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba4)) returned 1
	[0306.771] SetEvent (hEvent=0x150) returned 1
	[0306.771] SetEvent (hEvent=0x1b0) returned 1
	[0306.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514)) returned 1
	[0306.788] SetEvent (hEvent=0x150) returned 1
	[0306.788] SetEvent (hEvent=0x160) returned 1
	[0306.789] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608)) returned 1
	[0306.845] SetEvent (hEvent=0x24c) returned 1
	[0306.845] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf58455c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf58455c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf58455c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1
	[0306.875] SetEvent (hEvent=0x150) returned 1
	[0306.875] SetEvent (hEvent=0x174) returned 1
	[0306.875] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3210)) returned 1
	[0306.898] SetEvent (hEvent=0x150) returned 1
	[0306.898] SetEvent (hEvent=0x284) returned 1
	[0306.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c46)) returned 1
	[0306.916] SetEvent (hEvent=0x150) returned 1
	[0306.916] SetEvent (hEvent=0x1b0) returned 1
	[0306.917] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a8)) returned 1
	[0306.938] SetEvent (hEvent=0x150) returned 1
	[0306.938] SetEvent (hEvent=0x160) returned 1
	[0306.938] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7e)) returned 1
	[0307.020] SetEvent (hEvent=0x150) returned 1
	[0307.021] SetEvent (hEvent=0x164) returned 1
	[0307.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e00)) returned 1
	[0307.038] SetEvent (hEvent=0x150) returned 1
	[0307.038] SetEvent (hEvent=0x174) returned 1
	[0307.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb70)) returned 1
	[0307.063] SetEvent (hEvent=0x284) returned 1
	[0307.063] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a0)) returned 1
	[0307.081] SetEvent (hEvent=0x1b0) returned 1
	[0307.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16d8)) returned 1
	[0307.101] SetEvent (hEvent=0x150) returned 1
	[0307.101] SetEvent (hEvent=0x160) returned 1
	[0307.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38)) returned 1
	[0307.118] SetEvent (hEvent=0x150) returned 1
	[0307.118] SetEvent (hEvent=0x164) returned 1
	[0307.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1248)) returned 1
	[0307.137] SetEvent (hEvent=0x150) returned 1
	[0307.137] SetEvent (hEvent=0x174) returned 1
	[0307.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2230)) returned 1
	[0307.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1
	[0307.184] SetEvent (hEvent=0x1b0) returned 1
	[0307.184] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1858)) returned 1
	[0307.200] SetEvent (hEvent=0x160) returned 1
	[0307.200] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c74)) returned 1
	[0307.222] SetEvent (hEvent=0x150) returned 1
	[0307.222] SetEvent (hEvent=0x164) returned 1
	[0307.222] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1694)) returned 1
	[0307.240] SetEvent (hEvent=0x150) returned 1
	[0307.240] SetEvent (hEvent=0x174) returned 1
	[0307.240] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa04)) returned 1
	[0307.259] SetEvent (hEvent=0x150) returned 1
	[0307.259] SetEvent (hEvent=0x248) returned 1
	[0307.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5d0a20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70f0)) returned 1
	[0307.278] SetEvent (hEvent=0x150) returned 1
	[0307.278] SetEvent (hEvent=0x1b0) returned 1
	[0307.278] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ae)) returned 1
	[0307.305] SetEvent (hEvent=0x160) returned 1
	[0307.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4732)) returned 1
	[0307.328] SetEvent (hEvent=0x150) returned 1
	[0307.328] SetEvent (hEvent=0x164) returned 1
	[0307.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5aa7bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5aa7bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5aa7bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bf6)) returned 1
	[0307.351] SetEvent (hEvent=0x174) returned 1
	[0307.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e)) returned 1
	[0307.368] SetEvent (hEvent=0x248) returned 1
	[0307.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1
	[0307.377] SetEvent (hEvent=0x284) returned 1
	[0307.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40412)) returned 1
	[0307.427] SetEvent (hEvent=0x150) returned 1
	[0307.427] SetEvent (hEvent=0x1b0) returned 1
	[0307.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b16e)) returned 1
	[0307.447] SetEvent (hEvent=0x164) returned 1
	[0307.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e82)) returned 1
	[0307.469] SetEvent (hEvent=0x174) returned 1
	[0307.469] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5d0a20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5d0a20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ada)) returned 1
	[0307.486] SetEvent (hEvent=0x150) returned 1
	[0307.486] SetEvent (hEvent=0x248) returned 1
	[0307.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2028)) returned 1
	[0307.511] SetEvent (hEvent=0x284) returned 1
	[0307.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ae)) returned 1
	[0307.537] SetEvent (hEvent=0x150) returned 1
	[0307.537] SetEvent (hEvent=0x1b0) returned 1
	[0307.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x349c)) returned 1
	[0307.565] SetEvent (hEvent=0x150) returned 1
	[0307.565] SetEvent (hEvent=0x164) returned 1
	[0307.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce0)) returned 1
	[0307.585] SetEvent (hEvent=0x150) returned 1
	[0307.585] SetEvent (hEvent=0x174) returned 1
	[0307.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9e)) returned 1
	[0307.606] SetEvent (hEvent=0x150) returned 1
	[0307.606] SetEvent (hEvent=0x248) returned 1
	[0307.606] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc88)) returned 1
	[0307.626] SetEvent (hEvent=0x284) returned 1
	[0307.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c4)) returned 1
	[0307.645] SetEvent (hEvent=0x1b0) returned 1
	[0307.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1
	[0307.664] SetEvent (hEvent=0x164) returned 1
	[0307.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1
	[0307.683] SetEvent (hEvent=0x24c) returned 1
	[0307.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1
	[0307.700] SetEvent (hEvent=0x248) returned 1
	[0307.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1
	[0307.720] SetEvent (hEvent=0x284) returned 1
	[0307.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf5f6d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb8)) returned 1
	[0307.740] SetEvent (hEvent=0x150) returned 1
	[0307.740] SetEvent (hEvent=0x1b0) returned 1
	[0307.740] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5f6d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf5f6d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27e0)) returned 1
	[0307.757] SetEvent (hEvent=0x164) returned 1
	[0307.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918)) returned 1
	[0307.775] SetEvent (hEvent=0x150) returned 1
	[0307.775] SetEvent (hEvent=0x174) returned 1
	[0307.775] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c)) returned 1
	[0307.798] SetEvent (hEvent=0x248) returned 1
	[0307.798] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x474)) returned 1
	[0307.810] SetEvent (hEvent=0x160) returned 1
	[0307.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf66941e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf66941e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf66941e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c)) returned 1
	[0307.833] SetEvent (hEvent=0x150) returned 1
	[0307.834] SetEvent (hEvent=0x1b0) returned 1
	[0307.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1
	[0307.852] SetEvent (hEvent=0x164) returned 1
	[0307.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe8)) returned 1
	[0307.861] SetEvent (hEvent=0x284) returned 1
	[0307.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf643165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf643165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf643165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4816)) returned 1
	[0307.888] SetEvent (hEvent=0x248) returned 1
	[0307.888] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10170232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10170232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c50)) returned 1
	[0307.909] SetEvent (hEvent=0x150) returned 1
	[0307.909] SetEvent (hEvent=0x160) returned 1
	[0307.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe4)) returned 1
	[0307.926] SetEvent (hEvent=0x1b0) returned 1
	[0307.926] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61cf5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf61cf5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf61cf5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1
	[0307.950] SetEvent (hEvent=0x150) returned 1
	[0307.950] SetEvent (hEvent=0x164) returned 1
	[0307.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1
	[0308.013] SetEvent (hEvent=0x150) returned 1
	[0308.013] SetEvent (hEvent=0x284) returned 1
	[0308.013] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14)) returned 1
	[0308.037] SetEvent (hEvent=0x150) returned 1
	[0308.037] SetEvent (hEvent=0x248) returned 1
	[0308.037] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c4)) returned 1
	[0308.084] SetEvent (hEvent=0x160) returned 1
	[0308.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28)) returned 1
	[0308.101] SetEvent (hEvent=0x1b0) returned 1
	[0308.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1
	[0308.119] SetEvent (hEvent=0x150) returned 1
	[0308.119] SetEvent (hEvent=0x164) returned 1
	[0308.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec)) returned 1
	[0308.138] SetEvent (hEvent=0x150) returned 1
	[0308.138] SetEvent (hEvent=0x284) returned 1
	[0308.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8)) returned 1
	[0308.155] SetEvent (hEvent=0x174) returned 1
	[0308.155] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x948)) returned 1
	[0308.171] SetEvent (hEvent=0x150) returned 1
	[0308.171] SetEvent (hEvent=0x160) returned 1
	[0308.171] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc84)) returned 1
	[0308.188] SetEvent (hEvent=0x1b0) returned 1
	[0308.188] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf68f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf68f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf68f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2c)) returned 1
	[0308.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10196468, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64)) returned 1
	[0308.263] SetEvent (hEvent=0x150) returned 1
	[0308.263] SetEvent (hEvent=0x284) returned 1
	[0308.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e98)) returned 1
	[0308.321] SetEvent (hEvent=0x150) returned 1
	[0308.321] SetEvent (hEvent=0x248) returned 1
	[0308.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd24)) returned 1
	[0308.346] SetEvent (hEvent=0x160) returned 1
	[0308.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2120)) returned 1
	[0308.364] SetEvent (hEvent=0x150) returned 1
	[0308.364] SetEvent (hEvent=0x1b0) returned 1
	[0308.364] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1
	[0308.381] SetEvent (hEvent=0x150) returned 1
	[0308.381] SetEvent (hEvent=0x24c) returned 1
	[0308.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1
	[0308.399] SetEvent (hEvent=0x150) returned 1
	[0308.399] SetEvent (hEvent=0x284) returned 1
	[0308.399] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ec)) returned 1
	[0308.417] SetEvent (hEvent=0x248) returned 1
	[0308.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb24)) returned 1
	[0308.433] SetEvent (hEvent=0x150) returned 1
	[0308.434] SetEvent (hEvent=0x160) returned 1
	[0308.434] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fb8)) returned 1
	[0308.453] SetEvent (hEvent=0x150) returned 1
	[0308.453] SetEvent (hEvent=0x1b0) returned 1
	[0308.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6b584f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c)) returned 1
	[0308.486] SetEvent (hEvent=0x150) returned 1
	[0308.486] SetEvent (hEvent=0x24c) returned 1
	[0308.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1948)) returned 1
	[0308.511] SetEvent (hEvent=0x150) returned 1
	[0308.511] SetEvent (hEvent=0x284) returned 1
	[0308.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2c)) returned 1
	[0308.522] SetEvent (hEvent=0x174) returned 1
	[0308.522] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xff8)) returned 1
	[0308.533] SetEvent (hEvent=0x164) returned 1
	[0308.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434)) returned 1
	[0308.541] SetEvent (hEvent=0x124) returned 1
	[0308.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3218)) returned 1
	[0308.559] SetEvent (hEvent=0x1e0) returned 1
	[0308.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b584f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6b584f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55c)) returned 1
	[0308.575] SetEvent (hEvent=0x284) returned 1
	[0308.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c)) returned 1
	[0308.586] SetEvent (hEvent=0x27c) returned 1
	[0308.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa34)) returned 1
	[0308.596] SetEvent (hEvent=0x25c) returned 1
	[0308.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1
	[0308.604] SetEvent (hEvent=0x12c) returned 1
	[0308.605] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc28)) returned 1
	[0308.617] SetEvent (hEvent=0x1c4) returned 1
	[0308.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf74e1ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd70)) returned 1
	[0308.626] SetEvent (hEvent=0x118) returned 1
	[0308.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c)) returned 1
	[0308.637] SetEvent (hEvent=0x1bc) returned 1
	[0308.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf701d25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf701d25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1750)) returned 1
	[0308.656] SetEvent (hEvent=0x1e8) returned 1
	[0308.656] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf701d25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1540)) returned 1
	[0308.669] SetEvent (hEvent=0x234) returned 1
	[0308.669] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19f4)) returned 1
	[0308.689] SetEvent (hEvent=0x150) returned 1
	[0308.689] SetEvent (hEvent=0x210) returned 1
	[0308.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b)) returned 1
	[0308.703] SetEvent (hEvent=0x26c) returned 1
	[0308.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x195b)) returned 1
	[0308.715] SetEvent (hEvent=0x218) returned 1
	[0308.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1652)) returned 1
	[0308.727] SetEvent (hEvent=0x22c) returned 1
	[0308.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x215a)) returned 1
	[0308.737] SetEvent (hEvent=0x1f0) returned 1
	[0308.737] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6dbaae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf6dbaae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf6dbaae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b6)) returned 1
	[0308.746] SetEvent (hEvent=0x134) returned 1
	[0308.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10149fbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1784)) returned 1
	[0308.764] SetEvent (hEvent=0x2a8) returned 1
	[0308.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10123d5b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e58)) returned 1
	[0308.773] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0308.803] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0308.869] SetEvent (hEvent=0x1e0) returned 1
	[0308.870] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0308.886] SetEvent (hEvent=0x1e0) returned 1
	[0308.886] SetEvent (hEvent=0x264) returned 1
	[0308.886] SetEvent (hEvent=0x124) returned 1
	[0308.886] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0308.892] SetEvent (hEvent=0x12c) returned 1
	[0308.892] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) returned 0x0
	[0308.905] SetEvent (hEvent=0x1e0) returned 1
	[0308.905] SetEvent (hEvent=0x25c) returned 1
	[0308.905] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) 

Thread:
	id = 43
	os_tid = 0xa9c

	[0213.117] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x32fbff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x32fbff30*=0x258) returned 1
	[0213.117] VirtualQuery (in: lpAddress=0x32fbff40, lpBuffer=0x32fbff40, dwLength=0x1c | out: lpBuffer=0x32fbff40*(BaseAddress=0x32fbf000, AllocationBase=0x32ec0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0213.117] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 0x20
	[0213.117] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx", dwFileAttributes=0x20) returned 1
	[0213.118] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.tl30z"), dwFlags=0x1) returned 1
	[0222.106] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x24c
	[0222.106] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0242.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 0x20
	[0242.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", dwFileAttributes=0x20) returned 1
	[0242.254] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.tl30z"), dwFlags=0x1) returned 1
	[0244.878] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0244.956] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0245.280] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0245.280] SetEvent (hEvent=0x218) returned 1
	[0245.280] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0248.123] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0248.166] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0250.969] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0251.309] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0251.411] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0251.887] SetEvent (hEvent=0x118) returned 1
	[0251.887] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0251.938] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0251.938] SetEvent (hEvent=0x118) returned 1
	[0251.938] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0251.973] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0251.973] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x0
	[0251.977] SetEvent (hEvent=0x150) returned 1
	[0251.977] SetEvent (hEvent=0x118) returned 1
	[0251.987] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0251.992] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0251.992] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0251.997] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0251.997] SetEvent (hEvent=0x234) returned 1
	[0251.997] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0252.010] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0252.011] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0252.025] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0252.025] SetEvent (hEvent=0x150) returned 1
	[0252.025] SetEvent (hEvent=0x248) returned 1
	[0252.025] SetEvent (hEvent=0x118) returned 1
	[0252.026] VirtualAlloc (lpAddress=0x116aa000, dwSize=0x200000, flAllocationType=0x1000, flProtect=0x4) returned 0x116aa000
	[0252.038] VirtualFree (lpAddress=0x11e52000, dwSize=0x1ae000, dwFreeType=0x4000) returned 1
	[0252.354] GetFileType (hFile=0x1d8) returned 0x1
	[0252.354] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1131dde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.355] WriteFile (in: hFile=0x1d8, lpBuffer=0x116aa000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x1131ddfc, lpOverlapped=0x1131de08 | out: lpBuffer=0x116aa000*, lpNumberOfBytesWritten=0x1131ddfc*=0x100000, lpOverlapped=0x1131de08) returned 1
	[0252.363] GetFileType (hFile=0x1d8) returned 0x1
	[0252.363] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x100000, lpNewFilePointer=0x0, dwMoveMethod=0x1131dde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.363] GetFileType (hFile=0x1d8) returned 0x1
	[0252.364] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1131dde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.364] WriteFile (in: hFile=0x1d8, lpBuffer=0x111bc000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0x1131ddfc, lpOverlapped=0x1131de08 | out: lpBuffer=0x111bc000*, lpNumberOfBytesWritten=0x1131ddfc*=0x2d8, lpOverlapped=0x1131de08) returned 1
	[0252.373] GetFileType (hFile=0x1d8) returned 0x1
	[0252.374] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x100000, lpNewFilePointer=0x0, dwMoveMethod=0x1131dde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.374] CloseHandle (hObject=0x1d8) returned 1
	[0252.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.tl30z")) returned 0x20
	[0252.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0252.381] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e120 | out: pbBuffer=0x1142e120) returned 1
	[0252.381] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11334802 | out: pbBuffer=0x11334802) returned 1
	[0252.381] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1133483a | out: pbBuffer=0x1133483a) returned 1
	[0252.381] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e150 | out: pbBuffer=0x1142e150) returned 1
	[0252.381] GetFileType (hFile=0x288) returned 0x1
	[0252.382] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.382] WriteFile (in: hFile=0x288, lpBuffer=0x11064000*, nNumberOfBytesToWrite=0xbd2, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11064000*, lpNumberOfBytesWritten=0x112efdfc*=0xbd2, lpOverlapped=0x112efe08) returned 1
	[0252.382] GetFileType (hFile=0x288) returned 0x1
	[0252.382] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xbd2, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.382] GetFileType (hFile=0x288) returned 0x1
	[0252.382] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.383] WriteFile (in: hFile=0x288, lpBuffer=0x11396a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11396a80*, lpNumberOfBytesWritten=0x112efdfc*=0x22d, lpOverlapped=0x112efe08) returned 1
	[0252.383] GetFileType (hFile=0x288) returned 0x1
	[0252.383] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0xbd2, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0252.383] CloseHandle (hObject=0x288) returned 1
	[0252.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.tl30z")) returned 0x20
	[0252.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0252.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb)) returned 1
	[0252.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1
	[0252.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac)) returned 1
	[0252.485] SetEvent (hEvent=0x150) returned 1
	[0252.485] SetEvent (hEvent=0x248) returned 1
	[0252.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62)) returned 1
	[0252.506] SetEvent (hEvent=0x1e8) returned 1
	[0252.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1
	[0252.538] SetEvent (hEvent=0x1f0) returned 1
	[0252.538] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0252.542] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0252.542] SetEvent (hEvent=0x1f0) returned 1
	[0252.542] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0252.571] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0252.571] SwitchToThread () returned 1
	[0252.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), fInfoLevelId=0x0, lpFileInformation=0x1102da18 | out: lpFileInformation=0x1102da18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0252.812] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0252.850] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1102dc24 | out: lpMode=0x1102dc24) returned 0
	[0252.850] WriteFile (in: hFile=0x1d8, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102dbf4, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102dbf4*=0x292, lpOverlapped=0x0) returned 1
	[0252.852] CloseHandle (hObject=0x1d8) returned 1
	[0252.859] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security"), fInfoLevelId=0x0, lpFileInformation=0x1102da9c | out: lpFileInformation=0x1102da9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x9a2a06d3, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x9a2a06d3, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0252.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), fInfoLevelId=0x0, lpFileInformation=0x1102da9c | out: lpFileInformation=0x1102da9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba)) returned 1
	[0252.972] SetEvent (hEvent=0x134) returned 1
	[0252.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x1102da9c | out: lpFileInformation=0x1102da9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1
	[0252.973] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0x1102da9c | out: lpFileInformation=0x1102da9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1
	[0252.973] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0252.994] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x1102dca8 | out: lpMode=0x1102dca8) returned 0
	[0252.994] WriteFile (in: hFile=0x1f4, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102dc78, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102dc78*=0x292, lpOverlapped=0x0) returned 1
	[0252.997] CloseHandle (hObject=0x1f4) returned 1
	[0253.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x9a450866, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x9a450866, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0253.097] SetEvent (hEvent=0x150) returned 1
	[0253.097] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1
	[0253.097] SetEvent (hEvent=0x218) returned 1
	[0253.097] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0253.099] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1102dd2c | out: lpMode=0x1102dd2c) returned 0
	[0253.099] WriteFile (in: hFile=0x288, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102dcfc, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102dcfc*=0x292, lpOverlapped=0x0) returned 1
	[0253.101] CloseHandle (hObject=0x288) returned 1
	[0253.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144" (normalized: "c:\\program files\\java\\jre1.8.0_144"), fInfoLevelId=0x0, lpFileInformation=0x1102dba4 | out: lpFileInformation=0x1102dba4*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x9a5034f6, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x9a5034f6, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0253.102] CreateFileW (lpFileName="C:\\Program Files\\Java\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0253.102] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x1102ddb0 | out: lpMode=0x1102ddb0) returned 0
	[0253.102] WriteFile (in: hFile=0x288, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102dd80, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102dd80*=0x292, lpOverlapped=0x0) returned 1
	[0253.104] CloseHandle (hObject=0x288) returned 1
	[0253.105] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java" (normalized: "c:\\program files\\java"), fInfoLevelId=0x0, lpFileInformation=0x1102dc28 | out: lpFileInformation=0x1102dc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x9a52975b, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x9a52975b, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0253.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\" (normalized: "c:\\program files\\microsoft office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0253.105] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x1102dad0 | out: lpFindFileData=0x1102dad0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb28ffd6, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0xb28ffd6, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2330
	[0253.106] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102db4c | out: lpFindFileData=0x1102db4c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb28ffd6, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0xb28ffd6, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0253.106] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102db4c | out: lpFindFileData=0x1102db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0253.106] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102db4c | out: lpFindFileData=0x1102db4c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1
	[0253.106] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102db4c | out: lpFindFileData=0x1102db4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ded4a0, ftCreationTime.dwHighDateTime=0x1d5875c, ftLastAccessTime.dwLowDateTime=0x87940e00, ftLastAccessTime.dwHighDateTime=0x1d5adc4, ftLastWriteTime.dwLowDateTime=0x87940e00, ftLastWriteTime.dwHighDateTime=0x1d5adc4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="member_romania_liberia.exe", cAlternateFileName="MEMBER~1.EXE")) returned 1
	[0253.106] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102db4c | out: lpFindFileData=0x1102db4c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1
	[0253.106] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102db4c | out: lpFindFileData=0x1102db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1
	[0253.106] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102db4c | out: lpFindFileData=0x1102db4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0253.106] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102db4c | out: lpFindFileData=0x1102db4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0253.106] FindClose (in: hFindFile=0x7f2330 | out: hFindFile=0x7f2330) returned 1
	[0253.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102dba4 | out: lpFileInformation=0x1102dba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7)) returned 1
	[0253.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102dba4 | out: lpFileInformation=0x1102dba4*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0253.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\" (normalized: "c:\\program files\\microsoft office\\office16"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0253.107] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x1102da4c | out: lpFindFileData=0x1102da4c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1df0
	[0253.108] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0253.108] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1
	[0253.108] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1
	[0253.108] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1
	[0253.108] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1
	[0253.108] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0253.108] FindClose (in: hFindFile=0x7f1df0 | out: hFindFile=0x7f1df0) returned 1
	[0253.108] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0)) returned 1
	[0253.127] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103)) returned 1
	[0253.128] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40)) returned 1
	[0253.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1
	[0253.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\microsoft office\\office16\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0253.176] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x1102dd2c | out: lpMode=0x1102dd2c) returned 0
	[0253.176] WriteFile (in: hFile=0x1f4, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x1102dcfc, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x1102dcfc*=0x292, lpOverlapped=0x0) returned 1
	[0253.179] CloseHandle (hObject=0x1f4) returned 1
	[0253.180] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16" (normalized: "c:\\program files\\microsoft office\\office16"), fInfoLevelId=0x0, lpFileInformation=0x1102dba4 | out: lpFileInformation=0x1102dba4*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x9a5e6780, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x9a5e6780, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0253.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\" (normalized: "c:\\program files\\microsoft office\\packagemanifests"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0253.180] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x1102da4c | out: lpFindFileData=0x1102da4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2330
	[0253.183] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0253.184] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1
	[0253.184] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1
	[0253.184] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1
	[0253.184] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1
	[0253.184] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1
	[0253.184] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1
	[0253.184] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1
	[0253.184] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1
	[0253.184] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1
	[0253.184] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1
	[0253.184] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1
	[0253.185] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1
	[0253.185] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1
	[0253.185] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1
	[0253.185] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1
	[0253.185] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1
	[0253.185] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1
	[0253.185] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1
	[0253.185] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1
	[0253.185] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1
	[0253.186] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0253.186] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1
	[0253.186] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1
	[0253.186] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1
	[0253.186] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1
	[0253.186] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1
	[0253.186] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1
	[0253.186] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1
	[0253.186] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1
	[0253.186] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1
	[0253.187] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1
	[0253.187] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1
	[0253.187] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1
	[0253.187] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1
	[0253.187] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1
	[0253.187] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1
	[0253.187] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1
	[0253.187] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1
	[0253.187] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1
	[0253.187] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1
	[0253.187] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1
	[0253.188] FindNextFileW (in: hFindFile=0x7f2330, lpFindFileData=0x1102dac8 | out: lpFindFileData=0x1102dac8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0253.188] FindClose (in: hFindFile=0x7f2330 | out: hFindFile=0x7f2330) returned 1
	[0253.191] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1
	[0253.194] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1
	[0253.194] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1102db20 | out: lpFileInformation=0x1102db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863)) returned 1
	[0253.289] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0253.334] SetEvent (hEvent=0x134) returned 1
	[0253.334] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0253.601] SetEvent (hEvent=0x234) returned 1
	[0253.601] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0253.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0253.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x220) returned 1
	[0253.614] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.tl30z"), dwFlags=0x1) returned 1
	[0254.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208
	[0254.118] GetConsoleMode (in: hConsoleHandle=0x208, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0254.118] ReadFile (in: hFile=0x208, lpBuffer=0x11ede000, nNumberOfBytesToRead=0x13399, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11ede000*, lpNumberOfBytesRead=0x11319e18*=0x13399, lpOverlapped=0x0) returned 1
	[0254.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0254.127] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144a802 | out: pbBuffer=0x1144a802) returned 1
	[0254.127] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144a821 | out: pbBuffer=0x1144a821) returned 1
	[0254.127] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144a821 | out: pbBuffer=0x1144a821) returned 1
	[0254.127] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144a824 | out: pbBuffer=0x1144a824) returned 1
	[0254.127] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144a858 | out: pbBuffer=0x1144a858) returned 1
	[0254.128] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0254.130] GetFileType (hFile=0x208) returned 0x1
	[0254.130] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f97de0 | out: lpNewFilePointer=0x0) returned 1
	[0254.130] WriteFile (in: hFile=0x208, lpBuffer=0x11f3c000*, nNumberOfBytesToWrite=0x13399, lpNumberOfBytesWritten=0x11f97dfc, lpOverlapped=0x11f97e08 | out: lpBuffer=0x11f3c000*, lpNumberOfBytesWritten=0x11f97dfc*=0x13399, lpOverlapped=0x11f97e08) returned 1
	[0254.131] GetFileType (hFile=0x208) returned 0x1
	[0254.131] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x13399, lpNewFilePointer=0x0, dwMoveMethod=0x11f97de0 | out: lpNewFilePointer=0x0) returned 1
	[0254.131] GetFileType (hFile=0x208) returned 0x1
	[0254.131] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11f97de0 | out: lpNewFilePointer=0x0) returned 1
	[0254.132] WriteFile (in: hFile=0x208, lpBuffer=0x11462a80*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x11f97dfc, lpOverlapped=0x11f97e08 | out: lpBuffer=0x11462a80*, lpNumberOfBytesWritten=0x11f97dfc*=0x23c, lpOverlapped=0x11f97e08) returned 1
	[0254.263] GetFileType (hFile=0x208) returned 0x1
	[0254.263] SetFilePointerEx (in: hFile=0x208, liDistanceToMove=0x13399, lpNewFilePointer=0x0, dwMoveMethod=0x11f97de0 | out: lpNewFilePointer=0x0) returned 1
	[0254.263] CloseHandle (hObject=0x208) returned 1
	[0254.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.tl30z" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.tl30z")) returned 0x220
	[0254.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.tl30z", dwFileAttributes=0x221) returned 1
	[0254.371] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0254.464] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0254.467] SetEvent (hEvent=0x218) returned 1
	[0254.467] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0254.482] SetEvent (hEvent=0x124) returned 1
	[0254.482] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.114] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.119] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf")) returned 0x220
	[0300.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF", dwFileAttributes=0x220) returned 1
	[0300.120] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0300.175] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0300.175] ReadFile (in: hFile=0x1cc, lpBuffer=0x111c0000, nNumberOfBytesToRead=0xcba0, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x1131be18*=0xcba0, lpOverlapped=0x0) returned 1
	[0300.956] SetEvent (hEvent=0x23c) returned 1
	[0300.957] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0300.958] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1122f302 | out: pbBuffer=0x1122f302) returned 1
	[0300.958] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0300.959] GetFileType (hFile=0x1cc) returned 0x1
	[0300.959] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.959] WriteFile (in: hFile=0x1cc, lpBuffer=0x11162000*, nNumberOfBytesToWrite=0xcba0, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11162000*, lpNumberOfBytesWritten=0x1133bdfc*=0xcba0, lpOverlapped=0x1133be08) returned 1
	[0300.972] GetFileType (hFile=0x1cc) returned 0x1
	[0300.973] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xcba0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.973] GetFileType (hFile=0x1cc) returned 0x1
	[0300.973] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.973] WriteFile (in: hFile=0x1cc, lpBuffer=0x113e3880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113e3880*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0300.975] GetFileType (hFile=0x1cc) returned 0x1
	[0300.975] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xcba0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0300.975] CloseHandle (hObject=0x1cc) returned 1
	[0301.018] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf.tl30z")) returned 0x220
	[0301.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.139] SetEvent (hEvent=0x1b0) returned 1
	[0301.139] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.143] SetEvent (hEvent=0x174) returned 1
	[0301.143] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.146] SetEvent (hEvent=0x1e0) returned 1
	[0301.146] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.149] SetEvent (hEvent=0x160) returned 1
	[0301.149] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf")) returned 0x220
	[0301.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF", dwFileAttributes=0x220) returned 1
	[0301.151] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0301.225] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0301.225] ReadFile (in: hFile=0x250, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x82a, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11023e18*=0x82a, lpOverlapped=0x0) returned 1
	[0301.230] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0301.230] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11412802 | out: pbBuffer=0x11412802) returned 1
	[0301.231] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114128a2 | out: pbBuffer=0x114128a2) returned 1
	[0301.231] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0301.231] GetFileType (hFile=0x250) returned 0x1
	[0301.231] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.232] WriteFile (in: hFile=0x250, lpBuffer=0x110bc000*, nNumberOfBytesToWrite=0x82a, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x110bc000*, lpNumberOfBytesWritten=0x11339dfc*=0x82a, lpOverlapped=0x11339e08) returned 1
	[0301.232] GetFileType (hFile=0x250) returned 0x1
	[0301.232] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x82a, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.232] GetFileType (hFile=0x250) returned 0x1
	[0301.232] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.233] WriteFile (in: hFile=0x250, lpBuffer=0x11c12a80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11c12a80*, lpNumberOfBytesWritten=0x11339dfc*=0x224, lpOverlapped=0x11339e08) returned 1
	[0301.233] GetFileType (hFile=0x250) returned 0x1
	[0301.233] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x82a, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.233] CloseHandle (hObject=0x250) returned 1
	[0301.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf.tl30z")) returned 0x220
	[0301.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.239] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.251] SetEvent (hEvent=0x1b0) returned 1
	[0301.251] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf")) returned 0x220
	[0301.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF", dwFileAttributes=0x220) returned 1
	[0301.252] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0301.325] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x111cfe08 | out: lpMode=0x111cfe08) returned 0
	[0301.325] ReadFile (in: hFile=0x2a0, lpBuffer=0x11248000, nNumberOfBytesToRead=0x6cd1, lpNumberOfBytesRead=0x111cfe18, lpOverlapped=0x0 | out: lpBuffer=0x11248000*, lpNumberOfBytesRead=0x111cfe18*=0x6cd1, lpOverlapped=0x0) returned 1
	[0301.332] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0301.332] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0301.332] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c59302 | out: pbBuffer=0x11c59302) returned 1
	[0301.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c593b6 | out: pbBuffer=0x11c593b6) returned 1
	[0301.333] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0301.334] GetFileType (hFile=0x2a0) returned 0x1
	[0301.335] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.335] WriteFile (in: hFile=0x2a0, lpBuffer=0x112d8000*, nNumberOfBytesToWrite=0x6cd1, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x112d8000*, lpNumberOfBytesWritten=0x113b3dfc*=0x6cd1, lpOverlapped=0x113b3e08) returned 1
	[0301.335] GetFileType (hFile=0x2a0) returned 0x1
	[0301.335] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x6cd1, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.337] GetFileType (hFile=0x2a0) returned 0x1
	[0301.337] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.338] WriteFile (in: hFile=0x2a0, lpBuffer=0x1139ea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x1139ea80*, lpNumberOfBytesWritten=0x113b3dfc*=0x230, lpOverlapped=0x113b3e08) returned 1
	[0301.338] GetFileType (hFile=0x2a0) returned 0x1
	[0301.338] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x6cd1, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.338] CloseHandle (hObject=0x2a0) returned 1
	[0301.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf.tl30z")) returned 0x220
	[0301.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.348] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.355] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.389] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.406] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.426] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.446] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.469] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.482] SetEvent (hEvent=0x248) returned 1
	[0301.483] SetEvent (hEvent=0x160) returned 1
	[0301.483] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0301.486] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.486] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x0
	[0301.487] SetEvent (hEvent=0x284) returned 1
	[0301.487] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x0
	[0301.528] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.743] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.763] SetEvent (hEvent=0x160) returned 1
	[0301.764] SetEvent (hEvent=0x1b0) returned 1
	[0301.764] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.767] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.769] SetEvent (hEvent=0x160) returned 1
	[0301.769] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.776] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.785] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.847] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.882] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.965] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0302.003] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0302.005] SetEvent (hEvent=0x248) returned 1
	[0302.005] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0302.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg")) returned 0x220
	[0302.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG", dwFileAttributes=0x220) returned 1
	[0302.032] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg.tl30z"), dwFlags=0x1) returned 1
	[0302.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.155] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0302.155] ReadFile (in: hFile=0x1d8, lpBuffer=0x1112c000, nNumberOfBytesToRead=0x3e91, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1112c000*, lpNumberOfBytesRead=0x1131be18*=0x3e91, lpOverlapped=0x0) returned 1
	[0302.161] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e360 | out: pbBuffer=0x1104e360) returned 1
	[0302.161] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137d202 | out: pbBuffer=0x1137d202) returned 1
	[0302.161] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137d219 | out: pbBuffer=0x1137d219) returned 1
	[0302.161] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137d25c | out: pbBuffer=0x1137d25c) returned 1
	[0302.162] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e390 | out: pbBuffer=0x1104e390) returned 1
	[0302.162] GetFileType (hFile=0x1d8) returned 0x1
	[0302.163] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.163] WriteFile (in: hFile=0x1d8, lpBuffer=0x111e2000*, nNumberOfBytesToWrite=0x3e91, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111e2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3e91, lpOverlapped=0x1102be08) returned 1
	[0302.163] GetFileType (hFile=0x1d8) returned 0x1
	[0302.164] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3e91, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.164] GetFileType (hFile=0x1d8) returned 0x1
	[0302.164] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.164] WriteFile (in: hFile=0x1d8, lpBuffer=0x11201880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11201880*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0302.164] GetFileType (hFile=0x1d8) returned 0x1
	[0302.164] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3e91, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.165] CloseHandle (hObject=0x1d8) returned 1
	[0302.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg.tl30z")) returned 0x220
	[0302.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0302.167] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0302.172] SetEvent (hEvent=0x248) returned 1
	[0302.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf")) returned 0x220
	[0302.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF", dwFileAttributes=0x220) returned 1
	[0302.172] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0302.247] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0302.247] ReadFile (in: hFile=0x1b4, lpBuffer=0x11140000, nNumberOfBytesToRead=0x2590, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11140000*, lpNumberOfBytesRead=0x1131be18*=0x2590, lpOverlapped=0x0) returned 1
	[0302.258] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0302.258] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11412802 | out: pbBuffer=0x11412802) returned 1
	[0302.258] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1141285d | out: pbBuffer=0x1141285d) returned 1
	[0302.258] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114128b5 | out: pbBuffer=0x114128b5) returned 1
	[0302.259] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114128e2 | out: pbBuffer=0x114128e2) returned 1
	[0302.259] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0302.259] GetFileType (hFile=0x1b4) returned 0x1
	[0302.260] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.260] WriteFile (in: hFile=0x1b4, lpBuffer=0x11168000*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11168000*, lpNumberOfBytesWritten=0x1133fdfc*=0x2590, lpOverlapped=0x1133fe08) returned 1
	[0302.260] GetFileType (hFile=0x1b4) returned 0x1
	[0302.260] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2590, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.260] GetFileType (hFile=0x1b4) returned 0x1
	[0302.261] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.261] WriteFile (in: hFile=0x1b4, lpBuffer=0x11382a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11382a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0302.261] GetFileType (hFile=0x1b4) returned 0x1
	[0302.261] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2590, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.261] CloseHandle (hObject=0x1b4) returned 1
	[0302.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf.tl30z")) returned 0x220
	[0302.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.266] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0302.270] SetEvent (hEvent=0x164) returned 1
	[0302.270] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf")) returned 0x220
	[0302.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF", dwFileAttributes=0x220) returned 1
	[0302.270] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.422] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0302.423] ReadFile (in: hFile=0x1d8, lpBuffer=0x11175000, nNumberOfBytesToRead=0x4b56, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11175000*, lpNumberOfBytesRead=0x1131be18*=0x4b56, lpOverlapped=0x0) returned 1
	[0302.427] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3d0 | out: pbBuffer=0x1140f3d0) returned 1
	[0302.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3c8 | out: pbBuffer=0x1140f3c8) returned 1
	[0302.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11be1d02 | out: pbBuffer=0x11be1d02) returned 1
	[0302.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11be1d46 | out: pbBuffer=0x11be1d46) returned 1
	[0302.428] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0302.429] GetFileType (hFile=0x1d8) returned 0x1
	[0302.429] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.430] WriteFile (in: hFile=0x1d8, lpBuffer=0x110d0000*, nNumberOfBytesToWrite=0x4b56, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110d0000*, lpNumberOfBytesWritten=0x1133bdfc*=0x4b56, lpOverlapped=0x1133be08) returned 1
	[0302.430] GetFileType (hFile=0x1d8) returned 0x1
	[0302.430] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4b56, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.431] GetFileType (hFile=0x1d8) returned 0x1
	[0302.431] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.431] WriteFile (in: hFile=0x1d8, lpBuffer=0x1128ea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1128ea80*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0302.431] GetFileType (hFile=0x1d8) returned 0x1
	[0302.431] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4b56, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.431] CloseHandle (hObject=0x1d8) returned 1
	[0302.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf.tl30z")) returned 0x220
	[0302.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.435] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0302.439] SetEvent (hEvent=0x248) returned 1
	[0302.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf")) returned 0x220
	[0302.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF", dwFileAttributes=0x220) returned 1
	[0302.440] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.524] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0302.524] ReadFile (in: hFile=0x1d8, lpBuffer=0x1110ca00, nNumberOfBytesToRead=0x21b2, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1110ca00*, lpNumberOfBytesRead=0x1131be18*=0x21b2, lpOverlapped=0x0) returned 1
	[0302.529] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e670 | out: pbBuffer=0x1104e670) returned 1
	[0302.529] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d6702 | out: pbBuffer=0x111d6702) returned 1
	[0302.530] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e6a0 | out: pbBuffer=0x1104e6a0) returned 1
	[0302.530] GetFileType (hFile=0x1d8) returned 0x1
	[0302.530] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.530] WriteFile (in: hFile=0x1d8, lpBuffer=0x111fe000*, nNumberOfBytesToWrite=0x21b2, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111fe000*, lpNumberOfBytesWritten=0x11031dfc*=0x21b2, lpOverlapped=0x11031e08) returned 1
	[0302.534] GetFileType (hFile=0x1d8) returned 0x1
	[0302.534] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x21b2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.534] GetFileType (hFile=0x1d8) returned 0x1
	[0302.535] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.535] WriteFile (in: hFile=0x1d8, lpBuffer=0x110ab500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110ab500*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0302.535] GetFileType (hFile=0x1d8) returned 0x1
	[0302.535] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x21b2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.535] CloseHandle (hObject=0x1d8) returned 1
	[0302.537] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf.tl30z")) returned 0x220
	[0302.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.539] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0302.544] SetEvent (hEvent=0x248) returned 1
	[0302.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf")) returned 0x220
	[0302.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF", dwFileAttributes=0x220) returned 1
	[0302.545] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.645] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0302.645] ReadFile (in: hFile=0x1d8, lpBuffer=0x11242000, nNumberOfBytesToRead=0x3d24, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11242000*, lpNumberOfBytesRead=0x1131be18*=0x3d24, lpOverlapped=0x0) returned 1
	[0302.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158570 | out: pbBuffer=0x11158570) returned 1
	[0302.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11226902 | out: pbBuffer=0x11226902) returned 1
	[0302.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111585a0 | out: pbBuffer=0x111585a0) returned 1
	[0302.652] GetFileType (hFile=0x1d8) returned 0x1
	[0302.652] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.652] WriteFile (in: hFile=0x1d8, lpBuffer=0x113ec000*, nNumberOfBytesToWrite=0x3d24, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113ec000*, lpNumberOfBytesWritten=0x1133fdfc*=0x3d24, lpOverlapped=0x1133fe08) returned 1
	[0302.653] GetFileType (hFile=0x1d8) returned 0x1
	[0302.653] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3d24, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.653] GetFileType (hFile=0x1d8) returned 0x1
	[0302.653] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.653] WriteFile (in: hFile=0x1d8, lpBuffer=0x11373880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11373880*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0302.654] GetFileType (hFile=0x1d8) returned 0x1
	[0302.654] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3d24, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.654] CloseHandle (hObject=0x1d8) returned 1
	[0302.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf.tl30z")) returned 0x220
	[0302.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.657] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0302.660] SetEvent (hEvent=0x160) returned 1
	[0302.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf")) returned 0x220
	[0302.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF", dwFileAttributes=0x220) returned 1
	[0302.661] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.741] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0302.741] ReadFile (in: hFile=0x1d8, lpBuffer=0x11457000, nNumberOfBytesToRead=0x4584, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11457000*, lpNumberOfBytesRead=0x1131be18*=0x4584, lpOverlapped=0x0) returned 1
	[0302.746] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0302.746] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3e8 | out: pbBuffer=0x1140f3e8) returned 1
	[0302.746] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e1e02 | out: pbBuffer=0x110e1e02) returned 1
	[0302.746] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e1e50 | out: pbBuffer=0x110e1e50) returned 1
	[0302.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e1ebe | out: pbBuffer=0x110e1ebe) returned 1
	[0302.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f420 | out: pbBuffer=0x1140f420) returned 1
	[0302.747] GetFileType (hFile=0x1d8) returned 0x1
	[0302.748] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.748] WriteFile (in: hFile=0x1d8, lpBuffer=0x110fc000*, nNumberOfBytesToWrite=0x4584, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110fc000*, lpNumberOfBytesWritten=0x1102ddfc*=0x4584, lpOverlapped=0x1102de08) returned 1
	[0302.748] GetFileType (hFile=0x1d8) returned 0x1
	[0302.748] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4584, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.748] GetFileType (hFile=0x1d8) returned 0x1
	[0302.748] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.749] WriteFile (in: hFile=0x1d8, lpBuffer=0x110ac700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110ac700*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0302.749] GetFileType (hFile=0x1d8) returned 0x1
	[0302.749] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4584, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.749] CloseHandle (hObject=0x1d8) returned 1
	[0302.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf.tl30z")) returned 0x220
	[0302.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.752] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0302.755] SetEvent (hEvent=0x160) returned 1
	[0302.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf")) returned 0x220
	[0302.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF", dwFileAttributes=0x220) returned 1
	[0302.756] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0302.869] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0302.869] ReadFile (in: hFile=0x250, lpBuffer=0x11281000, nNumberOfBytesToRead=0xe20, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11281000*, lpNumberOfBytesRead=0x1131be18*=0xe20, lpOverlapped=0x0) returned 1
	[0302.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158280 | out: pbBuffer=0x11158280) returned 1
	[0302.877] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158278 | out: pbBuffer=0x11158278) returned 1
	[0302.878] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119bd02 | out: pbBuffer=0x1119bd02) returned 1
	[0302.878] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582b0 | out: pbBuffer=0x111582b0) returned 1
	[0302.878] GetFileType (hFile=0x250) returned 0x1
	[0302.878] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.879] WriteFile (in: hFile=0x250, lpBuffer=0x11412000*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11412000*, lpNumberOfBytesWritten=0x1133fdfc*=0xe20, lpOverlapped=0x1133fe08) returned 1
	[0302.879] GetFileType (hFile=0x250) returned 0x1
	[0302.879] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xe20, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.879] GetFileType (hFile=0x250) returned 0x1
	[0302.879] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.880] WriteFile (in: hFile=0x250, lpBuffer=0x111dc700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111dc700*, lpNumberOfBytesWritten=0x1133fdfc*=0x224, lpOverlapped=0x1133fe08) returned 1
	[0302.880] GetFileType (hFile=0x250) returned 0x1
	[0302.880] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xe20, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.880] CloseHandle (hObject=0x250) returned 1
	[0302.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf.tl30z")) returned 0x220
	[0302.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.884] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0302.888] SetEvent (hEvent=0x160) returned 1
	[0302.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg")) returned 0x220
	[0302.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG", dwFileAttributes=0x220) returned 1
	[0302.889] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg.tl30z"), dwFlags=0x1) returned 1
	[0302.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0302.987] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0302.987] ReadFile (in: hFile=0x1fc, lpBuffer=0x110d4000, nNumberOfBytesToRead=0x29c4, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x110d4000*, lpNumberOfBytesRead=0x1131be18*=0x29c4, lpOverlapped=0x0) returned 1
	[0302.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111586d0 | out: pbBuffer=0x111586d0) returned 1
	[0302.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11373b02 | out: pbBuffer=0x11373b02) returned 1
	[0302.994] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158700 | out: pbBuffer=0x11158700) returned 1
	[0302.995] GetFileType (hFile=0x1fc) returned 0x1
	[0302.995] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.995] WriteFile (in: hFile=0x1fc, lpBuffer=0x110e8000*, nNumberOfBytesToWrite=0x29c4, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110e8000*, lpNumberOfBytesWritten=0x1133fdfc*=0x29c4, lpOverlapped=0x1133fe08) returned 1
	[0302.995] GetFileType (hFile=0x1fc) returned 0x1
	[0302.995] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x29c4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.996] GetFileType (hFile=0x1fc) returned 0x1
	[0302.996] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.996] WriteFile (in: hFile=0x1fc, lpBuffer=0x113bb180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113bb180*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0302.996] GetFileType (hFile=0x1fc) returned 0x1
	[0302.996] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x29c4, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.996] CloseHandle (hObject=0x1fc) returned 1
	[0302.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg.tl30z")) returned 0x220
	[0302.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.001] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0303.005] SetEvent (hEvent=0x160) returned 1
	[0303.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg")) returned 0x220
	[0303.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG", dwFileAttributes=0x220) returned 1
	[0303.005] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.093] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0303.093] ReadFile (in: hFile=0x1d8, lpBuffer=0x112d9000, nNumberOfBytesToRead=0x4ada, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x112d9000*, lpNumberOfBytesRead=0x1131be18*=0x4ada, lpOverlapped=0x0) returned 1
	[0303.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6f0 | out: pbBuffer=0x1140f6f0) returned 1
	[0303.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11473202 | out: pbBuffer=0x11473202) returned 1
	[0303.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11473298 | out: pbBuffer=0x11473298) returned 1
	[0303.099] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f720 | out: pbBuffer=0x1140f720) returned 1
	[0303.099] GetFileType (hFile=0x1d8) returned 0x1
	[0303.099] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.099] WriteFile (in: hFile=0x1d8, lpBuffer=0x11c0a000*, nNumberOfBytesToWrite=0x4ada, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c0a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4ada, lpOverlapped=0x1102be08) returned 1
	[0303.100] GetFileType (hFile=0x1d8) returned 0x1
	[0303.100] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4ada, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.100] GetFileType (hFile=0x1d8) returned 0x1
	[0303.100] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.101] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bf2380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bf2380*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0303.101] GetFileType (hFile=0x1d8) returned 0x1
	[0303.101] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4ada, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.101] CloseHandle (hObject=0x1d8) returned 1
	[0303.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg.tl30z")) returned 0x220
	[0303.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.104] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0303.108] SetEvent (hEvent=0x160) returned 1
	[0303.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg")) returned 0x220
	[0303.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG", dwFileAttributes=0x220) returned 1
	[0303.109] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0303.439] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0303.440] ReadFile (in: hFile=0x1b4, lpBuffer=0x113ec000, nNumberOfBytesToRead=0xa75a, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x113ec000*, lpNumberOfBytesRead=0x1131be18*=0xa75a, lpOverlapped=0x0) returned 1
	[0303.448] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0303.448] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f278 | out: pbBuffer=0x1140f278) returned 1
	[0303.448] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125b302 | out: pbBuffer=0x1125b302) returned 1
	[0303.449] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0303.450] GetFileType (hFile=0x1b4) returned 0x1
	[0303.450] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.450] WriteFile (in: hFile=0x1b4, lpBuffer=0x110f0000*, nNumberOfBytesToWrite=0xa75a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110f0000*, lpNumberOfBytesWritten=0x1102bdfc*=0xa75a, lpOverlapped=0x1102be08) returned 1
	[0303.451] GetFileType (hFile=0x1b4) returned 0x1
	[0303.451] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xa75a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.451] GetFileType (hFile=0x1b4) returned 0x1
	[0303.451] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.451] WriteFile (in: hFile=0x1b4, lpBuffer=0x1134f880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1134f880*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0303.451] GetFileType (hFile=0x1b4) returned 0x1
	[0303.452] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xa75a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.452] CloseHandle (hObject=0x1b4) returned 1
	[0303.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg.tl30z")) returned 0x220
	[0303.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.454] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0303.456] SetEvent (hEvent=0x248) returned 1
	[0303.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg")) returned 0x220
	[0303.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG", dwFileAttributes=0x220) returned 1
	[0303.457] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0303.555] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0303.555] ReadFile (in: hFile=0x1fc, lpBuffer=0x11430000, nNumberOfBytesToRead=0x423a, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11430000*, lpNumberOfBytesRead=0x1131be18*=0x423a, lpOverlapped=0x0) returned 1
	[0303.560] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158540 | out: pbBuffer=0x11158540) returned 1
	[0303.560] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158538 | out: pbBuffer=0x11158538) returned 1
	[0303.560] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c2802 | out: pbBuffer=0x112c2802) returned 1
	[0303.561] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158570 | out: pbBuffer=0x11158570) returned 1
	[0303.561] GetFileType (hFile=0x1fc) returned 0x1
	[0303.562] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0303.562] WriteFile (in: hFile=0x1fc, lpBuffer=0x1145e000*, nNumberOfBytesToWrite=0x423a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1145e000*, lpNumberOfBytesWritten=0x11031dfc*=0x423a, lpOverlapped=0x11031e08) returned 1
	[0303.562] GetFileType (hFile=0x1fc) returned 0x1
	[0303.562] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x423a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0303.563] GetFileType (hFile=0x1fc) returned 0x1
	[0303.563] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0303.563] WriteFile (in: hFile=0x1fc, lpBuffer=0x1129d500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1129d500*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0303.563] GetFileType (hFile=0x1fc) returned 0x1
	[0303.563] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x423a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0303.563] CloseHandle (hObject=0x1fc) returned 1
	[0303.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg.tl30z")) returned 0x220
	[0303.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.567] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0303.569] SetEvent (hEvent=0x1b0) returned 1
	[0303.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf")) returned 0x220
	[0303.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF", dwFileAttributes=0x220) returned 1
	[0303.570] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf.tl30z"), dwFlags=0x1) returned 1
	[0303.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.666] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0303.666] ReadFile (in: hFile=0x1d8, lpBuffer=0x110e6000, nNumberOfBytesToRead=0x2ff8, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x110e6000*, lpNumberOfBytesRead=0x1131be18*=0x2ff8, lpOverlapped=0x0) returned 1
	[0303.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158410 | out: pbBuffer=0x11158410) returned 1
	[0303.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c3d02 | out: pbBuffer=0x112c3d02) returned 1
	[0303.672] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c3daa | out: pbBuffer=0x112c3daa) returned 1
	[0303.673] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158440 | out: pbBuffer=0x11158440) returned 1
	[0303.673] GetFileType (hFile=0x1d8) returned 0x1
	[0303.673] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.673] WriteFile (in: hFile=0x1d8, lpBuffer=0x11374000*, nNumberOfBytesToWrite=0x2ff8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11374000*, lpNumberOfBytesWritten=0x1102bdfc*=0x2ff8, lpOverlapped=0x1102be08) returned 1
	[0303.674] GetFileType (hFile=0x1d8) returned 0x1
	[0303.674] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2ff8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.674] GetFileType (hFile=0x1d8) returned 0x1
	[0303.674] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.674] WriteFile (in: hFile=0x1d8, lpBuffer=0x11150a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11150a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0303.675] GetFileType (hFile=0x1d8) returned 0x1
	[0303.675] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2ff8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.675] CloseHandle (hObject=0x1d8) returned 1
	[0303.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf.tl30z")) returned 0x220
	[0303.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0303.678] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0303.684] SetEvent (hEvent=0x284) returned 1
	[0303.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg")) returned 0x220
	[0303.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG", dwFileAttributes=0x220) returned 1
	[0303.684] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0303.771] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0303.772] ReadFile (in: hFile=0x1fc, lpBuffer=0x11105000, nNumberOfBytesToRead=0x4c6d, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11105000*, lpNumberOfBytesRead=0x11319e18*=0x4c6d, lpOverlapped=0x0) returned 1
	[0303.777] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158750 | out: pbBuffer=0x11158750) returned 1
	[0303.777] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158708 | out: pbBuffer=0x11158708) returned 1
	[0303.777] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113bf202 | out: pbBuffer=0x113bf202) returned 1
	[0303.777] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113bf20d | out: pbBuffer=0x113bf20d) returned 1
	[0303.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113bf232 | out: pbBuffer=0x113bf232) returned 1
	[0303.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113bf260 | out: pbBuffer=0x113bf260) returned 1
	[0303.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113bf2e4 | out: pbBuffer=0x113bf2e4) returned 1
	[0303.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158780 | out: pbBuffer=0x11158780) returned 1
	[0303.779] GetFileType (hFile=0x1fc) returned 0x1
	[0303.779] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.779] WriteFile (in: hFile=0x1fc, lpBuffer=0x11094000*, nNumberOfBytesToWrite=0x4c6d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11094000*, lpNumberOfBytesWritten=0x1102ddfc*=0x4c6d, lpOverlapped=0x1102de08) returned 1
	[0303.780] GetFileType (hFile=0x1fc) returned 0x1
	[0303.780] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4c6d, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.780] GetFileType (hFile=0x1fc) returned 0x1
	[0303.780] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.780] WriteFile (in: hFile=0x1fc, lpBuffer=0x1111c700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1111c700*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0303.780] GetFileType (hFile=0x1fc) returned 0x1
	[0303.780] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4c6d, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.781] CloseHandle (hObject=0x1fc) returned 1
	[0303.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg.tl30z")) returned 0x220
	[0303.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg")) returned 0x220
	[0303.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG", dwFileAttributes=0x220) returned 1
	[0303.784] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.855] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0303.855] ReadFile (in: hFile=0x1d8, lpBuffer=0x1123a000, nNumberOfBytesToRead=0x3ee3, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1123a000*, lpNumberOfBytesRead=0x1128ce18*=0x3ee3, lpOverlapped=0x0) returned 1
	[0303.861] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0303.861] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6548 | out: pbBuffer=0x113e6548) returned 1
	[0303.861] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11240702 | out: pbBuffer=0x11240702) returned 1
	[0303.861] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112407e9 | out: pbBuffer=0x112407e9) returned 1
	[0303.862] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0303.862] SetEvent (hEvent=0x1b0) returned 1
	[0303.863] GetFileType (hFile=0x1d8) returned 0x1
	[0303.863] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.863] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bd8000*, nNumberOfBytesToWrite=0x3ee3, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11bd8000*, lpNumberOfBytesWritten=0x1133fdfc*=0x3ee3, lpOverlapped=0x1133fe08) returned 1
	[0303.863] GetFileType (hFile=0x1d8) returned 0x1
	[0303.863] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3ee3, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.863] GetFileType (hFile=0x1d8) returned 0x1
	[0303.864] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.864] WriteFile (in: hFile=0x1d8, lpBuffer=0x11185500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11185500*, lpNumberOfBytesWritten=0x1133fdfc*=0x236, lpOverlapped=0x1133fe08) returned 1
	[0303.864] GetFileType (hFile=0x1d8) returned 0x1
	[0303.864] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x3ee3, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.864] CloseHandle (hObject=0x1d8) returned 1
	[0303.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg.tl30z")) returned 0x220
	[0303.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.868] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0303.870] SetEvent (hEvent=0x1b0) returned 1
	[0303.870] SetEvent (hEvent=0x1e0) returned 1
	[0303.870] SwitchToThread () returned 1
	[0303.890] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0304.117] SetEvent (hEvent=0x1e0) returned 1
	[0304.117] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0304.133] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0304.220] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0304.222] SetEvent (hEvent=0x284) returned 1
	[0304.223] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0304.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg")) returned 0x220
	[0304.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG", dwFileAttributes=0x220) returned 1
	[0304.260] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0304.381] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0304.381] ReadFile (in: hFile=0x250, lpBuffer=0x111e0000, nNumberOfBytesToRead=0x8fab, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x111e0000*, lpNumberOfBytesRead=0x1131be18*=0x8fab, lpOverlapped=0x0) returned 1
	[0304.389] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0304.389] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f258 | out: pbBuffer=0x1140f258) returned 1
	[0304.390] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11377302 | out: pbBuffer=0x11377302) returned 1
	[0304.390] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0304.391] GetFileType (hFile=0x250) returned 0x1
	[0304.391] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.391] WriteFile (in: hFile=0x250, lpBuffer=0x1144c000*, nNumberOfBytesToWrite=0x8fab, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1144c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x8fab, lpOverlapped=0x1102be08) returned 1
	[0304.392] GetFileType (hFile=0x250) returned 0x1
	[0304.392] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x8fab, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.392] GetFileType (hFile=0x250) returned 0x1
	[0304.392] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.392] WriteFile (in: hFile=0x250, lpBuffer=0x11445880*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11445880*, lpNumberOfBytesWritten=0x1102bdfc*=0x239, lpOverlapped=0x1102be08) returned 1
	[0304.392] GetFileType (hFile=0x250) returned 0x1
	[0304.393] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x8fab, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.393] CloseHandle (hObject=0x250) returned 1
	[0304.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg.tl30z")) returned 0x220
	[0304.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.397] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0304.398] SetEvent (hEvent=0x248) returned 1
	[0304.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg")) returned 0x220
	[0304.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG", dwFileAttributes=0x220) returned 1
	[0304.399] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0304.641] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0304.641] SetEvent (hEvent=0x284) returned 1
	[0304.641] ReadFile (in: hFile=0x250, lpBuffer=0x11bc6000, nNumberOfBytesToRead=0x804b, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11bc6000*, lpNumberOfBytesRead=0x1131be18*=0x804b, lpOverlapped=0x0) returned 1
	[0304.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f560 | out: pbBuffer=0x1140f560) returned 1
	[0304.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f558 | out: pbBuffer=0x1140f558) returned 1
	[0304.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110a6902 | out: pbBuffer=0x110a6902) returned 1
	[0304.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110a6985 | out: pbBuffer=0x110a6985) returned 1
	[0304.651] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110a6993 | out: pbBuffer=0x110a6993) returned 1
	[0304.652] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f590 | out: pbBuffer=0x1140f590) returned 1
	[0304.653] GetFileType (hFile=0x250) returned 0x1
	[0304.653] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.653] WriteFile (in: hFile=0x250, lpBuffer=0x11c0c000*, nNumberOfBytesToWrite=0x804b, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c0c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x804b, lpOverlapped=0x1102be08) returned 1
	[0304.654] GetFileType (hFile=0x250) returned 0x1
	[0304.654] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x804b, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.655] GetFileType (hFile=0x250) returned 0x1
	[0304.655] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.655] WriteFile (in: hFile=0x250, lpBuffer=0x1146b500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1146b500*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0304.655] GetFileType (hFile=0x250) returned 0x1
	[0304.655] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x804b, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.656] CloseHandle (hObject=0x250) returned 1
	[0304.658] SwitchToThread () returned 1
	[0304.660] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg.tl30z")) returned 0x220
	[0304.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.663] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0304.665] SetEvent (hEvent=0x164) returned 1
	[0304.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg")) returned 0x220
	[0304.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG", dwFileAttributes=0x220) returned 1
	[0304.666] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0304.760] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0304.760] ReadFile (in: hFile=0x1fc, lpBuffer=0x11168000, nNumberOfBytesToRead=0x96ba, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11168000*, lpNumberOfBytesRead=0x11316e18*=0x96ba, lpOverlapped=0x0) returned 1
	[0304.770] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0304.770] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6288 | out: pbBuffer=0x113e6288) returned 1
	[0304.770] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11377302 | out: pbBuffer=0x11377302) returned 1
	[0304.770] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62c0 | out: pbBuffer=0x113e62c0) returned 1
	[0304.772] GetFileType (hFile=0x1fc) returned 0x1
	[0304.772] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.772] WriteFile (in: hFile=0x1fc, lpBuffer=0x11180000*, nNumberOfBytesToWrite=0x96ba, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11180000*, lpNumberOfBytesWritten=0x1102ddfc*=0x96ba, lpOverlapped=0x1102de08) returned 1
	[0304.773] GetFileType (hFile=0x1fc) returned 0x1
	[0304.773] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x96ba, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.773] GetFileType (hFile=0x1fc) returned 0x1
	[0304.773] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.773] WriteFile (in: hFile=0x1fc, lpBuffer=0x11413880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11413880*, lpNumberOfBytesWritten=0x1102ddfc*=0x236, lpOverlapped=0x1102de08) returned 1
	[0304.774] GetFileType (hFile=0x1fc) returned 0x1
	[0304.774] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x96ba, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.774] CloseHandle (hObject=0x1fc) returned 1
	[0304.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg.tl30z")) returned 0x220
	[0304.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.783] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0304.794] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0304.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg")) returned 0x220
	[0304.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG", dwFileAttributes=0x220) returned 1
	[0304.806] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0304.899] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0304.899] ReadFile (in: hFile=0x1d4, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x7dfc, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x11022e18*=0x7dfc, lpOverlapped=0x0) returned 1
	[0304.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0304.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0304.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11369302 | out: pbBuffer=0x11369302) returned 1
	[0304.909] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0304.910] GetFileType (hFile=0x1d4) returned 0x1
	[0304.910] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.910] WriteFile (in: hFile=0x1d4, lpBuffer=0x11244000*, nNumberOfBytesToWrite=0x7dfc, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11244000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7dfc, lpOverlapped=0x1102de08) returned 1
	[0304.911] GetFileType (hFile=0x1d4) returned 0x1
	[0304.911] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7dfc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.911] GetFileType (hFile=0x1d4) returned 0x1
	[0304.911] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.911] WriteFile (in: hFile=0x1d4, lpBuffer=0x11155880*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11155880*, lpNumberOfBytesWritten=0x1102ddfc*=0x23c, lpOverlapped=0x1102de08) returned 1
	[0304.912] GetFileType (hFile=0x1d4) returned 0x1
	[0304.912] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7dfc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.912] CloseHandle (hObject=0x1d4) returned 1
	[0304.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg.tl30z")) returned 0x220
	[0304.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.917] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0304.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg")) returned 0x220
	[0304.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG", dwFileAttributes=0x220) returned 1
	[0304.937] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0305.132] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0305.132] ReadFile (in: hFile=0x250, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x9203, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x11319e18*=0x9203, lpOverlapped=0x0) returned 1
	[0305.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0305.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111580f8 | out: pbBuffer=0x111580f8) returned 1
	[0305.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11368802 | out: pbBuffer=0x11368802) returned 1
	[0305.140] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0305.141] GetFileType (hFile=0x250) returned 0x1
	[0305.141] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.141] WriteFile (in: hFile=0x250, lpBuffer=0x1131e000*, nNumberOfBytesToWrite=0x9203, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1131e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x9203, lpOverlapped=0x1102be08) returned 1
	[0305.142] GetFileType (hFile=0x250) returned 0x1
	[0305.142] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x9203, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.142] GetFileType (hFile=0x250) returned 0x1
	[0305.142] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.143] WriteFile (in: hFile=0x250, lpBuffer=0x11154a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11154a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0305.143] GetFileType (hFile=0x250) returned 0x1
	[0305.143] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x9203, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.143] CloseHandle (hObject=0x250) returned 1
	[0305.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg.tl30z")) returned 0x220
	[0305.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.147] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0305.150] SetEvent (hEvent=0x174) returned 1
	[0305.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg")) returned 0x220
	[0305.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG", dwFileAttributes=0x220) returned 1
	[0305.151] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0305.251] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0305.251] ReadFile (in: hFile=0x2a0, lpBuffer=0x110b6000, nNumberOfBytesToRead=0x97ca, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x110b6000*, lpNumberOfBytesRead=0x11319e18*=0x97ca, lpOverlapped=0x0) returned 1
	[0305.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158400 | out: pbBuffer=0x11158400) returned 1
	[0305.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111583f8 | out: pbBuffer=0x111583f8) returned 1
	[0305.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c8602 | out: pbBuffer=0x110c8602) returned 1
	[0305.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c862f | out: pbBuffer=0x110c862f) returned 1
	[0305.266] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c8632 | out: pbBuffer=0x110c8632) returned 1
	[0305.267] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158430 | out: pbBuffer=0x11158430) returned 1
	[0305.268] GetFileType (hFile=0x2a0) returned 0x1
	[0305.268] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.268] WriteFile (in: hFile=0x2a0, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x97ca, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1102bdfc*=0x97ca, lpOverlapped=0x1102be08) returned 1
	[0305.269] GetFileType (hFile=0x2a0) returned 0x1
	[0305.269] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x97ca, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.269] GetFileType (hFile=0x2a0) returned 0x1
	[0305.269] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.270] WriteFile (in: hFile=0x2a0, lpBuffer=0x110c6a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110c6a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0305.270] GetFileType (hFile=0x2a0) returned 0x1
	[0305.270] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x97ca, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.270] CloseHandle (hObject=0x2a0) returned 1
	[0305.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg.tl30z")) returned 0x220
	[0305.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.274] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0305.278] SetEvent (hEvent=0x1e0) returned 1
	[0305.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg")) returned 0x220
	[0305.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG", dwFileAttributes=0x220) returned 1
	[0305.279] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0305.388] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0305.388] ReadFile (in: hFile=0x1b4, lpBuffer=0x110bc000, nNumberOfBytesToRead=0xa91e, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x110bc000*, lpNumberOfBytesRead=0x11319e18*=0xa91e, lpOverlapped=0x0) returned 1
	[0305.394] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0305.394] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261302 | out: pbBuffer=0x11261302) returned 1
	[0305.395] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11261347 | out: pbBuffer=0x11261347) returned 1
	[0305.395] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112613c8 | out: pbBuffer=0x112613c8) returned 1
	[0305.395] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0305.396] GetFileType (hFile=0x1b4) returned 0x1
	[0305.396] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.396] WriteFile (in: hFile=0x1b4, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0xa91e, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x11339dfc*=0xa91e, lpOverlapped=0x11339e08) returned 1
	[0305.397] GetFileType (hFile=0x1b4) returned 0x1
	[0305.397] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xa91e, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.397] GetFileType (hFile=0x1b4) returned 0x1
	[0305.397] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.397] WriteFile (in: hFile=0x1b4, lpBuffer=0x11141c00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11141c00*, lpNumberOfBytesWritten=0x11339dfc*=0x233, lpOverlapped=0x11339e08) returned 1
	[0305.398] GetFileType (hFile=0x1b4) returned 0x1
	[0305.398] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xa91e, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.398] CloseHandle (hObject=0x1b4) returned 1
	[0305.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg.tl30z")) returned 0x220
	[0305.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.401] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0305.406] SetEvent (hEvent=0x174) returned 1
	[0305.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg")) returned 0x220
	[0305.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG", dwFileAttributes=0x220) returned 1
	[0305.407] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0305.501] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0305.501] ReadFile (in: hFile=0x1d4, lpBuffer=0x11172000, nNumberOfBytesToRead=0x6cec, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11172000*, lpNumberOfBytesRead=0x11319e18*=0x6cec, lpOverlapped=0x0) returned 1
	[0305.508] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6580 | out: pbBuffer=0x113e6580) returned 1
	[0305.508] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11180802 | out: pbBuffer=0x11180802) returned 1
	[0305.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e65b0 | out: pbBuffer=0x113e65b0) returned 1
	[0305.509] GetFileType (hFile=0x1d4) returned 0x1
	[0305.509] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.510] WriteFile (in: hFile=0x1d4, lpBuffer=0x111ac000*, nNumberOfBytesToWrite=0x6cec, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x111ac000*, lpNumberOfBytesWritten=0x1102ddfc*=0x6cec, lpOverlapped=0x1102de08) returned 1
	[0305.510] GetFileType (hFile=0x1d4) returned 0x1
	[0305.510] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6cec, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.510] GetFileType (hFile=0x1d4) returned 0x1
	[0305.511] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.511] WriteFile (in: hFile=0x1d4, lpBuffer=0x11303500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11303500*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0305.511] GetFileType (hFile=0x1d4) returned 0x1
	[0305.511] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x6cec, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.511] CloseHandle (hObject=0x1d4) returned 1
	[0305.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg.tl30z")) returned 0x220
	[0305.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.515] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0305.518] SetEvent (hEvent=0x174) returned 1
	[0305.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg")) returned 0x220
	[0305.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG", dwFileAttributes=0x220) returned 1
	[0305.518] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0305.757] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0305.757] ReadFile (in: hFile=0x1d4, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x351c, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11319e18*=0x351c, lpOverlapped=0x0) returned 1
	[0305.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0305.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0305.762] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bd202 | out: pbBuffer=0x111bd202) returned 1
	[0305.763] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0305.763] GetFileType (hFile=0x1d4) returned 0x1
	[0305.764] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.764] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ae000*, nNumberOfBytesToWrite=0x351c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112ae000*, lpNumberOfBytesWritten=0x1133fdfc*=0x351c, lpOverlapped=0x1133fe08) returned 1
	[0305.764] GetFileType (hFile=0x1d4) returned 0x1
	[0305.764] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x351c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.764] GetFileType (hFile=0x1d4) returned 0x1
	[0305.765] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.765] WriteFile (in: hFile=0x1d4, lpBuffer=0x1127b880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1127b880*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0305.765] GetFileType (hFile=0x1d4) returned 0x1
	[0305.765] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x351c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.765] CloseHandle (hObject=0x1d4) returned 1
	[0305.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg.tl30z")) returned 0x220
	[0305.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.772] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0305.776] SetEvent (hEvent=0x164) returned 1
	[0305.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png")) returned 0x220
	[0305.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG", dwFileAttributes=0x220) returned 1
	[0305.777] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png.tl30z"), dwFlags=0x1) returned 1
	[0305.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0305.967] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0305.967] ReadFile (in: hFile=0x1d4, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x961a, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x11319e18*=0x961a, lpOverlapped=0x0) returned 1
	[0305.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0305.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0305.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116a802 | out: pbBuffer=0x1116a802) returned 1
	[0305.993] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0305.994] GetFileType (hFile=0x1d4) returned 0x1
	[0305.994] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.994] WriteFile (in: hFile=0x1d4, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0x961a, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x1102ddfc*=0x961a, lpOverlapped=0x1102de08) returned 1
	[0305.996] GetFileType (hFile=0x1d4) returned 0x1
	[0305.996] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x961a, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.996] GetFileType (hFile=0x1d4) returned 0x1
	[0305.996] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.996] WriteFile (in: hFile=0x1d4, lpBuffer=0x1117ee00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1117ee00*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0305.996] GetFileType (hFile=0x1d4) returned 0x1
	[0305.997] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x961a, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.997] CloseHandle (hObject=0x1d4) returned 1
	[0305.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png.tl30z")) returned 0x220
	[0305.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG.tl30z", dwFileAttributes=0x221) returned 1
	[0306.008] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.012] SetEvent (hEvent=0x248) returned 1
	[0306.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf")) returned 0x220
	[0306.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF", dwFileAttributes=0x220) returned 1
	[0306.013] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0306.093] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0306.093] ReadFile (in: hFile=0x250, lpBuffer=0x113aa000, nNumberOfBytesToRead=0x31e2, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x11319e18*=0x31e2, lpOverlapped=0x0) returned 1
	[0306.103] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0306.104] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e0802 | out: pbBuffer=0x110e0802) returned 1
	[0306.104] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e0817 | out: pbBuffer=0x110e0817) returned 1
	[0306.104] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0306.105] GetFileType (hFile=0x250) returned 0x1
	[0306.105] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.105] WriteFile (in: hFile=0x250, lpBuffer=0x11290000*, nNumberOfBytesToWrite=0x31e2, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11290000*, lpNumberOfBytesWritten=0x11031dfc*=0x31e2, lpOverlapped=0x11031e08) returned 1
	[0306.106] GetFileType (hFile=0x250) returned 0x1
	[0306.106] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x31e2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.106] GetFileType (hFile=0x250) returned 0x1
	[0306.106] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.106] WriteFile (in: hFile=0x250, lpBuffer=0x113d6a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113d6a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0306.106] GetFileType (hFile=0x250) returned 0x1
	[0306.107] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x31e2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.107] CloseHandle (hObject=0x250) returned 1
	[0306.112] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf.tl30z")) returned 0x220
	[0306.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.119] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.127] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.150] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.170] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.190] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.213] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.233] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.251] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.270] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.308] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.320] SetEvent (hEvent=0x160) returned 1
	[0306.322] SetEvent (hEvent=0x124) returned 1
	[0306.322] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0306.325] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.325] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x0
	[0306.327] SetEvent (hEvent=0x248) returned 1
	[0306.327] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0306.330] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.370] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.745] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.746] SetEvent (hEvent=0x248) returned 1
	[0306.746] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.750] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.755] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.775] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.793] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.849] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.883] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.902] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.920] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0306.942] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.024] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.047] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.066] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.084] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.104] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.122] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.141] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.153] SetEvent (hEvent=0x248) returned 1
	[0307.154] SetEvent (hEvent=0x124) returned 1
	[0307.154] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0307.157] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.157] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x0
	[0307.159] SetEvent (hEvent=0x284) returned 1
	[0307.159] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x0
	[0307.161] SetEvent (hEvent=0x1b0) returned 1
	[0307.161] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.413] SetEvent (hEvent=0x1b0) returned 1
	[0307.413] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.421] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.503] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.506] SetEvent (hEvent=0x160) returned 1
	[0307.506] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.510] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.514] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.542] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.569] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.589] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.609] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.630] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.649] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.667] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.686] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.704] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.723] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.744] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.761] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.780] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.790] SetEvent (hEvent=0x160) returned 1
	[0307.791] SetEvent (hEvent=0x124) returned 1
	[0307.791] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x0
	[0307.793] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x0
	[0307.794] SetEvent (hEvent=0x248) returned 1
	[0307.794] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0307.796] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.797] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.818] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0307.869] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.209] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.213] SetEvent (hEvent=0x174) returned 1
	[0308.213] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf")) returned 0x220
	[0308.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF", dwFileAttributes=0x220) returned 1
	[0308.247] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0308.368] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0308.368] ReadFile (in: hFile=0x1d8, lpBuffer=0x113da000, nNumberOfBytesToRead=0xb2c, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x113da000*, lpNumberOfBytesRead=0x11425e18*=0xb2c, lpOverlapped=0x0) returned 1
	[0308.375] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0308.375] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11184802 | out: pbBuffer=0x11184802) returned 1
	[0308.375] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0308.375] GetFileType (hFile=0x1d8) returned 0x1
	[0308.376] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.376] WriteFile (in: hFile=0x1d8, lpBuffer=0x11114000*, nNumberOfBytesToWrite=0xb2c, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11114000*, lpNumberOfBytesWritten=0x1133bdfc*=0xb2c, lpOverlapped=0x1133be08) returned 1
	[0308.376] GetFileType (hFile=0x1d8) returned 0x1
	[0308.376] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb2c, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.376] GetFileType (hFile=0x1d8) returned 0x1
	[0308.376] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.377] WriteFile (in: hFile=0x1d8, lpBuffer=0x112daa80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112daa80*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0308.377] GetFileType (hFile=0x1d8) returned 0x1
	[0308.377] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xb2c, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.377] CloseHandle (hObject=0x1d8) returned 1
	[0308.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf.tl30z")) returned 0x220
	[0308.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.380] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.383] SetEvent (hEvent=0x174) returned 1
	[0308.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf")) returned 0x220
	[0308.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF", dwFileAttributes=0x220) returned 1
	[0308.384] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0308.458] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0308.458] ReadFile (in: hFile=0x1fc, lpBuffer=0x11198000, nNumberOfBytesToRead=0x5080, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11198000*, lpNumberOfBytesRead=0x11425e18*=0x5080, lpOverlapped=0x0) returned 1
	[0308.465] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126ab0 | out: pbBuffer=0x11126ab0) returned 1
	[0308.465] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113fb102 | out: pbBuffer=0x113fb102) returned 1
	[0308.465] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113fb1b0 | out: pbBuffer=0x113fb1b0) returned 1
	[0308.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126ae0 | out: pbBuffer=0x11126ae0) returned 1
	[0308.469] GetFileType (hFile=0x1fc) returned 0x1
	[0308.469] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.470] WriteFile (in: hFile=0x1fc, lpBuffer=0x11144000*, nNumberOfBytesToWrite=0x5080, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11144000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5080, lpOverlapped=0x1102be08) returned 1
	[0308.472] GetFileType (hFile=0x1fc) returned 0x1
	[0308.472] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x5080, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.472] GetFileType (hFile=0x1fc) returned 0x1
	[0308.473] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.473] WriteFile (in: hFile=0x1fc, lpBuffer=0x1139ce00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1139ce00*, lpNumberOfBytesWritten=0x1102bdfc*=0x221, lpOverlapped=0x1102be08) returned 1
	[0308.475] GetFileType (hFile=0x1fc) returned 0x1
	[0308.475] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x5080, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.476] CloseHandle (hObject=0x1fc) returned 1
	[0308.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf.tl30z")) returned 0x220
	[0308.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.483] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.488] SetEvent (hEvent=0x174) returned 1
	[0308.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf")) returned 0x220
	[0308.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF", dwFileAttributes=0x220) returned 1
	[0308.489] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x288
	[0308.552] GetConsoleMode (in: hConsoleHandle=0x288, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0308.552] ReadFile (in: hFile=0x288, lpBuffer=0x1114c000, nNumberOfBytesToRead=0x53c, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1114c000*, lpNumberOfBytesRead=0x11425e18*=0x53c, lpOverlapped=0x0) returned 1
	[0308.866] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.927] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332480 | out: pbBuffer=0x11332480) returned 1
	[0308.927] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332478 | out: pbBuffer=0x11332478) returned 1
	[0308.927] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113fb202 | out: pbBuffer=0x113fb202) returned 1
	[0308.928] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324b0 | out: pbBuffer=0x113324b0) returned 1
	[0308.928] GetFileType (hFile=0x288) returned 0x1
	[0308.928] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.928] WriteFile (in: hFile=0x288, lpBuffer=0x11246000*, nNumberOfBytesToWrite=0x53c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11246000*, lpNumberOfBytesWritten=0x1133fdfc*=0x53c, lpOverlapped=0x1133fe08) returned 1
	[0308.928] GetFileType (hFile=0x288) returned 0x1
	[0308.929] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x53c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.929] GetFileType (hFile=0x288) returned 0x1
	[0308.929] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.929] WriteFile (in: hFile=0x288, lpBuffer=0x11235880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11235880*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0308.929] GetFileType (hFile=0x288) returned 0x1
	[0308.929] SetFilePointerEx (in: hFile=0x288, liDistanceToMove=0x53c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.929] CloseHandle (hObject=0x288) returned 1
	[0308.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf.tl30z")) returned 0x220
	[0308.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.930] SetEvent (hEvent=0x1b0) returned 1
	[0308.930] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.738] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp")) returned 0x220
	[0313.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP", dwFileAttributes=0x220) returned 1
	[0313.742] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0314.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0314.416] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0314.417] ReadFile (in: hFile=0x250, lpBuffer=0x1143a000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1143a000*, lpNumberOfBytesRead=0x1131de18*=0x7db8, lpOverlapped=0x0) returned 1
	[0314.462] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332370 | out: pbBuffer=0x11332370) returned 1
	[0314.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332368 | out: pbBuffer=0x11332368) returned 1
	[0314.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11173202 | out: pbBuffer=0x11173202) returned 1
	[0314.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1117327a | out: pbBuffer=0x1117327a) returned 1
	[0314.463] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0314.464] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0314.504] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.504] SetEvent (hEvent=0x150) returned 1
	[0314.504] SetEvent (hEvent=0x134) returned 1
	[0314.504] GetFileType (hFile=0x250) returned 0x1
	[0314.504] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11147de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.504] WriteFile (in: hFile=0x250, lpBuffer=0x1129e000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x11147dfc, lpOverlapped=0x11147e08 | out: lpBuffer=0x1129e000*, lpNumberOfBytesWritten=0x11147dfc*=0x7db8, lpOverlapped=0x11147e08) returned 1
	[0314.505] GetFileType (hFile=0x250) returned 0x1
	[0314.505] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x11147de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.505] GetFileType (hFile=0x250) returned 0x1
	[0314.505] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11147de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.505] WriteFile (in: hFile=0x250, lpBuffer=0x112e9880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11147dfc, lpOverlapped=0x11147e08 | out: lpBuffer=0x112e9880*, lpNumberOfBytesWritten=0x11147dfc*=0x236, lpOverlapped=0x11147e08) returned 1
	[0314.505] GetFileType (hFile=0x250) returned 0x1
	[0314.506] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x11147de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.506] CloseHandle (hObject=0x250) returned 1
	[0314.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp.tl30z")) returned 0x220
	[0314.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.514] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp")) returned 0x220
	[0314.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP", dwFileAttributes=0x220) returned 1
	[0314.528] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0314.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0314.771] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0314.771] ReadFile (in: hFile=0x184, lpBuffer=0x112bc000, nNumberOfBytesToRead=0x7ce0, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x112bc000*, lpNumberOfBytesRead=0x11022e18*=0x7ce0, lpOverlapped=0x0) returned 1
	[0314.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126570 | out: pbBuffer=0x11126570) returned 1
	[0314.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ca802 | out: pbBuffer=0x112ca802) returned 1
	[0314.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ca8d6 | out: pbBuffer=0x112ca8d6) returned 1
	[0314.794] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111265a0 | out: pbBuffer=0x111265a0) returned 1
	[0314.795] GetFileType (hFile=0x184) returned 0x1
	[0314.795] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.796] WriteFile (in: hFile=0x184, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7ce0, lpOverlapped=0x1102be08) returned 1
	[0314.796] GetFileType (hFile=0x184) returned 0x1
	[0314.796] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.796] GetFileType (hFile=0x184) returned 0x1
	[0314.797] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.797] WriteFile (in: hFile=0x184, lpBuffer=0x113a3880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113a3880*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0314.797] GetFileType (hFile=0x184) returned 0x1
	[0314.797] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.797] CloseHandle (hObject=0x184) returned 1
	[0314.799] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp.tl30z")) returned 0x220
	[0314.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.801] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.803] SetEvent (hEvent=0x234) returned 1
	[0314.803] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp")) returned 0x220
	[0314.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP", dwFileAttributes=0x220) returned 1
	[0314.804] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0314.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0314.927] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0314.928] ReadFile (in: hFile=0x1b4, lpBuffer=0x1136e000, nNumberOfBytesToRead=0x7f68, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x11022e18*=0x7f68, lpOverlapped=0x0) returned 1
	[0314.940] SetEvent (hEvent=0x150) returned 1
	[0314.941] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0314.941] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11341302 | out: pbBuffer=0x11341302) returned 1
	[0314.941] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0314.942] GetFileType (hFile=0x1b4) returned 0x1
	[0314.942] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.942] WriteFile (in: hFile=0x1b4, lpBuffer=0x113ec000*, nNumberOfBytesToWrite=0x7f68, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x113ec000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7f68, lpOverlapped=0x1102de08) returned 1
	[0314.943] GetFileType (hFile=0x1b4) returned 0x1
	[0314.943] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7f68, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.943] GetFileType (hFile=0x1b4) returned 0x1
	[0314.943] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.943] WriteFile (in: hFile=0x1b4, lpBuffer=0x1120b880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1120b880*, lpNumberOfBytesWritten=0x1102ddfc*=0x236, lpOverlapped=0x1102de08) returned 1
	[0314.944] GetFileType (hFile=0x1b4) returned 0x1
	[0314.944] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7f68, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.944] CloseHandle (hObject=0x1b4) returned 1
	[0314.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp.tl30z")) returned 0x220
	[0314.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif")) returned 0x220
	[0314.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF", dwFileAttributes=0x220) returned 1
	[0314.952] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif.tl30z"), dwFlags=0x1) returned 1
	[0315.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0315.047] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0315.047] ReadFile (in: hFile=0x1b4, lpBuffer=0x110e4000, nNumberOfBytesToRead=0x5e7b, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x110e4000*, lpNumberOfBytesRead=0x11288e18*=0x5e7b, lpOverlapped=0x0) returned 1
	[0315.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126530 | out: pbBuffer=0x11126530) returned 1
	[0315.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126528 | out: pbBuffer=0x11126528) returned 1
	[0315.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ea702 | out: pbBuffer=0x110ea702) returned 1
	[0315.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110ea7af | out: pbBuffer=0x110ea7af) returned 1
	[0315.055] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126560 | out: pbBuffer=0x11126560) returned 1
	[0315.055] GetFileType (hFile=0x1b4) returned 0x1
	[0315.055] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0315.056] WriteFile (in: hFile=0x1b4, lpBuffer=0x110f0000*, nNumberOfBytesToWrite=0x5e7b, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110f0000*, lpNumberOfBytesWritten=0x11031dfc*=0x5e7b, lpOverlapped=0x11031e08) returned 1
	[0315.056] GetFileType (hFile=0x1b4) returned 0x1
	[0315.056] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x5e7b, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0315.056] GetFileType (hFile=0x1b4) returned 0x1
	[0315.056] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0315.056] WriteFile (in: hFile=0x1b4, lpBuffer=0x110b5500*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110b5500*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0315.057] GetFileType (hFile=0x1b4) returned 0x1
	[0315.057] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x5e7b, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0315.057] CloseHandle (hObject=0x1b4) returned 1
	[0315.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif.tl30z")) returned 0x220
	[0315.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0315.062] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0315.074] SetEvent (hEvent=0x134) returned 1
	[0315.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp")) returned 0x220
	[0315.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP", dwFileAttributes=0x220) returned 1
	[0315.075] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0315.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0315.222] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0315.222] ReadFile (in: hFile=0x1c8, lpBuffer=0x113da000, nNumberOfBytesToRead=0x8118, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x113da000*, lpNumberOfBytesRead=0x11423e18*=0x8118, lpOverlapped=0x0) returned 1
	[0315.285] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0315.285] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11315402 | out: pbBuffer=0x11315402) returned 1
	[0315.301] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1131544b | out: pbBuffer=0x1131544b) returned 1
	[0315.302] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113154a6 | out: pbBuffer=0x113154a6) returned 1
	[0315.302] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0315.303] GetFileType (hFile=0x1c8) returned 0x1
	[0315.303] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.303] WriteFile (in: hFile=0x1c8, lpBuffer=0x113bc000*, nNumberOfBytesToWrite=0x8118, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113bc000*, lpNumberOfBytesWritten=0x1133bdfc*=0x8118, lpOverlapped=0x1133be08) returned 1
	[0315.304] GetFileType (hFile=0x1c8) returned 0x1
	[0315.304] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8118, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.304] GetFileType (hFile=0x1c8) returned 0x1
	[0315.304] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.304] WriteFile (in: hFile=0x1c8, lpBuffer=0x113cc000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113cc000*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0315.305] GetFileType (hFile=0x1c8) returned 0x1
	[0315.305] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8118, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.305] CloseHandle (hObject=0x1c8) returned 1
	[0315.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp.tl30z")) returned 0x220
	[0315.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0315.318] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0315.346] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0315.354] SetEvent (hEvent=0x1e8) returned 1
	[0315.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp")) returned 0x220
	[0315.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP", dwFileAttributes=0x220) returned 1
	[0315.355] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0315.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0315.630] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0315.630] ReadFile (in: hFile=0x200, lpBuffer=0x1124c000, nNumberOfBytesToRead=0x7ed0, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1124c000*, lpNumberOfBytesRead=0x11428e18*=0x7ed0, lpOverlapped=0x0) returned 1
	[0315.724] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0315.724] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332668 | out: pbBuffer=0x11332668) returned 1
	[0315.724] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11350902 | out: pbBuffer=0x11350902) returned 1
	[0315.724] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11350982 | out: pbBuffer=0x11350982) returned 1
	[0315.724] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113509b2 | out: pbBuffer=0x113509b2) returned 1
	[0315.725] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0315.728] GetFileType (hFile=0x200) returned 0x1
	[0315.728] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.728] WriteFile (in: hFile=0x200, lpBuffer=0x1116a000*, nNumberOfBytesToWrite=0x7ed0, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1116a000*, lpNumberOfBytesWritten=0x1133ddfc*=0x7ed0, lpOverlapped=0x1133de08) returned 1
	[0315.730] GetFileType (hFile=0x200) returned 0x1
	[0315.730] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7ed0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.730] GetFileType (hFile=0x200) returned 0x1
	[0315.730] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.730] WriteFile (in: hFile=0x200, lpBuffer=0x113cdc00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x113cdc00*, lpNumberOfBytesWritten=0x1133ddfc*=0x233, lpOverlapped=0x1133de08) returned 1
	[0315.795] GetFileType (hFile=0x200) returned 0x1
	[0315.795] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7ed0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.796] CloseHandle (hObject=0x200) returned 1
	[0315.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp.tl30z")) returned 0x220
	[0315.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0315.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp")) returned 0x220
	[0315.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP", dwFileAttributes=0x220) returned 1
	[0315.808] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0316.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0316.174] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0316.174] ReadFile (in: hFile=0x200, lpBuffer=0x113b8000, nNumberOfBytesToRead=0xe8ca, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x113b8000*, lpNumberOfBytesRead=0x11286e18*=0xe8ca, lpOverlapped=0x0) returned 1
	[0316.227] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0316.227] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d7d02 | out: pbBuffer=0x110d7d02) returned 1
	[0316.228] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0316.231] GetFileType (hFile=0x200) returned 0x1
	[0316.231] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c1de0 | out: lpNewFilePointer=0x0) returned 1
	[0316.231] WriteFile (in: hFile=0x200, lpBuffer=0x11228000*, nNumberOfBytesToWrite=0xe8ca, lpNumberOfBytesWritten=0x112c1dfc, lpOverlapped=0x112c1e08 | out: lpBuffer=0x11228000*, lpNumberOfBytesWritten=0x112c1dfc*=0xe8ca, lpOverlapped=0x112c1e08) returned 1
	[0316.232] GetFileType (hFile=0x200) returned 0x1
	[0316.232] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0xe8ca, lpNewFilePointer=0x0, dwMoveMethod=0x112c1de0 | out: lpNewFilePointer=0x0) returned 1
	[0316.232] GetFileType (hFile=0x200) returned 0x1
	[0316.232] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112c1de0 | out: lpNewFilePointer=0x0) returned 1
	[0316.232] WriteFile (in: hFile=0x200, lpBuffer=0x110f4700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112c1dfc, lpOverlapped=0x112c1e08 | out: lpBuffer=0x110f4700*, lpNumberOfBytesWritten=0x112c1dfc*=0x233, lpOverlapped=0x112c1e08) returned 1
	[0316.262] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.276] GetFileType (hFile=0x200) returned 0x1
	[0316.276] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0xe8ca, lpNewFilePointer=0x0, dwMoveMethod=0x112c1de0 | out: lpNewFilePointer=0x0) returned 1
	[0316.276] CloseHandle (hObject=0x200) returned 1
	[0316.279] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.468] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.542] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg")) returned 0x220
	[0316.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG", dwFileAttributes=0x220) returned 1
	[0316.547] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg.tl30z"), dwFlags=0x1) returned 1
	[0316.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0316.812] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0316.812] ReadFile (in: hFile=0x184, lpBuffer=0x11166000, nNumberOfBytesToRead=0x2ba2, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11166000*, lpNumberOfBytesRead=0x1131de18*=0x2ba2, lpOverlapped=0x0) returned 1
	[0316.853] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0316.853] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0316.865] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137dc02 | out: pbBuffer=0x1137dc02) returned 1
	[0316.865] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137dc05 | out: pbBuffer=0x1137dc05) returned 1
	[0316.866] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0316.866] GetFileType (hFile=0x184) returned 0x1
	[0316.866] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.867] WriteFile (in: hFile=0x184, lpBuffer=0x1118a000*, nNumberOfBytesToWrite=0x2ba2, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1118a000*, lpNumberOfBytesWritten=0x1102ddfc*=0x2ba2, lpOverlapped=0x1102de08) returned 1
	[0316.873] GetFileType (hFile=0x184) returned 0x1
	[0316.873] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x2ba2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.873] GetFileType (hFile=0x184) returned 0x1
	[0316.873] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.874] WriteFile (in: hFile=0x184, lpBuffer=0x113b1500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x113b1500*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0316.874] GetFileType (hFile=0x184) returned 0x1
	[0316.874] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x2ba2, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.874] CloseHandle (hObject=0x184) returned 1
	[0316.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg.tl30z")) returned 0x220
	[0316.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0316.915] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.938] SetEvent (hEvent=0x218) returned 1
	[0316.938] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.974] SetEvent (hEvent=0x27c) returned 1
	[0316.974] SetEvent (hEvent=0x160) returned 1
	[0316.975] SetEvent (hEvent=0x1e0) returned 1
	[0316.975] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0316.977] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.977] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x102
	[0316.979] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.979] SetEvent (hEvent=0x1c4) returned 1
	[0316.979] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x1) returned 0x0
	[0316.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf")) returned 0x220
	[0316.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF", dwFileAttributes=0x220) returned 1
	[0316.982] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c
	[0317.183] GetConsoleMode (in: hConsoleHandle=0x21c, lpMode=0x112bbe08 | out: lpMode=0x112bbe08) returned 0
	[0317.183] ReadFile (in: hFile=0x21c, lpBuffer=0x112ac000, nNumberOfBytesToRead=0xe0a, lpNumberOfBytesRead=0x112bbe18, lpOverlapped=0x0 | out: lpBuffer=0x112ac000*, lpNumberOfBytesRead=0x112bbe18*=0xe0a, lpOverlapped=0x0) returned 1
	[0317.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0317.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e0902 | out: pbBuffer=0x110e0902) returned 1
	[0317.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e092f | out: pbBuffer=0x110e092f) returned 1
	[0317.248] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0317.248] GetFileType (hFile=0x21c) returned 0x1
	[0317.248] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.248] WriteFile (in: hFile=0x21c, lpBuffer=0x111e2000*, nNumberOfBytesToWrite=0xe0a, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x111e2000*, lpNumberOfBytesWritten=0x112bbdfc*=0xe0a, lpOverlapped=0x112bbe08) returned 1
	[0317.248] GetFileType (hFile=0x21c) returned 0x1
	[0317.249] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xe0a, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.249] GetFileType (hFile=0x21c) returned 0x1
	[0317.249] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.249] WriteFile (in: hFile=0x21c, lpBuffer=0x113b3c00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x112bbdfc, lpOverlapped=0x112bbe08 | out: lpBuffer=0x113b3c00*, lpNumberOfBytesWritten=0x112bbdfc*=0x227, lpOverlapped=0x112bbe08) returned 1
	[0317.249] GetFileType (hFile=0x21c) returned 0x1
	[0317.250] SetFilePointerEx (in: hFile=0x21c, liDistanceToMove=0xe0a, lpNewFilePointer=0x0, dwMoveMethod=0x112bbde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.250] CloseHandle (hObject=0x21c) returned 1
	[0317.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf.tl30z")) returned 0x220
	[0317.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.255] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.257] SetEvent (hEvent=0x1e8) returned 1
	[0317.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf")) returned 0x220
	[0317.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF", dwFileAttributes=0x220) returned 1
	[0317.258] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0317.543] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0317.543] ReadFile (in: hFile=0x1f4, lpBuffer=0x11222000, nNumberOfBytesToRead=0x2a0a, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11222000*, lpNumberOfBytesRead=0x1128ae18*=0x2a0a, lpOverlapped=0x0) returned 1
	[0317.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126720 | out: pbBuffer=0x11126720) returned 1
	[0317.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126718 | out: pbBuffer=0x11126718) returned 1
	[0317.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144f302 | out: pbBuffer=0x1144f302) returned 1
	[0317.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144f31e | out: pbBuffer=0x1144f31e) returned 1
	[0317.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144f33a | out: pbBuffer=0x1144f33a) returned 1
	[0317.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144f3c8 | out: pbBuffer=0x1144f3c8) returned 1
	[0317.662] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126750 | out: pbBuffer=0x11126750) returned 1
	[0317.662] GetFileType (hFile=0x1f4) returned 0x1
	[0317.662] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.662] WriteFile (in: hFile=0x1f4, lpBuffer=0x1115c000*, nNumberOfBytesToWrite=0x2a0a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1115c000*, lpNumberOfBytesWritten=0x1133bdfc*=0x2a0a, lpOverlapped=0x1133be08) returned 1
	[0317.663] GetFileType (hFile=0x1f4) returned 0x1
	[0317.663] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2a0a, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.663] GetFileType (hFile=0x1f4) returned 0x1
	[0317.663] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.663] WriteFile (in: hFile=0x1f4, lpBuffer=0x1113c380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1113c380*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0317.663] GetFileType (hFile=0x1f4) returned 0x1
	[0317.664] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x2a0a, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.664] CloseHandle (hObject=0x1f4) returned 1
	[0317.685] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) 

Thread:
	id = 44
	os_tid = 0x7b8

	[0213.130] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x330fff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x330fff30*=0x260) returned 1
	[0213.130] VirtualQuery (in: lpAddress=0x330fff40, lpBuffer=0x330fff40, dwLength=0x1c | out: lpBuffer=0x330fff40*(BaseAddress=0x330ff000, AllocationBase=0x33000000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0213.130] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 0x20
	[0213.131] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", dwFileAttributes=0x20) returned 1
	[0213.131] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.tl30z"), dwFlags=0x1) returned 1
	[0222.235] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0222.269] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1129be08 | out: lpMode=0x1129be08) returned 0
	[0222.269] ReadFile (in: hFile=0x1cc, lpBuffer=0x1139d000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1129be18, lpOverlapped=0x0 | out: lpBuffer=0x1139d000*, lpNumberOfBytesRead=0x1129be18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0222.341] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364270 | out: pbBuffer=0x11364270) returned 1
	[0222.341] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1106b302 | out: pbBuffer=0x1106b302) returned 1
	[0222.342] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113642a0 | out: pbBuffer=0x113642a0) returned 1
	[0222.342] VirtualAlloc (lpAddress=0x116c8000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0x116c8000
	[0222.344] GetFileType (hFile=0x1cc) returned 0x1
	[0222.345] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129bde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.345] WriteFile (in: hFile=0x1cc, lpBuffer=0x110cc000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1129bdfc, lpOverlapped=0x1129be08 | out: lpBuffer=0x110cc000*, lpNumberOfBytesWritten=0x1129bdfc*=0x6ccc, lpOverlapped=0x1129be08) returned 1
	[0222.346] GetFileType (hFile=0x1cc) returned 0x1
	[0222.346] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1129bde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.346] GetFileType (hFile=0x1cc) returned 0x1
	[0222.346] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1129bde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.346] WriteFile (in: hFile=0x1cc, lpBuffer=0x115f5880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1129bdfc, lpOverlapped=0x1129be08 | out: lpBuffer=0x115f5880*, lpNumberOfBytesWritten=0x1129bdfc*=0x230, lpOverlapped=0x1129be08) returned 1
	[0222.346] GetFileType (hFile=0x1cc) returned 0x1
	[0222.347] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1129bde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.347] CloseHandle (hObject=0x1cc) returned 1
	[0222.377] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.tl30z")) returned 0x20
	[0222.378] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0222.420] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x25c
	[0222.420] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0222.689] SetEvent (hEvent=0x23c) returned 1
	[0222.689] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 0x20
	[0222.690] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0222.690] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0224.815] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0225.000] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0225.000] ReadFile (in: hFile=0x1c8, lpBuffer=0x115b6000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x115b6000*, lpNumberOfBytesRead=0x11316e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0225.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364710 | out: pbBuffer=0x11364710) returned 1
	[0225.126] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11364708 | out: pbBuffer=0x11364708) returned 1
	[0225.127] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c9302 | out: pbBuffer=0x110c9302) returned 1
	[0225.127] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c9309 | out: pbBuffer=0x110c9309) returned 1
	[0225.127] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364740 | out: pbBuffer=0x11364740) returned 1
	[0225.128] GetFileType (hFile=0x1c8) returned 0x1
	[0225.128] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0225.129] WriteFile (in: hFile=0x1c8, lpBuffer=0x11660000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x115dbdfc, lpOverlapped=0x115dbe08 | out: lpBuffer=0x11660000*, lpNumberOfBytesWritten=0x115dbdfc*=0x6ccc, lpOverlapped=0x115dbe08) returned 1
	[0225.129] GetFileType (hFile=0x1c8) returned 0x1
	[0225.129] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0225.130] GetFileType (hFile=0x1c8) returned 0x1
	[0225.130] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0225.130] WriteFile (in: hFile=0x1c8, lpBuffer=0x115d2380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x115dbdfc, lpOverlapped=0x115dbe08 | out: lpBuffer=0x115d2380*, lpNumberOfBytesWritten=0x115dbdfc*=0x230, lpOverlapped=0x115dbe08) returned 1
	[0225.131] GetFileType (hFile=0x1c8) returned 0x1
	[0225.131] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0225.131] CloseHandle (hObject=0x1c8) returned 1
	[0225.199] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.tl30z")) returned 0x20
	[0225.200] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0225.231] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 0x20
	[0225.232] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0225.232] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.tl30z"), dwFlags=0x1) returned 1
	[0225.756] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0225.825] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1155be08 | out: lpMode=0x1155be08) returned 0
	[0225.825] ReadFile (in: hFile=0x1cc, lpBuffer=0x110cc000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1155be18, lpOverlapped=0x0 | out: lpBuffer=0x110cc000*, lpNumberOfBytesRead=0x1155be18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0225.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0225.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1106ac02 | out: pbBuffer=0x1106ac02) returned 1
	[0225.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1106ac94 | out: pbBuffer=0x1106ac94) returned 1
	[0225.835] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0225.836] GetFileType (hFile=0x1cc) returned 0x1
	[0225.836] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0225.837] WriteFile (in: hFile=0x1cc, lpBuffer=0x11406000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11406000*, lpNumberOfBytesWritten=0x11031dfc*=0x6ccc, lpOverlapped=0x11031e08) returned 1
	[0225.837] GetFileType (hFile=0x1cc) returned 0x1
	[0225.837] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0225.837] GetFileType (hFile=0x1cc) returned 0x1
	[0225.838] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0225.838] WriteFile (in: hFile=0x1cc, lpBuffer=0x113b0a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113b0a80*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0225.839] GetFileType (hFile=0x1cc) returned 0x1
	[0225.839] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0225.839] CloseHandle (hObject=0x1cc) returned 1
	[0226.198] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.tl30z")) returned 0x20
	[0226.199] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0226.214] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0226.233] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0226.355] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0226.409] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0226.556] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0226.721] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0226.871] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0226.921] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.098] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.119] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.466] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.631] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0227.638] SetEvent (hEvent=0x23c) returned 1
	[0227.638] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 0x20
	[0227.638] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0227.639] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0227.909] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0227.915] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1155be08 | out: lpMode=0x1155be08) returned 0
	[0227.916] ReadFile (in: hFile=0x1b4, lpBuffer=0x11400000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1155be18, lpOverlapped=0x0 | out: lpBuffer=0x11400000*, lpNumberOfBytesRead=0x1155be18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0227.932] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0227.932] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c8802 | out: pbBuffer=0x113c8802) returned 1
	[0227.932] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c88db | out: pbBuffer=0x113c88db) returned 1
	[0227.933] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0227.934] GetFileType (hFile=0x1b4) returned 0x1
	[0227.934] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0227.934] WriteFile (in: hFile=0x1b4, lpBuffer=0x112dc000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112dc000*, lpNumberOfBytesWritten=0x1102ddfc*=0x6ccc, lpOverlapped=0x1102de08) returned 1
	[0227.935] GetFileType (hFile=0x1b4) returned 0x1
	[0227.935] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0227.935] GetFileType (hFile=0x1b4) returned 0x1
	[0227.935] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0227.935] WriteFile (in: hFile=0x1b4, lpBuffer=0x110d4a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110d4a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0227.936] GetFileType (hFile=0x1b4) returned 0x1
	[0227.936] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0227.936] CloseHandle (hObject=0x1b4) returned 1
	[0228.032] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.tl30z")) returned 0x20
	[0228.033] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0228.129] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0228.146] SetEvent (hEvent=0x26c) returned 1
	[0228.146] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 0x20
	[0228.147] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0228.147] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0229.098] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0229.106] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0229.106] ReadFile (in: hFile=0x1b4, lpBuffer=0x110f2000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110f2000*, lpNumberOfBytesRead=0x11428e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0229.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364420 | out: pbBuffer=0x11364420) returned 1
	[0229.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113c9c02 | out: pbBuffer=0x113c9c02) returned 1
	[0229.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c9c13 | out: pbBuffer=0x113c9c13) returned 1
	[0229.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c9c8e | out: pbBuffer=0x113c9c8e) returned 1
	[0229.114] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113c9ca2 | out: pbBuffer=0x113c9ca2) returned 1
	[0229.115] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364450 | out: pbBuffer=0x11364450) returned 1
	[0229.116] GetFileType (hFile=0x1b4) returned 0x1
	[0229.116] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.116] WriteFile (in: hFile=0x1b4, lpBuffer=0x1112a000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x113e3dfc, lpOverlapped=0x113e3e08 | out: lpBuffer=0x1112a000*, lpNumberOfBytesWritten=0x113e3dfc*=0x6ccc, lpOverlapped=0x113e3e08) returned 1
	[0229.117] GetFileType (hFile=0x1b4) returned 0x1
	[0229.117] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x113e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.117] GetFileType (hFile=0x1b4) returned 0x1
	[0229.117] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.117] WriteFile (in: hFile=0x1b4, lpBuffer=0x1110a700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113e3dfc, lpOverlapped=0x113e3e08 | out: lpBuffer=0x1110a700*, lpNumberOfBytesWritten=0x113e3dfc*=0x230, lpOverlapped=0x113e3e08) returned 1
	[0229.118] GetFileType (hFile=0x1b4) returned 0x1
	[0229.118] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x113e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.118] CloseHandle (hObject=0x1b4) returned 1
	[0229.126] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.tl30z")) returned 0x20
	[0229.127] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0229.138] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.192] SetEvent (hEvent=0x12c) returned 1
	[0229.192] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 0x20
	[0229.193] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx", dwFileAttributes=0x20) returned 1
	[0229.193] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.tl30z"), dwFlags=0x1) returned 1
	[0229.782] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0229.798] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0229.798] ReadFile (in: hFile=0x1b4, lpBuffer=0x11405000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11405000*, lpNumberOfBytesRead=0x11428e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0229.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0229.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11431202 | out: pbBuffer=0x11431202) returned 1
	[0229.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11431263 | out: pbBuffer=0x11431263) returned 1
	[0229.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0229.814] GetFileType (hFile=0x1b4) returned 0x1
	[0229.814] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.814] WriteFile (in: hFile=0x1b4, lpBuffer=0x113d2000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x113d2000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6ccc, lpOverlapped=0x112f5e08) returned 1
	[0229.815] GetFileType (hFile=0x1b4) returned 0x1
	[0229.815] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.815] GetFileType (hFile=0x1b4) returned 0x1
	[0229.815] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.816] WriteFile (in: hFile=0x1b4, lpBuffer=0x1135f880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x1135f880*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0229.816] GetFileType (hFile=0x1b4) returned 0x1
	[0229.816] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.816] CloseHandle (hObject=0x1b4) returned 1
	[0229.829] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.tl30z")) returned 0x20
	[0229.829] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0229.833] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0229.848] SetEvent (hEvent=0x1f0) returned 1
	[0229.848] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 0x20
	[0229.848] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx", dwFileAttributes=0x20) returned 1
	[0229.849] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.tl30z"), dwFlags=0x1) returned 1
	[0230.687] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0230.703] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0230.703] ReadFile (in: hFile=0x1c8, lpBuffer=0x11129000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11129000*, lpNumberOfBytesRead=0x11428e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0230.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e570 | out: pbBuffer=0x1142e570) returned 1
	[0230.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11136f02 | out: pbBuffer=0x11136f02) returned 1
	[0230.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11136f11 | out: pbBuffer=0x11136f11) returned 1
	[0230.760] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11136fe9 | out: pbBuffer=0x11136fe9) returned 1
	[0230.761] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e5a0 | out: pbBuffer=0x1142e5a0) returned 1
	[0230.761] GetFileType (hFile=0x1c8) returned 0x1
	[0230.762] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.762] WriteFile (in: hFile=0x1c8, lpBuffer=0x1145c000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x1145c000*, lpNumberOfBytesWritten=0x112efdfc*=0x6ccc, lpOverlapped=0x112efe08) returned 1
	[0230.762] GetFileType (hFile=0x1c8) returned 0x1
	[0230.762] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.763] GetFileType (hFile=0x1c8) returned 0x1
	[0230.763] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.763] WriteFile (in: hFile=0x1c8, lpBuffer=0x11243500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11243500*, lpNumberOfBytesWritten=0x112efdfc*=0x230, lpOverlapped=0x112efe08) returned 1
	[0230.763] GetFileType (hFile=0x1c8) returned 0x1
	[0230.764] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.764] CloseHandle (hObject=0x1c8) returned 1
	[0230.936] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.tl30z")) returned 0x20
	[0230.936] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0230.959] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0230.983] SetEvent (hEvent=0x12c) returned 1
	[0230.983] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x1) returned 0x102
	[0230.987] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0230.988] SetEvent (hEvent=0x12c) returned 1
	[0230.988] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x1) returned 0x102
	[0230.992] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0230.992] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 0x20
	[0230.992] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0230.993] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.tl30z"), dwFlags=0x1) returned 1
	[0231.410] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0231.458] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x111c9e08 | out: lpMode=0x111c9e08) returned 0
	[0231.458] ReadFile (in: hFile=0x250, lpBuffer=0x110a4000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x111c9e18, lpOverlapped=0x0 | out: lpBuffer=0x110a4000*, lpNumberOfBytesRead=0x111c9e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0231.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0231.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110be802 | out: pbBuffer=0x110be802) returned 1
	[0231.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110be8a5 | out: pbBuffer=0x110be8a5) returned 1
	[0231.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110be8b1 | out: pbBuffer=0x110be8b1) returned 1
	[0231.852] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0231.853] GetFileType (hFile=0x250) returned 0x1
	[0231.853] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.853] WriteFile (in: hFile=0x250, lpBuffer=0x111d4000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x111c9dfc, lpOverlapped=0x111c9e08 | out: lpBuffer=0x111d4000*, lpNumberOfBytesWritten=0x111c9dfc*=0x6ccc, lpOverlapped=0x111c9e08) returned 1
	[0231.854] GetFileType (hFile=0x250) returned 0x1
	[0231.854] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x111c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.854] GetFileType (hFile=0x250) returned 0x1
	[0231.855] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.855] WriteFile (in: hFile=0x250, lpBuffer=0x11296a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x111c9dfc, lpOverlapped=0x111c9e08 | out: lpBuffer=0x11296a80*, lpNumberOfBytesWritten=0x111c9dfc*=0x230, lpOverlapped=0x111c9e08) returned 1
	[0231.855] GetFileType (hFile=0x250) returned 0x1
	[0231.855] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x111c9de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.856] CloseHandle (hObject=0x250) returned 1
	[0231.953] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.tl30z")) returned 0x20
	[0231.954] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0231.959] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 0x20
	[0231.960] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx", dwFileAttributes=0x20) returned 1
	[0231.960] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.tl30z"), dwFlags=0x1) returned 1
	[0232.609] SetEvent (hEvent=0x150) returned 1
	[0232.609] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0232.613] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0232.613] ReadFile (in: hFile=0x204, lpBuffer=0x110ab000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110ab000*, lpNumberOfBytesRead=0x11316e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0232.628] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e2d0 | out: pbBuffer=0x1104e2d0) returned 1
	[0232.628] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bf302 | out: pbBuffer=0x110bf302) returned 1
	[0232.628] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bf3b1 | out: pbBuffer=0x110bf3b1) returned 1
	[0232.628] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e300 | out: pbBuffer=0x1104e300) returned 1
	[0232.629] GetFileType (hFile=0x204) returned 0x1
	[0232.629] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.630] WriteFile (in: hFile=0x204, lpBuffer=0x11192000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11192000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6ccc, lpOverlapped=0x112f5e08) returned 1
	[0232.630] GetFileType (hFile=0x204) returned 0x1
	[0232.630] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.631] GetFileType (hFile=0x204) returned 0x1
	[0232.631] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.631] WriteFile (in: hFile=0x204, lpBuffer=0x11297880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11297880*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0232.632] GetFileType (hFile=0x204) returned 0x1
	[0232.632] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.632] CloseHandle (hObject=0x204) returned 1
	[0232.644] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.tl30z")) returned 0x20
	[0232.645] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0232.663] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.671] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0232.760] SetEvent (hEvent=0x1f0) returned 1
	[0232.760] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 0x20
	[0232.760] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", dwFileAttributes=0x20) returned 1
	[0232.760] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.tl30z"), dwFlags=0x1) returned 1
	[0233.266] SetEvent (hEvent=0x150) returned 1
	[0233.266] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0233.322] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11559e08 | out: lpMode=0x11559e08) returned 0
	[0233.322] ReadFile (in: hFile=0x204, lpBuffer=0x11276000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11559e18, lpOverlapped=0x0 | out: lpBuffer=0x11276000*, lpNumberOfBytesRead=0x11559e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0233.412] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0233.412] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1132ca02 | out: pbBuffer=0x1132ca02) returned 1
	[0233.412] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132cac0 | out: pbBuffer=0x1132cac0) returned 1
	[0233.412] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132cae7 | out: pbBuffer=0x1132cae7) returned 1
	[0233.412] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0233.413] GetFileType (hFile=0x204) returned 0x1
	[0233.413] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0233.413] WriteFile (in: hFile=0x204, lpBuffer=0x111b0000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x111b0000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0233.414] GetFileType (hFile=0x204) returned 0x1
	[0233.414] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0233.414] GetFileType (hFile=0x204) returned 0x1
	[0233.414] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0233.414] WriteFile (in: hFile=0x204, lpBuffer=0x11064a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11064a80*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0233.415] GetFileType (hFile=0x204) returned 0x1
	[0233.415] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0233.415] CloseHandle (hObject=0x204) returned 1
	[0233.576] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.tl30z")) returned 0x20
	[0233.576] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0233.705] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0233.940] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0234.133] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0234.168] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0234.670] SetEvent (hEvent=0x23c) returned 1
	[0234.670] GetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 0x20
	[0234.670] SetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx", dwFileAttributes=0x20) returned 1
	[0234.671] MoveFileExW (lpExistingFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), lpNewFileName="C:\\Logs\\Setup.evtx.tl30z" (normalized: "c:\\logs\\setup.evtx.tl30z"), dwFlags=0x1) returned 1
	[0235.454] CreateFileW (lpFileName="C:\\Logs\\Setup.evtx.tl30z" (normalized: "c:\\logs\\setup.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0235.468] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11557e08 | out: lpMode=0x11557e08) returned 0
	[0235.468] ReadFile (in: hFile=0x1d0, lpBuffer=0x112f6000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11557e18, lpOverlapped=0x0 | out: lpBuffer=0x112f6000*, lpNumberOfBytesRead=0x11557e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0235.485] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364110 | out: pbBuffer=0x11364110) returned 1
	[0235.485] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11172802 | out: pbBuffer=0x11172802) returned 1
	[0235.485] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364140 | out: pbBuffer=0x11364140) returned 1
	[0235.486] GetFileType (hFile=0x1d0) returned 0x1
	[0235.486] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0235.487] WriteFile (in: hFile=0x1d0, lpBuffer=0x1138a000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1138a000*, lpNumberOfBytesWritten=0x1102ddfc*=0x6ccc, lpOverlapped=0x1102de08) returned 1
	[0235.487] GetFileType (hFile=0x1d0) returned 0x1
	[0235.487] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0235.487] GetFileType (hFile=0x1d0) returned 0x1
	[0235.488] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0235.488] WriteFile (in: hFile=0x1d0, lpBuffer=0x11164a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11164a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0235.488] GetFileType (hFile=0x1d0) returned 0x1
	[0235.488] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0235.488] CloseHandle (hObject=0x1d0) returned 1
	[0235.544] GetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx.tl30z" (normalized: "c:\\logs\\setup.evtx.tl30z")) returned 0x20
	[0235.582] SetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0235.680] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 0x20
	[0236.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", dwFileAttributes=0x20) returned 1
	[0236.006] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.tl30z"), dwFlags=0x1) returned 1
	[0236.008] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0236.008] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11372e08 | out: lpMode=0x11372e08) returned 0
	[0236.008] ReadFile (in: hFile=0x250, lpBuffer=0x113f8000, nNumberOfBytesToRead=0xcac, lpNumberOfBytesRead=0x11372e18, lpOverlapped=0x0 | out: lpBuffer=0x113f8000*, lpNumberOfBytesRead=0x11372e18*=0xcac, lpOverlapped=0x0) returned 1
	[0236.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0236.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11410802 | out: pbBuffer=0x11410802) returned 1
	[0236.014] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0236.015] GetFileType (hFile=0x250) returned 0x1
	[0236.015] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1140bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.015] WriteFile (in: hFile=0x250, lpBuffer=0x110c4000*, nNumberOfBytesToWrite=0xcac, lpNumberOfBytesWritten=0x1140bdfc, lpOverlapped=0x1140be08 | out: lpBuffer=0x110c4000*, lpNumberOfBytesWritten=0x1140bdfc*=0xcac, lpOverlapped=0x1140be08) returned 1
	[0236.015] GetFileType (hFile=0x250) returned 0x1
	[0236.015] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xcac, lpNewFilePointer=0x0, dwMoveMethod=0x1140bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.015] GetFileType (hFile=0x250) returned 0x1
	[0236.016] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1140bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.016] WriteFile (in: hFile=0x250, lpBuffer=0x110a0a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1140bdfc, lpOverlapped=0x1140be08 | out: lpBuffer=0x110a0a80*, lpNumberOfBytesWritten=0x1140bdfc*=0x22a, lpOverlapped=0x1140be08) returned 1
	[0236.016] GetFileType (hFile=0x250) returned 0x1
	[0236.016] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xcac, lpNewFilePointer=0x0, dwMoveMethod=0x1140bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.016] CloseHandle (hObject=0x250) returned 1
	[0236.018] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.tl30z")) returned 0x20
	[0236.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.tl30z", dwFileAttributes=0x21) returned 1
	[0236.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 0x20
	[0236.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", dwFileAttributes=0x20) returned 1
	[0236.020] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.tl30z"), dwFlags=0x1) returned 1
	[0236.020] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0236.021] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0236.021] ReadFile (in: hFile=0x250, lpBuffer=0x1132e150, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1132e150*, lpNumberOfBytesRead=0x11316e18*=0x28, lpOverlapped=0x0) returned 1
	[0236.025] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0236.025] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332388 | out: pbBuffer=0x11332388) returned 1
	[0236.025] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11411202 | out: pbBuffer=0x11411202) returned 1
	[0236.026] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0236.026] GetFileType (hFile=0x250) returned 0x1
	[0236.026] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1140bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.026] WriteFile (in: hFile=0x250, lpBuffer=0x11417200*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x1140bdfc, lpOverlapped=0x1140be08 | out: lpBuffer=0x11417200*, lpNumberOfBytesWritten=0x1140bdfc*=0x28, lpOverlapped=0x1140be08) returned 1
	[0236.026] GetFileType (hFile=0x250) returned 0x1
	[0236.026] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x1140bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.027] GetFileType (hFile=0x250) returned 0x1
	[0236.027] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1140bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.027] WriteFile (in: hFile=0x250, lpBuffer=0x110a1880*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x1140bdfc, lpOverlapped=0x1140be08 | out: lpBuffer=0x110a1880*, lpNumberOfBytesWritten=0x1140bdfc*=0x21e, lpOverlapped=0x1140be08) returned 1
	[0236.027] GetFileType (hFile=0x250) returned 0x1
	[0236.027] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x1140bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.027] CloseHandle (hObject=0x250) returned 1
	[0236.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.tl30z")) returned 0x20
	[0236.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.tl30z", dwFileAttributes=0x21) returned 1
	[0236.030] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.111] SetEvent (hEvent=0x264) returned 1
	[0236.111] SetEvent (hEvent=0x1f0) returned 1
	[0236.111] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.125] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.147] SetEvent (hEvent=0x264) returned 1
	[0236.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl")) returned 0x20
	[0236.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl", dwFileAttributes=0x20) returned 1
	[0236.148] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl.tl30z"), dwFlags=0x1) returned 1
	[0236.412] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0236.419] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0236.419] ReadFile (in: hFile=0x1d0, lpBuffer=0x113aa000, nNumberOfBytesToRead=0xdb99, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x113aa000*, lpNumberOfBytesRead=0x1131ce18*=0xdb99, lpOverlapped=0x0) returned 1
	[0236.442] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0236.442] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e4802 | out: pbBuffer=0x113e4802) returned 1
	[0236.442] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e170 | out: pbBuffer=0x1142e170) returned 1
	[0236.445] GetFileType (hFile=0x1d0) returned 0x1
	[0236.445] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.445] WriteFile (in: hFile=0x1d0, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0xdb99, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x1102bdfc*=0xdb99, lpOverlapped=0x1102be08) returned 1
	[0236.446] GetFileType (hFile=0x1d0) returned 0x1
	[0236.446] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xdb99, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.446] GetFileType (hFile=0x1d0) returned 0x1
	[0236.446] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.447] WriteFile (in: hFile=0x1d0, lpBuffer=0x11461180*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11461180*, lpNumberOfBytesWritten=0x1102bdfc*=0x239, lpOverlapped=0x1102be08) returned 1
	[0236.448] GetFileType (hFile=0x1d0) returned 0x1
	[0236.448] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xdb99, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.448] CloseHandle (hObject=0x1d0) returned 1
	[0236.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl.tl30z")) returned 0x20
	[0236.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl.tl30z", dwFileAttributes=0x21) returned 1
	[0236.460] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.485] SetEvent (hEvent=0x264) returned 1
	[0236.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 0x20
	[0236.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", dwFileAttributes=0x20) returned 1
	[0236.487] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.tl30z"), dwFlags=0x1) returned 1
	[0236.612] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0236.626] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0236.626] ReadFile (in: hFile=0x250, lpBuffer=0x111b9200, nNumberOfBytesToRead=0x58f, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x111b9200*, lpNumberOfBytesRead=0x1131ce18*=0x58f, lpOverlapped=0x0) returned 1
	[0236.644] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e320 | out: pbBuffer=0x1142e320) returned 1
	[0236.644] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e5502 | out: pbBuffer=0x113e5502) returned 1
	[0236.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e55a3 | out: pbBuffer=0x113e55a3) returned 1
	[0236.645] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e350 | out: pbBuffer=0x1142e350) returned 1
	[0236.645] GetFileType (hFile=0x250) returned 0x1
	[0236.645] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.646] WriteFile (in: hFile=0x250, lpBuffer=0x11321000*, nNumberOfBytesToWrite=0x58f, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11321000*, lpNumberOfBytesWritten=0x1102bdfc*=0x58f, lpOverlapped=0x1102be08) returned 1
	[0236.646] GetFileType (hFile=0x250) returned 0x1
	[0236.646] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x58f, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.646] GetFileType (hFile=0x250) returned 0x1
	[0236.646] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.646] WriteFile (in: hFile=0x250, lpBuffer=0x11328000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11328000*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0236.647] GetFileType (hFile=0x250) returned 0x1
	[0236.647] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x58f, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0236.647] CloseHandle (hObject=0x250) returned 1
	[0236.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.tl30z")) returned 0x20
	[0236.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.tl30z", dwFileAttributes=0x21) returned 1
	[0236.649] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0236.720] SetEvent (hEvent=0x264) returned 1
	[0236.720] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.012] SetEvent (hEvent=0x264) returned 1
	[0237.012] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.091] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0237.836] SetEvent (hEvent=0x284) returned 1
	[0237.836] WriteFile (in: hFile=0x1cc, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1bf4, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x112f1bf4*=0x292, lpOverlapped=0x0) returned 1
	[0237.843] CloseHandle (hObject=0x1cc) returned 1
	[0237.950] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0238.124] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0241.065] SetEvent (hEvent=0x23c) returned 1
	[0241.065] SetEvent (hEvent=0x12c) returned 1
	[0241.066] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0242.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0x20
	[0242.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", dwFileAttributes=0x20) returned 1
	[0242.205] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.tl30z"), dwFlags=0x1) returned 1
	[0244.638] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0244.715] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x113b1e08 | out: lpMode=0x113b1e08) returned 0
	[0244.715] ReadFile (in: hFile=0x200, lpBuffer=0x1131e000, nNumberOfBytesToRead=0xc459, lpNumberOfBytesRead=0x113b1e18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x113b1e18*=0xc459, lpOverlapped=0x0) returned 1
	[0244.725] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0244.725] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1132e002 | out: pbBuffer=0x1132e002) returned 1
	[0244.726] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132e07c | out: pbBuffer=0x1132e07c) returned 1
	[0244.726] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132e0cb | out: pbBuffer=0x1132e0cb) returned 1
	[0244.726] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6440 | out: pbBuffer=0x113e6440) returned 1
	[0244.728] GetFileType (hFile=0x200) returned 0x1
	[0244.728] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0244.728] WriteFile (in: hFile=0x200, lpBuffer=0x112bc000*, nNumberOfBytesToWrite=0xc459, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112bc000*, lpNumberOfBytesWritten=0x1102ddfc*=0xc459, lpOverlapped=0x1102de08) returned 1
	[0244.728] GetFileType (hFile=0x200) returned 0x1
	[0244.729] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0xc459, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0244.729] GetFileType (hFile=0x200) returned 0x1
	[0244.729] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0244.729] WriteFile (in: hFile=0x200, lpBuffer=0x1141b180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1141b180*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0244.734] GetFileType (hFile=0x200) returned 0x1
	[0244.734] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0xc459, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0244.734] CloseHandle (hObject=0x200) returned 1
	[0244.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.tl30z")) returned 0x20
	[0244.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0244.797] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.160] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.169] SetEvent (hEvent=0x1e0) returned 1
	[0300.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf")) returned 0x220
	[0300.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF", dwFileAttributes=0x220) returned 1
	[0300.170] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.214] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x28c
	[0300.221] GetConsoleMode (in: hConsoleHandle=0x28c, lpMode=0x11447e08 | out: lpMode=0x11447e08) returned 0
	[0300.221] ReadFile (in: hFile=0x28c, lpBuffer=0x111fa000, nNumberOfBytesToRead=0x59a0, lpNumberOfBytesRead=0x11447e18, lpOverlapped=0x0 | out: lpBuffer=0x111fa000*, lpNumberOfBytesRead=0x11447e18*=0x59a0, lpOverlapped=0x0) returned 1
	[0300.544] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.560] SetEvent (hEvent=0x234) returned 1
	[0300.561] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf")) returned 0x220
	[0300.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF", dwFileAttributes=0x220) returned 1
	[0300.611] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x294
	[0300.678] GetConsoleMode (in: hConsoleHandle=0x294, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0300.678] ReadFile (in: hFile=0x294, lpBuffer=0x11267500, nNumberOfBytesToRead=0x92e, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11267500*, lpNumberOfBytesRead=0x1128be18*=0x92e, lpOverlapped=0x0) returned 1
	[0301.010] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.094] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0301.094] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332658 | out: pbBuffer=0x11332658) returned 1
	[0301.094] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11281e02 | out: pbBuffer=0x11281e02) returned 1
	[0301.094] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11281e4a | out: pbBuffer=0x11281e4a) returned 1
	[0301.095] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0301.095] GetFileType (hFile=0x294) returned 0x1
	[0301.095] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.095] WriteFile (in: hFile=0x294, lpBuffer=0x110fb000*, nNumberOfBytesToWrite=0x92e, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x110fb000*, lpNumberOfBytesWritten=0x112bddfc*=0x92e, lpOverlapped=0x112bde08) returned 1
	[0301.118] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.135] GetFileType (hFile=0x294) returned 0x1
	[0301.135] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x92e, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.135] GetFileType (hFile=0x294) returned 0x1
	[0301.135] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.135] WriteFile (in: hFile=0x294, lpBuffer=0x11142e00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112bddfc, lpOverlapped=0x112bde08 | out: lpBuffer=0x11142e00*, lpNumberOfBytesWritten=0x112bddfc*=0x22a, lpOverlapped=0x112bde08) returned 1
	[0301.144] GetFileType (hFile=0x294) returned 0x1
	[0301.144] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x92e, lpNewFilePointer=0x0, dwMoveMethod=0x112bdde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.144] CloseHandle (hObject=0x294) returned 1
	[0301.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf.tl30z")) returned 0x220
	[0301.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.186] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.593] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf")) returned 0x220
	[0308.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF", dwFileAttributes=0x220) returned 1
	[0308.597] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0308.652] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0308.652] ReadFile (in: hFile=0x1d0, lpBuffer=0x112ca000, nNumberOfBytesToRead=0xa34, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x112ca000*, lpNumberOfBytesRead=0x11286e18*=0xa34, lpOverlapped=0x0) returned 1
	[0308.841] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0308.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11466802 | out: pbBuffer=0x11466802) returned 1
	[0308.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11466869 | out: pbBuffer=0x11466869) returned 1
	[0308.842] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0308.842] GetFileType (hFile=0x1d0) returned 0x1
	[0308.842] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.842] WriteFile (in: hFile=0x1d0, lpBuffer=0x111e2000*, nNumberOfBytesToWrite=0xa34, lpNumberOfBytesWritten=0x1145ddfc, lpOverlapped=0x1145de08 | out: lpBuffer=0x111e2000*, lpNumberOfBytesWritten=0x1145ddfc*=0xa34, lpOverlapped=0x1145de08) returned 1
	[0308.843] GetFileType (hFile=0x1d0) returned 0x1
	[0308.843] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xa34, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.843] GetFileType (hFile=0x1d0) returned 0x1
	[0308.843] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.843] WriteFile (in: hFile=0x1d0, lpBuffer=0x111cca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1145ddfc, lpOverlapped=0x1145de08 | out: lpBuffer=0x111cca80*, lpNumberOfBytesWritten=0x1145ddfc*=0x227, lpOverlapped=0x1145de08) returned 1
	[0308.843] GetFileType (hFile=0x1d0) returned 0x1
	[0308.843] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0xa34, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.843] CloseHandle (hObject=0x1d0) returned 1
	[0308.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf.tl30z")) returned 0x220
	[0308.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf74e1ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf74e1ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1511)) returned 1
	[0308.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid")) returned 0x220
	[0308.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID", dwFileAttributes=0x220) returned 1
	[0308.845] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0308.847] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0308.847] ReadFile (in: hFile=0x1d0, lpBuffer=0x111e8000, nNumberOfBytesToRead=0x1a6c, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x111e8000*, lpNumberOfBytesRead=0x11286e18*=0x1a6c, lpOverlapped=0x0) returned 1
	[0308.874] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.918] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f0f0 | out: pbBuffer=0x1140f0f0) returned 1
	[0308.918] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0e8 | out: pbBuffer=0x1140f0e8) returned 1
	[0308.918] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c10f02 | out: pbBuffer=0x11c10f02) returned 1
	[0308.918] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c10fe6 | out: pbBuffer=0x11c10fe6) returned 1
	[0308.919] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f120 | out: pbBuffer=0x1140f120) returned 1
	[0308.919] GetFileType (hFile=0x1d0) returned 0x1
	[0308.919] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.919] WriteFile (in: hFile=0x1d0, lpBuffer=0x11174000*, nNumberOfBytesToWrite=0x1a6c, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x11174000*, lpNumberOfBytesWritten=0x1145bdfc*=0x1a6c, lpOverlapped=0x1145be08) returned 1
	[0308.920] GetFileType (hFile=0x1d0) returned 0x1
	[0308.920] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x1a6c, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.920] GetFileType (hFile=0x1d0) returned 0x1
	[0308.920] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.920] WriteFile (in: hFile=0x1d0, lpBuffer=0x11176a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1145bdfc, lpOverlapped=0x1145be08 | out: lpBuffer=0x11176a80*, lpNumberOfBytesWritten=0x1145bdfc*=0x22d, lpOverlapped=0x1145be08) returned 1
	[0308.920] GetFileType (hFile=0x1d0) returned 0x1
	[0308.920] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x1a6c, lpNewFilePointer=0x0, dwMoveMethod=0x1145bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.920] CloseHandle (hObject=0x1d0) returned 1
	[0308.921] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid.tl30z")) returned 0x220
	[0308.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0308.921] SetEvent (hEvent=0x210) returned 1
	[0308.921] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.750] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.831] SetEvent (hEvent=0x210) returned 1
	[0313.831] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.658] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.683] SetEvent (hEvent=0x26c) returned 1
	[0317.683] SetEvent (hEvent=0x174) returned 1
	[0317.683] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x1) returned 0x102
	[0317.691] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.691] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x1) returned 0x102
	[0317.697] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.697] SetEvent (hEvent=0x27c) returned 1
	[0317.697] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x1) returned 0x0
	[0317.701] SetEvent (hEvent=0x160) returned 1
	[0317.701] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x1) returned 0x102
	[0317.712] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf.tl30z")) returned 0x220
	[0317.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.735] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0317.735] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110ba802 | out: pbBuffer=0x110ba802) returned 1
	[0317.737] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0317.738] GetFileType (hFile=0x298) returned 0x1
	[0317.738] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.738] WriteFile (in: hFile=0x298, lpBuffer=0x111ca000*, nNumberOfBytesToWrite=0xcdc, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111ca000*, lpNumberOfBytesWritten=0x1133bdfc*=0xcdc, lpOverlapped=0x1133be08) returned 1
	[0317.738] GetFileType (hFile=0x298) returned 0x1
	[0317.738] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0xcdc, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.738] GetFileType (hFile=0x298) returned 0x1
	[0317.738] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.739] WriteFile (in: hFile=0x298, lpBuffer=0x1122ca80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1122ca80*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0317.739] GetFileType (hFile=0x298) returned 0x1
	[0317.739] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0xcdc, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.739] CloseHandle (hObject=0x298) returned 1
	[0317.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf.tl30z")) returned 0x220
	[0317.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254
	[0317.770] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x1133de08 | out: lpMode=0x1133de08) returned 0
	[0317.770] ReadFile (in: hFile=0x254, lpBuffer=0x113dc000, nNumberOfBytesToRead=0x138c, lpNumberOfBytesRead=0x1133de18, lpOverlapped=0x0 | out: lpBuffer=0x113dc000*, lpNumberOfBytesRead=0x1133de18*=0x138c, lpOverlapped=0x0) returned 1
	[0317.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0317.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332388 | out: pbBuffer=0x11332388) returned 1
	[0317.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110bb202 | out: pbBuffer=0x110bb202) returned 1
	[0317.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110bb237 | out: pbBuffer=0x110bb237) returned 1
	[0317.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0317.834] GetFileType (hFile=0x254) returned 0x1
	[0317.834] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.834] WriteFile (in: hFile=0x254, lpBuffer=0x112b4000*, nNumberOfBytesToWrite=0x138c, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112b4000*, lpNumberOfBytesWritten=0x1133ddfc*=0x138c, lpOverlapped=0x1133de08) returned 1
	[0317.834] GetFileType (hFile=0x254) returned 0x1
	[0317.834] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x138c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.834] GetFileType (hFile=0x254) returned 0x1
	[0317.835] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.835] WriteFile (in: hFile=0x254, lpBuffer=0x1122d880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1122d880*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0317.835] GetFileType (hFile=0x254) returned 0x1
	[0317.835] SetFilePointerEx (in: hFile=0x254, liDistanceToMove=0x138c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0317.835] CloseHandle (hObject=0x254) returned 1
	[0317.861] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf.tl30z")) returned 0x220
	[0317.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.882] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.888] SetEvent (hEvent=0x12c) returned 1
	[0317.888] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.531] SetEvent (hEvent=0x160) returned 1
	[0318.531] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.540] SetEvent (hEvent=0x160) returned 1
	[0318.540] SwitchToThread () returned 1
	[0318.544] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.579] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.614] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.647] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.705] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf")) returned 0x220
	[0318.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF", dwFileAttributes=0x220) returned 1
	[0318.719] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0318.821] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0318.821] ReadFile (in: hFile=0x298, lpBuffer=0x11148000, nNumberOfBytesToRead=0x6b7c, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11148000*, lpNumberOfBytesRead=0x11425e18*=0x6b7c, lpOverlapped=0x0) returned 1
	[0318.826] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0318.827] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332518 | out: pbBuffer=0x11332518) returned 1
	[0318.827] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1132bc02 | out: pbBuffer=0x1132bc02) returned 1
	[0318.827] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332550 | out: pbBuffer=0x11332550) returned 1
	[0318.829] GetFileType (hFile=0x298) returned 0x1
	[0318.829] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.829] WriteFile (in: hFile=0x298, lpBuffer=0x110f0000*, nNumberOfBytesToWrite=0x6b7c, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x110f0000*, lpNumberOfBytesWritten=0x1136fdfc*=0x6b7c, lpOverlapped=0x1136fe08) returned 1
	[0318.830] GetFileType (hFile=0x298) returned 0x1
	[0318.830] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x6b7c, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.830] GetFileType (hFile=0x298) returned 0x1
	[0318.830] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.830] WriteFile (in: hFile=0x298, lpBuffer=0x11094700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1136fdfc, lpOverlapped=0x1136fe08 | out: lpBuffer=0x11094700*, lpNumberOfBytesWritten=0x1136fdfc*=0x236, lpOverlapped=0x1136fe08) returned 1
	[0318.836] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.838] GetFileType (hFile=0x298) returned 0x1
	[0318.838] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x6b7c, lpNewFilePointer=0x0, dwMoveMethod=0x1136fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.838] CloseHandle (hObject=0x298) returned 1
	[0318.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf.tl30z")) returned 0x220
	[0318.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.850] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.859] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.874] SetEvent (hEvent=0x1e8) returned 1
	[0318.877] SetEvent (hEvent=0x134) returned 1
	[0318.877] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x1) returned 0x102
	[0318.883] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.883] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x1) returned 0x102
	[0318.888] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.888] SetEvent (hEvent=0x27c) returned 1
	[0318.888] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x1) returned 0x102
	[0318.892] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.892] SetEvent (hEvent=0x2a8) returned 1
	[0318.892] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.089] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.124] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.125] SetEvent (hEvent=0x164) returned 1
	[0319.126] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf")) returned 0x220
	[0319.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF", dwFileAttributes=0x220) returned 1
	[0319.156] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0319.244] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0319.244] ReadFile (in: hFile=0x1cc, lpBuffer=0x11456000, nNumberOfBytesToRead=0xb6c, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x11456000*, lpNumberOfBytesRead=0x1131be18*=0xb6c, lpOverlapped=0x0) returned 1
	[0319.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0319.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1139d302 | out: pbBuffer=0x1139d302) returned 1
	[0319.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139d34b | out: pbBuffer=0x1139d34b) returned 1
	[0319.250] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139d3b8 | out: pbBuffer=0x1139d3b8) returned 1
	[0319.251] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0319.251] GetFileType (hFile=0x1cc) returned 0x1
	[0319.251] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.251] WriteFile (in: hFile=0x1cc, lpBuffer=0x1146e000*, nNumberOfBytesToWrite=0xb6c, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1146e000*, lpNumberOfBytesWritten=0x11031dfc*=0xb6c, lpOverlapped=0x11031e08) returned 1
	[0319.252] GetFileType (hFile=0x1cc) returned 0x1
	[0319.252] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xb6c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.252] GetFileType (hFile=0x1cc) returned 0x1
	[0319.252] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.252] WriteFile (in: hFile=0x1cc, lpBuffer=0x113db880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113db880*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0319.253] GetFileType (hFile=0x1cc) returned 0x1
	[0319.253] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xb6c, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.253] CloseHandle (hObject=0x1cc) returned 1
	[0319.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf.tl30z")) returned 0x220
	[0319.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.257] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.260] SetEvent (hEvent=0x1e8) returned 1
	[0319.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf")) returned 0x220
	[0319.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF", dwFileAttributes=0x220) returned 1
	[0319.261] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0319.692] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0319.692] ReadFile (in: hFile=0x204, lpBuffer=0x111dc000, nNumberOfBytesToRead=0x1e58, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x111dc000*, lpNumberOfBytesRead=0x1131be18*=0x1e58, lpOverlapped=0x0) returned 1
	[0319.698] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332970 | out: pbBuffer=0x11332970) returned 1
	[0319.698] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332968 | out: pbBuffer=0x11332968) returned 1
	[0319.698] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11443e02 | out: pbBuffer=0x11443e02) returned 1
	[0319.698] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11443e91 | out: pbBuffer=0x11443e91) returned 1
	[0319.699] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113329a0 | out: pbBuffer=0x113329a0) returned 1
	[0319.699] GetFileType (hFile=0x204) returned 0x1
	[0319.699] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.699] WriteFile (in: hFile=0x204, lpBuffer=0x11298000*, nNumberOfBytesToWrite=0x1e58, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11298000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1e58, lpOverlapped=0x1133be08) returned 1
	[0319.699] GetFileType (hFile=0x204) returned 0x1
	[0319.699] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1e58, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.700] GetFileType (hFile=0x204) returned 0x1
	[0319.700] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.700] WriteFile (in: hFile=0x204, lpBuffer=0x1130b500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1130b500*, lpNumberOfBytesWritten=0x1133bdfc*=0x22d, lpOverlapped=0x1133be08) returned 1
	[0319.700] GetFileType (hFile=0x204) returned 0x1
	[0319.700] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1e58, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.701] CloseHandle (hObject=0x204) returned 1
	[0319.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf.tl30z")) returned 0x220
	[0319.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.713] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.715] SetEvent (hEvent=0x284) returned 1
	[0319.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf")) returned 0x220
	[0319.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF", dwFileAttributes=0x220) returned 1
	[0319.716] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0319.791] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131be08 | out: lpMode=0x1131be08) returned 0
	[0319.791] ReadFile (in: hFile=0x1cc, lpBuffer=0x1122a000, nNumberOfBytesToRead=0x9c80, lpNumberOfBytesRead=0x1131be18, lpOverlapped=0x0 | out: lpBuffer=0x1122a000*, lpNumberOfBytesRead=0x1131be18*=0x9c80, lpOverlapped=0x0) returned 1
	[0319.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f980 | out: pbBuffer=0x1140f980) returned 1
	[0319.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11238702 | out: pbBuffer=0x11238702) returned 1
	[0319.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112387ba | out: pbBuffer=0x112387ba) returned 1
	[0319.807] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112387bb | out: pbBuffer=0x112387bb) returned 1
	[0319.808] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f9b0 | out: pbBuffer=0x1140f9b0) returned 1
	[0319.809] GetFileType (hFile=0x1cc) returned 0x1
	[0319.809] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.809] WriteFile (in: hFile=0x1cc, lpBuffer=0x11112000*, nNumberOfBytesToWrite=0x9c80, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11112000*, lpNumberOfBytesWritten=0x1133ddfc*=0x9c80, lpOverlapped=0x1133de08) returned 1
	[0319.810] GetFileType (hFile=0x1cc) returned 0x1
	[0319.810] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x9c80, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.810] GetFileType (hFile=0x1cc) returned 0x1
	[0319.810] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.810] WriteFile (in: hFile=0x1cc, lpBuffer=0x11122000*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11122000*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0319.810] GetFileType (hFile=0x1cc) returned 0x1
	[0319.810] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x9c80, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.811] CloseHandle (hObject=0x1cc) returned 1
	[0319.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf.tl30z")) returned 0x220
	[0319.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.818] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.825] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.830] SetEvent (hEvent=0x164) returned 1
	[0319.831] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x1) returned 0x0
	[0319.839] SetEvent (hEvent=0x164) returned 1
	[0319.839] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0x1) returned 0x102
	[0319.843] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.843] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.226] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.228] SetEvent (hEvent=0x164) returned 1
	[0320.228] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.232] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.237] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.253] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.271] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.286] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.312] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.329] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.352] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.371] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00935_.wmf")) returned 0x220
	[0320.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00935_.WMF", dwFileAttributes=0x220) returned 1
	[0320.380] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00935_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00935_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00935_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00935_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00935_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0320.470] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0320.470] ReadFile (in: hFile=0x1d8, lpBuffer=0x11094000, nNumberOfBytesToRead=0x2944, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11094000*, lpNumberOfBytesRead=0x11287e18*=0x2944, lpOverlapped=0x0) returned 1
	[0320.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0320.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b2802 | out: pbBuffer=0x110b2802) returned 1
	[0320.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b2836 | out: pbBuffer=0x110b2836) returned 1
	[0320.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0320.477] GetFileType (hFile=0x1d8) returned 0x1
	[0320.477] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.477] WriteFile (in: hFile=0x1d8, lpBuffer=0x112bc000*, nNumberOfBytesToWrite=0x2944, lpNumberOfBytesWritten=0x110a9dfc, lpOverlapped=0x110a9e08 | out: lpBuffer=0x112bc000*, lpNumberOfBytesWritten=0x110a9dfc*=0x2944, lpOverlapped=0x110a9e08) returned 1
	[0320.478] GetFileType (hFile=0x1d8) returned 0x1
	[0320.478] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2944, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.478] GetFileType (hFile=0x1d8) returned 0x1
	[0320.478] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.478] WriteFile (in: hFile=0x1d8, lpBuffer=0x1128ea80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x110a9dfc, lpOverlapped=0x110a9e08 | out: lpBuffer=0x1128ea80*, lpNumberOfBytesWritten=0x110a9dfc*=0x227, lpOverlapped=0x110a9e08) returned 1
	[0320.478] GetFileType (hFile=0x1d8) returned 0x1
	[0320.479] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x2944, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.479] CloseHandle (hObject=0x1d8) returned 1
	[0320.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00935_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00935_.wmf.tl30z")) returned 0x220
	[0320.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00935_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.484] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.488] SetEvent (hEvent=0x284) returned 1
	[0320.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01044_.wmf")) returned 0x220
	[0320.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01044_.WMF", dwFileAttributes=0x220) returned 1
	[0320.489] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01044_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01044_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01044_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01044_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01044_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.617] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0320.617] ReadFile (in: hFile=0x224, lpBuffer=0x112d4000, nNumberOfBytesToRead=0xae1a, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11287e18*=0xae1a, lpOverlapped=0x0) returned 1
	[0320.624] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0320.624] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ca802 | out: pbBuffer=0x112ca802) returned 1
	[0320.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0320.626] GetFileType (hFile=0x224) returned 0x1
	[0320.626] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.627] WriteFile (in: hFile=0x224, lpBuffer=0x1114e000*, nNumberOfBytesToWrite=0xae1a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1114e000*, lpNumberOfBytesWritten=0x1133fdfc*=0xae1a, lpOverlapped=0x1133fe08) returned 1
	[0320.627] GetFileType (hFile=0x224) returned 0x1
	[0320.627] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xae1a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.628] GetFileType (hFile=0x224) returned 0x1
	[0320.628] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.628] WriteFile (in: hFile=0x224, lpBuffer=0x112e6a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112e6a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0320.628] GetFileType (hFile=0x224) returned 0x1
	[0320.629] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xae1a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.629] CloseHandle (hObject=0x224) returned 1
	[0320.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01044_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01044_.wmf.tl30z")) returned 0x220
	[0320.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01044_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.633] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.638] SetEvent (hEvent=0x284) returned 1
	[0320.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01563_.wmf")) returned 0x220
	[0320.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01563_.WMF", dwFileAttributes=0x220) returned 1
	[0320.638] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01563_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01563_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01563_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01563_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01563_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0320.880] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0320.880] ReadFile (in: hFile=0x1c8, lpBuffer=0x1120c000, nNumberOfBytesToRead=0x75ca, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1120c000*, lpNumberOfBytesRead=0x11287e18*=0x75ca, lpOverlapped=0x0) returned 1
	[0320.885] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3e0 | out: pbBuffer=0x1140f3e0) returned 1
	[0320.885] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3d8 | out: pbBuffer=0x1140f3d8) returned 1
	[0320.885] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b3d02 | out: pbBuffer=0x110b3d02) returned 1
	[0320.885] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b3d17 | out: pbBuffer=0x110b3d17) returned 1
	[0320.885] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110b3d81 | out: pbBuffer=0x110b3d81) returned 1
	[0320.885] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0320.886] GetFileType (hFile=0x1c8) returned 0x1
	[0320.886] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.886] WriteFile (in: hFile=0x1c8, lpBuffer=0x111d4000*, nNumberOfBytesToWrite=0x75ca, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111d4000*, lpNumberOfBytesWritten=0x1133bdfc*=0x75ca, lpOverlapped=0x1133be08) returned 1
	[0320.887] GetFileType (hFile=0x1c8) returned 0x1
	[0320.887] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x75ca, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.887] GetFileType (hFile=0x1c8) returned 0x1
	[0320.888] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.888] WriteFile (in: hFile=0x1c8, lpBuffer=0x1120ae00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1120ae00*, lpNumberOfBytesWritten=0x1133bdfc*=0x233, lpOverlapped=0x1133be08) returned 1
	[0320.888] GetFileType (hFile=0x1c8) returned 0x1
	[0320.888] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x75ca, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.888] CloseHandle (hObject=0x1c8) returned 1
	[0320.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01563_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01563_.wmf.tl30z")) returned 0x220
	[0320.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01563_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.891] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.894] SetEvent (hEvent=0x1e8) returned 1
	[0320.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01777_.wmf")) returned 0x220
	[0320.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01777_.WMF", dwFileAttributes=0x220) returned 1
	[0320.895] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01777_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01777_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01777_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01777_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01777_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0320.995] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0320.995] ReadFile (in: hFile=0x204, lpBuffer=0x11358000, nNumberOfBytesToRead=0x2566, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11358000*, lpNumberOfBytesRead=0x11287e18*=0x2566, lpOverlapped=0x0) returned 1
	[0321.032] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0321.032] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0321.032] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111b8802 | out: pbBuffer=0x111b8802) returned 1
	[0321.032] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111b8866 | out: pbBuffer=0x111b8866) returned 1
	[0321.033] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0321.034] GetFileType (hFile=0x204) returned 0x1
	[0321.034] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.034] WriteFile (in: hFile=0x204, lpBuffer=0x1137c000*, nNumberOfBytesToWrite=0x2566, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1137c000*, lpNumberOfBytesWritten=0x1133ddfc*=0x2566, lpOverlapped=0x1133de08) returned 1
	[0321.034] GetFileType (hFile=0x204) returned 0x1
	[0321.035] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x2566, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.035] GetFileType (hFile=0x204) returned 0x1
	[0321.035] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.035] WriteFile (in: hFile=0x204, lpBuffer=0x11194e00*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11194e00*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0321.035] GetFileType (hFile=0x204) returned 0x1
	[0321.035] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x2566, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.035] CloseHandle (hObject=0x204) returned 1
	[0321.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01777_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01777_.wmf.tl30z")) returned 0x220
	[0321.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01777_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.040] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.081] SetEvent (hEvent=0x27c) returned 1
	[0321.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02009_.wmf")) returned 0x220
	[0321.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02009_.WMF", dwFileAttributes=0x220) returned 1
	[0321.082] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02009_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02009_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02009_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02009_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02009_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0321.172] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0321.172] ReadFile (in: hFile=0x204, lpBuffer=0x1119e000, nNumberOfBytesToRead=0x1d14, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1119e000*, lpNumberOfBytesRead=0x11287e18*=0x1d14, lpOverlapped=0x0) returned 1
	[0321.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332370 | out: pbBuffer=0x11332370) returned 1
	[0321.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332368 | out: pbBuffer=0x11332368) returned 1
	[0321.177] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11469202 | out: pbBuffer=0x11469202) returned 1
	[0321.178] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114692a6 | out: pbBuffer=0x114692a6) returned 1
	[0321.178] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0321.178] GetFileType (hFile=0x204) returned 0x1
	[0321.179] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.179] WriteFile (in: hFile=0x204, lpBuffer=0x110de000*, nNumberOfBytesToWrite=0x1d14, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110de000*, lpNumberOfBytesWritten=0x11031dfc*=0x1d14, lpOverlapped=0x11031e08) returned 1
	[0321.179] GetFileType (hFile=0x204) returned 0x1
	[0321.179] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1d14, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.179] GetFileType (hFile=0x204) returned 0x1
	[0321.179] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.180] WriteFile (in: hFile=0x204, lpBuffer=0x112e1880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112e1880*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0321.180] GetFileType (hFile=0x204) returned 0x1
	[0321.180] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1d14, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.180] CloseHandle (hObject=0x204) returned 1
	[0321.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02009_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02009_.wmf.tl30z")) returned 0x220
	[0321.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02009_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.184] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.187] SetEvent (hEvent=0x27c) returned 1
	[0321.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02045_.wmf")) returned 0x220
	[0321.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02045_.WMF", dwFileAttributes=0x220) returned 1
	[0321.188] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02045_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02045_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02045_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02045_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02045_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0321.278] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0321.278] ReadFile (in: hFile=0x204, lpBuffer=0x11096000, nNumberOfBytesToRead=0x266c, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11096000*, lpNumberOfBytesRead=0x11287e18*=0x266c, lpOverlapped=0x0) returned 1
	[0321.284] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6b0 | out: pbBuffer=0x1140f6b0) returned 1
	[0321.284] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f6a8 | out: pbBuffer=0x1140f6a8) returned 1
	[0321.284] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11455202 | out: pbBuffer=0x11455202) returned 1
	[0321.284] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6e0 | out: pbBuffer=0x1140f6e0) returned 1
	[0321.285] GetFileType (hFile=0x204) returned 0x1
	[0321.285] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.285] WriteFile (in: hFile=0x204, lpBuffer=0x110b8000*, nNumberOfBytesToWrite=0x266c, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110b8000*, lpNumberOfBytesWritten=0x1133ddfc*=0x266c, lpOverlapped=0x1133de08) returned 1
	[0321.285] GetFileType (hFile=0x204) returned 0x1
	[0321.286] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x266c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.286] GetFileType (hFile=0x204) returned 0x1
	[0321.286] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.286] WriteFile (in: hFile=0x204, lpBuffer=0x110aa700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110aa700*, lpNumberOfBytesWritten=0x1133ddfc*=0x22d, lpOverlapped=0x1133de08) returned 1
	[0321.286] GetFileType (hFile=0x204) returned 0x1
	[0321.286] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x266c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.287] CloseHandle (hObject=0x204) returned 1
	[0321.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02045_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02045_.wmf.tl30z")) returned 0x220
	[0321.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02045_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.301] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.306] SetEvent (hEvent=0x27c) returned 1
	[0321.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02067_.wmf")) returned 0x220
	[0321.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02067_.WMF", dwFileAttributes=0x220) returned 1
	[0321.307] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02067_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02067_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02067_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02067_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02067_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0321.387] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0321.388] ReadFile (in: hFile=0x1cc, lpBuffer=0x11118000, nNumberOfBytesToRead=0x382a, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11118000*, lpNumberOfBytesRead=0x11287e18*=0x382a, lpOverlapped=0x0) returned 1
	[0321.393] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e61d0 | out: pbBuffer=0x113e61d0) returned 1
	[0321.393] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11237b02 | out: pbBuffer=0x11237b02) returned 1
	[0321.393] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11237b0b | out: pbBuffer=0x11237b0b) returned 1
	[0321.393] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11237b5a | out: pbBuffer=0x11237b5a) returned 1
	[0321.394] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6200 | out: pbBuffer=0x113e6200) returned 1
	[0321.394] GetFileType (hFile=0x1cc) returned 0x1
	[0321.394] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.395] WriteFile (in: hFile=0x1cc, lpBuffer=0x1113a000*, nNumberOfBytesToWrite=0x382a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1113a000*, lpNumberOfBytesWritten=0x1102bdfc*=0x382a, lpOverlapped=0x1102be08) returned 1
	[0321.395] GetFileType (hFile=0x1cc) returned 0x1
	[0321.395] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x382a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.395] GetFileType (hFile=0x1cc) returned 0x1
	[0321.396] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.396] WriteFile (in: hFile=0x1cc, lpBuffer=0x110fb180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110fb180*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0321.396] GetFileType (hFile=0x1cc) returned 0x1
	[0321.396] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x382a, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.396] CloseHandle (hObject=0x1cc) returned 1
	[0321.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02067_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02067_.wmf.tl30z")) returned 0x220
	[0321.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02067_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.399] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.402] SetEvent (hEvent=0x27c) returned 1
	[0321.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02252_.wmf")) returned 0x220
	[0321.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02252_.WMF", dwFileAttributes=0x220) returned 1
	[0321.403] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02252_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02252_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02252_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02252_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02252_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.533] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0321.534] ReadFile (in: hFile=0x1c8, lpBuffer=0x11412000, nNumberOfBytesToRead=0xe88, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11412000*, lpNumberOfBytesRead=0x11287e18*=0xe88, lpOverlapped=0x0) returned 1
	[0321.539] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6540 | out: pbBuffer=0x113e6540) returned 1
	[0321.539] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6538 | out: pbBuffer=0x113e6538) returned 1
	[0321.539] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11355202 | out: pbBuffer=0x11355202) returned 1
	[0321.539] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0321.539] GetFileType (hFile=0x1c8) returned 0x1
	[0321.540] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.540] WriteFile (in: hFile=0x1c8, lpBuffer=0x11374000*, nNumberOfBytesToWrite=0xe88, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11374000*, lpNumberOfBytesWritten=0x1133bdfc*=0xe88, lpOverlapped=0x1133be08) returned 1
	[0321.540] GetFileType (hFile=0x1c8) returned 0x1
	[0321.540] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xe88, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.540] GetFileType (hFile=0x1c8) returned 0x1
	[0321.540] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.541] WriteFile (in: hFile=0x1c8, lpBuffer=0x1136a380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1136a380*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0321.541] GetFileType (hFile=0x1c8) returned 0x1
	[0321.541] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xe88, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.541] CloseHandle (hObject=0x1c8) returned 1
	[0321.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02252_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02252_.wmf.tl30z")) returned 0x220
	[0321.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02252_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.544] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.548] SetEvent (hEvent=0x27c) returned 1
	[0321.548] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02268_.wmf")) returned 0x220
	[0321.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02268_.WMF", dwFileAttributes=0x220) returned 1
	[0321.549] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02268_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02268_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02268_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02268_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02268_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.632] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0321.632] ReadFile (in: hFile=0x1c8, lpBuffer=0x113fa300, nNumberOfBytesToRead=0x61c, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x113fa300*, lpNumberOfBytesRead=0x11287e18*=0x61c, lpOverlapped=0x0) returned 1
	[0321.637] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0321.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4a8 | out: pbBuffer=0x1104e4a8) returned 1
	[0321.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c5c02 | out: pbBuffer=0x110c5c02) returned 1
	[0321.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c5cbd | out: pbBuffer=0x110c5cbd) returned 1
	[0321.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c5ce8 | out: pbBuffer=0x110c5ce8) returned 1
	[0321.638] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0321.639] GetFileType (hFile=0x1c8) returned 0x1
	[0321.639] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.639] WriteFile (in: hFile=0x1c8, lpBuffer=0x11465000*, nNumberOfBytesToWrite=0x61c, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11465000*, lpNumberOfBytesWritten=0x1102ddfc*=0x61c, lpOverlapped=0x1102de08) returned 1
	[0321.639] GetFileType (hFile=0x1c8) returned 0x1
	[0321.639] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x61c, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.640] GetFileType (hFile=0x1c8) returned 0x1
	[0321.640] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.640] WriteFile (in: hFile=0x1c8, lpBuffer=0x1145e700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1145e700*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0321.640] GetFileType (hFile=0x1c8) returned 0x1
	[0321.640] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x61c, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.640] CloseHandle (hObject=0x1c8) returned 1
	[0321.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02268_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02268_.wmf.tl30z")) returned 0x220
	[0321.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02268_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.644] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.648] SetEvent (hEvent=0x27c) returned 1
	[0321.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02431_.wmf")) returned 0x220
	[0321.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02431_.WMF", dwFileAttributes=0x220) returned 1
	[0321.648] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02431_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02431_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02431_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02431_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02431_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0321.731] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0321.731] ReadFile (in: hFile=0x1cc, lpBuffer=0x1129a300, nNumberOfBytesToRead=0x670, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x1129a300*, lpNumberOfBytesRead=0x11287e18*=0x670, lpOverlapped=0x0) returned 1
	[0321.736] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0321.737] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324f8 | out: pbBuffer=0x113324f8) returned 1
	[0321.737] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113add02 | out: pbBuffer=0x113add02) returned 1
	[0321.737] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113add1e | out: pbBuffer=0x113add1e) returned 1
	[0321.737] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113adde1 | out: pbBuffer=0x113adde1) returned 1
	[0321.737] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113adde8 | out: pbBuffer=0x113adde8) returned 1
	[0321.737] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0321.738] GetFileType (hFile=0x1cc) returned 0x1
	[0321.738] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.738] WriteFile (in: hFile=0x1cc, lpBuffer=0x111d7000*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111d7000*, lpNumberOfBytesWritten=0x11031dfc*=0x670, lpOverlapped=0x11031e08) returned 1
	[0321.738] GetFileType (hFile=0x1cc) returned 0x1
	[0321.738] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x670, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.738] GetFileType (hFile=0x1cc) returned 0x1
	[0321.739] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.739] WriteFile (in: hFile=0x1cc, lpBuffer=0x111d2700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111d2700*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0321.739] GetFileType (hFile=0x1cc) returned 0x1
	[0321.739] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x670, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.739] CloseHandle (hObject=0x1cc) returned 1
	[0321.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02431_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02431_.wmf.tl30z")) returned 0x220
	[0321.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02431_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.743] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.746] SetEvent (hEvent=0x27c) returned 1
	[0321.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02578_.wmf")) returned 0x220
	[0321.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02578_.WMF", dwFileAttributes=0x220) returned 1
	[0321.747] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02578_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02578_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02578_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02578_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02578_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) 

Thread:
	id = 45
	os_tid = 0xfd8

	[0213.154] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3323ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3323ff30*=0x268) returned 1
	[0213.154] VirtualQuery (in: lpAddress=0x3323ff40, lpBuffer=0x3323ff40, dwLength=0x1c | out: lpBuffer=0x3323ff40*(BaseAddress=0x3323f000, AllocationBase=0x33140000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0213.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x112cc700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26c
	[0213.156] CloseHandle (hObject=0x26c) returned 1
	[0213.156] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 0x20
	[0213.156] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0213.157] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.tl30z"), dwFlags=0x1) returned 1
	[0222.636] SetEvent (hEvent=0x150) returned 1
	[0222.636] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x264
	[0222.686] GetConsoleMode (in: hConsoleHandle=0x264, lpMode=0x115dbe08 | out: lpMode=0x115dbe08) returned 0
	[0222.686] ReadFile (in: hFile=0x264, lpBuffer=0x110d8000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x115dbe18, lpOverlapped=0x0 | out: lpBuffer=0x110d8000*, lpNumberOfBytesRead=0x115dbe18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0222.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364430 | out: pbBuffer=0x11364430) returned 1
	[0222.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1106be02 | out: pbBuffer=0x1106be02) returned 1
	[0222.718] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364460 | out: pbBuffer=0x11364460) returned 1
	[0222.718] GetFileType (hFile=0x264) returned 0x1
	[0222.719] SetFilePointerEx (in: hFile=0x264, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.719] WriteFile (in: hFile=0x264, lpBuffer=0x113f0000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x115dbdfc, lpOverlapped=0x115dbe08 | out: lpBuffer=0x113f0000*, lpNumberOfBytesWritten=0x115dbdfc*=0x6ccc, lpOverlapped=0x115dbe08) returned 1
	[0222.719] GetFileType (hFile=0x264) returned 0x1
	[0222.720] SetFilePointerEx (in: hFile=0x264, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.720] GetFileType (hFile=0x264) returned 0x1
	[0222.720] SetFilePointerEx (in: hFile=0x264, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.720] WriteFile (in: hFile=0x264, lpBuffer=0x110ac700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x115dbdfc, lpOverlapped=0x115dbe08 | out: lpBuffer=0x110ac700*, lpNumberOfBytesWritten=0x115dbdfc*=0x230, lpOverlapped=0x115dbe08) returned 1
	[0222.721] GetFileType (hFile=0x264) returned 0x1
	[0222.721] SetFilePointerEx (in: hFile=0x264, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0222.721] CloseHandle (hObject=0x264) returned 1
	[0222.821] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.tl30z")) returned 0x20
	[0222.821] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0222.880] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x264
	[0222.880] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0223.379] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0223.423] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0223.604] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0223.799] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0224.152] SetEvent (hEvent=0x23c) returned 1
	[0224.153] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 0x20
	[0224.154] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0224.154] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0225.609] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0225.613] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0225.613] ReadFile (in: hFile=0x1d0, lpBuffer=0x1155c000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1155c000*, lpNumberOfBytesRead=0x11428e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0225.621] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0225.622] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113640f8 | out: pbBuffer=0x113640f8) returned 1
	[0225.622] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107a902 | out: pbBuffer=0x1107a902) returned 1
	[0225.622] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1107a961 | out: pbBuffer=0x1107a961) returned 1
	[0225.622] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0225.623] GetFileType (hFile=0x1d0) returned 0x1
	[0225.623] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0225.623] WriteFile (in: hFile=0x1d0, lpBuffer=0x111e4000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x111e4000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6ccc, lpOverlapped=0x112f5e08) returned 1
	[0225.624] GetFileType (hFile=0x1d0) returned 0x1
	[0225.624] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0225.624] GetFileType (hFile=0x1d0) returned 0x1
	[0225.624] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0225.624] WriteFile (in: hFile=0x1d0, lpBuffer=0x116b8e00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x116b8e00*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0225.625] GetFileType (hFile=0x1d0) returned 0x1
	[0225.625] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0225.625] CloseHandle (hObject=0x1d0) returned 1
	[0225.633] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.tl30z")) returned 0x20
	[0225.633] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0225.637] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0225.645] SetEvent (hEvent=0x12c) returned 1
	[0225.645] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 0x20
	[0225.646] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0225.646] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0226.551] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0226.559] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0226.559] ReadFile (in: hFile=0x1cc, lpBuffer=0x11234000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11234000*, lpNumberOfBytesRead=0x11428e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0226.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0226.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113324f8 | out: pbBuffer=0x113324f8) returned 1
	[0226.639] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11252102 | out: pbBuffer=0x11252102) returned 1
	[0226.640] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112521a1 | out: pbBuffer=0x112521a1) returned 1
	[0226.640] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0226.641] GetFileType (hFile=0x1cc) returned 0x1
	[0226.642] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.642] WriteFile (in: hFile=0x1cc, lpBuffer=0x11272000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11272000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0226.643] GetFileType (hFile=0x1cc) returned 0x1
	[0226.643] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.643] GetFileType (hFile=0x1cc) returned 0x1
	[0226.643] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.643] WriteFile (in: hFile=0x1cc, lpBuffer=0x11250700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11250700*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0226.644] GetFileType (hFile=0x1cc) returned 0x1
	[0226.644] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0226.644] CloseHandle (hObject=0x1cc) returned 1
	[0226.671] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.tl30z")) returned 0x20
	[0226.672] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0226.690] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0226.715] SetEvent (hEvent=0x25c) returned 1
	[0226.715] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 0x20
	[0226.715] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0226.716] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0227.637] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0227.646] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0227.647] SetEvent (hEvent=0x23c) returned 1
	[0227.647] ReadFile (in: hFile=0x1cc, lpBuffer=0x11460000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11460000*, lpNumberOfBytesRead=0x11428e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0227.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327e0 | out: pbBuffer=0x113327e0) returned 1
	[0227.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11253502 | out: pbBuffer=0x11253502) returned 1
	[0227.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332810 | out: pbBuffer=0x11332810) returned 1
	[0227.659] GetFileType (hFile=0x1cc) returned 0x1
	[0227.659] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.660] WriteFile (in: hFile=0x1cc, lpBuffer=0x114b6000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x114b6000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0227.660] GetFileType (hFile=0x1cc) returned 0x1
	[0227.660] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.660] GetFileType (hFile=0x1cc) returned 0x1
	[0227.661] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.661] WriteFile (in: hFile=0x1cc, lpBuffer=0x11486380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11486380*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0227.661] GetFileType (hFile=0x1cc) returned 0x1
	[0227.661] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0227.661] CloseHandle (hObject=0x1cc) returned 1
	[0227.672] SwitchToThread () returned 1
	[0227.675] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.tl30z")) returned 0x20
	[0227.675] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0227.683] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0227.689] SetEvent (hEvent=0x26c) returned 1
	[0227.689] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 0x20
	[0227.689] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0227.690] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0228.143] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0228.162] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0228.162] ReadFile (in: hFile=0x1b4, lpBuffer=0x113e8000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x113e8000*, lpNumberOfBytesRead=0x11319e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0228.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0228.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e108 | out: pbBuffer=0x1142e108) returned 1
	[0228.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111da802 | out: pbBuffer=0x111da802) returned 1
	[0228.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111da8e5 | out: pbBuffer=0x111da8e5) returned 1
	[0228.176] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0228.176] GetFileType (hFile=0x1b4) returned 0x1
	[0228.177] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0228.177] WriteFile (in: hFile=0x1b4, lpBuffer=0x11434000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x113e3dfc, lpOverlapped=0x113e3e08 | out: lpBuffer=0x11434000*, lpNumberOfBytesWritten=0x113e3dfc*=0x6ccc, lpOverlapped=0x113e3e08) returned 1
	[0228.178] GetFileType (hFile=0x1b4) returned 0x1
	[0228.178] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x113e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0228.178] GetFileType (hFile=0x1b4) returned 0x1
	[0228.178] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0228.179] WriteFile (in: hFile=0x1b4, lpBuffer=0x111f2a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x113e3dfc, lpOverlapped=0x113e3e08 | out: lpBuffer=0x111f2a80*, lpNumberOfBytesWritten=0x113e3dfc*=0x230, lpOverlapped=0x113e3e08) returned 1
	[0228.179] GetFileType (hFile=0x1b4) returned 0x1
	[0228.179] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x113e3de0 | out: lpNewFilePointer=0x0) returned 1
	[0228.179] CloseHandle (hObject=0x1b4) returned 1
	[0228.200] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.tl30z")) returned 0x20
	[0228.201] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0228.205] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0228.214] SetEvent (hEvent=0x26c) returned 1
	[0228.214] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 0x20
	[0228.214] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0228.215] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0229.191] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0229.204] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1155be08 | out: lpMode=0x1155be08) returned 0
	[0229.204] ReadFile (in: hFile=0x1b4, lpBuffer=0x114cd000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1155be18, lpOverlapped=0x0 | out: lpBuffer=0x114cd000*, lpNumberOfBytesRead=0x1155be18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0229.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332950 | out: pbBuffer=0x11332950) returned 1
	[0229.214] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332948 | out: pbBuffer=0x11332948) returned 1
	[0229.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11093d02 | out: pbBuffer=0x11093d02) returned 1
	[0229.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11093d22 | out: pbBuffer=0x11093d22) returned 1
	[0229.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11093d8c | out: pbBuffer=0x11093d8c) returned 1
	[0229.215] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11093dcd | out: pbBuffer=0x11093dcd) returned 1
	[0229.216] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332980 | out: pbBuffer=0x11332980) returned 1
	[0229.216] SetEvent (hEvent=0x12c) returned 1
	[0229.217] GetFileType (hFile=0x1b4) returned 0x1
	[0229.217] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.217] WriteFile (in: hFile=0x1b4, lpBuffer=0x11170000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11170000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0229.218] GetFileType (hFile=0x1b4) returned 0x1
	[0229.218] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.218] GetFileType (hFile=0x1b4) returned 0x1
	[0229.218] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.219] WriteFile (in: hFile=0x1b4, lpBuffer=0x11213180*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11213180*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0229.219] GetFileType (hFile=0x1b4) returned 0x1
	[0229.219] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0229.219] CloseHandle (hObject=0x1b4) returned 1
	[0229.253] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.tl30z")) returned 0x20
	[0229.253] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0229.260] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0229.281] SetEvent (hEvent=0x12c) returned 1
	[0229.281] SetEvent (hEvent=0x23c) returned 1
	[0229.282] SwitchToThread () returned 1
	[0229.319] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0229.373] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0229.412] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0229.586] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0229.600] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0229.615] SetEvent (hEvent=0x26c) returned 1
	[0229.615] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 0x20
	[0229.616] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx", dwFileAttributes=0x20) returned 1
	[0229.616] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.tl30z"), dwFlags=0x1) returned 1
	[0230.472] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0230.485] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11556e08 | out: lpMode=0x11556e08) returned 0
	[0230.485] ReadFile (in: hFile=0x1c8, lpBuffer=0x113b1000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11556e18, lpOverlapped=0x0 | out: lpBuffer=0x113b1000*, lpNumberOfBytesRead=0x11556e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0230.493] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e290 | out: pbBuffer=0x1142e290) returned 1
	[0230.493] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e288 | out: pbBuffer=0x1142e288) returned 1
	[0230.493] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11067702 | out: pbBuffer=0x11067702) returned 1
	[0230.494] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110677d8 | out: pbBuffer=0x110677d8) returned 1
	[0230.494] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2c0 | out: pbBuffer=0x1142e2c0) returned 1
	[0230.495] GetFileType (hFile=0x1c8) returned 0x1
	[0230.495] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.495] WriteFile (in: hFile=0x1c8, lpBuffer=0x11118000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x11118000*, lpNumberOfBytesWritten=0x112efdfc*=0x6ccc, lpOverlapped=0x112efe08) returned 1
	[0230.496] GetFileType (hFile=0x1c8) returned 0x1
	[0230.496] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.496] GetFileType (hFile=0x1c8) returned 0x1
	[0230.496] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.497] WriteFile (in: hFile=0x1c8, lpBuffer=0x113a1880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x113a1880*, lpNumberOfBytesWritten=0x112efdfc*=0x230, lpOverlapped=0x112efe08) returned 1
	[0230.539] GetFileType (hFile=0x1c8) returned 0x1
	[0230.540] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0230.540] CloseHandle (hObject=0x1c8) returned 1
	[0230.559] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.tl30z")) returned 0x20
	[0230.559] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0230.568] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0230.586] SetEvent (hEvent=0x1e8) returned 1
	[0230.586] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 0x20
	[0230.586] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0230.587] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0231.115] SetEvent (hEvent=0x150) returned 1
	[0231.115] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0231.122] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11556e08 | out: lpMode=0x11556e08) returned 0
	[0231.122] ReadFile (in: hFile=0x1c8, lpBuffer=0x1135b000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11556e18, lpOverlapped=0x0 | out: lpBuffer=0x1135b000*, lpNumberOfBytesRead=0x11556e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0231.137] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0231.137] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0231.137] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1132d202 | out: pbBuffer=0x1132d202) returned 1
	[0231.137] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132d2e0 | out: pbBuffer=0x1132d2e0) returned 1
	[0231.138] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0231.139] GetFileType (hFile=0x1c8) returned 0x1
	[0231.139] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.139] WriteFile (in: hFile=0x1c8, lpBuffer=0x11402000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11402000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6ccc, lpOverlapped=0x112f5e08) returned 1
	[0231.141] GetFileType (hFile=0x1c8) returned 0x1
	[0231.141] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.141] GetFileType (hFile=0x1c8) returned 0x1
	[0231.142] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.142] WriteFile (in: hFile=0x1c8, lpBuffer=0x11437880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11437880*, lpNumberOfBytesWritten=0x112f5dfc*=0x230, lpOverlapped=0x112f5e08) returned 1
	[0231.142] GetFileType (hFile=0x1c8) returned 0x1
	[0231.143] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0231.143] CloseHandle (hObject=0x1c8) returned 1
	[0231.164] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.tl30z")) returned 0x20
	[0231.165] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0231.178] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0231.266] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0231.310] SetEvent (hEvent=0x12c) returned 1
	[0231.310] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 0x20
	[0231.311] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0231.311] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0232.317] SetEvent (hEvent=0x150) returned 1
	[0232.317] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0232.321] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11555e08 | out: lpMode=0x11555e08) returned 0
	[0232.322] ReadFile (in: hFile=0x1d0, lpBuffer=0x1122f000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11555e18, lpOverlapped=0x0 | out: lpBuffer=0x1122f000*, lpNumberOfBytesRead=0x11555e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0232.335] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0232.335] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11274602 | out: pbBuffer=0x11274602) returned 1
	[0232.336] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0232.337] GetFileType (hFile=0x1d0) returned 0x1
	[0232.337] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.337] WriteFile (in: hFile=0x1d0, lpBuffer=0x1110e000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x1110e000*, lpNumberOfBytesWritten=0x112f3dfc*=0x6ccc, lpOverlapped=0x112f3e08) returned 1
	[0232.338] GetFileType (hFile=0x1d0) returned 0x1
	[0232.338] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.338] GetFileType (hFile=0x1d0) returned 0x1
	[0232.338] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.338] WriteFile (in: hFile=0x1d0, lpBuffer=0x11245500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11245500*, lpNumberOfBytesWritten=0x112f3dfc*=0x230, lpOverlapped=0x112f3e08) returned 1
	[0232.339] GetFileType (hFile=0x1d0) returned 0x1
	[0232.339] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0232.340] CloseHandle (hObject=0x1d0) returned 1
	[0232.423] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.tl30z")) returned 0x20
	[0232.423] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0232.433] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0232.480] SetEvent (hEvent=0x1f0) returned 1
	[0232.481] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 0x20
	[0232.481] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0232.482] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.tl30z"), dwFlags=0x1) returned 1
	[0232.836] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0232.909] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11555e08 | out: lpMode=0x11555e08) returned 0
	[0232.909] ReadFile (in: hFile=0x1c8, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x11fd7, lpNumberOfBytesRead=0x11555e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11555e18*=0x11fd7, lpOverlapped=0x0) returned 1
	[0232.927] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0232.927] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11274902 | out: pbBuffer=0x11274902) returned 1
	[0232.927] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0232.929] GetFileType (hFile=0x1c8) returned 0x1
	[0232.929] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0232.929] WriteFile (in: hFile=0x1c8, lpBuffer=0x1143e000*, nNumberOfBytesToWrite=0x11fd7, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1143e000*, lpNumberOfBytesWritten=0x1102ddfc*=0x11fd7, lpOverlapped=0x1102de08) returned 1
	[0232.930] GetFileType (hFile=0x1c8) returned 0x1
	[0232.930] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x11fd7, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0232.931] GetFileType (hFile=0x1c8) returned 0x1
	[0232.931] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0232.931] WriteFile (in: hFile=0x1c8, lpBuffer=0x1149ae00*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1149ae00*, lpNumberOfBytesWritten=0x1102ddfc*=0x245, lpOverlapped=0x1102de08) returned 1
	[0232.940] GetFileType (hFile=0x1c8) returned 0x1
	[0232.940] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x11fd7, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0232.940] CloseHandle (hObject=0x1c8) returned 1
	[0233.036] SetEvent (hEvent=0x150) returned 1
	[0233.036] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.tl30z")) returned 0x20
	[0233.036] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0233.047] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0233.094] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0233.130] SetEvent (hEvent=0x12c) returned 1
	[0233.130] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 0x20
	[0233.130] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", dwFileAttributes=0x20) returned 1
	[0233.131] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.tl30z"), dwFlags=0x1) returned 1
	[0234.614] SetEvent (hEvent=0x150) returned 1
	[0234.614] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0234.642] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11554e08 | out: lpMode=0x11554e08) returned 0
	[0234.642] ReadFile (in: hFile=0x1c8, lpBuffer=0x11104000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11554e18, lpOverlapped=0x0 | out: lpBuffer=0x11104000*, lpNumberOfBytesRead=0x11554e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0234.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e3f0 | out: pbBuffer=0x1142e3f0) returned 1
	[0234.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113b5c02 | out: pbBuffer=0x113b5c02) returned 1
	[0234.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113b5c0a | out: pbBuffer=0x113b5c0a) returned 1
	[0234.657] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e420 | out: pbBuffer=0x1142e420) returned 1
	[0234.658] GetFileType (hFile=0x1c8) returned 0x1
	[0234.658] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0234.658] WriteFile (in: hFile=0x1c8, lpBuffer=0x11140000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11140000*, lpNumberOfBytesWritten=0x11031dfc*=0x6ccc, lpOverlapped=0x11031e08) returned 1
	[0234.659] GetFileType (hFile=0x1c8) returned 0x1
	[0234.659] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0234.659] GetFileType (hFile=0x1c8) returned 0x1
	[0234.660] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0234.660] WriteFile (in: hFile=0x1c8, lpBuffer=0x11120700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11120700*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0234.660] GetFileType (hFile=0x1c8) returned 0x1
	[0234.660] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0234.661] CloseHandle (hObject=0x1c8) returned 1
	[0234.669] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.tl30z")) returned 0x20
	[0234.670] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0234.707] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0234.714] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0234.790] SetEvent (hEvent=0x23c) returned 1
	[0234.790] GetFileAttributesW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 0x20
	[0234.790] SetFileAttributesW (lpFileName="C:\\Logs\\System.evtx", dwFileAttributes=0x20) returned 1
	[0234.791] MoveFileExW (lpExistingFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), lpNewFileName="C:\\Logs\\System.evtx.tl30z" (normalized: "c:\\logs\\system.evtx.tl30z"), dwFlags=0x1) returned 1
	[0235.680] CreateFileW (lpFileName="C:\\Logs\\System.evtx.tl30z" (normalized: "c:\\logs\\system.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0235.686] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11372e08 | out: lpMode=0x11372e08) returned 0
	[0235.687] ReadFile (in: hFile=0x1c8, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x131c2, lpNumberOfBytesRead=0x11372e18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x11372e18*=0x131c2, lpOverlapped=0x0) returned 1
	[0235.778] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e170 | out: pbBuffer=0x1104e170) returned 1
	[0235.779] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e168 | out: pbBuffer=0x1104e168) returned 1
	[0235.779] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136a802 | out: pbBuffer=0x1136a802) returned 1
	[0235.779] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136a85b | out: pbBuffer=0x1136a85b) returned 1
	[0235.779] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136a8d7 | out: pbBuffer=0x1136a8d7) returned 1
	[0235.780] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e1a0 | out: pbBuffer=0x1104e1a0) returned 1
	[0235.784] GetFileType (hFile=0x1c8) returned 0x1
	[0235.784] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.784] WriteFile (in: hFile=0x1c8, lpBuffer=0x1143e000*, nNumberOfBytesToWrite=0x131c2, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1143e000*, lpNumberOfBytesWritten=0x11031dfc*=0x131c2, lpOverlapped=0x11031e08) returned 1
	[0235.785] GetFileType (hFile=0x1c8) returned 0x1
	[0235.785] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x131c2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.786] GetFileType (hFile=0x1c8) returned 0x1
	[0235.786] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.786] WriteFile (in: hFile=0x1c8, lpBuffer=0x114a5500*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x114a5500*, lpNumberOfBytesWritten=0x11031dfc*=0x236, lpOverlapped=0x11031e08) returned 1
	[0235.795] GetFileType (hFile=0x1c8) returned 0x1
	[0235.795] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x131c2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.795] CloseHandle (hObject=0x1c8) returned 1
	[0235.910] GetFileAttributesW (lpFileName="C:\\Logs\\System.evtx.tl30z" (normalized: "c:\\logs\\system.evtx.tl30z")) returned 0x20
	[0235.910] SetFileAttributesW (lpFileName="C:\\Logs\\System.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0235.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 0x20
	[0235.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", dwFileAttributes=0x20) returned 1
	[0235.912] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.tl30z"), dwFlags=0x1) returned 1
	[0235.913] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0235.913] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11558e08 | out: lpMode=0x11558e08) returned 0
	[0235.913] ReadFile (in: hFile=0x1c8, lpBuffer=0x113ca000, nNumberOfBytesToRead=0x3bb, lpNumberOfBytesRead=0x11558e18, lpOverlapped=0x0 | out: lpBuffer=0x113ca000*, lpNumberOfBytesRead=0x11558e18*=0x3bb, lpOverlapped=0x0) returned 1
	[0235.970] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104ea40 | out: pbBuffer=0x1104ea40) returned 1
	[0235.970] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104ea38 | out: pbBuffer=0x1104ea38) returned 1
	[0235.970] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136b602 | out: pbBuffer=0x1136b602) returned 1
	[0235.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136b668 | out: pbBuffer=0x1136b668) returned 1
	[0235.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136b67b | out: pbBuffer=0x1136b67b) returned 1
	[0235.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1136b6b5 | out: pbBuffer=0x1136b6b5) returned 1
	[0235.971] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104ea70 | out: pbBuffer=0x1104ea70) returned 1
	[0235.972] GetFileType (hFile=0x1c8) returned 0x1
	[0235.972] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.972] WriteFile (in: hFile=0x1c8, lpBuffer=0x1123c000*, nNumberOfBytesToWrite=0x3bb, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1123c000*, lpNumberOfBytesWritten=0x11031dfc*=0x3bb, lpOverlapped=0x11031e08) returned 1
	[0235.972] GetFileType (hFile=0x1c8) returned 0x1
	[0235.973] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x3bb, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.973] GetFileType (hFile=0x1c8) returned 0x1
	[0235.973] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.973] WriteFile (in: hFile=0x1c8, lpBuffer=0x11236380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11236380*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0235.973] GetFileType (hFile=0x1c8) returned 0x1
	[0235.974] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x3bb, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0235.974] CloseHandle (hObject=0x1c8) returned 1
	[0235.975] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.tl30z")) returned 0x20
	[0235.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.tl30z", dwFileAttributes=0x21) returned 1
	[0235.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 0x20
	[0235.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x20) returned 1
	[0235.977] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.tl30z"), dwFlags=0x1) returned 1
	[0235.978] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0235.978] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0235.978] ReadFile (in: hFile=0x1c8, lpBuffer=0x11276000, nNumberOfBytesToRead=0xf9bd, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11276000*, lpNumberOfBytesRead=0x11423e18*=0xf9bd, lpOverlapped=0x0) returned 1
	[0236.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104ebe0 | out: pbBuffer=0x1104ebe0) returned 1
	[0236.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104ebd8 | out: pbBuffer=0x1104ebd8) returned 1
	[0236.041] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ac202 | out: pbBuffer=0x112ac202) returned 1
	[0236.042] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104ec10 | out: pbBuffer=0x1104ec10) returned 1
	[0236.045] GetFileType (hFile=0x1c8) returned 0x1
	[0236.046] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0236.046] WriteFile (in: hFile=0x1c8, lpBuffer=0x111a6000*, nNumberOfBytesToWrite=0xf9bd, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111a6000*, lpNumberOfBytesWritten=0x11031dfc*=0xf9bd, lpOverlapped=0x11031e08) returned 1
	[0236.047] GetFileType (hFile=0x1c8) returned 0x1
	[0236.047] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xf9bd, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0236.047] GetFileType (hFile=0x1c8) returned 0x1
	[0236.047] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0236.047] WriteFile (in: hFile=0x1c8, lpBuffer=0x11237180*, nNumberOfBytesToWrite=0x23f, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11237180*, lpNumberOfBytesWritten=0x11031dfc*=0x23f, lpOverlapped=0x11031e08) returned 1
	[0236.048] GetFileType (hFile=0x1c8) returned 0x1
	[0236.048] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xf9bd, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0236.048] CloseHandle (hObject=0x1c8) returned 1
	[0236.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.tl30z")) returned 0x20
	[0236.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.tl30z", dwFileAttributes=0x21) returned 1
	[0236.054] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0236.089] SetEvent (hEvent=0x1f0) returned 1
	[0236.089] SetEvent (hEvent=0x25c) returned 1
	[0236.089] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0x1) returned 0x102
	[0236.112] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0236.112] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0x1) returned 0x102
	[0236.115] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0236.116] SetEvent (hEvent=0x1f0) returned 1
	[0236.116] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0x1) returned 0x102
	[0236.123] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0236.123] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0236.150] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0236.310] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0236.399] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0236.489] SetEvent (hEvent=0x26c) returned 1
	[0236.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa")) returned 0x21
	[0236.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa", dwFileAttributes=0x20) returned 1
	[0236.496] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.tl30z"), dwFlags=0x1) returned 1
	[0236.636] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0236.636] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0236.637] ReadFile (in: hFile=0x1c8, lpBuffer=0x114c0000, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x114c0000*, lpNumberOfBytesRead=0x1128ae18*=0x100000, lpOverlapped=0x0) returned 1
	[0236.697] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364100 | out: pbBuffer=0x11364100) returned 1
	[0236.697] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113640f8 | out: pbBuffer=0x113640f8) returned 1
	[0236.697] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11374a02 | out: pbBuffer=0x11374a02) returned 1
	[0236.698] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11374a20 | out: pbBuffer=0x11374a20) returned 1
	[0236.698] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11364130 | out: pbBuffer=0x11364130) returned 1
	[0236.709] SetEvent (hEvent=0x25c) returned 1
	[0236.715] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0x1) returned 0x102
	[0236.722] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0236.722] SetEvent (hEvent=0x1f0) returned 1
	[0236.723] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0x1) returned 0x102
	[0236.849] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0236.861] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0x1) returned 0x102
	[0237.031] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0237.032] SetEvent (hEvent=0x150) returned 1
	[0237.032] SetEvent (hEvent=0x284) returned 1
	[0237.032] SetEvent (hEvent=0x25c) returned 1
	[0237.032] SetEvent (hEvent=0x23c) returned 1
	[0237.039] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0x1) returned 0x102
	[0237.099] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0237.100] SetEvent (hEvent=0x26c) returned 1
	[0237.100] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0x1) returned 0x102
	[0237.229] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0237.236] VirtualAlloc (lpAddress=0x119b6000, dwSize=0x200000, flAllocationType=0x1000, flProtect=0x4) returned 0x119b6000
	[0237.424] SetEvent (hEvent=0x1f0) returned 1
	[0237.425] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0237.448] GetFileType (hFile=0x1c8) returned 0x1
	[0237.448] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1128cde0 | out: lpNewFilePointer=0x0) returned 1
	[0237.452] WriteFile (in: hFile=0x1c8, lpBuffer=0x119b6000*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x1128cdfc, lpOverlapped=0x1128ce08 | out: lpBuffer=0x119b6000*, lpNumberOfBytesWritten=0x1128cdfc*=0x100000, lpOverlapped=0x1128ce08) returned 1
	[0237.462] GetFileType (hFile=0x1c8) returned 0x1
	[0237.462] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x100000, lpNewFilePointer=0x0, dwMoveMethod=0x1128cde0 | out: lpNewFilePointer=0x0) returned 1
	[0237.462] GetFileType (hFile=0x1c8) returned 0x1
	[0237.462] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1128cde0 | out: lpNewFilePointer=0x0) returned 1
	[0237.462] WriteFile (in: hFile=0x1c8, lpBuffer=0x1136e000*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0x1128cdfc, lpOverlapped=0x1128ce08 | out: lpBuffer=0x1136e000*, lpNumberOfBytesWritten=0x1128cdfc*=0x2d8, lpOverlapped=0x1128ce08) returned 1
	[0237.492] GetFileType (hFile=0x1c8) returned 0x1
	[0237.492] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x100000, lpNewFilePointer=0x0, dwMoveMethod=0x1128cde0 | out: lpNewFilePointer=0x0) returned 1
	[0237.492] CloseHandle (hObject=0x1c8) returned 1
	[0239.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.tl30z")) returned 0x20
	[0239.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.tl30z", dwFileAttributes=0x21) returned 1
	[0239.486] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0239.637] SetEvent (hEvent=0x284) returned 1
	[0239.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 0x20
	[0239.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties", dwFileAttributes=0x20) returned 1
	[0239.638] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.tl30z"), dwFlags=0x1) returned 1
	[0239.639] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0239.639] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0239.639] VirtualAlloc (lpAddress=0x11bb6000, dwSize=0x6000, flAllocationType=0x1000, flProtect=0x4) returned 0x11bb6000
	[0239.641] ReadFile (in: hFile=0x1d0, lpBuffer=0x11bb6000, nNumberOfBytesToRead=0x15ac, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x11bb6000*, lpNumberOfBytesRead=0x1128ce18*=0x15ac, lpOverlapped=0x0) returned 1
	[0239.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e270 | out: pbBuffer=0x1142e270) returned 1
	[0239.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e268 | out: pbBuffer=0x1142e268) returned 1
	[0239.684] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112eb502 | out: pbBuffer=0x112eb502) returned 1
	[0239.685] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112eb5a3 | out: pbBuffer=0x112eb5a3) returned 1
	[0239.685] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e2a0 | out: pbBuffer=0x1142e2a0) returned 1
	[0239.685] GetFileType (hFile=0x1d0) returned 0x1
	[0239.685] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0239.686] WriteFile (in: hFile=0x1d0, lpBuffer=0x110ec000*, nNumberOfBytesToWrite=0x15ac, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110ec000*, lpNumberOfBytesWritten=0x11031dfc*=0x15ac, lpOverlapped=0x11031e08) returned 1
	[0239.686] GetFileType (hFile=0x1d0) returned 0x1
	[0239.686] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x15ac, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0239.686] GetFileType (hFile=0x1d0) returned 0x1
	[0239.686] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0239.687] WriteFile (in: hFile=0x1d0, lpBuffer=0x11253880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11253880*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0239.687] GetFileType (hFile=0x1d0) returned 0x1
	[0239.687] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x15ac, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0239.687] CloseHandle (hObject=0x1d0) returned 1
	[0239.689] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.tl30z")) returned 0x20
	[0239.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0239.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 0x20
	[0239.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", dwFileAttributes=0x20) returned 1
	[0239.691] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.tl30z"), dwFlags=0x1) returned 1
	[0239.692] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0239.692] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0239.692] ReadFile (in: hFile=0x1d0, lpBuffer=0x11070600, nNumberOfBytesToRead=0x101a, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11070600*, lpNumberOfBytesRead=0x11319e18*=0x101a, lpOverlapped=0x0) returned 1
	[0239.703] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e3e0 | out: pbBuffer=0x1142e3e0) returned 1
	[0239.704] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1149a002 | out: pbBuffer=0x1149a002) returned 1
	[0239.704] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e410 | out: pbBuffer=0x1142e410) returned 1
	[0239.704] GetFileType (hFile=0x1d0) returned 0x1
	[0239.705] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0239.705] WriteFile (in: hFile=0x1d0, lpBuffer=0x114a4000*, nNumberOfBytesToWrite=0x101a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x114a4000*, lpNumberOfBytesWritten=0x11031dfc*=0x101a, lpOverlapped=0x11031e08) returned 1
	[0239.705] GetFileType (hFile=0x1d0) returned 0x1
	[0239.705] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x101a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0239.705] GetFileType (hFile=0x1d0) returned 0x1
	[0239.706] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0239.706] WriteFile (in: hFile=0x1d0, lpBuffer=0x11498700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11498700*, lpNumberOfBytesWritten=0x11031dfc*=0x224, lpOverlapped=0x11031e08) returned 1
	[0239.706] GetFileType (hFile=0x1d0) returned 0x1
	[0239.706] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x101a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0239.706] CloseHandle (hObject=0x1d0) returned 1
	[0239.708] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.tl30z")) returned 0x20
	[0239.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.tl30z", dwFileAttributes=0x21) returned 1
	[0239.709] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0239.738] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0239.758] SetEvent (hEvent=0x1e0) returned 1
	[0239.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 0x20
	[0239.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties", dwFileAttributes=0x20) returned 1
	[0239.759] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.tl30z"), dwFlags=0x1) returned 1
	[0240.609] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0240.621] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0240.621] ReadFile (in: hFile=0x1b4, lpBuffer=0x11436000, nNumberOfBytesToRead=0xd51, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11436000*, lpNumberOfBytesRead=0x11023e18*=0xd51, lpOverlapped=0x0) returned 1
	[0240.632] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e6c0 | out: pbBuffer=0x1104e6c0) returned 1
	[0240.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144e002 | out: pbBuffer=0x1144e002) returned 1
	[0240.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e6f0 | out: pbBuffer=0x1104e6f0) returned 1
	[0240.634] GetFileType (hFile=0x1b4) returned 0x1
	[0240.634] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.634] WriteFile (in: hFile=0x1b4, lpBuffer=0x11468000*, nNumberOfBytesToWrite=0xd51, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11468000*, lpNumberOfBytesWritten=0x1102bdfc*=0xd51, lpOverlapped=0x1102be08) returned 1
	[0240.634] GetFileType (hFile=0x1b4) returned 0x1
	[0240.635] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xd51, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.635] GetFileType (hFile=0x1b4) returned 0x1
	[0240.635] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.635] WriteFile (in: hFile=0x1b4, lpBuffer=0x1144c700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1144c700*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0240.635] GetFileType (hFile=0x1b4) returned 0x1
	[0240.635] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xd51, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.636] CloseHandle (hObject=0x1b4) returned 1
	[0240.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.tl30z")) returned 0x20
	[0240.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0240.647] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0240.652] SetEvent (hEvent=0x23c) returned 1
	[0240.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 0x20
	[0240.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties", dwFileAttributes=0x20) returned 1
	[0240.653] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.tl30z"), dwFlags=0x1) returned 1
	[0241.086] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0241.093] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0241.093] ReadFile (in: hFile=0x250, lpBuffer=0x112f6000, nNumberOfBytesToRead=0xd51, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x112f6000*, lpNumberOfBytesRead=0x11023e18*=0xd51, lpOverlapped=0x0) returned 1
	[0241.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e110 | out: pbBuffer=0x1142e110) returned 1
	[0241.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1142e108 | out: pbBuffer=0x1142e108) returned 1
	[0241.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ea802 | out: pbBuffer=0x112ea802) returned 1
	[0241.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ea857 | out: pbBuffer=0x112ea857) returned 1
	[0241.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ea85c | out: pbBuffer=0x112ea85c) returned 1
	[0241.098] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ea8d7 | out: pbBuffer=0x112ea8d7) returned 1
	[0241.099] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1142e140 | out: pbBuffer=0x1142e140) returned 1
	[0241.099] GetFileType (hFile=0x250) returned 0x1
	[0241.099] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.099] WriteFile (in: hFile=0x250, lpBuffer=0x11368000*, nNumberOfBytesToWrite=0xd51, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11368000*, lpNumberOfBytesWritten=0x1102bdfc*=0xd51, lpOverlapped=0x1102be08) returned 1
	[0241.100] GetFileType (hFile=0x250) returned 0x1
	[0241.100] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xd51, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.100] GetFileType (hFile=0x250) returned 0x1
	[0241.100] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.100] WriteFile (in: hFile=0x250, lpBuffer=0x11498a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11498a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0241.101] GetFileType (hFile=0x250) returned 0x1
	[0241.101] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xd51, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.101] CloseHandle (hObject=0x250) returned 1
	[0241.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.tl30z")) returned 0x20
	[0241.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0241.115] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0241.162] SetEvent (hEvent=0x1f0) returned 1
	[0241.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 0x20
	[0241.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", dwFileAttributes=0x20) returned 1
	[0241.164] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.tl30z"), dwFlags=0x1) returned 1
	[0241.853] SetEvent (hEvent=0x150) returned 1
	[0241.854] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0241.899] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0241.900] ReadFile (in: hFile=0x1b4, lpBuffer=0x113e2000, nNumberOfBytesToRead=0x3bac, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x113e2000*, lpNumberOfBytesRead=0x11023e18*=0x3bac, lpOverlapped=0x0) returned 1
	[0241.913] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3c0 | out: pbBuffer=0x1104e3c0) returned 1
	[0241.913] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e3b8 | out: pbBuffer=0x1104e3b8) returned 1
	[0241.913] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1149b302 | out: pbBuffer=0x1149b302) returned 1
	[0241.913] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e3f0 | out: pbBuffer=0x1104e3f0) returned 1
	[0241.914] GetFileType (hFile=0x1b4) returned 0x1
	[0241.914] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.914] WriteFile (in: hFile=0x1b4, lpBuffer=0x110d6000*, nNumberOfBytesToWrite=0x3bac, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x110d6000*, lpNumberOfBytesWritten=0x112f3dfc*=0x3bac, lpOverlapped=0x112f3e08) returned 1
	[0241.915] GetFileType (hFile=0x1b4) returned 0x1
	[0241.915] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3bac, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.915] GetFileType (hFile=0x1b4) returned 0x1
	[0241.915] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.915] WriteFile (in: hFile=0x1b4, lpBuffer=0x11322a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11322a80*, lpNumberOfBytesWritten=0x112f3dfc*=0x233, lpOverlapped=0x112f3e08) returned 1
	[0241.916] GetFileType (hFile=0x1b4) returned 0x1
	[0241.916] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3bac, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0241.916] CloseHandle (hObject=0x1b4) returned 1
	[0241.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.tl30z")) returned 0x20
	[0241.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.tl30z", dwFileAttributes=0x21) returned 1
	[0241.956] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0242.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0x20
	[0242.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", dwFileAttributes=0x20) returned 1
	[0242.179] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.tl30z"), dwFlags=0x1) returned 1
	[0244.161] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0244.166] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x113aae08 | out: lpMode=0x113aae08) returned 0
	[0244.166] SetEvent (hEvent=0x1f0) returned 1
	[0244.166] ReadFile (in: hFile=0x1b4, lpBuffer=0x113ba000, nNumberOfBytesToRead=0x6bb1, lpNumberOfBytesRead=0x113aae18, lpOverlapped=0x0 | out: lpBuffer=0x113ba000*, lpNumberOfBytesRead=0x113aae18*=0x6bb1, lpOverlapped=0x0) returned 1
	[0244.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e6c0 | out: pbBuffer=0x1104e6c0) returned 1
	[0244.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1133df02 | out: pbBuffer=0x1133df02) returned 1
	[0244.175] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e6f0 | out: pbBuffer=0x1104e6f0) returned 1
	[0244.176] GetFileType (hFile=0x1b4) returned 0x1
	[0244.176] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.176] WriteFile (in: hFile=0x1b4, lpBuffer=0x11096000*, nNumberOfBytesToWrite=0x6bb1, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x11096000*, lpNumberOfBytesWritten=0x112f5dfc*=0x6bb1, lpOverlapped=0x112f5e08) returned 1
	[0244.177] GetFileType (hFile=0x1b4) returned 0x1
	[0244.177] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6bb1, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.177] GetFileType (hFile=0x1b4) returned 0x1
	[0244.177] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.177] WriteFile (in: hFile=0x1b4, lpBuffer=0x110e8700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x112f5dfc, lpOverlapped=0x112f5e08 | out: lpBuffer=0x110e8700*, lpNumberOfBytesWritten=0x112f5dfc*=0x233, lpOverlapped=0x112f5e08) returned 1
	[0244.178] GetFileType (hFile=0x1b4) returned 0x1
	[0244.178] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6bb1, lpNewFilePointer=0x0, dwMoveMethod=0x112f5de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.178] CloseHandle (hObject=0x1b4) returned 1
	[0244.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.tl30z")) returned 0x20
	[0244.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0244.223] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0300.184] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0300.197] SetEvent (hEvent=0x240) returned 1
	[0300.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf")) returned 0x220
	[0300.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF", dwFileAttributes=0x220) returned 1
	[0300.197] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x294
	[0300.242] GetConsoleMode (in: hConsoleHandle=0x294, lpMode=0x111d3e08 | out: lpMode=0x111d3e08) returned 0
	[0300.242] ReadFile (in: hFile=0x294, lpBuffer=0x11200000, nNumberOfBytesToRead=0x1d3c, lpNumberOfBytesRead=0x111d3e18, lpOverlapped=0x0 | out: lpBuffer=0x11200000*, lpNumberOfBytesRead=0x111d3e18*=0x1d3c, lpOverlapped=0x0) returned 1
	[0300.543] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0300.558] SetEvent (hEvent=0x25c) returned 1
	[0300.558] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0300.617] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0301.012] SetEvent (hEvent=0x1f0) returned 1
	[0301.012] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0308.768] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) returned 0x0
	[0308.887] SetEvent (hEvent=0x240) returned 1
	[0308.887] SetEvent (hEvent=0x248) returned 1
	[0308.887] WaitForSingleObject (hHandle=0x264, dwMilliseconds=0xffffffff) 

Thread:
	id = 46
	os_tid = 0xfd4

	[0213.163] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3337ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3337ff30*=0x270) returned 1
	[0213.163] VirtualQuery (in: lpAddress=0x3337ff40, lpBuffer=0x3337ff40, dwLength=0x1c | out: lpBuffer=0x3337ff40*(BaseAddress=0x3337f000, AllocationBase=0x33280000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0213.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x11037340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x274
	[0213.164] CloseHandle (hObject=0x274) returned 1
	[0213.165] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.tl30z")) returned 0x20
	[0213.165] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0213.170] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x274
	[0213.170] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0xffffffff) returned 0x0
	[0300.274] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0xffffffff) returned 0x0
	[0300.432] SetEvent (hEvent=0x248) returned 1
	[0300.432] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0xffffffff) 

Thread:
	id = 47
	os_tid = 0xfe0

	[0213.168] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x334bff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x334bff30*=0x278) returned 1
	[0213.168] VirtualQuery (in: lpAddress=0x334bff40, lpBuffer=0x334bff40, dwLength=0x1c | out: lpBuffer=0x334bff40*(BaseAddress=0x334bf000, AllocationBase=0x333c0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0213.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44afe0, lpParameter=0x112d0380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x27c
	[0213.169] CloseHandle (hObject=0x27c) returned 1
	[0213.169] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x27c
	[0213.170] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.433] SetEvent (hEvent=0x1f0) returned 1
	[0300.433] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.447] SetEvent (hEvent=0x210) returned 1
	[0300.447] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.556] SetEvent (hEvent=0x264) returned 1
	[0300.556] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.558] SetEvent (hEvent=0x12c) returned 1
	[0300.558] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0300.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf")) returned 0x220
	[0300.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF", dwFileAttributes=0x220) returned 1
	[0300.616] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0300.673] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0300.673] ReadFile (in: hFile=0x184, lpBuffer=0x11266a80, nNumberOfBytesToRead=0x926, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x11266a80*, lpNumberOfBytesRead=0x11423e18*=0x926, lpOverlapped=0x0) returned 1
	[0301.011] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.069] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e60f0 | out: pbBuffer=0x113e60f0) returned 1
	[0301.069] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60e8 | out: pbBuffer=0x113e60e8) returned 1
	[0301.069] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1136a802 | out: pbBuffer=0x1136a802) returned 1
	[0301.070] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6120 | out: pbBuffer=0x113e6120) returned 1
	[0301.070] GetFileType (hFile=0x184) returned 0x1
	[0301.070] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.070] WriteFile (in: hFile=0x184, lpBuffer=0x11156000*, nNumberOfBytesToWrite=0x926, lpNumberOfBytesWritten=0x1135bdfc, lpOverlapped=0x1135be08 | out: lpBuffer=0x11156000*, lpNumberOfBytesWritten=0x1135bdfc*=0x926, lpOverlapped=0x1135be08) returned 1
	[0301.078] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.119] GetFileType (hFile=0x184) returned 0x1
	[0301.119] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x926, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.119] GetFileType (hFile=0x184) returned 0x1
	[0301.120] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.120] WriteFile (in: hFile=0x184, lpBuffer=0x113c2000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1135bdfc, lpOverlapped=0x1135be08 | out: lpBuffer=0x113c2000*, lpNumberOfBytesWritten=0x1135bdfc*=0x227, lpOverlapped=0x1135be08) returned 1
	[0301.134] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.142] GetFileType (hFile=0x184) returned 0x1
	[0301.142] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x926, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.142] CloseHandle (hObject=0x184) returned 1
	[0301.155] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0301.157] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf.tl30z")) returned 0x220
	[0301.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.188] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.566] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.579] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0308.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf")) returned 0x220
	[0308.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF", dwFileAttributes=0x220) returned 1
	[0308.588] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0308.634] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0308.634] ReadFile (in: hFile=0x1f4, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x88c, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11288e18*=0x88c, lpOverlapped=0x0) returned 1
	[0308.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f270 | out: pbBuffer=0x1140f270) returned 1
	[0308.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f268 | out: pbBuffer=0x1140f268) returned 1
	[0308.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11467202 | out: pbBuffer=0x11467202) returned 1
	[0308.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114672e4 | out: pbBuffer=0x114672e4) returned 1
	[0308.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2a0 | out: pbBuffer=0x1140f2a0) returned 1
	[0308.852] GetFileType (hFile=0x1f4) returned 0x1
	[0308.852] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.852] WriteFile (in: hFile=0x1f4, lpBuffer=0x111fd000*, nNumberOfBytesToWrite=0x88c, lpNumberOfBytesWritten=0x1145ddfc, lpOverlapped=0x1145de08 | out: lpBuffer=0x111fd000*, lpNumberOfBytesWritten=0x1145ddfc*=0x88c, lpOverlapped=0x1145de08) returned 1
	[0308.852] GetFileType (hFile=0x1f4) returned 0x1
	[0308.852] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x88c, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.852] GetFileType (hFile=0x1f4) returned 0x1
	[0308.852] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.853] WriteFile (in: hFile=0x1f4, lpBuffer=0x111cd880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1145ddfc, lpOverlapped=0x1145de08 | out: lpBuffer=0x111cd880*, lpNumberOfBytesWritten=0x1145ddfc*=0x224, lpOverlapped=0x1145de08) returned 1
	[0308.853] GetFileType (hFile=0x1f4) returned 0x1
	[0308.853] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x88c, lpNewFilePointer=0x0, dwMoveMethod=0x1145dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.853] CloseHandle (hObject=0x1f4) returned 1
	[0308.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf.tl30z")) returned 0x220
	[0308.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1133da18 | out: lpFileInformation=0x1133da18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x100fdad1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x100fdad1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x100fdad1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6140)) returned 1
	[0308.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid")) returned 0x220
	[0308.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID", dwFileAttributes=0x220) returned 1
	[0308.854] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0308.858] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0308.858] ReadFile (in: hFile=0x1f4, lpBuffer=0x110b3000, nNumberOfBytesToRead=0x1511, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x110b3000*, lpNumberOfBytesRead=0x11288e18*=0x1511, lpOverlapped=0x0) returned 1
	[0308.880] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.057] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x102
	[0309.061] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.061] SetEvent (hEvent=0x150) returned 1
	[0309.061] SetEvent (hEvent=0x26c) returned 1
	[0309.061] SetEvent (hEvent=0x1e8) returned 1
	[0309.061] SetEvent (hEvent=0x234) returned 1
	[0309.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332900 | out: pbBuffer=0x11332900) returned 1
	[0309.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113328f8 | out: pbBuffer=0x113328f8) returned 1
	[0309.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c45c02 | out: pbBuffer=0x11c45c02) returned 1
	[0309.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c45c2a | out: pbBuffer=0x11c45c2a) returned 1
	[0309.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c45c57 | out: pbBuffer=0x11c45c57) returned 1
	[0309.062] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c45cdc | out: pbBuffer=0x11c45cdc) returned 1
	[0309.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332930 | out: pbBuffer=0x11332930) returned 1
	[0309.063] GetFileType (hFile=0x1f4) returned 0x1
	[0309.063] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.063] WriteFile (in: hFile=0x1f4, lpBuffer=0x11186000*, nNumberOfBytesToWrite=0x1511, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11186000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1511, lpOverlapped=0x1133fe08) returned 1
	[0309.064] GetFileType (hFile=0x1f4) returned 0x1
	[0309.064] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1511, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.064] GetFileType (hFile=0x1f4) returned 0x1
	[0309.064] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.064] WriteFile (in: hFile=0x1f4, lpBuffer=0x11385880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11385880*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0309.064] GetFileType (hFile=0x1f4) returned 0x1
	[0309.064] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x1511, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.064] CloseHandle (hObject=0x1f4) returned 1
	[0309.065] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid.tl30z")) returned 0x220
	[0309.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0309.066] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x102
	[0309.075] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.075] SetEvent (hEvent=0x234) returned 1
	[0309.076] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x102
	[0309.094] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.094] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x102
	[0309.097] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.097] SetEvent (hEvent=0x150) returned 1
	[0309.097] SetEvent (hEvent=0x164) returned 1
	[0309.097] SetEvent (hEvent=0x12c) returned 1
	[0309.097] SetEvent (hEvent=0x284) returned 1
	[0309.097] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x102
	[0309.112] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f0f0 | out: pbBuffer=0x1140f0f0) returned 1
	[0309.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11304b02 | out: pbBuffer=0x11304b02) returned 1
	[0309.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f120 | out: pbBuffer=0x1140f120) returned 1
	[0309.114] GetFileType (hFile=0x1d8) returned 0x1
	[0309.114] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.115] WriteFile (in: hFile=0x1d8, lpBuffer=0x11c3a000*, nNumberOfBytesToWrite=0x215a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11c3a000*, lpNumberOfBytesWritten=0x1133fdfc*=0x215a, lpOverlapped=0x1133fe08) returned 1
	[0309.115] GetFileType (hFile=0x1d8) returned 0x1
	[0309.115] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x215a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.115] GetFileType (hFile=0x1d8) returned 0x1
	[0309.116] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.116] WriteFile (in: hFile=0x1d8, lpBuffer=0x11309180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11309180*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0309.116] GetFileType (hFile=0x1d8) returned 0x1
	[0309.116] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x215a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.117] CloseHandle (hObject=0x1d8) returned 1
	[0309.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid.tl30z")) returned 0x220
	[0309.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0309.118] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f180 | out: pbBuffer=0x1140f180) returned 1
	[0309.118] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11304e02 | out: pbBuffer=0x11304e02) returned 1
	[0309.118] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11304ea7 | out: pbBuffer=0x11304ea7) returned 1
	[0309.119] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f1a0 | out: pbBuffer=0x1140f1a0) returned 1
	[0309.119] GetFileType (hFile=0x2a0) returned 0x1
	[0309.119] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.119] WriteFile (in: hFile=0x2a0, lpBuffer=0x1112a000*, nNumberOfBytesToWrite=0x1cb3, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1112a000*, lpNumberOfBytesWritten=0x11339dfc*=0x1cb3, lpOverlapped=0x11339e08) returned 1
	[0309.120] GetFileType (hFile=0x2a0) returned 0x1
	[0309.120] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1cb3, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.120] GetFileType (hFile=0x2a0) returned 0x1
	[0309.120] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.120] WriteFile (in: hFile=0x2a0, lpBuffer=0x11309880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11309880*, lpNumberOfBytesWritten=0x11339dfc*=0x230, lpOverlapped=0x11339e08) returned 1
	[0309.121] GetFileType (hFile=0x2a0) returned 0x1
	[0309.121] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1cb3, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.121] CloseHandle (hObject=0x2a0) returned 1
	[0309.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid.tl30z")) returned 0x220
	[0309.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0309.121] SetEvent (hEvent=0x218) returned 1
	[0309.122] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf")) returned 0x220
	[0309.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF", dwFileAttributes=0x220) returned 1
	[0309.219] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0309.354] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x110aee08 | out: lpMode=0x110aee08) returned 0
	[0309.354] ReadFile (in: hFile=0x200, lpBuffer=0x11244000, nNumberOfBytesToRead=0x1ae6, lpNumberOfBytesRead=0x110aee18, lpOverlapped=0x0 | out: lpBuffer=0x11244000*, lpNumberOfBytesRead=0x110aee18*=0x1ae6, lpOverlapped=0x0) returned 1
	[0309.359] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0309.359] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c45402 | out: pbBuffer=0x11c45402) returned 1
	[0309.359] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0309.360] GetFileType (hFile=0x200) returned 0x1
	[0309.360] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.360] WriteFile (in: hFile=0x200, lpBuffer=0x113ac000*, nNumberOfBytesToWrite=0x1ae6, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113ac000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1ae6, lpOverlapped=0x1102be08) returned 1
	[0309.360] GetFileType (hFile=0x200) returned 0x1
	[0309.360] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x1ae6, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.361] GetFileType (hFile=0x200) returned 0x1
	[0309.361] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.361] WriteFile (in: hFile=0x200, lpBuffer=0x11c0fc00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11c0fc00*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0309.361] GetFileType (hFile=0x200) returned 0x1
	[0309.361] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x1ae6, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.361] CloseHandle (hObject=0x200) returned 1
	[0309.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf.tl30z")) returned 0x220
	[0309.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.366] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.369] SetEvent (hEvent=0x160) returned 1
	[0309.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf")) returned 0x220
	[0309.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF", dwFileAttributes=0x220) returned 1
	[0309.371] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0309.523] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x110aee08 | out: lpMode=0x110aee08) returned 0
	[0309.523] ReadFile (in: hFile=0x200, lpBuffer=0x113ee600, nNumberOfBytesToRead=0x108a, lpNumberOfBytesRead=0x110aee18, lpOverlapped=0x0 | out: lpBuffer=0x113ee600*, lpNumberOfBytesRead=0x110aee18*=0x108a, lpOverlapped=0x0) returned 1
	[0309.529] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f590 | out: pbBuffer=0x1140f590) returned 1
	[0309.529] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f588 | out: pbBuffer=0x1140f588) returned 1
	[0309.529] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144e802 | out: pbBuffer=0x1144e802) returned 1
	[0309.530] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5c0 | out: pbBuffer=0x1140f5c0) returned 1
	[0309.530] GetFileType (hFile=0x200) returned 0x1
	[0309.530] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.530] WriteFile (in: hFile=0x200, lpBuffer=0x11460000*, nNumberOfBytesToWrite=0x108a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11460000*, lpNumberOfBytesWritten=0x1133fdfc*=0x108a, lpOverlapped=0x1133fe08) returned 1
	[0309.531] GetFileType (hFile=0x200) returned 0x1
	[0309.531] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x108a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.531] GetFileType (hFile=0x200) returned 0x1
	[0309.531] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.531] WriteFile (in: hFile=0x200, lpBuffer=0x11111500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11111500*, lpNumberOfBytesWritten=0x1133fdfc*=0x224, lpOverlapped=0x1133fe08) returned 1
	[0309.531] GetFileType (hFile=0x200) returned 0x1
	[0309.531] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x108a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.531] CloseHandle (hObject=0x200) returned 1
	[0309.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf.tl30z")) returned 0x220
	[0309.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf")) returned 0x220
	[0309.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF", dwFileAttributes=0x220) returned 1
	[0309.535] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0309.626] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x110aee08 | out: lpMode=0x110aee08) returned 0
	[0309.626] ReadFile (in: hFile=0x200, lpBuffer=0x113c0000, nNumberOfBytesToRead=0xb1a4, lpNumberOfBytesRead=0x110aee18, lpOverlapped=0x0 | out: lpBuffer=0x113c0000*, lpNumberOfBytesRead=0x110aee18*=0xb1a4, lpOverlapped=0x0) returned 1
	[0309.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0309.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138c802 | out: pbBuffer=0x1138c802) returned 1
	[0309.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138c85c | out: pbBuffer=0x1138c85c) returned 1
	[0309.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138c88e | out: pbBuffer=0x1138c88e) returned 1
	[0309.633] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138c8ae | out: pbBuffer=0x1138c8ae) returned 1
	[0309.634] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0309.635] GetFileType (hFile=0x200) returned 0x1
	[0309.635] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.636] WriteFile (in: hFile=0x200, lpBuffer=0x110d6000*, nNumberOfBytesToWrite=0xb1a4, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110d6000*, lpNumberOfBytesWritten=0x1102ddfc*=0xb1a4, lpOverlapped=0x1102de08) returned 1
	[0309.636] GetFileType (hFile=0x200) returned 0x1
	[0309.636] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0xb1a4, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.636] GetFileType (hFile=0x200) returned 0x1
	[0309.636] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.637] WriteFile (in: hFile=0x200, lpBuffer=0x113b4a80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x113b4a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0309.637] GetFileType (hFile=0x200) returned 0x1
	[0309.637] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0xb1a4, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.637] CloseHandle (hObject=0x200) returned 1
	[0309.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf.tl30z")) returned 0x220
	[0309.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.645] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.662] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.682] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.699] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0309.723] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0310.092] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0310.560] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0310.893] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0310.911] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0310.924] SetEvent (hEvent=0x118) returned 1
	[0310.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf")) returned 0x220
	[0310.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF", dwFileAttributes=0x220) returned 1
	[0310.926] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0311.057] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x110ace08 | out: lpMode=0x110ace08) returned 0
	[0311.057] ReadFile (in: hFile=0x1f4, lpBuffer=0x1136e000, nNumberOfBytesToRead=0x75e2, lpNumberOfBytesRead=0x110ace18, lpOverlapped=0x0 | out: lpBuffer=0x1136e000*, lpNumberOfBytesRead=0x110ace18*=0x75e2, lpOverlapped=0x0) returned 1
	[0311.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0311.063] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0311.064] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11142902 | out: pbBuffer=0x11142902) returned 1
	[0311.064] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1114297c | out: pbBuffer=0x1114297c) returned 1
	[0311.064] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0311.065] GetFileType (hFile=0x1f4) returned 0x1
	[0311.065] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.065] WriteFile (in: hFile=0x1f4, lpBuffer=0x11238000*, nNumberOfBytesToWrite=0x75e2, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11238000*, lpNumberOfBytesWritten=0x11031dfc*=0x75e2, lpOverlapped=0x11031e08) returned 1
	[0311.066] GetFileType (hFile=0x1f4) returned 0x1
	[0311.066] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x75e2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.066] GetFileType (hFile=0x1f4) returned 0x1
	[0311.067] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.067] WriteFile (in: hFile=0x1f4, lpBuffer=0x113e8a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113e8a80*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0311.067] GetFileType (hFile=0x1f4) returned 0x1
	[0311.067] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x75e2, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.067] CloseHandle (hObject=0x1f4) returned 1
	[0311.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf.tl30z")) returned 0x220
	[0311.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.073] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.080] SetEvent (hEvent=0x1e8) returned 1
	[0311.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf")) returned 0x220
	[0311.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF", dwFileAttributes=0x220) returned 1
	[0311.081] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0311.650] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11090e08 | out: lpMode=0x11090e08) returned 0
	[0311.650] ReadFile (in: hFile=0x1b4, lpBuffer=0x111c0000, nNumberOfBytesToRead=0x6928, lpNumberOfBytesRead=0x11090e18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x11090e18*=0x6928, lpOverlapped=0x0) returned 1
	[0311.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0311.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0311.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11143402 | out: pbBuffer=0x11143402) returned 1
	[0311.654] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0311.655] GetFileType (hFile=0x1b4) returned 0x1
	[0311.655] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.656] WriteFile (in: hFile=0x1b4, lpBuffer=0x11be6000*, nNumberOfBytesToWrite=0x6928, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11be6000*, lpNumberOfBytesWritten=0x11031dfc*=0x6928, lpOverlapped=0x11031e08) returned 1
	[0311.656] GetFileType (hFile=0x1b4) returned 0x1
	[0311.656] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6928, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.656] GetFileType (hFile=0x1b4) returned 0x1
	[0311.656] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.656] WriteFile (in: hFile=0x1b4, lpBuffer=0x113e9880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113e9880*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0311.657] GetFileType (hFile=0x1b4) returned 0x1
	[0311.657] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6928, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.657] CloseHandle (hObject=0x1b4) returned 1
	[0311.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf.tl30z")) returned 0x220
	[0311.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.662] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.675] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf")) returned 0x220
	[0311.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF", dwFileAttributes=0x220) returned 1
	[0311.685] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0311.766] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11286e08 | out: lpMode=0x11286e08) returned 0
	[0311.766] ReadFile (in: hFile=0x1f4, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x8c0, lpNumberOfBytesRead=0x11286e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11286e18*=0x8c0, lpOverlapped=0x0) returned 1
	[0311.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0311.771] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11192a02 | out: pbBuffer=0x11192a02) returned 1
	[0311.772] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11192a13 | out: pbBuffer=0x11192a13) returned 1
	[0311.772] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0311.772] GetFileType (hFile=0x1f4) returned 0x1
	[0311.772] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.772] WriteFile (in: hFile=0x1f4, lpBuffer=0x11186000*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11186000*, lpNumberOfBytesWritten=0x11031dfc*=0x8c0, lpOverlapped=0x11031e08) returned 1
	[0311.773] GetFileType (hFile=0x1f4) returned 0x1
	[0311.773] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x8c0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.773] GetFileType (hFile=0x1f4) returned 0x1
	[0311.773] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.773] WriteFile (in: hFile=0x1f4, lpBuffer=0x1118f500*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1118f500*, lpNumberOfBytesWritten=0x11031dfc*=0x221, lpOverlapped=0x11031e08) returned 1
	[0311.774] GetFileType (hFile=0x1f4) returned 0x1
	[0311.774] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x8c0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0311.774] CloseHandle (hObject=0x1f4) returned 1
	[0311.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf.tl30z")) returned 0x220
	[0311.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.779] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.796] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf")) returned 0x220
	[0311.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF", dwFileAttributes=0x220) returned 1
	[0311.810] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0311.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4
	[0311.895] GetConsoleMode (in: hConsoleHandle=0x1f4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0311.895] ReadFile (in: hFile=0x1f4, lpBuffer=0x112df100, nNumberOfBytesToRead=0x692, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x112df100*, lpNumberOfBytesRead=0x11023e18*=0x692, lpOverlapped=0x0) returned 1
	[0311.900] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332aa0 | out: pbBuffer=0x11332aa0) returned 1
	[0311.901] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e6f02 | out: pbBuffer=0x112e6f02) returned 1
	[0311.901] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332ad0 | out: pbBuffer=0x11332ad0) returned 1
	[0311.901] GetFileType (hFile=0x1f4) returned 0x1
	[0311.901] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.901] WriteFile (in: hFile=0x1f4, lpBuffer=0x111dd000*, nNumberOfBytesToWrite=0x692, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111dd000*, lpNumberOfBytesWritten=0x1133bdfc*=0x692, lpOverlapped=0x1133be08) returned 1
	[0311.902] GetFileType (hFile=0x1f4) returned 0x1
	[0311.902] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x692, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.902] GetFileType (hFile=0x1f4) returned 0x1
	[0311.902] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.902] WriteFile (in: hFile=0x1f4, lpBuffer=0x11129500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11129500*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0311.903] GetFileType (hFile=0x1f4) returned 0x1
	[0311.903] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x692, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0311.903] CloseHandle (hObject=0x1f4) returned 1
	[0311.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf.tl30z")) returned 0x220
	[0311.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0311.907] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0311.910] SetEvent (hEvent=0x22c) returned 1
	[0311.910] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf")) returned 0x220
	[0311.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF", dwFileAttributes=0x220) returned 1
	[0311.910] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0312.016] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0312.016] ReadFile (in: hFile=0x1b4, lpBuffer=0x110f8000, nNumberOfBytesToRead=0x1664, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x110f8000*, lpNumberOfBytesRead=0x11023e18*=0x1664, lpOverlapped=0x0) returned 1
	[0312.021] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332c10 | out: pbBuffer=0x11332c10) returned 1
	[0312.021] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332c08 | out: pbBuffer=0x11332c08) returned 1
	[0312.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112e7902 | out: pbBuffer=0x112e7902) returned 1
	[0312.022] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332c40 | out: pbBuffer=0x11332c40) returned 1
	[0312.022] GetFileType (hFile=0x1b4) returned 0x1
	[0312.022] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.023] WriteFile (in: hFile=0x1b4, lpBuffer=0x1111c000*, nNumberOfBytesToWrite=0x1664, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1111c000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1664, lpOverlapped=0x1133be08) returned 1
	[0312.023] GetFileType (hFile=0x1b4) returned 0x1
	[0312.023] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1664, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.023] GetFileType (hFile=0x1b4) returned 0x1
	[0312.023] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.023] WriteFile (in: hFile=0x1b4, lpBuffer=0x11110380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11110380*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0312.024] GetFileType (hFile=0x1b4) returned 0x1
	[0312.024] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x1664, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.024] CloseHandle (hObject=0x1b4) returned 1
	[0312.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf.tl30z")) returned 0x220
	[0312.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.028] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.029] SetEvent (hEvent=0x22c) returned 1
	[0312.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf")) returned 0x220
	[0312.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF", dwFileAttributes=0x220) returned 1
	[0312.030] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0312.107] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0312.107] ReadFile (in: hFile=0x224, lpBuffer=0x113fc000, nNumberOfBytesToRead=0x9fc, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x113fc000*, lpNumberOfBytesRead=0x11023e18*=0x9fc, lpOverlapped=0x0) returned 1
	[0312.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0312.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ab202 | out: pbBuffer=0x113ab202) returned 1
	[0312.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113ab277 | out: pbBuffer=0x113ab277) returned 1
	[0312.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113ab2d6 | out: pbBuffer=0x113ab2d6) returned 1
	[0312.113] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0312.114] GetFileType (hFile=0x224) returned 0x1
	[0312.114] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.114] WriteFile (in: hFile=0x224, lpBuffer=0x1132e000*, nNumberOfBytesToWrite=0x9fc, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1132e000*, lpNumberOfBytesWritten=0x1133bdfc*=0x9fc, lpOverlapped=0x1133be08) returned 1
	[0312.114] GetFileType (hFile=0x224) returned 0x1
	[0312.114] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x9fc, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.114] GetFileType (hFile=0x224) returned 0x1
	[0312.114] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.115] WriteFile (in: hFile=0x224, lpBuffer=0x1105f880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1105f880*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0312.115] GetFileType (hFile=0x224) returned 0x1
	[0312.115] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x9fc, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.115] CloseHandle (hObject=0x224) returned 1
	[0312.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf.tl30z")) returned 0x220
	[0312.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.119] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.123] SetEvent (hEvent=0x118) returned 1
	[0312.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf")) returned 0x220
	[0312.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF", dwFileAttributes=0x220) returned 1
	[0312.123] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0312.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0312.190] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0312.190] ReadFile (in: hFile=0x200, lpBuffer=0x11464a00, nNumberOfBytesToRead=0x608, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11464a00*, lpNumberOfBytesRead=0x11023e18*=0x608, lpOverlapped=0x0) returned 1
	[0312.195] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0312.195] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110c5e02 | out: pbBuffer=0x110c5e02) returned 1
	[0312.195] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110c5ed4 | out: pbBuffer=0x110c5ed4) returned 1
	[0312.195] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332540 | out: pbBuffer=0x11332540) returned 1
	[0312.195] GetFileType (hFile=0x200) returned 0x1
	[0312.196] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.196] WriteFile (in: hFile=0x200, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x608, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1102ddfc*=0x608, lpOverlapped=0x1102de08) returned 1
	[0312.196] GetFileType (hFile=0x200) returned 0x1
	[0312.196] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x608, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.196] GetFileType (hFile=0x200) returned 0x1
	[0312.196] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.197] WriteFile (in: hFile=0x200, lpBuffer=0x110b0a80*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110b0a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x221, lpOverlapped=0x1102de08) returned 1
	[0312.197] GetFileType (hFile=0x200) returned 0x1
	[0312.197] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x608, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.197] CloseHandle (hObject=0x200) returned 1
	[0312.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf.tl30z")) returned 0x220
	[0312.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.200] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.203] SetEvent (hEvent=0x118) returned 1
	[0312.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif")) returned 0x220
	[0312.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF", dwFileAttributes=0x220) returned 1
	[0312.204] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif.tl30z"), dwFlags=0x1) returned 1
	[0312.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0312.277] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0312.277] ReadFile (in: hFile=0x290, lpBuffer=0x11216000, nNumberOfBytesToRead=0x629, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11216000*, lpNumberOfBytesRead=0x11023e18*=0x629, lpOverlapped=0x0) returned 1
	[0312.283] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6820 | out: pbBuffer=0x113e6820) returned 1
	[0312.284] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6818 | out: pbBuffer=0x113e6818) returned 1
	[0312.284] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113cbc02 | out: pbBuffer=0x113cbc02) returned 1
	[0312.284] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113cbc34 | out: pbBuffer=0x113cbc34) returned 1
	[0312.284] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6850 | out: pbBuffer=0x113e6850) returned 1
	[0312.284] GetFileType (hFile=0x290) returned 0x1
	[0312.284] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.285] WriteFile (in: hFile=0x290, lpBuffer=0x11229000*, nNumberOfBytesToWrite=0x629, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11229000*, lpNumberOfBytesWritten=0x1133bdfc*=0x629, lpOverlapped=0x1133be08) returned 1
	[0312.285] GetFileType (hFile=0x290) returned 0x1
	[0312.285] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x629, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.285] GetFileType (hFile=0x290) returned 0x1
	[0312.285] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.285] WriteFile (in: hFile=0x290, lpBuffer=0x11203180*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11203180*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0312.296] GetFileType (hFile=0x290) returned 0x1
	[0312.296] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x629, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.296] CloseHandle (hObject=0x290) returned 1
	[0312.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif.tl30z")) returned 0x220
	[0312.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0312.301] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.303] SetEvent (hEvent=0x218) returned 1
	[0312.303] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg")) returned 0x220
	[0312.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG", dwFileAttributes=0x220) returned 1
	[0312.304] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg.tl30z"), dwFlags=0x1) returned 1
	[0312.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0312.431] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0312.431] ReadFile (in: hFile=0x290, lpBuffer=0x11320000, nNumberOfBytesToRead=0x18be, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x11320000*, lpNumberOfBytesRead=0x11023e18*=0x18be, lpOverlapped=0x0) returned 1
	[0312.437] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6260 | out: pbBuffer=0x113e6260) returned 1
	[0312.437] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6258 | out: pbBuffer=0x113e6258) returned 1
	[0312.437] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1135f202 | out: pbBuffer=0x1135f202) returned 1
	[0312.438] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6290 | out: pbBuffer=0x113e6290) returned 1
	[0312.438] GetFileType (hFile=0x290) returned 0x1
	[0312.438] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.438] WriteFile (in: hFile=0x290, lpBuffer=0x113d2000*, nNumberOfBytesToWrite=0x18be, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x113d2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x18be, lpOverlapped=0x1102be08) returned 1
	[0312.439] GetFileType (hFile=0x290) returned 0x1
	[0312.439] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x18be, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.439] GetFileType (hFile=0x290) returned 0x1
	[0312.439] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.439] WriteFile (in: hFile=0x290, lpBuffer=0x1136f880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1136f880*, lpNumberOfBytesWritten=0x1102bdfc*=0x230, lpOverlapped=0x1102be08) returned 1
	[0312.439] GetFileType (hFile=0x290) returned 0x1
	[0312.439] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x18be, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0312.439] CloseHandle (hObject=0x290) returned 1
	[0312.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg.tl30z")) returned 0x220
	[0312.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0312.444] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0312.445] SetEvent (hEvent=0x164) returned 1
	[0312.445] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp")) returned 0x220
	[0312.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP", dwFileAttributes=0x220) returned 1
	[0312.446] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200
	[0313.571] GetConsoleMode (in: hConsoleHandle=0x200, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0313.571] ReadFile (in: hFile=0x200, lpBuffer=0x1143e000, nNumberOfBytesToRead=0x7c08, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1143e000*, lpNumberOfBytesRead=0x11023e18*=0x7c08, lpOverlapped=0x0) returned 1
	[0313.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332650 | out: pbBuffer=0x11332650) returned 1
	[0313.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332648 | out: pbBuffer=0x11332648) returned 1
	[0313.577] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11448802 | out: pbBuffer=0x11448802) returned 1
	[0313.578] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332680 | out: pbBuffer=0x11332680) returned 1
	[0313.579] GetFileType (hFile=0x200) returned 0x1
	[0313.579] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.579] WriteFile (in: hFile=0x200, lpBuffer=0x11116000*, nNumberOfBytesToWrite=0x7c08, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11116000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7c08, lpOverlapped=0x1102de08) returned 1
	[0313.580] GetFileType (hFile=0x200) returned 0x1
	[0313.580] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7c08, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.580] GetFileType (hFile=0x200) returned 0x1
	[0313.580] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.580] WriteFile (in: hFile=0x200, lpBuffer=0x110e5500*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110e5500*, lpNumberOfBytesWritten=0x1102ddfc*=0x22a, lpOverlapped=0x1102de08) returned 1
	[0313.581] GetFileType (hFile=0x200) returned 0x1
	[0313.581] SetFilePointerEx (in: hFile=0x200, liDistanceToMove=0x7c08, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.581] CloseHandle (hObject=0x200) returned 1
	[0313.582] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp.tl30z")) returned 0x220
	[0313.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0313.584] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.588] SetEvent (hEvent=0x164) returned 1
	[0313.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp")) returned 0x220
	[0313.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP", dwFileAttributes=0x220) returned 1
	[0313.589] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0313.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0313.643] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0313.643] ReadFile (in: hFile=0x1d4, lpBuffer=0x1123e000, nNumberOfBytesToRead=0x7db8, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1123e000*, lpNumberOfBytesRead=0x11023e18*=0x7db8, lpOverlapped=0x0) returned 1
	[0313.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332220 | out: pbBuffer=0x11332220) returned 1
	[0313.747] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11334802 | out: pbBuffer=0x11334802) returned 1
	[0313.748] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332250 | out: pbBuffer=0x11332250) returned 1
	[0313.748] GetFileType (hFile=0x1d4) returned 0x1
	[0313.748] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.749] WriteFile (in: hFile=0x1d4, lpBuffer=0x112ac000*, nNumberOfBytesToWrite=0x7db8, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112ac000*, lpNumberOfBytesWritten=0x1102ddfc*=0x7db8, lpOverlapped=0x1102de08) returned 1
	[0313.749] GetFileType (hFile=0x1d4) returned 0x1
	[0313.749] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.749] GetFileType (hFile=0x1d4) returned 0x1
	[0313.749] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.750] WriteFile (in: hFile=0x1d4, lpBuffer=0x1142ca80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1142ca80*, lpNumberOfBytesWritten=0x1102ddfc*=0x236, lpOverlapped=0x1102de08) returned 1
	[0313.750] GetFileType (hFile=0x1d4) returned 0x1
	[0313.750] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x7db8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0313.750] CloseHandle (hObject=0x1d4) returned 1
	[0313.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp.tl30z")) returned 0x220
	[0313.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0313.764] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.770] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.821] SetEvent (hEvent=0x25c) returned 1
	[0313.821] SetEvent (hEvent=0x2a8) returned 1
	[0313.821] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x102
	[0313.832] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.832] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x102
	[0313.836] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.836] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x102
	[0313.837] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.838] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x102
	[0313.890] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.890] SetEvent (hEvent=0x22c) returned 1
	[0313.890] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x102
	[0313.893] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0313.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e60f0 | out: pbBuffer=0x113e60f0) returned 1
	[0313.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60e8 | out: pbBuffer=0x113e60e8) returned 1
	[0313.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11150802 | out: pbBuffer=0x11150802) returned 1
	[0313.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11150885 | out: pbBuffer=0x11150885) returned 1
	[0313.894] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111508bc | out: pbBuffer=0x111508bc) returned 1
	[0313.895] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6120 | out: pbBuffer=0x113e6120) returned 1
	[0313.895] GetFileType (hFile=0x29c) returned 0x1
	[0313.896] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11145de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.896] WriteFile (in: hFile=0x29c, lpBuffer=0x113d2000*, nNumberOfBytesToWrite=0x7ce0, lpNumberOfBytesWritten=0x11145dfc, lpOverlapped=0x11145e08 | out: lpBuffer=0x113d2000*, lpNumberOfBytesWritten=0x11145dfc*=0x7ce0, lpOverlapped=0x11145e08) returned 1
	[0313.896] GetFileType (hFile=0x29c) returned 0x1
	[0313.896] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x11145de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.897] GetFileType (hFile=0x29c) returned 0x1
	[0313.897] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11145de0 | out: lpNewFilePointer=0x0) returned 1
	[0313.897] WriteFile (in: hFile=0x29c, lpBuffer=0x11165c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11145dfc, lpOverlapped=0x11145e08 | out: lpBuffer=0x11165c00*, lpNumberOfBytesWritten=0x11145dfc*=0x230, lpOverlapped=0x11145e08) returned 1
	[0314.061] GetFileType (hFile=0x29c) returned 0x1
	[0314.061] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x7ce0, lpNewFilePointer=0x0, dwMoveMethod=0x11145de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.061] CloseHandle (hObject=0x29c) returned 1
	[0314.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp.tl30z")) returned 0x220
	[0314.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.069] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.324] SetEvent (hEvent=0x1b0) returned 1
	[0314.324] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126100 | out: pbBuffer=0x11126100) returned 1
	[0314.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134c802 | out: pbBuffer=0x1134c802) returned 1
	[0314.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126130 | out: pbBuffer=0x11126130) returned 1
	[0314.388] GetFileType (hFile=0x1f4) returned 0x1
	[0314.388] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.388] WriteFile (in: hFile=0x1f4, lpBuffer=0x11326000*, nNumberOfBytesToWrite=0x7297, lpNumberOfBytesWritten=0x1135bdfc, lpOverlapped=0x1135be08 | out: lpBuffer=0x11326000*, lpNumberOfBytesWritten=0x1135bdfc*=0x7297, lpOverlapped=0x1135be08) returned 1
	[0314.415] GetFileType (hFile=0x1f4) returned 0x1
	[0314.415] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x7297, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.415] GetFileType (hFile=0x1f4) returned 0x1
	[0314.415] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.415] WriteFile (in: hFile=0x1f4, lpBuffer=0x111aca80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1135bdfc, lpOverlapped=0x1135be08 | out: lpBuffer=0x111aca80*, lpNumberOfBytesWritten=0x1135bdfc*=0x233, lpOverlapped=0x1135be08) returned 1
	[0314.425] GetFileType (hFile=0x1f4) returned 0x1
	[0314.425] SetFilePointerEx (in: hFile=0x1f4, liDistanceToMove=0x7297, lpNewFilePointer=0x0, dwMoveMethod=0x1135bde0 | out: lpNewFilePointer=0x0) returned 1
	[0314.425] CloseHandle (hObject=0x1f4) returned 1
	[0314.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg.tl30z")) returned 0x220
	[0314.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0314.433] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.437] SetEvent (hEvent=0x134) returned 1
	[0314.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp")) returned 0x220
	[0314.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP", dwFileAttributes=0x220) returned 1
	[0314.438] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0314.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0314.542] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0314.542] ReadFile (in: hFile=0x1c8, lpBuffer=0x11c26000, nNumberOfBytesToRead=0x7c08, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x11c26000*, lpNumberOfBytesRead=0x11288e18*=0x7c08, lpOverlapped=0x0) returned 1
	[0314.624] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0314.624] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0314.624] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1135e802 | out: pbBuffer=0x1135e802) returned 1
	[0314.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0314.625] GetFileType (hFile=0x1c8) returned 0x1
	[0314.625] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.626] WriteFile (in: hFile=0x1c8, lpBuffer=0x113ec000*, nNumberOfBytesToWrite=0x7c08, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113ec000*, lpNumberOfBytesWritten=0x11031dfc*=0x7c08, lpOverlapped=0x11031e08) returned 1
	[0314.626] GetFileType (hFile=0x1c8) returned 0x1
	[0314.626] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x7c08, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.626] GetFileType (hFile=0x1c8) returned 0x1
	[0314.626] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.626] WriteFile (in: hFile=0x1c8, lpBuffer=0x11bfea80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11bfea80*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0314.627] GetFileType (hFile=0x1c8) returned 0x1
	[0314.627] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x7c08, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.627] CloseHandle (hObject=0x1c8) returned 1
	[0314.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp.tl30z")) returned 0x220
	[0314.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.655] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.735] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.737] SetEvent (hEvent=0x1e0) returned 1
	[0314.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp")) returned 0x220
	[0314.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP", dwFileAttributes=0x220) returned 1
	[0314.738] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0314.820] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0314.824] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1128ce08 | out: lpMode=0x1128ce08) returned 0
	[0314.824] ReadFile (in: hFile=0x1c8, lpBuffer=0x1111a000, nNumberOfBytesToRead=0x7e90, lpNumberOfBytesRead=0x1128ce18, lpOverlapped=0x0 | out: lpBuffer=0x1111a000*, lpNumberOfBytesRead=0x1128ce18*=0x7e90, lpOverlapped=0x0) returned 1
	[0314.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0314.832] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332388 | out: pbBuffer=0x11332388) returned 1
	[0314.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111d1202 | out: pbBuffer=0x111d1202) returned 1
	[0314.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d1227 | out: pbBuffer=0x111d1227) returned 1
	[0314.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d12ae | out: pbBuffer=0x111d12ae) returned 1
	[0314.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d12de | out: pbBuffer=0x111d12de) returned 1
	[0314.833] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111d12de | out: pbBuffer=0x111d12de) returned 1
	[0314.834] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0314.835] GetFileType (hFile=0x1c8) returned 0x1
	[0314.835] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.835] WriteFile (in: hFile=0x1c8, lpBuffer=0x111f6000*, nNumberOfBytesToWrite=0x7e90, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x111f6000*, lpNumberOfBytesWritten=0x111c7dfc*=0x7e90, lpOverlapped=0x111c7e08) returned 1
	[0314.836] GetFileType (hFile=0x1c8) returned 0x1
	[0314.836] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x7e90, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.836] GetFileType (hFile=0x1c8) returned 0x1
	[0314.836] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.836] WriteFile (in: hFile=0x1c8, lpBuffer=0x111e5880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x111c7dfc, lpOverlapped=0x111c7e08 | out: lpBuffer=0x111e5880*, lpNumberOfBytesWritten=0x111c7dfc*=0x230, lpOverlapped=0x111c7e08) returned 1
	[0314.837] GetFileType (hFile=0x1c8) returned 0x1
	[0314.837] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x7e90, lpNewFilePointer=0x0, dwMoveMethod=0x111c7de0 | out: lpNewFilePointer=0x0) returned 1
	[0314.837] CloseHandle (hObject=0x1c8) returned 1
	[0314.845] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp.tl30z")) returned 0x220
	[0314.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0314.859] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.862] SwitchToThread () returned 1
	[0314.893] SwitchToThread () returned 1
	[0314.894] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.909] SetEvent (hEvent=0x12c) returned 1
	[0314.909] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0314.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif")) returned 0x220
	[0314.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF", dwFileAttributes=0x220) returned 1
	[0314.916] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif.tl30z"), dwFlags=0x1) returned 1
	[0314.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0314.992] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0314.992] ReadFile (in: hFile=0x290, lpBuffer=0x110a0000, nNumberOfBytesToRead=0x6d86, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x110a0000*, lpNumberOfBytesRead=0x11428e18*=0x6d86, lpOverlapped=0x0) returned 1
	[0315.033] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263c0 | out: pbBuffer=0x111263c0) returned 1
	[0315.033] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c19c02 | out: pbBuffer=0x11c19c02) returned 1
	[0315.033] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c19cb7 | out: pbBuffer=0x11c19cb7) returned 1
	[0315.034] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263f0 | out: pbBuffer=0x111263f0) returned 1
	[0315.035] GetFileType (hFile=0x290) returned 0x1
	[0315.035] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0315.035] WriteFile (in: hFile=0x290, lpBuffer=0x110dc000*, nNumberOfBytesToWrite=0x6d86, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110dc000*, lpNumberOfBytesWritten=0x11031dfc*=0x6d86, lpOverlapped=0x11031e08) returned 1
	[0315.036] GetFileType (hFile=0x290) returned 0x1
	[0315.036] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x6d86, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0315.036] GetFileType (hFile=0x290) returned 0x1
	[0315.036] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0315.036] WriteFile (in: hFile=0x290, lpBuffer=0x110b4700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110b4700*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0315.037] GetFileType (hFile=0x290) returned 0x1
	[0315.037] SetFilePointerEx (in: hFile=0x290, liDistanceToMove=0x6d86, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0315.037] CloseHandle (hObject=0x290) returned 1
	[0315.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif.tl30z")) returned 0x220
	[0315.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0315.043] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0315.058] SetEvent (hEvent=0x134) returned 1
	[0315.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif")) returned 0x220
	[0315.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF", dwFileAttributes=0x220) returned 1
	[0315.058] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif.tl30z"), dwFlags=0x1) returned 1
	[0315.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0315.169] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0315.169] ReadFile (in: hFile=0x1b4, lpBuffer=0x112b4000, nNumberOfBytesToRead=0x8795, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x112b4000*, lpNumberOfBytesRead=0x1131de18*=0x8795, lpOverlapped=0x0) returned 1
	[0315.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332200 | out: pbBuffer=0x11332200) returned 1
	[0315.204] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11314802 | out: pbBuffer=0x11314802) returned 1
	[0315.205] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332230 | out: pbBuffer=0x11332230) returned 1
	[0315.205] GetFileType (hFile=0x1b4) returned 0x1
	[0315.206] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.206] WriteFile (in: hFile=0x1b4, lpBuffer=0x112fe000*, nNumberOfBytesToWrite=0x8795, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112fe000*, lpNumberOfBytesWritten=0x1133bdfc*=0x8795, lpOverlapped=0x1133be08) returned 1
	[0315.206] GetFileType (hFile=0x1b4) returned 0x1
	[0315.206] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x8795, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.207] GetFileType (hFile=0x1b4) returned 0x1
	[0315.207] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.207] WriteFile (in: hFile=0x1b4, lpBuffer=0x112fca80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112fca80*, lpNumberOfBytesWritten=0x1133bdfc*=0x233, lpOverlapped=0x1133be08) returned 1
	[0315.207] GetFileType (hFile=0x1b4) returned 0x1
	[0315.208] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x8795, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.208] CloseHandle (hObject=0x1b4) returned 1
	[0315.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif.tl30z")) returned 0x220
	[0315.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF.tl30z", dwFileAttributes=0x221) returned 1
	[0315.221] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0315.310] SetEvent (hEvent=0x1e8) returned 1
	[0315.310] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp")) returned 0x220
	[0315.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP", dwFileAttributes=0x220) returned 1
	[0315.311] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0315.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0315.495] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0315.495] ReadFile (in: hFile=0x1b4, lpBuffer=0x1146a000, nNumberOfBytesToRead=0x7c08, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1146a000*, lpNumberOfBytesRead=0x11288e18*=0x7c08, lpOverlapped=0x0) returned 1
	[0315.615] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0315.615] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0315.615] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111de802 | out: pbBuffer=0x111de802) returned 1
	[0315.616] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0315.617] GetFileType (hFile=0x1b4) returned 0x1
	[0315.617] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.617] WriteFile (in: hFile=0x1b4, lpBuffer=0x1123c000*, nNumberOfBytesToWrite=0x7c08, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1123c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x7c08, lpOverlapped=0x1102be08) returned 1
	[0315.617] GetFileType (hFile=0x1b4) returned 0x1
	[0315.618] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7c08, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.618] GetFileType (hFile=0x1b4) returned 0x1
	[0315.618] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.618] WriteFile (in: hFile=0x1b4, lpBuffer=0x110d4a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110d4a80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0315.618] GetFileType (hFile=0x1b4) returned 0x1
	[0315.618] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x7c08, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0315.619] CloseHandle (hObject=0x1b4) returned 1
	[0315.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp.tl30z")) returned 0x220
	[0315.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0315.625] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0315.641] SetEvent (hEvent=0x1e8) returned 1
	[0315.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp")) returned 0x220
	[0315.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP", dwFileAttributes=0x220) returned 1
	[0315.641] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0316.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0316.150] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0316.153] ReadFile (in: hFile=0x1c8, lpBuffer=0x113d2000, nNumberOfBytesToRead=0xe79c, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x1131ce18*=0xe79c, lpOverlapped=0x0) returned 1
	[0316.218] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0316.218] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332378 | out: pbBuffer=0x11332378) returned 1
	[0316.218] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d7202 | out: pbBuffer=0x110d7202) returned 1
	[0316.218] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d7289 | out: pbBuffer=0x110d7289) returned 1
	[0316.218] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d72c8 | out: pbBuffer=0x110d72c8) returned 1
	[0316.219] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0316.221] GetFileType (hFile=0x1c8) returned 0x1
	[0316.221] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.221] WriteFile (in: hFile=0x1c8, lpBuffer=0x112aa000*, nNumberOfBytesToWrite=0xe79c, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x112aa000*, lpNumberOfBytesWritten=0x1133ddfc*=0xe79c, lpOverlapped=0x1133de08) returned 1
	[0316.222] GetFileType (hFile=0x1c8) returned 0x1
	[0316.222] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xe79c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.222] GetFileType (hFile=0x1c8) returned 0x1
	[0316.222] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.222] WriteFile (in: hFile=0x1c8, lpBuffer=0x110e9880*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110e9880*, lpNumberOfBytesWritten=0x1133ddfc*=0x239, lpOverlapped=0x1133de08) returned 1
	[0316.248] GetFileType (hFile=0x1c8) returned 0x1
	[0316.248] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xe79c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.248] CloseHandle (hObject=0x1c8) returned 1
	[0316.252] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp.tl30z")) returned 0x220
	[0316.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0316.257] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.262] SetEvent (hEvent=0x218) returned 1
	[0316.262] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp")) returned 0x220
	[0316.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP", dwFileAttributes=0x220) returned 1
	[0316.272] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp.tl30z"), dwFlags=0x1) returned 1
	[0316.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184
	[0316.532] GetConsoleMode (in: hConsoleHandle=0x184, lpMode=0x11288e08 | out: lpMode=0x11288e08) returned 0
	[0316.532] ReadFile (in: hFile=0x184, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x1016, lpNumberOfBytesRead=0x11288e18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x11288e18*=0x1016, lpOverlapped=0x0) returned 1
	[0316.578] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126100 | out: pbBuffer=0x11126100) returned 1
	[0316.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1139c802 | out: pbBuffer=0x1139c802) returned 1
	[0316.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139c818 | out: pbBuffer=0x1139c818) returned 1
	[0316.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1139c835 | out: pbBuffer=0x1139c835) returned 1
	[0316.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126130 | out: pbBuffer=0x11126130) returned 1
	[0316.579] GetFileType (hFile=0x184) returned 0x1
	[0316.580] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.580] WriteFile (in: hFile=0x184, lpBuffer=0x111e0000*, nNumberOfBytesToWrite=0x1016, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111e0000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1016, lpOverlapped=0x1102be08) returned 1
	[0316.580] GetFileType (hFile=0x184) returned 0x1
	[0316.580] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x1016, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.580] GetFileType (hFile=0x184) returned 0x1
	[0316.581] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.581] WriteFile (in: hFile=0x184, lpBuffer=0x111aea80*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111aea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0316.581] GetFileType (hFile=0x184) returned 0x1
	[0316.581] SetFilePointerEx (in: hFile=0x184, liDistanceToMove=0x1016, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0316.581] CloseHandle (hObject=0x184) returned 1
	[0316.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp.tl30z")) returned 0x220
	[0316.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP.tl30z", dwFileAttributes=0x221) returned 1
	[0316.614] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.640] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.696] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.882] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0316.976] SetEvent (hEvent=0x1c4) returned 1
	[0316.976] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.209] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.571] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf")) returned 0x220
	[0317.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF", dwFileAttributes=0x220) returned 1
	[0317.580] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.619] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0317.623] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0317.623] ReadFile (in: hFile=0x1cc, lpBuffer=0x11252000, nNumberOfBytesToRead=0x1db8, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11252000*, lpNumberOfBytesRead=0x11316e18*=0x1db8, lpOverlapped=0x0) returned 1
	[0317.689] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.695] SetEvent (hEvent=0x25c) returned 1
	[0317.695] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.699] SetEvent (hEvent=0x25c) returned 1
	[0317.699] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.768] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.818] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0317.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf")) returned 0x220
	[0317.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF", dwFileAttributes=0x220) returned 1
	[0317.823] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0317.973] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0317.973] ReadFile (in: hFile=0x1d4, lpBuffer=0x112f0500, nNumberOfBytesToRead=0x2242, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x112f0500*, lpNumberOfBytesRead=0x11423e18*=0x2242, lpOverlapped=0x0) returned 1
	[0317.985] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263d0 | out: pbBuffer=0x111263d0) returned 1
	[0317.985] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111263c8 | out: pbBuffer=0x111263c8) returned 1
	[0317.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141a702 | out: pbBuffer=0x1141a702) returned 1
	[0317.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1141a77a | out: pbBuffer=0x1141a77a) returned 1
	[0317.986] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126400 | out: pbBuffer=0x11126400) returned 1
	[0317.986] GetFileType (hFile=0x1d4) returned 0x1
	[0317.986] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.987] WriteFile (in: hFile=0x1d4, lpBuffer=0x113ca000*, nNumberOfBytesToWrite=0x2242, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x113ca000*, lpNumberOfBytesWritten=0x11371dfc*=0x2242, lpOverlapped=0x11371e08) returned 1
	[0317.987] GetFileType (hFile=0x1d4) returned 0x1
	[0317.987] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2242, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.987] GetFileType (hFile=0x1d4) returned 0x1
	[0317.987] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.988] WriteFile (in: hFile=0x1d4, lpBuffer=0x11107500*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x11107500*, lpNumberOfBytesWritten=0x11371dfc*=0x224, lpOverlapped=0x11371e08) returned 1
	[0317.988] GetFileType (hFile=0x1d4) returned 0x1
	[0317.988] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2242, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.988] CloseHandle (hObject=0x1d4) returned 1
	[0317.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf.tl30z")) returned 0x220
	[0317.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.057] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.066] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf")) returned 0x220
	[0318.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF", dwFileAttributes=0x220) returned 1
	[0318.073] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0318.398] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0318.399] ReadFile (in: hFile=0x1cc, lpBuffer=0x112f4f00, nNumberOfBytesToRead=0x238c, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x112f4f00*, lpNumberOfBytesRead=0x1128ae18*=0x238c, lpOverlapped=0x0) returned 1
	[0318.436] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0318.436] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0318.436] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11473d02 | out: pbBuffer=0x11473d02) returned 1
	[0318.436] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0318.437] GetFileType (hFile=0x1cc) returned 0x1
	[0318.437] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.437] WriteFile (in: hFile=0x1cc, lpBuffer=0x11156000*, nNumberOfBytesToWrite=0x238c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11156000*, lpNumberOfBytesWritten=0x1102bdfc*=0x238c, lpOverlapped=0x1102be08) returned 1
	[0318.438] GetFileType (hFile=0x1cc) returned 0x1
	[0318.438] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x238c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.438] GetFileType (hFile=0x1cc) returned 0x1
	[0318.438] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.438] WriteFile (in: hFile=0x1cc, lpBuffer=0x110baa80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110baa80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0318.438] GetFileType (hFile=0x1cc) returned 0x1
	[0318.439] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x238c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.439] CloseHandle (hObject=0x1cc) returned 1
	[0318.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf.tl30z")) returned 0x220
	[0318.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.445] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.448] SetEvent (hEvent=0x160) returned 1
	[0318.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf")) returned 0x220
	[0318.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF", dwFileAttributes=0x220) returned 1
	[0318.449] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0318.707] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0318.707] ReadFile (in: hFile=0x204, lpBuffer=0x113d6000, nNumberOfBytesToRead=0x1f74, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x113d6000*, lpNumberOfBytesRead=0x1128ae18*=0x1f74, lpOverlapped=0x0) returned 1
	[0318.740] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126260 | out: pbBuffer=0x11126260) returned 1
	[0318.740] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126258 | out: pbBuffer=0x11126258) returned 1
	[0318.741] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1141b302 | out: pbBuffer=0x1141b302) returned 1
	[0318.741] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126290 | out: pbBuffer=0x11126290) returned 1
	[0318.742] GetFileType (hFile=0x204) returned 0x1
	[0318.742] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.742] WriteFile (in: hFile=0x204, lpBuffer=0x11090000*, nNumberOfBytesToWrite=0x1f74, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11090000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1f74, lpOverlapped=0x1102be08) returned 1
	[0318.743] GetFileType (hFile=0x204) returned 0x1
	[0318.743] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1f74, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.743] GetFileType (hFile=0x204) returned 0x1
	[0318.743] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.743] WriteFile (in: hFile=0x204, lpBuffer=0x111f5c00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111f5c00*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0318.744] GetFileType (hFile=0x204) returned 0x1
	[0318.744] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1f74, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.744] CloseHandle (hObject=0x204) returned 1
	[0318.750] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf.tl30z")) returned 0x220
	[0318.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.754] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.766] SetEvent (hEvent=0x2a8) returned 1
	[0318.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf")) returned 0x220
	[0318.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF", dwFileAttributes=0x220) returned 1
	[0318.767] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0318.860] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0318.860] ReadFile (in: hFile=0x224, lpBuffer=0x1123e000, nNumberOfBytesToRead=0xee4a, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1123e000*, lpNumberOfBytesRead=0x11319e18*=0xee4a, lpOverlapped=0x0) returned 1
	[0318.866] SetEvent (hEvent=0x25c) returned 1
	[0318.867] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0318.867] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6278 | out: pbBuffer=0x113e6278) returned 1
	[0318.867] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11311302 | out: pbBuffer=0x11311302) returned 1
	[0318.868] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0318.870] GetFileType (hFile=0x224) returned 0x1
	[0318.870] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.870] WriteFile (in: hFile=0x224, lpBuffer=0x11c20000*, nNumberOfBytesToWrite=0xee4a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11c20000*, lpNumberOfBytesWritten=0x1133fdfc*=0xee4a, lpOverlapped=0x1133fe08) returned 1
	[0318.871] GetFileType (hFile=0x224) returned 0x1
	[0318.871] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xee4a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.871] GetFileType (hFile=0x224) returned 0x1
	[0318.871] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.873] WriteFile (in: hFile=0x224, lpBuffer=0x112ab880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112ab880*, lpNumberOfBytesWritten=0x1133fdfc*=0x236, lpOverlapped=0x1133fe08) returned 1
	[0318.873] GetFileType (hFile=0x224) returned 0x1
	[0318.874] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xee4a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.874] CloseHandle (hObject=0x224) returned 1
	[0318.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf.tl30z")) returned 0x220
	[0318.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.888] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.890] SetEvent (hEvent=0x25c) returned 1
	[0318.891] SetEvent (hEvent=0x1e8) returned 1
	[0318.891] SwitchToThread () returned 1
	[0318.895] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.919] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.948] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.968] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0318.987] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.040] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.058] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.074] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf")) returned 0x220
	[0319.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF", dwFileAttributes=0x220) returned 1
	[0319.082] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0319.202] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0319.202] ReadFile (in: hFile=0x1cc, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x878, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11425e18*=0x878, lpOverlapped=0x0) returned 1
	[0319.207] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0319.207] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11372802 | out: pbBuffer=0x11372802) returned 1
	[0319.208] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0319.208] GetFileType (hFile=0x1cc) returned 0x1
	[0319.208] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.208] WriteFile (in: hFile=0x1cc, lpBuffer=0x11064000*, nNumberOfBytesToWrite=0x878, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11064000*, lpNumberOfBytesWritten=0x1102bdfc*=0x878, lpOverlapped=0x1102be08) returned 1
	[0319.209] GetFileType (hFile=0x1cc) returned 0x1
	[0319.209] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x878, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.209] GetFileType (hFile=0x1cc) returned 0x1
	[0319.209] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.209] WriteFile (in: hFile=0x1cc, lpBuffer=0x1135ca80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1135ca80*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0319.209] GetFileType (hFile=0x1cc) returned 0x1
	[0319.210] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x878, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.210] CloseHandle (hObject=0x1cc) returned 1
	[0319.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf.tl30z")) returned 0x220
	[0319.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.213] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.217] SetEvent (hEvent=0x1e8) returned 1
	[0319.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf")) returned 0x220
	[0319.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF", dwFileAttributes=0x220) returned 1
	[0319.218] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0319.658] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0319.658] ReadFile (in: hFile=0x298, lpBuffer=0x1143a000, nNumberOfBytesToRead=0x5b08, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1143a000*, lpNumberOfBytesRead=0x11425e18*=0x5b08, lpOverlapped=0x0) returned 1
	[0319.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0319.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332658 | out: pbBuffer=0x11332658) returned 1
	[0319.661] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11442802 | out: pbBuffer=0x11442802) returned 1
	[0319.662] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0319.662] GetFileType (hFile=0x298) returned 0x1
	[0319.662] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.663] WriteFile (in: hFile=0x298, lpBuffer=0x112f2000*, nNumberOfBytesToWrite=0x5b08, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112f2000*, lpNumberOfBytesWritten=0x1133bdfc*=0x5b08, lpOverlapped=0x1133be08) returned 1
	[0319.663] GetFileType (hFile=0x298) returned 0x1
	[0319.663] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x5b08, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.663] GetFileType (hFile=0x298) returned 0x1
	[0319.663] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.664] WriteFile (in: hFile=0x298, lpBuffer=0x113b5880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113b5880*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0319.664] GetFileType (hFile=0x298) returned 0x1
	[0319.664] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x5b08, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.664] CloseHandle (hObject=0x298) returned 1
	[0319.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf.tl30z")) returned 0x220
	[0319.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.668] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.671] SetEvent (hEvent=0x284) returned 1
	[0319.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf")) returned 0x220
	[0319.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF", dwFileAttributes=0x220) returned 1
	[0319.672] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0319.753] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0319.753] ReadFile (in: hFile=0x1c8, lpBuffer=0x1116c000, nNumberOfBytesToRead=0x2602, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1116c000*, lpNumberOfBytesRead=0x11425e18*=0x2602, lpOverlapped=0x0) returned 1
	[0319.758] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6c0 | out: pbBuffer=0x1140f6c0) returned 1
	[0319.758] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f6b8 | out: pbBuffer=0x1140f6b8) returned 1
	[0319.758] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b5302 | out: pbBuffer=0x112b5302) returned 1
	[0319.759] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6f0 | out: pbBuffer=0x1140f6f0) returned 1
	[0319.759] GetFileType (hFile=0x1c8) returned 0x1
	[0319.759] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.759] WriteFile (in: hFile=0x1c8, lpBuffer=0x111a8000*, nNumberOfBytesToWrite=0x2602, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111a8000*, lpNumberOfBytesWritten=0x1133ddfc*=0x2602, lpOverlapped=0x1133de08) returned 1
	[0319.760] GetFileType (hFile=0x1c8) returned 0x1
	[0319.760] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x2602, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.760] GetFileType (hFile=0x1c8) returned 0x1
	[0319.760] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.760] WriteFile (in: hFile=0x1c8, lpBuffer=0x11186380*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11186380*, lpNumberOfBytesWritten=0x1133ddfc*=0x224, lpOverlapped=0x1133de08) returned 1
	[0319.760] GetFileType (hFile=0x1c8) returned 0x1
	[0319.761] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x2602, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.761] CloseHandle (hObject=0x1c8) returned 1
	[0319.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf.tl30z")) returned 0x220
	[0319.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.764] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.767] SetEvent (hEvent=0x284) returned 1
	[0319.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf")) returned 0x220
	[0319.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF", dwFileAttributes=0x220) returned 1
	[0319.768] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0319.849] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0319.849] ReadFile (in: hFile=0x1c8, lpBuffer=0x111c0000, nNumberOfBytesToRead=0x1aba, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x111c0000*, lpNumberOfBytesRead=0x11425e18*=0x1aba, lpOverlapped=0x0) returned 1
	[0319.854] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0319.854] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0319.854] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11372802 | out: pbBuffer=0x11372802) returned 1
	[0319.854] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113728af | out: pbBuffer=0x113728af) returned 1
	[0319.855] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0319.855] GetFileType (hFile=0x1c8) returned 0x1
	[0319.855] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.855] WriteFile (in: hFile=0x1c8, lpBuffer=0x11360000*, nNumberOfBytesToWrite=0x1aba, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11360000*, lpNumberOfBytesWritten=0x11031dfc*=0x1aba, lpOverlapped=0x11031e08) returned 1
	[0319.856] GetFileType (hFile=0x1c8) returned 0x1
	[0319.856] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1aba, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.856] GetFileType (hFile=0x1c8) returned 0x1
	[0319.856] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.856] WriteFile (in: hFile=0x1c8, lpBuffer=0x1135ca80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1135ca80*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0319.930] GetFileType (hFile=0x1c8) returned 0x1
	[0319.930] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1aba, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.930] CloseHandle (hObject=0x1c8) returned 1
	[0319.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf.tl30z")) returned 0x220
	[0319.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.933] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0319.937] SetEvent (hEvent=0x164) returned 1
	[0319.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf")) returned 0x220
	[0319.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF", dwFileAttributes=0x220) returned 1
	[0319.938] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0320.039] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0320.039] ReadFile (in: hFile=0x1c8, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x62b6, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x11425e18*=0x62b6, lpOverlapped=0x0) returned 1
	[0320.045] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3c0 | out: pbBuffer=0x1140f3c0) returned 1
	[0320.045] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138bd02 | out: pbBuffer=0x1138bd02) returned 1
	[0320.046] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138bdb2 | out: pbBuffer=0x1138bdb2) returned 1
	[0320.046] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3f0 | out: pbBuffer=0x1140f3f0) returned 1
	[0320.047] GetFileType (hFile=0x1c8) returned 0x1
	[0320.047] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.047] WriteFile (in: hFile=0x1c8, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x62b6, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1133bdfc*=0x62b6, lpOverlapped=0x1133be08) returned 1
	[0320.048] GetFileType (hFile=0x1c8) returned 0x1
	[0320.048] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x62b6, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.048] GetFileType (hFile=0x1c8) returned 0x1
	[0320.048] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.048] WriteFile (in: hFile=0x1c8, lpBuffer=0x1132c700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1132c700*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0320.048] GetFileType (hFile=0x1c8) returned 0x1
	[0320.049] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x62b6, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.049] CloseHandle (hObject=0x1c8) returned 1
	[0320.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf.tl30z")) returned 0x220
	[0320.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.052] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.055] SetEvent (hEvent=0x164) returned 1
	[0320.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00732_.wmf")) returned 0x220
	[0320.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00732_.WMF", dwFileAttributes=0x220) returned 1
	[0320.056] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00732_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00732_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00732_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00732_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00732_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.135] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0320.135] ReadFile (in: hFile=0x224, lpBuffer=0x1144a000, nNumberOfBytesToRead=0x13fc, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1144a000*, lpNumberOfBytesRead=0x11425e18*=0x13fc, lpOverlapped=0x0) returned 1
	[0320.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f820 | out: pbBuffer=0x1140f820) returned 1
	[0320.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f818 | out: pbBuffer=0x1140f818) returned 1
	[0320.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d5c02 | out: pbBuffer=0x110d5c02) returned 1
	[0320.139] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d5c03 | out: pbBuffer=0x110d5c03) returned 1
	[0320.140] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d5c28 | out: pbBuffer=0x110d5c28) returned 1
	[0320.140] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d5cc2 | out: pbBuffer=0x110d5cc2) returned 1
	[0320.140] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f850 | out: pbBuffer=0x1140f850) returned 1
	[0320.140] GetFileType (hFile=0x224) returned 0x1
	[0320.140] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.140] WriteFile (in: hFile=0x224, lpBuffer=0x1146e000*, nNumberOfBytesToWrite=0x13fc, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1146e000*, lpNumberOfBytesWritten=0x1133bdfc*=0x13fc, lpOverlapped=0x1133be08) returned 1
	[0320.141] GetFileType (hFile=0x224) returned 0x1
	[0320.141] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x13fc, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.141] GetFileType (hFile=0x224) returned 0x1
	[0320.141] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.141] WriteFile (in: hFile=0x224, lpBuffer=0x110bf180*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110bf180*, lpNumberOfBytesWritten=0x1133bdfc*=0x233, lpOverlapped=0x1133be08) returned 1
	[0320.141] GetFileType (hFile=0x224) returned 0x1
	[0320.142] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x13fc, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.142] CloseHandle (hObject=0x224) returned 1
	[0320.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00732_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00732_.wmf.tl30z")) returned 0x220
	[0320.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00732_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.144] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.147] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00783_.wmf")) returned 0x220
	[0320.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00783_.WMF", dwFileAttributes=0x220) returned 1
	[0320.148] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00783_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00783_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00783_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00783_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00783_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.215] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0320.215] ReadFile (in: hFile=0x224, lpBuffer=0x11200000, nNumberOfBytesToRead=0x16ee, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11200000*, lpNumberOfBytesRead=0x11425e18*=0x16ee, lpOverlapped=0x0) returned 1
	[0320.221] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6830 | out: pbBuffer=0x113e6830) returned 1
	[0320.221] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1118d102 | out: pbBuffer=0x1118d102) returned 1
	[0320.221] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118d1a9 | out: pbBuffer=0x1118d1a9) returned 1
	[0320.221] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118d1a9 | out: pbBuffer=0x1118d1a9) returned 1
	[0320.222] SetEvent (hEvent=0x164) returned 1
	[0320.222] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6860 | out: pbBuffer=0x113e6860) returned 1
	[0320.222] GetFileType (hFile=0x224) returned 0x1
	[0320.222] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.223] WriteFile (in: hFile=0x224, lpBuffer=0x1122e000*, nNumberOfBytesToWrite=0x16ee, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1122e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x16ee, lpOverlapped=0x1102be08) returned 1
	[0320.223] GetFileType (hFile=0x224) returned 0x1
	[0320.223] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x16ee, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.223] GetFileType (hFile=0x224) returned 0x1
	[0320.223] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.223] WriteFile (in: hFile=0x224, lpBuffer=0x11220380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11220380*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0320.224] GetFileType (hFile=0x224) returned 0x1
	[0320.224] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x16ee, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.224] CloseHandle (hObject=0x224) returned 1
	[0320.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00783_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00783_.wmf.tl30z")) returned 0x220
	[0320.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00783_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.229] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.230] SetEvent (hEvent=0x164) returned 1
	[0320.230] SetEvent (hEvent=0x25c) returned 1
	[0320.230] SwitchToThread () returned 1
	[0320.232] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.234] SetEvent (hEvent=0x25c) returned 1
	[0320.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00910_.wmf")) returned 0x220
	[0320.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00910_.WMF", dwFileAttributes=0x220) returned 1
	[0320.235] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00910_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00910_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00910_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00910_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00910_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0320.313] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0320.313] ReadFile (in: hFile=0x1cc, lpBuffer=0x113f4000, nNumberOfBytesToRead=0x1898, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x113f4000*, lpNumberOfBytesRead=0x11319e18*=0x1898, lpOverlapped=0x0) returned 1
	[0320.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0320.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0320.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113dc802 | out: pbBuffer=0x113dc802) returned 1
	[0320.318] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113dc8d2 | out: pbBuffer=0x113dc8d2) returned 1
	[0320.319] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0320.319] GetFileType (hFile=0x1cc) returned 0x1
	[0320.319] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.319] WriteFile (in: hFile=0x1cc, lpBuffer=0x11330000*, nNumberOfBytesToWrite=0x1898, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11330000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1898, lpOverlapped=0x1133de08) returned 1
	[0320.319] GetFileType (hFile=0x1cc) returned 0x1
	[0320.320] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x1898, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.320] GetFileType (hFile=0x1cc) returned 0x1
	[0320.320] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.320] WriteFile (in: hFile=0x1cc, lpBuffer=0x11146a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11146a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x227, lpOverlapped=0x1133de08) returned 1
	[0320.320] GetFileType (hFile=0x1cc) returned 0x1
	[0320.321] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x1898, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.321] CloseHandle (hObject=0x1cc) returned 1
	[0320.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00910_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00910_.wmf.tl30z")) returned 0x220
	[0320.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00910_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.323] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00916_.wmf")) returned 0x220
	[0320.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00916_.WMF", dwFileAttributes=0x220) returned 1
	[0320.326] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00916_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00916_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00916_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00916_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00916_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0320.410] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0320.410] ReadFile (in: hFile=0x1d8, lpBuffer=0x111d9300, nNumberOfBytesToRead=0x1270, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x111d9300*, lpNumberOfBytesRead=0x11319e18*=0x1270, lpOverlapped=0x0) returned 1
	[0320.415] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f560 | out: pbBuffer=0x1140f560) returned 1
	[0320.415] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e4902 | out: pbBuffer=0x111e4902) returned 1
	[0320.416] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e4909 | out: pbBuffer=0x111e4909) returned 1
	[0320.416] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f590 | out: pbBuffer=0x1140f590) returned 1
	[0320.416] GetFileType (hFile=0x1d8) returned 0x1
	[0320.416] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.416] WriteFile (in: hFile=0x1d8, lpBuffer=0x113c6000*, nNumberOfBytesToWrite=0x1270, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x113c6000*, lpNumberOfBytesWritten=0x1102ddfc*=0x1270, lpOverlapped=0x1102de08) returned 1
	[0320.417] GetFileType (hFile=0x1d8) returned 0x1
	[0320.417] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1270, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.417] GetFileType (hFile=0x1d8) returned 0x1
	[0320.417] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.417] WriteFile (in: hFile=0x1d8, lpBuffer=0x11369c00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11369c00*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0320.418] GetFileType (hFile=0x1d8) returned 0x1
	[0320.418] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1270, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.418] CloseHandle (hObject=0x1d8) returned 1
	[0320.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00916_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00916_.wmf.tl30z")) returned 0x220
	[0320.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00916_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.422] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.426] SetEvent (hEvent=0x2a8) returned 1
	[0320.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00941_.wmf")) returned 0x220
	[0320.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00941_.WMF", dwFileAttributes=0x220) returned 1
	[0320.427] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00941_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00941_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00941_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00941_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00941_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0320.514] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0320.514] ReadFile (in: hFile=0x1c8, lpBuffer=0x1144e000, nNumberOfBytesToRead=0x1708, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1144e000*, lpNumberOfBytesRead=0x11319e18*=0x1708, lpOverlapped=0x0) returned 1
	[0320.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4a0 | out: pbBuffer=0x1104e4a0) returned 1
	[0320.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b3e02 | out: pbBuffer=0x110b3e02) returned 1
	[0320.520] SetEvent (hEvent=0x284) returned 1
	[0320.521] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4d0 | out: pbBuffer=0x1104e4d0) returned 1
	[0320.521] GetFileType (hFile=0x1c8) returned 0x1
	[0320.522] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.523] WriteFile (in: hFile=0x1c8, lpBuffer=0x11bca000*, nNumberOfBytesToWrite=0x1708, lpNumberOfBytesWritten=0x110a9dfc, lpOverlapped=0x110a9e08 | out: lpBuffer=0x11bca000*, lpNumberOfBytesWritten=0x110a9dfc*=0x1708, lpOverlapped=0x110a9e08) returned 1
	[0320.523] GetFileType (hFile=0x1c8) returned 0x1
	[0320.523] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1708, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.523] GetFileType (hFile=0x1c8) returned 0x1
	[0320.523] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.524] WriteFile (in: hFile=0x1c8, lpBuffer=0x11464700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x110a9dfc, lpOverlapped=0x110a9e08 | out: lpBuffer=0x11464700*, lpNumberOfBytesWritten=0x110a9dfc*=0x227, lpOverlapped=0x110a9e08) returned 1
	[0320.524] GetFileType (hFile=0x1c8) returned 0x1
	[0320.524] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1708, lpNewFilePointer=0x0, dwMoveMethod=0x110a9de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.524] CloseHandle (hObject=0x1c8) returned 1
	[0320.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00941_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00941_.wmf.tl30z")) returned 0x220
	[0320.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00941_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.531] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.534] SetEvent (hEvent=0x284) returned 1
	[0320.534] SetEvent (hEvent=0x164) returned 1
	[0320.535] SwitchToThread () returned 1
	[0320.563] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.982] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.986] SetEvent (hEvent=0x1e8) returned 1
	[0320.986] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0320.992] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.086] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.113] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.131] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.151] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.171] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.189] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.217] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.238] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.256] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.276] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.309] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.328] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.345] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.364] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.386] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.405] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.415] SetEvent (hEvent=0x1e8) returned 1
	[0321.415] SetEvent (hEvent=0x134) returned 1
	[0321.415] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x0
	[0321.419] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x102
	[0321.420] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.421] SetEvent (hEvent=0x284) returned 1
	[0321.421] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x1) returned 0x0
	[0321.459] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.478] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.512] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.532] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.551] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.570] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.592] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.611] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.631] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.650] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.669] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.687] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.708] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.730] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.749] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.768] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.786] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) returned 0x0
	[0321.806] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xffffffff) 

Thread:
	id = 48
	os_tid = 0x738

	[0213.172] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x335fff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x335fff30*=0x280) returned 1
	[0213.172] VirtualQuery (in: lpAddress=0x335fff40, lpBuffer=0x335fff40, dwLength=0x1c | out: lpBuffer=0x335fff40*(BaseAddress=0x335ff000, AllocationBase=0x33500000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0213.172] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x284
	[0213.173] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0213.203] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0213.546] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0214.067] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0214.342] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0214.811] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0214.884] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0216.043] SetEvent (hEvent=0x1c4) returned 1
	[0216.044] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 0x20
	[0216.044] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0216.044] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.tl30z"), dwFlags=0x1) returned 1
	[0223.400] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0223.417] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1155ae08 | out: lpMode=0x1155ae08) returned 0
	[0223.417] ReadFile (in: hFile=0x1b4, lpBuffer=0x115e3000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x1155ae18, lpOverlapped=0x0 | out: lpBuffer=0x115e3000*, lpNumberOfBytesRead=0x1155ae18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0223.430] VirtualAlloc (lpAddress=0x116e0000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x116e0000
	[0223.431] VirtualAlloc (lpAddress=0x116e2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x116e2000
	[0223.432] VirtualAlloc (lpAddress=0x116e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x116e4000
	[0223.434] VirtualAlloc (lpAddress=0x116e8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x116e8000
	[0223.435] VirtualAlloc (lpAddress=0x116ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x116ea000
	[0223.436] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e2d0 | out: pbBuffer=0x1104e2d0) returned 1
	[0223.436] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1107b602 | out: pbBuffer=0x1107b602) returned 1
	[0223.437] VirtualAlloc (lpAddress=0x116ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x116ec000
	[0223.438] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e300 | out: pbBuffer=0x1104e300) returned 1
	[0223.438] VirtualAlloc (lpAddress=0x116ee000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x116ee000
	[0223.441] VirtualAlloc (lpAddress=0x116f2000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x116f2000
	[0223.442] VirtualAlloc (lpAddress=0x116f4000, dwSize=0xc000, flAllocationType=0x1000, flProtect=0x4) returned 0x116f4000
	[0223.445] VirtualAlloc (lpAddress=0x11700000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x11700000
	[0223.446] VirtualAlloc (lpAddress=0x11702000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x11702000
	[0223.447] VirtualAlloc (lpAddress=0x11706000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x11706000
	[0223.449] GetFileType (hFile=0x1b4) returned 0x1
	[0223.449] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11299de0 | out: lpNewFilePointer=0x0) returned 1
	[0223.449] WriteFile (in: hFile=0x1b4, lpBuffer=0x11706000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x11299dfc, lpOverlapped=0x11299e08 | out: lpBuffer=0x11706000*, lpNumberOfBytesWritten=0x11299dfc*=0x6ccc, lpOverlapped=0x11299e08) returned 1
	[0223.450] GetFileType (hFile=0x1b4) returned 0x1
	[0223.450] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11299de0 | out: lpNewFilePointer=0x0) returned 1
	[0223.450] GetFileType (hFile=0x1b4) returned 0x1
	[0223.450] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11299de0 | out: lpNewFilePointer=0x0) returned 1
	[0223.451] WriteFile (in: hFile=0x1b4, lpBuffer=0x11329880*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11299dfc, lpOverlapped=0x11299e08 | out: lpBuffer=0x11329880*, lpNumberOfBytesWritten=0x11299dfc*=0x230, lpOverlapped=0x11299e08) returned 1
	[0223.451] GetFileType (hFile=0x1b4) returned 0x1
	[0223.451] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x11299de0 | out: lpNewFilePointer=0x0) returned 1
	[0223.451] CloseHandle (hObject=0x1b4) returned 1
	[0223.469] VirtualAlloc (lpAddress=0x1170e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x1170e000
	[0223.470] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.tl30z")) returned 0x20
	[0223.470] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0223.603] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 0x20
	[0223.603] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0223.604] MoveFileExW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.tl30z"), dwFlags=0x1) returned 1
	[0225.375] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0225.378] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x11423e08 | out: lpMode=0x11423e08) returned 0
	[0225.378] ReadFile (in: hFile=0x1d0, lpBuffer=0x1169c000, nNumberOfBytesToRead=0x6ccc, lpNumberOfBytesRead=0x11423e18, lpOverlapped=0x0 | out: lpBuffer=0x1169c000*, lpNumberOfBytesRead=0x11423e18*=0x6ccc, lpOverlapped=0x0) returned 1
	[0225.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e730 | out: pbBuffer=0x1104e730) returned 1
	[0225.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e728 | out: pbBuffer=0x1104e728) returned 1
	[0225.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1172fa02 | out: pbBuffer=0x1172fa02) returned 1
	[0225.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1172fa05 | out: pbBuffer=0x1172fa05) returned 1
	[0225.387] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1172fa5d | out: pbBuffer=0x1172fa5d) returned 1
	[0225.388] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1172fade | out: pbBuffer=0x1172fade) returned 1
	[0225.388] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e760 | out: pbBuffer=0x1104e760) returned 1
	[0225.389] SetEvent (hEvent=0x23c) returned 1
	[0225.389] GetFileType (hFile=0x1d0) returned 0x1
	[0225.389] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0225.390] WriteFile (in: hFile=0x1d0, lpBuffer=0x111f6000*, nNumberOfBytesToWrite=0x6ccc, lpNumberOfBytesWritten=0x115dbdfc, lpOverlapped=0x115dbe08 | out: lpBuffer=0x111f6000*, lpNumberOfBytesWritten=0x115dbdfc*=0x6ccc, lpOverlapped=0x115dbe08) returned 1
	[0225.390] GetFileType (hFile=0x1d0) returned 0x1
	[0225.390] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0225.390] GetFileType (hFile=0x1d0) returned 0x1
	[0225.390] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0225.391] WriteFile (in: hFile=0x1d0, lpBuffer=0x116b8380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x115dbdfc, lpOverlapped=0x115dbe08 | out: lpBuffer=0x116b8380*, lpNumberOfBytesWritten=0x115dbdfc*=0x230, lpOverlapped=0x115dbe08) returned 1
	[0225.391] GetFileType (hFile=0x1d0) returned 0x1
	[0225.391] SetFilePointerEx (in: hFile=0x1d0, liDistanceToMove=0x6ccc, lpNewFilePointer=0x0, dwMoveMethod=0x115dbde0 | out: lpNewFilePointer=0x0) returned 1
	[0225.391] CloseHandle (hObject=0x1d0) returned 1
	[0225.447] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.tl30z" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.tl30z")) returned 0x20
	[0225.447] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.tl30z", dwFileAttributes=0x21) returned 1
	[0225.483] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0225.489] SetEvent (hEvent=0x23c) returned 1
	[0225.489] SetEvent (hEvent=0x12c) returned 1
	[0225.490] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0225.639] SetEvent (hEvent=0x150) returned 1
	[0225.639] SetEvent (hEvent=0x264) returned 1
	[0225.639] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0225.748] SetEvent (hEvent=0x150) returned 1
	[0225.748] SetEvent (hEvent=0x1e8) returned 1
	[0225.749] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0226.220] SetEvent (hEvent=0x150) returned 1
	[0226.220] SetEvent (hEvent=0x12c) returned 1
	[0226.220] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0226.367] SetEvent (hEvent=0x150) returned 1
	[0226.367] SetEvent (hEvent=0x1f0) returned 1
	[0226.367] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0226.549] SetEvent (hEvent=0x150) returned 1
	[0226.549] SetEvent (hEvent=0x23c) returned 1
	[0226.549] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0226.706] SetEvent (hEvent=0x150) returned 1
	[0226.706] SetEvent (hEvent=0x264) returned 1
	[0226.706] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0226.860] SetEvent (hEvent=0x150) returned 1
	[0226.860] SetEvent (hEvent=0x1e8) returned 1
	[0226.860] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0226.902] SetEvent (hEvent=0x150) returned 1
	[0226.902] SetEvent (hEvent=0x12c) returned 1
	[0226.902] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0227.113] SetEvent (hEvent=0x150) returned 1
	[0227.113] SetEvent (hEvent=0x1f0) returned 1
	[0227.113] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0227.634] SetEvent (hEvent=0x150) returned 1
	[0227.634] SetEvent (hEvent=0x25c) returned 1
	[0227.635] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0227.687] SetEvent (hEvent=0x150) returned 1
	[0227.687] SetEvent (hEvent=0x264) returned 1
	[0227.687] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0227.748] SetEvent (hEvent=0x150) returned 1
	[0227.748] SetEvent (hEvent=0x1e8) returned 1
	[0227.748] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0227.854] SetEvent (hEvent=0x150) returned 1
	[0227.854] SetEvent (hEvent=0x12c) returned 1
	[0227.854] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0227.905] SetEvent (hEvent=0x150) returned 1
	[0227.905] SetEvent (hEvent=0x1f0) returned 1
	[0227.905] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0228.141] SetEvent (hEvent=0x150) returned 1
	[0228.141] SetEvent (hEvent=0x25c) returned 1
	[0228.141] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0228.211] SetEvent (hEvent=0x150) returned 1
	[0228.211] SetEvent (hEvent=0x264) returned 1
	[0228.211] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0228.266] SetEvent (hEvent=0x150) returned 1
	[0228.266] SetEvent (hEvent=0x1e8) returned 1
	[0228.266] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0229.040] SetEvent (hEvent=0x150) returned 1
	[0229.040] SetEvent (hEvent=0x26c) returned 1
	[0229.040] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0229.096] SetEvent (hEvent=0x150) returned 1
	[0229.096] SetEvent (hEvent=0x1f0) returned 1
	[0229.096] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0229.190] SetEvent (hEvent=0x150) returned 1
	[0229.190] SetEvent (hEvent=0x25c) returned 1
	[0229.190] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0229.317] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0229.404] SetEvent (hEvent=0x150) returned 1
	[0229.404] SetEvent (hEvent=0x1e8) returned 1
	[0229.404] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0229.605] SetEvent (hEvent=0x150) returned 1
	[0229.605] SetEvent (hEvent=0x264) returned 1
	[0229.605] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0229.775] SetEvent (hEvent=0x150) returned 1
	[0229.775] SetEvent (hEvent=0x26c) returned 1
	[0229.775] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0229.839] SetEvent (hEvent=0x150) returned 1
	[0229.839] SetEvent (hEvent=0x25c) returned 1
	[0229.839] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0230.335] SetEvent (hEvent=0x150) returned 1
	[0230.335] SetEvent (hEvent=0x23c) returned 1
	[0230.335] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0230.471] SetEvent (hEvent=0x150) returned 1
	[0230.471] SetEvent (hEvent=0x1f0) returned 1
	[0230.471] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0230.578] SetEvent (hEvent=0x150) returned 1
	[0230.578] SetEvent (hEvent=0x264) returned 1
	[0230.578] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0230.679] SetEvent (hEvent=0x150) returned 1
	[0230.679] SetEvent (hEvent=0x26c) returned 1
	[0230.679] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0230.969] SetEvent (hEvent=0x150) returned 1
	[0230.969] SetEvent (hEvent=0x1e8) returned 1
	[0230.969] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x1) returned 0x102
	[0230.977] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0230.978] SetEvent (hEvent=0x1e8) returned 1
	[0230.978] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0231.021] SetEvent (hEvent=0x23c) returned 1
	[0231.021] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0231.161] SetEvent (hEvent=0x1f0) returned 1
	[0231.162] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0231.294] SetEvent (hEvent=0x264) returned 1
	[0231.294] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0231.383] SetEvent (hEvent=0x150) returned 1
	[0231.383] SetEvent (hEvent=0x26c) returned 1
	[0231.383] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0231.956] SetEvent (hEvent=0x12c) returned 1
	[0231.956] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0232.199] SetEvent (hEvent=0x12c) returned 1
	[0232.199] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0232.331] SetEvent (hEvent=0x23c) returned 1
	[0232.331] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0232.466] SetEvent (hEvent=0x264) returned 1
	[0232.466] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0232.641] SetEvent (hEvent=0x26c) returned 1
	[0232.641] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0232.757] SetEvent (hEvent=0x25c) returned 1
	[0232.757] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0232.794] SetEvent (hEvent=0x1f0) returned 1
	[0232.794] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0232.840] SetEvent (hEvent=0x23c) returned 1
	[0232.840] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0233.118] SetEvent (hEvent=0x264) returned 1
	[0233.119] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000)) returned 1
	[0233.407] SetEvent (hEvent=0x26c) returned 1
	[0233.407] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0233.895] SetEvent (hEvent=0x150) returned 1
	[0233.895] SetEvent (hEvent=0x12c) returned 1
	[0233.895] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1
	[0234.096] SetEvent (hEvent=0x25c) returned 1
	[0234.096] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0234.667] SetEvent (hEvent=0x25c) returned 1
	[0234.667] GetFileAttributesExW (in: lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000)) returned 1
	[0234.749] SetEvent (hEvent=0x264) returned 1
	[0234.749] GetFileAttributesExW (in: lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), fInfoLevelId=0x0, lpFileInformation=0x112f1c28 | out: lpFileInformation=0x112f1c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0235.057] SetEvent (hEvent=0x26c) returned 1
	[0235.058] CreateFileW (lpFileName="C:\\Logs\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\logs\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0235.344] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x112f1e34 | out: lpMode=0x112f1e34) returned 0
	[0235.345] WriteFile (in: hFile=0x1cc, lpBuffer=0x1108e000*, nNumberOfBytesToWrite=0x292, lpNumberOfBytesWritten=0x112f1e04, lpOverlapped=0x0 | out: lpBuffer=0x1108e000*, lpNumberOfBytesWritten=0x112f1e04*=0x292, lpOverlapped=0x0) returned 1
	[0235.373] CloseHandle (hObject=0x1cc) returned 1
	[0235.432] GetFileAttributesExW (in: lpFileName="C:\\Logs" (normalized: "c:\\logs"), fInfoLevelId=0x0, lpFileInformation=0x112f1cac | out: lpFileInformation=0x112f1cac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0x8fca20e9, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x8fca20e9, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1
	[0235.813] CreateFileW (lpFileName="C:\\Program Files\\" (normalized: "c:\\program files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0235.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x112f1b54 | out: lpFindFileData=0x112f1b54*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x15e2d9e1, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x15e2d9e1, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f20b0
	[0235.814] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x15e2d9e1, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0x15e2d9e1, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.816] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0235.816] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0235.816] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb302665, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0xb302665, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb28ffd6, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0xb28ffd6, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e68d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709ed3a7, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709ed3a7, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xb28ffd6, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0xb28ffd6, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xb302665, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0xb302665, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8f11cc1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x711dc3b4, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde0ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xefd0cd0, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0xefd0cd0, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1
	[0235.817] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9123675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0235.818] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb302665, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0xb302665, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1
	[0235.818] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb269e4f, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0xb269e4f, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1
	[0235.818] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1
	[0235.818] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb269e4f, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0xb269e4f, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0235.818] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1
	[0235.818] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb32896a, ftLastAccessTime.dwHighDateTime=0x1d5c154, ftLastWriteTime.dwLowDateTime=0xb32896a, ftLastWriteTime.dwHighDateTime=0x1d5c154, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0235.818] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1
	[0235.818] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1
	[0235.818] FindNextFileW (in: hFindFile=0x7f20b0, lpFindFileData=0x112f1bd0 | out: lpFindFileData=0x112f1bd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0235.818] FindClose (in: hFindFile=0x7f20b0 | out: hFindFile=0x7f20b0) returned 1
	[0235.819] CreateFileW (lpFileName="C:\\Program Files\\Java\\" (normalized: "c:\\program files\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0235.819] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*", lpFindFileData=0x112f1ad0 | out: lpFindFileData=0x112f1ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f2370
	[0235.820] FindNextFileW (in: hFindFile=0x7f2370, lpFindFileData=0x112f1b4c | out: lpFindFileData=0x112f1b4c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.820] FindNextFileW (in: hFindFile=0x7f2370, lpFindFileData=0x112f1b4c | out: lpFindFileData=0x112f1b4c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1
	[0235.820] FindNextFileW (in: hFindFile=0x7f2370, lpFindFileData=0x112f1b4c | out: lpFindFileData=0x112f1b4c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0235.820] FindClose (in: hFindFile=0x7f2370 | out: hFindFile=0x7f2370) returned 1
	[0235.820] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\" (normalized: "c:\\program files\\java\\jre1.8.0_144"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0235.821] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x112f1a4c | out: lpFindFileData=0x112f1a4c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f23f0
	[0235.896] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1ac8 | out: lpFindFileData=0x112f1ac8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.896] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1ac8 | out: lpFindFileData=0x112f1ac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1
	[0235.896] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1ac8 | out: lpFindFileData=0x112f1ac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1
	[0235.897] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1ac8 | out: lpFindFileData=0x112f1ac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1
	[0235.897] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1ac8 | out: lpFindFileData=0x112f1ac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0235.897] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1ac8 | out: lpFindFileData=0x112f1ac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1
	[0235.897] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1ac8 | out: lpFindFileData=0x112f1ac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1
	[0235.897] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1ac8 | out: lpFindFileData=0x112f1ac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1
	[0235.897] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1ac8 | out: lpFindFileData=0x112f1ac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1
	[0235.897] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1ac8 | out: lpFindFileData=0x112f1ac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1
	[0235.897] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1ac8 | out: lpFindFileData=0x112f1ac8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0235.897] FindClose (in: hFindFile=0x7f23f0 | out: hFindFile=0x7f23f0) returned 1
	[0235.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x112f1b20 | out: lpFileInformation=0x112f1b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac)) returned 1
	[0235.898] SetEvent (hEvent=0x1f0) returned 1
	[0235.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0x112f1b20 | out: lpFileInformation=0x112f1b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1
	[0235.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x112f1b20 | out: lpFileInformation=0x112f1b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1
	[0235.900] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x112f1b20 | out: lpFileInformation=0x112f1b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1
	[0235.900] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x112f1b20 | out: lpFileInformation=0x112f1b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1
	[0235.900] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x112f1b20 | out: lpFileInformation=0x112f1b20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1
	[0235.901] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0235.901] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x112f19c8 | out: lpFindFileData=0x112f19c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f23f0
	[0235.902] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0235.904] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1
	[0235.904] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1
	[0235.904] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1
	[0235.904] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1
	[0235.904] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1
	[0235.904] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1
	[0235.904] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1
	[0235.904] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1
	[0235.904] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1
	[0235.905] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1
	[0235.906] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1
	[0235.906] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1
	[0235.906] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1
	[0235.906] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1
	[0235.906] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1
	[0235.906] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1
	[0235.906] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1
	[0235.907] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1
	[0235.907] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1
	[0235.907] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1
	[0235.907] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1
	[0235.907] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1
	[0235.907] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1
	[0235.937] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1
	[0235.937] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1
	[0235.938] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1
	[0235.938] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1
	[0235.938] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1
	[0235.938] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1
	[0235.938] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1
	[0235.938] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1
	[0235.938] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1
	[0235.938] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1
	[0235.939] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1
	[0235.939] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1
	[0235.939] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1
	[0235.939] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1
	[0235.939] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1
	[0235.939] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1
	[0235.939] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1
	[0235.939] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1
	[0235.939] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1
	[0235.939] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1
	[0235.940] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1
	[0235.940] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1
	[0235.940] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0235.940] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0235.940] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0235.940] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1
	[0235.940] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1
	[0235.940] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1
	[0235.940] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1
	[0235.940] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1
	[0235.941] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1
	[0235.941] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1
	[0235.941] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1
	[0235.941] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1
	[0235.942] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1
	[0235.942] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1
	[0235.942] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1
	[0235.942] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1
	[0235.943] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1
	[0235.943] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1
	[0235.943] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1
	[0235.943] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1
	[0235.943] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1
	[0235.943] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1
	[0235.943] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1
	[0235.943] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1
	[0235.943] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1
	[0235.943] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1
	[0235.944] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1
	[0235.944] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1
	[0235.944] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1
	[0235.944] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1
	[0235.944] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1
	[0235.944] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1
	[0235.944] FindNextFileW (in: hFindFile=0x7f23f0, lpFindFileData=0x112f1a44 | out: lpFindFileData=0x112f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0235.944] FindClose (in: hFindFile=0x7f23f0 | out: hFindFile=0x7f23f0) returned 1
	[0235.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40)) returned 1
	[0235.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40)) returned 1
	[0235.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40)) returned 1
	[0235.948] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440)) returned 1
	[0235.948] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240)) returned 1
	[0235.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040)) returned 1
	[0235.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040)) returned 1
	[0235.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840)) returned 1
	[0235.966] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440)) returned 1
	[0236.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a9c | out: lpFileInformation=0x112f1a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040)) returned 1
	[0236.035] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0236.035] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x112f1944 | out: lpFindFileData=0x112f1944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7f1df0
	[0236.036] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0236.036] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1
	[0236.036] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1
	[0236.036] FindNextFileW (in: hFindFile=0x7f1df0, lpFindFileData=0x112f19c0 | out: lpFindFileData=0x112f19c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0236.036] FindClose (in: hFindFile=0x7f1df0 | out: hFindFile=0x7f1df0) returned 1
	[0236.037] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840)) returned 1
	[0236.037] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), fInfoLevelId=0x0, lpFileInformation=0x112f1a18 | out: lpFileInformation=0x112f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640)) returned 1
	[0236.037] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\DECRYPT_TL30Z_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\decrypt_tl30z_files.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0
	[0236.095] GetConsoleMode (in: hConsoleHandle=0x1d0, lpMode=0x112f1c24 | out: lpMode=0x112f1c24) returned 0
	[0236.096] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0236.495] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0236.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 0x20
	[0236.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg", dwFileAttributes=0x20) returned 1
	[0236.613] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.tl30z"), dwFlags=0x1) returned 1
	[0236.716] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0237.091] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0237.894] SetEvent (hEvent=0x1e8) returned 1
	[0237.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar")) returned 0x20
	[0237.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", dwFileAttributes=0x20) returned 1
	[0237.896] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.tl30z"), dwFlags=0x1) returned 1
	[0237.898] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0237.898] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0237.899] ReadFile (in: hFile=0x1cc, lpBuffer=0x11440000, nNumberOfBytesToRead=0x33e68, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x11440000*, lpNumberOfBytesRead=0x1131ce18*=0x33e68, lpOverlapped=0x0) returned 1
	[0237.943] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0237.943] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113e2802 | out: pbBuffer=0x113e2802) returned 1
	[0237.944] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e28e7 | out: pbBuffer=0x113e28e7) returned 1
	[0237.944] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0237.949] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x1) returned 0x102
	[0238.003] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0238.003] SetEvent (hEvent=0x150) returned 1
	[0238.003] SetEvent (hEvent=0x1e8) returned 1
	[0238.004] GetFileType (hFile=0x1cc) returned 0x1
	[0238.004] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0238.005] WriteFile (in: hFile=0x1cc, lpBuffer=0x111ce000*, nNumberOfBytesToWrite=0x33e68, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111ce000*, lpNumberOfBytesWritten=0x1102bdfc*=0x33e68, lpOverlapped=0x1102be08) returned 1
	[0238.007] GetFileType (hFile=0x1cc) returned 0x1
	[0238.007] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x33e68, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0238.007] GetFileType (hFile=0x1cc) returned 0x1
	[0238.007] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0238.007] WriteFile (in: hFile=0x1cc, lpBuffer=0x11414400*, nNumberOfBytesToWrite=0x254, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11414400*, lpNumberOfBytesWritten=0x1102bdfc*=0x254, lpOverlapped=0x1102be08) returned 1
	[0238.052] GetFileType (hFile=0x1cc) returned 0x1
	[0238.052] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x33e68, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0238.052] CloseHandle (hObject=0x1cc) returned 1
	[0238.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.tl30z")) returned 0x20
	[0238.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0238.612] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0238.968] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0239.105] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0239.484] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0239.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 0x20
	[0239.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties", dwFileAttributes=0x20) returned 1
	[0239.682] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.tl30z"), dwFlags=0x1) returned 1
	[0240.136] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0240.144] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0240.144] ReadFile (in: hFile=0x1b4, lpBuffer=0x112c4c00, nNumberOfBytesToRead=0xb2c, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x112c4c00*, lpNumberOfBytesRead=0x1131ae18*=0xb2c, lpOverlapped=0x0) returned 1
	[0240.148] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0240.148] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a1202 | out: pbBuffer=0x112a1202) returned 1
	[0240.149] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a1227 | out: pbBuffer=0x112a1227) returned 1
	[0240.149] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a126d | out: pbBuffer=0x112a126d) returned 1
	[0240.149] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0240.149] GetFileType (hFile=0x1b4) returned 0x1
	[0240.149] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0240.150] WriteFile (in: hFile=0x1b4, lpBuffer=0x11234000*, nNumberOfBytesToWrite=0xb2c, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x11234000*, lpNumberOfBytesWritten=0x112f3dfc*=0xb2c, lpOverlapped=0x112f3e08) returned 1
	[0240.150] GetFileType (hFile=0x1b4) returned 0x1
	[0240.151] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xb2c, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0240.151] GetFileType (hFile=0x1b4) returned 0x1
	[0240.151] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0240.151] WriteFile (in: hFile=0x1b4, lpBuffer=0x112b5880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112f3dfc, lpOverlapped=0x112f3e08 | out: lpBuffer=0x112b5880*, lpNumberOfBytesWritten=0x112f3dfc*=0x22a, lpOverlapped=0x112f3e08) returned 1
	[0240.151] GetFileType (hFile=0x1b4) returned 0x1
	[0240.151] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xb2c, lpNewFilePointer=0x0, dwMoveMethod=0x112f3de0 | out: lpNewFilePointer=0x0) returned 1
	[0240.151] CloseHandle (hObject=0x1b4) returned 1
	[0240.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.tl30z")) returned 0x20
	[0240.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0240.163] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0240.177] SetEvent (hEvent=0x23c) returned 1
	[0240.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 0x20
	[0240.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties", dwFileAttributes=0x20) returned 1
	[0240.178] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.tl30z"), dwFlags=0x1) returned 1
	[0240.803] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0240.809] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0240.809] ReadFile (in: hFile=0x250, lpBuffer=0x11136000, nNumberOfBytesToRead=0x1650, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11136000*, lpNumberOfBytesRead=0x1131ae18*=0x1650, lpOverlapped=0x0) returned 1
	[0240.814] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e9b0 | out: pbBuffer=0x1104e9b0) returned 1
	[0240.814] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e9a8 | out: pbBuffer=0x1104e9a8) returned 1
	[0240.814] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1144f502 | out: pbBuffer=0x1144f502) returned 1
	[0240.814] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144f578 | out: pbBuffer=0x1144f578) returned 1
	[0240.815] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e9e0 | out: pbBuffer=0x1104e9e0) returned 1
	[0240.815] GetFileType (hFile=0x250) returned 0x1
	[0240.815] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.815] WriteFile (in: hFile=0x250, lpBuffer=0x1115c000*, nNumberOfBytesToWrite=0x1650, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1115c000*, lpNumberOfBytesWritten=0x1102bdfc*=0x1650, lpOverlapped=0x1102be08) returned 1
	[0240.816] GetFileType (hFile=0x250) returned 0x1
	[0240.816] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1650, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.816] GetFileType (hFile=0x250) returned 0x1
	[0240.816] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.816] WriteFile (in: hFile=0x250, lpBuffer=0x1114a380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1114a380*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0240.816] GetFileType (hFile=0x250) returned 0x1
	[0240.817] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x1650, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0240.817] CloseHandle (hObject=0x250) returned 1
	[0240.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.tl30z")) returned 0x20
	[0240.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0240.883] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0240.942] SetEvent (hEvent=0x23c) returned 1
	[0240.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20
	[0240.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties", dwFileAttributes=0x20) returned 1
	[0240.943] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.tl30z"), dwFlags=0x1) returned 1
	[0241.710] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0241.741] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0241.742] ReadFile (in: hFile=0x250, lpBuffer=0x1135a000, nNumberOfBytesToRead=0xea8, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1135a000*, lpNumberOfBytesRead=0x1131ae18*=0xea8, lpOverlapped=0x0) returned 1
	[0241.753] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0241.753] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11383302 | out: pbBuffer=0x11383302) returned 1
	[0241.753] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11383380 | out: pbBuffer=0x11383380) returned 1
	[0241.754] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0241.754] GetFileType (hFile=0x250) returned 0x1
	[0241.754] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.755] WriteFile (in: hFile=0x250, lpBuffer=0x1147c000*, nNumberOfBytesToWrite=0xea8, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x1147c000*, lpNumberOfBytesWritten=0x112efdfc*=0xea8, lpOverlapped=0x112efe08) returned 1
	[0241.756] GetFileType (hFile=0x250) returned 0x1
	[0241.756] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xea8, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.756] GetFileType (hFile=0x250) returned 0x1
	[0241.756] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.756] WriteFile (in: hFile=0x250, lpBuffer=0x111c1880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x112efdfc, lpOverlapped=0x112efe08 | out: lpBuffer=0x111c1880*, lpNumberOfBytesWritten=0x112efdfc*=0x22a, lpOverlapped=0x112efe08) returned 1
	[0241.757] GetFileType (hFile=0x250) returned 0x1
	[0241.757] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0xea8, lpNewFilePointer=0x0, dwMoveMethod=0x112efde0 | out: lpNewFilePointer=0x0) returned 1
	[0241.757] CloseHandle (hObject=0x250) returned 1
	[0241.773] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.tl30z")) returned 0x20
	[0241.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.tl30z", dwFileAttributes=0x21) returned 1
	[0241.783] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0242.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar")) returned 0x20
	[0242.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", dwFileAttributes=0x20) returned 1
	[0242.197] MoveFileExW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.tl30z"), dwFlags=0x1) returned 1
	[0244.426] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0244.452] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0244.452] ReadFile (in: hFile=0x1c8, lpBuffer=0x111ca000, nNumberOfBytesToRead=0x22917, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x111ca000*, lpNumberOfBytesRead=0x11287e18*=0x22917, lpOverlapped=0x0) returned 1
	[0244.467] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6280 | out: pbBuffer=0x113e6280) returned 1
	[0244.467] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125b502 | out: pbBuffer=0x1125b502) returned 1
	[0244.467] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125b515 | out: pbBuffer=0x1125b515) returned 1
	[0244.468] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62b0 | out: pbBuffer=0x113e62b0) returned 1
	[0244.472] GetFileType (hFile=0x1c8) returned 0x1
	[0244.472] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.472] WriteFile (in: hFile=0x1c8, lpBuffer=0x111ee000*, nNumberOfBytesToWrite=0x22917, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111ee000*, lpNumberOfBytesWritten=0x11031dfc*=0x22917, lpOverlapped=0x11031e08) returned 1
	[0244.474] GetFileType (hFile=0x1c8) returned 0x1
	[0244.474] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x22917, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.474] GetFileType (hFile=0x1c8) returned 0x1
	[0244.474] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.474] WriteFile (in: hFile=0x1c8, lpBuffer=0x1141a380*, nNumberOfBytesToWrite=0x245, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1141a380*, lpNumberOfBytesWritten=0x11031dfc*=0x245, lpOverlapped=0x11031e08) returned 1
	[0244.515] GetFileType (hFile=0x1c8) returned 0x1
	[0244.515] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x22917, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0244.515] CloseHandle (hObject=0x1c8) returned 1
	[0244.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.tl30z" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.tl30z")) returned 0x20
	[0244.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.tl30z", dwFileAttributes=0x21) returned 1
	[0244.753] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0244.798] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0244.805] SetEvent (hEvent=0x22c) returned 1
	[0244.805] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0244.932] SetEvent (hEvent=0x210) returned 1
	[0244.933] SetEvent (hEvent=0x234) returned 1
	[0244.933] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0244.986] SetEvent (hEvent=0x124) returned 1
	[0244.986] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0300.125] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0300.129] SetEvent (hEvent=0x1b0) returned 1
	[0300.129] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0300.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf")) returned 0x220
	[0300.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF", dwFileAttributes=0x220) returned 1
	[0300.134] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf.tl30z"), dwFlags=0x1) returned 1
	[0300.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0300.187] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11449e08 | out: lpMode=0x11449e08) returned 0
	[0300.187] ReadFile (in: hFile=0x224, lpBuffer=0x110ba000, nNumberOfBytesToRead=0x5700, lpNumberOfBytesRead=0x11449e18, lpOverlapped=0x0 | out: lpBuffer=0x110ba000*, lpNumberOfBytesRead=0x11449e18*=0x5700, lpOverlapped=0x0) returned 1
	[0300.951] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111583e0 | out: pbBuffer=0x111583e0) returned 1
	[0300.951] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11c5fd02 | out: pbBuffer=0x11c5fd02) returned 1
	[0300.952] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c5fd14 | out: pbBuffer=0x11c5fd14) returned 1
	[0300.952] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11c5fd5d | out: pbBuffer=0x11c5fd5d) returned 1
	[0300.953] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158410 | out: pbBuffer=0x11158410) returned 1
	[0300.953] GetFileType (hFile=0x224) returned 0x1
	[0300.953] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b5de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.954] WriteFile (in: hFile=0x224, lpBuffer=0x11436000*, nNumberOfBytesToWrite=0x5700, lpNumberOfBytesWritten=0x113b5dfc, lpOverlapped=0x113b5e08 | out: lpBuffer=0x11436000*, lpNumberOfBytesWritten=0x113b5dfc*=0x5700, lpOverlapped=0x113b5e08) returned 1
	[0300.954] GetFileType (hFile=0x224) returned 0x1
	[0300.954] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5700, lpNewFilePointer=0x0, dwMoveMethod=0x113b5de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.954] GetFileType (hFile=0x224) returned 0x1
	[0300.954] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b5de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.954] WriteFile (in: hFile=0x224, lpBuffer=0x111e8700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x113b5dfc, lpOverlapped=0x113b5e08 | out: lpBuffer=0x111e8700*, lpNumberOfBytesWritten=0x113b5dfc*=0x227, lpOverlapped=0x113b5e08) returned 1
	[0300.955] GetFileType (hFile=0x224) returned 0x1
	[0300.955] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5700, lpNewFilePointer=0x0, dwMoveMethod=0x113b5de0 | out: lpNewFilePointer=0x0) returned 1
	[0300.955] CloseHandle (hObject=0x224) returned 1
	[0301.018] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf.tl30z")) returned 0x220
	[0301.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.125] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.136] SetEvent (hEvent=0x248) returned 1
	[0301.136] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.159] SetEvent (hEvent=0x1e0) returned 1
	[0301.160] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.163] SetEvent (hEvent=0x164) returned 1
	[0301.163] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf")) returned 0x220
	[0301.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF", dwFileAttributes=0x220) returned 1
	[0301.169] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0301.242] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0301.242] ReadFile (in: hFile=0x1d8, lpBuffer=0x11382000, nNumberOfBytesToRead=0xcbe, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11382000*, lpNumberOfBytesRead=0x11428e18*=0xcbe, lpOverlapped=0x0) returned 1
	[0301.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332380 | out: pbBuffer=0x11332380) returned 1
	[0301.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11413202 | out: pbBuffer=0x11413202) returned 1
	[0301.247] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323b0 | out: pbBuffer=0x113323b0) returned 1
	[0301.248] GetFileType (hFile=0x1d8) returned 0x1
	[0301.248] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.248] WriteFile (in: hFile=0x1d8, lpBuffer=0x111ca000*, nNumberOfBytesToWrite=0xcbe, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x111ca000*, lpNumberOfBytesWritten=0x11339dfc*=0xcbe, lpOverlapped=0x11339e08) returned 1
	[0301.248] GetFileType (hFile=0x1d8) returned 0x1
	[0301.248] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcbe, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.248] GetFileType (hFile=0x1d8) returned 0x1
	[0301.249] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.249] WriteFile (in: hFile=0x1d8, lpBuffer=0x11c13c00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11c13c00*, lpNumberOfBytesWritten=0x11339dfc*=0x230, lpOverlapped=0x11339e08) returned 1
	[0301.249] GetFileType (hFile=0x1d8) returned 0x1
	[0301.249] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcbe, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.249] CloseHandle (hObject=0x1d8) returned 1
	[0301.250] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf.tl30z")) returned 0x220
	[0301.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.254] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.259] SetEvent (hEvent=0x1b0) returned 1
	[0301.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf")) returned 0x220
	[0301.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF", dwFileAttributes=0x220) returned 1
	[0301.260] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0301.356] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0301.356] ReadFile (in: hFile=0x2a0, lpBuffer=0x1111e000, nNumberOfBytesToRead=0xae2, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x1111e000*, lpNumberOfBytesRead=0x1128be18*=0xae2, lpOverlapped=0x0) returned 1
	[0301.363] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0301.363] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1109e802 | out: pbBuffer=0x1109e802) returned 1
	[0301.363] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0301.364] GetFileType (hFile=0x2a0) returned 0x1
	[0301.364] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.364] WriteFile (in: hFile=0x2a0, lpBuffer=0x110de000*, nNumberOfBytesToWrite=0xae2, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110de000*, lpNumberOfBytesWritten=0x1102bdfc*=0xae2, lpOverlapped=0x1102be08) returned 1
	[0301.364] GetFileType (hFile=0x2a0) returned 0x1
	[0301.364] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xae2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.365] GetFileType (hFile=0x2a0) returned 0x1
	[0301.365] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.365] WriteFile (in: hFile=0x2a0, lpBuffer=0x11cace00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11cace00*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0301.365] GetFileType (hFile=0x2a0) returned 0x1
	[0301.365] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xae2, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0301.365] CloseHandle (hObject=0x2a0) returned 1
	[0301.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf.tl30z")) returned 0x220
	[0301.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.383] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.387] SetEvent (hEvent=0x24c) returned 1
	[0301.387] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf")) returned 0x220
	[0301.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF", dwFileAttributes=0x220) returned 1
	[0301.388] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0301.470] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0301.470] ReadFile (in: hFile=0x1fc, lpBuffer=0x11c20000, nNumberOfBytesToRead=0x94c4, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x11c20000*, lpNumberOfBytesRead=0x1128be18*=0x94c4, lpOverlapped=0x0) returned 1
	[0301.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f060 | out: pbBuffer=0x1140f060) returned 1
	[0301.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f058 | out: pbBuffer=0x1140f058) returned 1
	[0301.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11449202 | out: pbBuffer=0x11449202) returned 1
	[0301.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1144921f | out: pbBuffer=0x1144921f) returned 1
	[0301.476] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11449220 | out: pbBuffer=0x11449220) returned 1
	[0301.477] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f090 | out: pbBuffer=0x1140f090) returned 1
	[0301.477] SetEvent (hEvent=0x24c) returned 1
	[0301.478] GetFileType (hFile=0x1fc) returned 0x1
	[0301.478] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.479] WriteFile (in: hFile=0x1fc, lpBuffer=0x11c72000*, nNumberOfBytesToWrite=0x94c4, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11c72000*, lpNumberOfBytesWritten=0x113b3dfc*=0x94c4, lpOverlapped=0x113b3e08) returned 1
	[0301.480] GetFileType (hFile=0x1fc) returned 0x1
	[0301.480] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x94c4, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.480] GetFileType (hFile=0x1fc) returned 0x1
	[0301.480] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.480] WriteFile (in: hFile=0x1fc, lpBuffer=0x11455500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x113b3dfc, lpOverlapped=0x113b3e08 | out: lpBuffer=0x11455500*, lpNumberOfBytesWritten=0x113b3dfc*=0x22d, lpOverlapped=0x113b3e08) returned 1
	[0301.481] GetFileType (hFile=0x1fc) returned 0x1
	[0301.481] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x94c4, lpNewFilePointer=0x0, dwMoveMethod=0x113b3de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.481] CloseHandle (hObject=0x1fc) returned 1
	[0301.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf.tl30z")) returned 0x220
	[0301.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.487] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.489] SetEvent (hEvent=0x24c) returned 1
	[0301.489] SetEvent (hEvent=0x248) returned 1
	[0301.489] SwitchToThread () returned 1
	[0301.526] SwitchToThread () returned 1
	[0301.528] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.551] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.572] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.590] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.609] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.628] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.646] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.666] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.686] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.703] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.725] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.741] SetEvent (hEvent=0x24c) returned 1
	[0301.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf")) returned 0x220
	[0301.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF", dwFileAttributes=0x220) returned 1
	[0301.741] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0301.830] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1128be08 | out: lpMode=0x1128be08) returned 0
	[0301.830] ReadFile (in: hFile=0x1b4, lpBuffer=0x112f0500, nNumberOfBytesToRead=0x2210, lpNumberOfBytesRead=0x1128be18, lpOverlapped=0x0 | out: lpBuffer=0x112f0500*, lpNumberOfBytesRead=0x1128be18*=0x2210, lpOverlapped=0x0) returned 1
	[0301.840] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6270 | out: pbBuffer=0x113e6270) returned 1
	[0301.840] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6268 | out: pbBuffer=0x113e6268) returned 1
	[0301.840] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261202 | out: pbBuffer=0x11261202) returned 1
	[0301.840] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e62a0 | out: pbBuffer=0x113e62a0) returned 1
	[0301.840] GetFileType (hFile=0x1b4) returned 0x1
	[0301.841] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11ce1de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.841] WriteFile (in: hFile=0x1b4, lpBuffer=0x113f4000*, nNumberOfBytesToWrite=0x2210, lpNumberOfBytesWritten=0x11ce1dfc, lpOverlapped=0x11ce1e08 | out: lpBuffer=0x113f4000*, lpNumberOfBytesWritten=0x11ce1dfc*=0x2210, lpOverlapped=0x11ce1e08) returned 1
	[0301.842] GetFileType (hFile=0x1b4) returned 0x1
	[0301.842] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2210, lpNewFilePointer=0x0, dwMoveMethod=0x11ce1de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.842] GetFileType (hFile=0x1b4) returned 0x1
	[0301.842] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11ce1de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.842] WriteFile (in: hFile=0x1b4, lpBuffer=0x11463c00*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x11ce1dfc, lpOverlapped=0x11ce1e08 | out: lpBuffer=0x11463c00*, lpNumberOfBytesWritten=0x11ce1dfc*=0x221, lpOverlapped=0x11ce1e08) returned 1
	[0301.843] GetFileType (hFile=0x1b4) returned 0x1
	[0301.843] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2210, lpNewFilePointer=0x0, dwMoveMethod=0x11ce1de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.843] CloseHandle (hObject=0x1b4) returned 1
	[0301.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf.tl30z")) returned 0x220
	[0301.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0301.850] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0301.879] SetEvent (hEvent=0x24c) returned 1
	[0301.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf")) returned 0x220
	[0301.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF", dwFileAttributes=0x220) returned 1
	[0301.879] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf.tl30z"), dwFlags=0x1) returned 1
	[0301.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0301.987] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0301.987] ReadFile (in: hFile=0x1d8, lpBuffer=0x111ea000, nNumberOfBytesToRead=0xcd10, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x111ea000*, lpNumberOfBytesRead=0x11319e18*=0xcd10, lpOverlapped=0x0) returned 1
	[0301.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0301.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261c02 | out: pbBuffer=0x11261c02) returned 1
	[0301.996] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0301.997] SetEvent (hEvent=0x248) returned 1
	[0301.998] GetFileType (hFile=0x1d8) returned 0x1
	[0301.998] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11ce1de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.998] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bfc000*, nNumberOfBytesToWrite=0xcd10, lpNumberOfBytesWritten=0x11ce1dfc, lpOverlapped=0x11ce1e08 | out: lpBuffer=0x11bfc000*, lpNumberOfBytesWritten=0x11ce1dfc*=0xcd10, lpOverlapped=0x11ce1e08) returned 1
	[0301.999] GetFileType (hFile=0x1d8) returned 0x1
	[0301.999] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcd10, lpNewFilePointer=0x0, dwMoveMethod=0x11ce1de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.999] GetFileType (hFile=0x1d8) returned 0x1
	[0301.999] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11ce1de0 | out: lpNewFilePointer=0x0) returned 1
	[0301.999] WriteFile (in: hFile=0x1d8, lpBuffer=0x111fca80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11ce1dfc, lpOverlapped=0x11ce1e08 | out: lpBuffer=0x111fca80*, lpNumberOfBytesWritten=0x11ce1dfc*=0x22d, lpOverlapped=0x11ce1e08) returned 1
	[0302.000] GetFileType (hFile=0x1d8) returned 0x1
	[0302.000] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcd10, lpNewFilePointer=0x0, dwMoveMethod=0x11ce1de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.000] CloseHandle (hObject=0x1d8) returned 1
	[0302.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf.tl30z")) returned 0x220
	[0302.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.006] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0302.008] SetEvent (hEvent=0x248) returned 1
	[0302.008] SetEvent (hEvent=0x24c) returned 1
	[0302.008] SwitchToThread () returned 1
	[0302.033] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0302.226] SetEvent (hEvent=0x174) returned 1
	[0302.226] SetEvent (hEvent=0x124) returned 1
	[0302.226] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0302.229] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0302.231] SetEvent (hEvent=0x174) returned 1
	[0302.231] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0302.233] SetEvent (hEvent=0x174) returned 1
	[0302.233] SetEvent (hEvent=0x1b0) returned 1
	[0302.233] SwitchToThread () returned 1
	[0302.235] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0302.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf")) returned 0x220
	[0302.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF", dwFileAttributes=0x220) returned 1
	[0302.241] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0302.350] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0302.350] ReadFile (in: hFile=0x1b4, lpBuffer=0x112b0000, nNumberOfBytesToRead=0x3658, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x112b0000*, lpNumberOfBytesRead=0x1131de18*=0x3658, lpOverlapped=0x0) returned 1
	[0302.399] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0302.399] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e158 | out: pbBuffer=0x1104e158) returned 1
	[0302.399] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c2802 | out: pbBuffer=0x112c2802) returned 1
	[0302.400] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0302.401] GetFileType (hFile=0x1b4) returned 0x1
	[0302.401] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.401] WriteFile (in: hFile=0x1b4, lpBuffer=0x1111c000*, nNumberOfBytesToWrite=0x3658, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1111c000*, lpNumberOfBytesWritten=0x11031dfc*=0x3658, lpOverlapped=0x11031e08) returned 1
	[0302.402] GetFileType (hFile=0x1b4) returned 0x1
	[0302.402] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3658, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.403] GetFileType (hFile=0x1b4) returned 0x1
	[0302.403] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.403] WriteFile (in: hFile=0x1b4, lpBuffer=0x113b2a80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113b2a80*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0302.403] GetFileType (hFile=0x1b4) returned 0x1
	[0302.403] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x3658, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0302.404] CloseHandle (hObject=0x1b4) returned 1
	[0302.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf.tl30z")) returned 0x220
	[0302.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.412] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0302.416] SetEvent (hEvent=0x248) returned 1
	[0302.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf")) returned 0x220
	[0302.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF", dwFileAttributes=0x220) returned 1
	[0302.417] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.504] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0302.504] ReadFile (in: hFile=0x1d8, lpBuffer=0x11186000, nNumberOfBytesToRead=0x6180, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11186000*, lpNumberOfBytesRead=0x1131de18*=0x6180, lpOverlapped=0x0) returned 1
	[0302.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f700 | out: pbBuffer=0x1140f700) returned 1
	[0302.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112ab402 | out: pbBuffer=0x112ab402) returned 1
	[0302.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ab4c3 | out: pbBuffer=0x112ab4c3) returned 1
	[0302.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112ab4eb | out: pbBuffer=0x112ab4eb) returned 1
	[0302.509] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f730 | out: pbBuffer=0x1140f730) returned 1
	[0302.510] GetFileType (hFile=0x1d8) returned 0x1
	[0302.510] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.511] WriteFile (in: hFile=0x1d8, lpBuffer=0x111ca000*, nNumberOfBytesToWrite=0x6180, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111ca000*, lpNumberOfBytesWritten=0x1133bdfc*=0x6180, lpOverlapped=0x1133be08) returned 1
	[0302.511] GetFileType (hFile=0x1d8) returned 0x1
	[0302.511] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6180, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.512] GetFileType (hFile=0x1d8) returned 0x1
	[0302.513] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.513] WriteFile (in: hFile=0x1d8, lpBuffer=0x111a2700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x111a2700*, lpNumberOfBytesWritten=0x1133bdfc*=0x224, lpOverlapped=0x1133be08) returned 1
	[0302.513] GetFileType (hFile=0x1d8) returned 0x1
	[0302.514] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6180, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.514] CloseHandle (hObject=0x1d8) returned 1
	[0302.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf.tl30z")) returned 0x220
	[0302.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.517] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0302.520] SetEvent (hEvent=0x248) returned 1
	[0302.520] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf")) returned 0x220
	[0302.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF", dwFileAttributes=0x220) returned 1
	[0302.521] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.625] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0302.625] ReadFile (in: hFile=0x1d8, lpBuffer=0x11418000, nNumberOfBytesToRead=0x59ce, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11418000*, lpNumberOfBytesRead=0x1131de18*=0x59ce, lpOverlapped=0x0) returned 1
	[0302.630] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111583e0 | out: pbBuffer=0x111583e0) returned 1
	[0302.631] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111583d8 | out: pbBuffer=0x111583d8) returned 1
	[0302.631] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261e02 | out: pbBuffer=0x11261e02) returned 1
	[0302.631] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158410 | out: pbBuffer=0x11158410) returned 1
	[0302.632] GetFileType (hFile=0x1d8) returned 0x1
	[0302.632] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.632] WriteFile (in: hFile=0x1d8, lpBuffer=0x111a4000*, nNumberOfBytesToWrite=0x59ce, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111a4000*, lpNumberOfBytesWritten=0x1133fdfc*=0x59ce, lpOverlapped=0x1133fe08) returned 1
	[0302.633] GetFileType (hFile=0x1d8) returned 0x1
	[0302.633] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x59ce, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.633] GetFileType (hFile=0x1d8) returned 0x1
	[0302.633] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.633] WriteFile (in: hFile=0x1d8, lpBuffer=0x11372a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11372a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0302.633] GetFileType (hFile=0x1d8) returned 0x1
	[0302.634] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x59ce, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.634] CloseHandle (hObject=0x1d8) returned 1
	[0302.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf.tl30z")) returned 0x220
	[0302.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.638] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0302.641] SetEvent (hEvent=0x160) returned 1
	[0302.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf")) returned 0x220
	[0302.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF", dwFileAttributes=0x220) returned 1
	[0302.642] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0302.721] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0302.721] ReadFile (in: hFile=0x1d8, lpBuffer=0x110d0a80, nNumberOfBytesToRead=0x4960, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x110d0a80*, lpNumberOfBytesRead=0x1131de18*=0x4960, lpOverlapped=0x0) returned 1
	[0302.727] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0302.727] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110e1302 | out: pbBuffer=0x110e1302) returned 1
	[0302.727] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e1353 | out: pbBuffer=0x110e1353) returned 1
	[0302.727] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110e1381 | out: pbBuffer=0x110e1381) returned 1
	[0302.728] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2c0 | out: pbBuffer=0x1140f2c0) returned 1
	[0302.728] GetFileType (hFile=0x1d8) returned 0x1
	[0302.728] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.728] WriteFile (in: hFile=0x1d8, lpBuffer=0x11096000*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11096000*, lpNumberOfBytesWritten=0x1102ddfc*=0x4960, lpOverlapped=0x1102de08) returned 1
	[0302.729] GetFileType (hFile=0x1d8) returned 0x1
	[0302.729] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4960, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.730] GetFileType (hFile=0x1d8) returned 0x1
	[0302.730] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.730] WriteFile (in: hFile=0x1d8, lpBuffer=0x112b1880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112b1880*, lpNumberOfBytesWritten=0x1102ddfc*=0x227, lpOverlapped=0x1102de08) returned 1
	[0302.730] GetFileType (hFile=0x1d8) returned 0x1
	[0302.730] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x4960, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.730] CloseHandle (hObject=0x1d8) returned 1
	[0302.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf.tl30z")) returned 0x220
	[0302.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.733] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0302.737] SetEvent (hEvent=0x160) returned 1
	[0302.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf")) returned 0x220
	[0302.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF", dwFileAttributes=0x220) returned 1
	[0302.737] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0302.849] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0302.849] ReadFile (in: hFile=0x250, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x4dfa, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x1131de18*=0x4dfa, lpOverlapped=0x0) returned 1
	[0302.855] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158100 | out: pbBuffer=0x11158100) returned 1
	[0302.855] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1119b202 | out: pbBuffer=0x1119b202) returned 1
	[0302.855] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119b26e | out: pbBuffer=0x1119b26e) returned 1
	[0302.855] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1119b2ac | out: pbBuffer=0x1119b2ac) returned 1
	[0302.855] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158130 | out: pbBuffer=0x11158130) returned 1
	[0302.856] GetFileType (hFile=0x250) returned 0x1
	[0302.856] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.856] WriteFile (in: hFile=0x250, lpBuffer=0x110cc000*, nNumberOfBytesToWrite=0x4dfa, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110cc000*, lpNumberOfBytesWritten=0x1133fdfc*=0x4dfa, lpOverlapped=0x1133fe08) returned 1
	[0302.857] GetFileType (hFile=0x250) returned 0x1
	[0302.857] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4dfa, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.857] GetFileType (hFile=0x250) returned 0x1
	[0302.857] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.857] WriteFile (in: hFile=0x250, lpBuffer=0x113faa80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x113faa80*, lpNumberOfBytesWritten=0x1133fdfc*=0x236, lpOverlapped=0x1133fe08) returned 1
	[0302.858] GetFileType (hFile=0x250) returned 0x1
	[0302.858] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4dfa, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.858] CloseHandle (hObject=0x250) returned 1
	[0302.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf.tl30z")) returned 0x220
	[0302.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.861] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0302.865] SetEvent (hEvent=0x160) returned 1
	[0302.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf")) returned 0x220
	[0302.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF", dwFileAttributes=0x220) returned 1
	[0302.866] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf.tl30z"), dwFlags=0x1) returned 1
	[0302.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0302.967] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0302.967] ReadFile (in: hFile=0x1fc, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x4f8e, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x1131de18*=0x4f8e, lpOverlapped=0x0) returned 1
	[0302.973] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0302.973] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1132f202 | out: pbBuffer=0x1132f202) returned 1
	[0302.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1132f208 | out: pbBuffer=0x1132f208) returned 1
	[0302.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0302.975] GetFileType (hFile=0x1fc) returned 0x1
	[0302.975] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.975] WriteFile (in: hFile=0x1fc, lpBuffer=0x111a2000*, nNumberOfBytesToWrite=0x4f8e, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x111a2000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4f8e, lpOverlapped=0x1102be08) returned 1
	[0302.975] GetFileType (hFile=0x1fc) returned 0x1
	[0302.975] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4f8e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.976] GetFileType (hFile=0x1fc) returned 0x1
	[0302.976] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.976] WriteFile (in: hFile=0x1fc, lpBuffer=0x11387880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11387880*, lpNumberOfBytesWritten=0x1102bdfc*=0x233, lpOverlapped=0x1102be08) returned 1
	[0302.977] GetFileType (hFile=0x1fc) returned 0x1
	[0302.977] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4f8e, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0302.977] CloseHandle (hObject=0x1fc) returned 1
	[0302.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf.tl30z")) returned 0x220
	[0302.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0302.980] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0302.984] SetEvent (hEvent=0x160) returned 1
	[0302.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg")) returned 0x220
	[0302.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG", dwFileAttributes=0x220) returned 1
	[0302.985] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.072] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0303.072] ReadFile (in: hFile=0x1d8, lpBuffer=0x11148000, nNumberOfBytesToRead=0xaabb, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11148000*, lpNumberOfBytesRead=0x1131de18*=0xaabb, lpOverlapped=0x0) returned 1
	[0303.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158b10 | out: pbBuffer=0x11158b10) returned 1
	[0303.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116d002 | out: pbBuffer=0x1116d002) returned 1
	[0303.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116d041 | out: pbBuffer=0x1116d041) returned 1
	[0303.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116d043 | out: pbBuffer=0x1116d043) returned 1
	[0303.080] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158b40 | out: pbBuffer=0x11158b40) returned 1
	[0303.081] GetFileType (hFile=0x1d8) returned 0x1
	[0303.081] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.081] WriteFile (in: hFile=0x1d8, lpBuffer=0x11bd2000*, nNumberOfBytesToWrite=0xaabb, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11bd2000*, lpNumberOfBytesWritten=0x1133fdfc*=0xaabb, lpOverlapped=0x1133fe08) returned 1
	[0303.082] GetFileType (hFile=0x1d8) returned 0x1
	[0303.082] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xaabb, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.082] GetFileType (hFile=0x1d8) returned 0x1
	[0303.082] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.082] WriteFile (in: hFile=0x1d8, lpBuffer=0x11314e00*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11314e00*, lpNumberOfBytesWritten=0x1133fdfc*=0x239, lpOverlapped=0x1133fe08) returned 1
	[0303.082] GetFileType (hFile=0x1d8) returned 0x1
	[0303.082] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xaabb, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.083] CloseHandle (hObject=0x1d8) returned 1
	[0303.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg.tl30z")) returned 0x220
	[0303.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.085] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0303.089] SetEvent (hEvent=0x160) returned 1
	[0303.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg")) returned 0x220
	[0303.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG", dwFileAttributes=0x220) returned 1
	[0303.090] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0303.415] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0303.416] ReadFile (in: hFile=0x1b4, lpBuffer=0x1138a000, nNumberOfBytesToRead=0x911a, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1138a000*, lpNumberOfBytesRead=0x1131de18*=0x911a, lpOverlapped=0x0) returned 1
	[0303.423] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e350 | out: pbBuffer=0x1104e350) returned 1
	[0303.423] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e348 | out: pbBuffer=0x1104e348) returned 1
	[0303.423] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116dc02 | out: pbBuffer=0x1116dc02) returned 1
	[0303.423] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1116dc0d | out: pbBuffer=0x1116dc0d) returned 1
	[0303.424] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e380 | out: pbBuffer=0x1104e380) returned 1
	[0303.425] GetFileType (hFile=0x1b4) returned 0x1
	[0303.425] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.425] WriteFile (in: hFile=0x1b4, lpBuffer=0x11228000*, nNumberOfBytesToWrite=0x911a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11228000*, lpNumberOfBytesWritten=0x1133fdfc*=0x911a, lpOverlapped=0x1133fe08) returned 1
	[0303.426] GetFileType (hFile=0x1b4) returned 0x1
	[0303.426] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x911a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.426] GetFileType (hFile=0x1b4) returned 0x1
	[0303.426] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.426] WriteFile (in: hFile=0x1b4, lpBuffer=0x11364700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11364700*, lpNumberOfBytesWritten=0x1133fdfc*=0x22d, lpOverlapped=0x1133fe08) returned 1
	[0303.426] GetFileType (hFile=0x1b4) returned 0x1
	[0303.427] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x911a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.427] CloseHandle (hObject=0x1b4) returned 1
	[0303.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg.tl30z")) returned 0x220
	[0303.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.431] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0303.435] SetEvent (hEvent=0x248) returned 1
	[0303.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg")) returned 0x220
	[0303.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG", dwFileAttributes=0x220) returned 1
	[0303.435] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0303.531] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0303.531] ReadFile (in: hFile=0x1fc, lpBuffer=0x11bd2000, nNumberOfBytesToRead=0x4b02, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11bd2000*, lpNumberOfBytesRead=0x1131de18*=0x4b02, lpOverlapped=0x0) returned 1
	[0303.541] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111583e0 | out: pbBuffer=0x111583e0) returned 1
	[0303.541] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111583d8 | out: pbBuffer=0x111583d8) returned 1
	[0303.541] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1130fd02 | out: pbBuffer=0x1130fd02) returned 1
	[0303.542] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1130fddd | out: pbBuffer=0x1130fddd) returned 1
	[0303.542] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158410 | out: pbBuffer=0x11158410) returned 1
	[0303.543] GetFileType (hFile=0x1fc) returned 0x1
	[0303.543] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0303.543] WriteFile (in: hFile=0x1fc, lpBuffer=0x112b6000*, nNumberOfBytesToWrite=0x4b02, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112b6000*, lpNumberOfBytesWritten=0x11031dfc*=0x4b02, lpOverlapped=0x11031e08) returned 1
	[0303.544] GetFileType (hFile=0x1fc) returned 0x1
	[0303.544] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4b02, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0303.544] GetFileType (hFile=0x1fc) returned 0x1
	[0303.544] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0303.544] WriteFile (in: hFile=0x1fc, lpBuffer=0x1129c700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1129c700*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0303.544] GetFileType (hFile=0x1fc) returned 0x1
	[0303.545] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x4b02, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0303.545] CloseHandle (hObject=0x1fc) returned 1
	[0303.546] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg.tl30z")) returned 0x220
	[0303.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.548] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0303.552] SetEvent (hEvent=0x1b0) returned 1
	[0303.552] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg")) returned 0x220
	[0303.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG", dwFileAttributes=0x220) returned 1
	[0303.553] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0303.652] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0303.652] ReadFile (in: hFile=0x1d4, lpBuffer=0x110f2500, nNumberOfBytesToRead=0x24d7, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x110f2500*, lpNumberOfBytesRead=0x1131de18*=0x24d7, lpOverlapped=0x0) returned 1
	[0303.659] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158290 | out: pbBuffer=0x11158290) returned 1
	[0303.659] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158288 | out: pbBuffer=0x11158288) returned 1
	[0303.659] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112c3202 | out: pbBuffer=0x112c3202) returned 1
	[0303.659] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112c32e6 | out: pbBuffer=0x112c32e6) returned 1
	[0303.660] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582c0 | out: pbBuffer=0x111582c0) returned 1
	[0303.660] GetFileType (hFile=0x1d4) returned 0x1
	[0303.660] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.660] WriteFile (in: hFile=0x1d4, lpBuffer=0x1134e000*, nNumberOfBytesToWrite=0x24d7, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1134e000*, lpNumberOfBytesWritten=0x1102ddfc*=0x24d7, lpOverlapped=0x1102de08) returned 1
	[0303.661] GetFileType (hFile=0x1d4) returned 0x1
	[0303.661] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x24d7, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.661] GetFileType (hFile=0x1d4) returned 0x1
	[0303.661] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.661] WriteFile (in: hFile=0x1d4, lpBuffer=0x1112fc00*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1112fc00*, lpNumberOfBytesWritten=0x1102ddfc*=0x230, lpOverlapped=0x1102de08) returned 1
	[0303.661] GetFileType (hFile=0x1d4) returned 0x1
	[0303.661] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x24d7, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.662] CloseHandle (hObject=0x1d4) returned 1
	[0303.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg.tl30z")) returned 0x220
	[0303.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.675] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0303.677] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0303.688] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0303.694] SetEvent (hEvent=0x160) returned 1
	[0303.694] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0303.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg")) returned 0x220
	[0303.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG", dwFileAttributes=0x220) returned 1
	[0303.709] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0303.790] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0303.791] ReadFile (in: hFile=0x250, lpBuffer=0x1109c000, nNumberOfBytesToRead=0x4ad8, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1109c000*, lpNumberOfBytesRead=0x1131ae18*=0x4ad8, lpOverlapped=0x0) returned 1
	[0303.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111588c0 | out: pbBuffer=0x111588c0) returned 1
	[0303.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111588b8 | out: pbBuffer=0x111588b8) returned 1
	[0303.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113bfc02 | out: pbBuffer=0x113bfc02) returned 1
	[0303.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111588f0 | out: pbBuffer=0x111588f0) returned 1
	[0303.805] GetFileType (hFile=0x250) returned 0x1
	[0303.805] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.805] WriteFile (in: hFile=0x250, lpBuffer=0x1116c000*, nNumberOfBytesToWrite=0x4ad8, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1116c000*, lpNumberOfBytesWritten=0x1102ddfc*=0x4ad8, lpOverlapped=0x1102de08) returned 1
	[0303.805] GetFileType (hFile=0x250) returned 0x1
	[0303.805] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4ad8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.806] GetFileType (hFile=0x250) returned 0x1
	[0303.806] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.806] WriteFile (in: hFile=0x250, lpBuffer=0x1111d500*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1111d500*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0303.806] GetFileType (hFile=0x250) returned 0x1
	[0303.806] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x4ad8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.806] CloseHandle (hObject=0x250) returned 1
	[0303.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg.tl30z")) returned 0x220
	[0303.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.815] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0303.820] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0303.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg")) returned 0x220
	[0303.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG", dwFileAttributes=0x220) returned 1
	[0303.827] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg.tl30z"), dwFlags=0x1) returned 1
	[0303.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0303.956] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0303.956] ReadFile (in: hFile=0x1d8, lpBuffer=0x11058000, nNumberOfBytesToRead=0x6f43, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11058000*, lpNumberOfBytesRead=0x1128ae18*=0x6f43, lpOverlapped=0x0) returned 1
	[0303.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158270 | out: pbBuffer=0x11158270) returned 1
	[0303.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11267302 | out: pbBuffer=0x11267302) returned 1
	[0303.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582a0 | out: pbBuffer=0x111582a0) returned 1
	[0303.963] GetFileType (hFile=0x1d8) returned 0x1
	[0303.963] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.963] WriteFile (in: hFile=0x1d8, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x6f43, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x1102ddfc*=0x6f43, lpOverlapped=0x1102de08) returned 1
	[0303.963] GetFileType (hFile=0x1d8) returned 0x1
	[0303.963] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6f43, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.964] GetFileType (hFile=0x1d8) returned 0x1
	[0303.964] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.964] WriteFile (in: hFile=0x1d8, lpBuffer=0x11185c00*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11185c00*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0303.964] GetFileType (hFile=0x1d8) returned 0x1
	[0303.964] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x6f43, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0303.964] CloseHandle (hObject=0x1d8) returned 1
	[0303.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg.tl30z")) returned 0x220
	[0303.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0303.967] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0303.970] SetEvent (hEvent=0x1b0) returned 1
	[0303.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg")) returned 0x220
	[0303.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG", dwFileAttributes=0x220) returned 1
	[0303.970] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0304.069] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0304.069] ReadFile (in: hFile=0x1fc, lpBuffer=0x11306000, nNumberOfBytesToRead=0x3615, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x11306000*, lpNumberOfBytesRead=0x1128ae18*=0x3615, lpOverlapped=0x0) returned 1
	[0304.098] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.108] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0304.108] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11470802 | out: pbBuffer=0x11470802) returned 1
	[0304.108] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11470815 | out: pbBuffer=0x11470815) returned 1
	[0304.109] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1147083c | out: pbBuffer=0x1147083c) returned 1
	[0304.109] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11470862 | out: pbBuffer=0x11470862) returned 1
	[0304.109] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0304.110] GetFileType (hFile=0x1fc) returned 0x1
	[0304.110] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11467de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.110] WriteFile (in: hFile=0x1fc, lpBuffer=0x11138000*, nNumberOfBytesToWrite=0x3615, lpNumberOfBytesWritten=0x11467dfc, lpOverlapped=0x11467e08 | out: lpBuffer=0x11138000*, lpNumberOfBytesWritten=0x11467dfc*=0x3615, lpOverlapped=0x11467e08) returned 1
	[0304.111] GetFileType (hFile=0x1fc) returned 0x1
	[0304.111] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3615, lpNewFilePointer=0x0, dwMoveMethod=0x11467de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.111] GetFileType (hFile=0x1fc) returned 0x1
	[0304.111] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11467de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.111] WriteFile (in: hFile=0x1fc, lpBuffer=0x1110ea80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11467dfc, lpOverlapped=0x11467e08 | out: lpBuffer=0x1110ea80*, lpNumberOfBytesWritten=0x11467dfc*=0x22d, lpOverlapped=0x11467e08) returned 1
	[0304.112] GetFileType (hFile=0x1fc) returned 0x1
	[0304.112] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3615, lpNewFilePointer=0x0, dwMoveMethod=0x11467de0 | out: lpNewFilePointer=0x0) returned 1
	[0304.112] CloseHandle (hObject=0x1fc) returned 1
	[0304.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg.tl30z")) returned 0x220
	[0304.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.135] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.139] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.195] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.202] SetEvent (hEvent=0x24c) returned 1
	[0304.203] SetEvent (hEvent=0x174) returned 1
	[0304.203] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x1) returned 0x102
	[0304.221] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.221] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x1) returned 0x0
	[0304.223] SetEvent (hEvent=0x164) returned 1
	[0304.224] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x1) returned 0x0
	[0304.263] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.277] SetEvent (hEvent=0x164) returned 1
	[0304.277] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg")) returned 0x220
	[0304.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG", dwFileAttributes=0x220) returned 1
	[0304.278] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0304.401] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0304.401] ReadFile (in: hFile=0x1d4, lpBuffer=0x11206000, nNumberOfBytesToRead=0x9753, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x11206000*, lpNumberOfBytesRead=0x11425e18*=0x9753, lpOverlapped=0x0) returned 1
	[0304.408] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3e0 | out: pbBuffer=0x1140f3e0) returned 1
	[0304.408] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3d8 | out: pbBuffer=0x1140f3d8) returned 1
	[0304.408] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11377e02 | out: pbBuffer=0x11377e02) returned 1
	[0304.408] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11377e29 | out: pbBuffer=0x11377e29) returned 1
	[0304.408] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0304.409] GetFileType (hFile=0x1d4) returned 0x1
	[0304.409] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.410] WriteFile (in: hFile=0x1d4, lpBuffer=0x110b8000*, nNumberOfBytesToWrite=0x9753, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110b8000*, lpNumberOfBytesWritten=0x1102bdfc*=0x9753, lpOverlapped=0x1102be08) returned 1
	[0304.410] GetFileType (hFile=0x1d4) returned 0x1
	[0304.410] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x9753, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.410] GetFileType (hFile=0x1d4) returned 0x1
	[0304.411] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.411] WriteFile (in: hFile=0x1d4, lpBuffer=0x1146a700*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1146a700*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0304.574] GetFileType (hFile=0x1d4) returned 0x1
	[0304.574] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x9753, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.574] CloseHandle (hObject=0x1d4) returned 1
	[0304.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg.tl30z")) returned 0x220
	[0304.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.589] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.596] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.617] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.641] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.645] SetEvent (hEvent=0x164) returned 1
	[0304.647] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x1) returned 0x102
	[0304.657] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.657] SetEvent (hEvent=0x164) returned 1
	[0304.657] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x1) returned 0x102
	[0304.659] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.659] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.689] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.717] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.777] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.813] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0304.827] SetEvent (hEvent=0x248) returned 1
	[0304.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg")) returned 0x220
	[0304.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG", dwFileAttributes=0x220) returned 1
	[0304.828] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg.tl30z"), dwFlags=0x1) returned 1
	[0304.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0304.922] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0304.922] ReadFile (in: hFile=0x2a0, lpBuffer=0x112a4000, nNumberOfBytesToRead=0x9de8, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x112a4000*, lpNumberOfBytesRead=0x1131ae18*=0x9de8, lpOverlapped=0x0) returned 1
	[0304.930] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11158280 | out: pbBuffer=0x11158280) returned 1
	[0304.930] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11158278 | out: pbBuffer=0x11158278) returned 1
	[0304.930] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112a1202 | out: pbBuffer=0x112a1202) returned 1
	[0304.930] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a1282 | out: pbBuffer=0x112a1282) returned 1
	[0304.930] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a129b | out: pbBuffer=0x112a129b) returned 1
	[0304.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a12ae | out: pbBuffer=0x112a12ae) returned 1
	[0304.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112a12c8 | out: pbBuffer=0x112a12c8) returned 1
	[0304.931] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111582b0 | out: pbBuffer=0x111582b0) returned 1
	[0304.933] GetFileType (hFile=0x2a0) returned 0x1
	[0304.933] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.933] WriteFile (in: hFile=0x2a0, lpBuffer=0x11438000*, nNumberOfBytesToWrite=0x9de8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11438000*, lpNumberOfBytesWritten=0x1102bdfc*=0x9de8, lpOverlapped=0x1102be08) returned 1
	[0304.934] GetFileType (hFile=0x2a0) returned 0x1
	[0304.934] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x9de8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.934] GetFileType (hFile=0x2a0) returned 0x1
	[0304.934] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.934] WriteFile (in: hFile=0x2a0, lpBuffer=0x11463880*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11463880*, lpNumberOfBytesWritten=0x1102bdfc*=0x236, lpOverlapped=0x1102be08) returned 1
	[0304.935] GetFileType (hFile=0x2a0) returned 0x1
	[0304.935] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x9de8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0304.935] CloseHandle (hObject=0x2a0) returned 1
	[0304.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg.tl30z")) returned 0x220
	[0304.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0304.978] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.000] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.022] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.083] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.088] SetEvent (hEvent=0x174) returned 1
	[0305.089] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x1) returned 0x102
	[0305.120] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.121] SetEvent (hEvent=0x174) returned 1
	[0305.121] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x1) returned 0x102
	[0305.123] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.123] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.196] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.331] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.333] SetEvent (hEvent=0x1e0) returned 1
	[0305.333] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg")) returned 0x220
	[0305.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG", dwFileAttributes=0x220) returned 1
	[0305.337] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0305.436] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0305.436] ReadFile (in: hFile=0x1fc, lpBuffer=0x113e0000, nNumberOfBytesToRead=0x396a, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113e0000*, lpNumberOfBytesRead=0x11428e18*=0x396a, lpOverlapped=0x0) returned 1
	[0305.442] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f400 | out: pbBuffer=0x1140f400) returned 1
	[0305.442] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261e02 | out: pbBuffer=0x11261e02) returned 1
	[0305.443] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f430 | out: pbBuffer=0x1140f430) returned 1
	[0305.443] GetFileType (hFile=0x1fc) returned 0x1
	[0305.444] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.444] WriteFile (in: hFile=0x1fc, lpBuffer=0x113b0000*, nNumberOfBytesToWrite=0x396a, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x113b0000*, lpNumberOfBytesWritten=0x11339dfc*=0x396a, lpOverlapped=0x11339e08) returned 1
	[0305.444] GetFileType (hFile=0x1fc) returned 0x1
	[0305.444] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x396a, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.444] GetFileType (hFile=0x1fc) returned 0x1
	[0305.445] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.445] WriteFile (in: hFile=0x1fc, lpBuffer=0x1114ea80*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x1114ea80*, lpNumberOfBytesWritten=0x11339dfc*=0x230, lpOverlapped=0x11339e08) returned 1
	[0305.445] GetFileType (hFile=0x1fc) returned 0x1
	[0305.445] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x396a, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0305.445] CloseHandle (hObject=0x1fc) returned 1
	[0305.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg.tl30z")) returned 0x220
	[0305.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.449] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.451] SetEvent (hEvent=0x174) returned 1
	[0305.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg")) returned 0x220
	[0305.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG", dwFileAttributes=0x220) returned 1
	[0305.452] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg.tl30z"), dwFlags=0x1) returned 1
	[0305.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0305.546] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0305.547] ReadFile (in: hFile=0x1b4, lpBuffer=0x1120c000, nNumberOfBytesToRead=0xb9bf, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1120c000*, lpNumberOfBytesRead=0x11428e18*=0xb9bf, lpOverlapped=0x0) returned 1
	[0305.578] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e60f0 | out: pbBuffer=0x113e60f0) returned 1
	[0305.578] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60e8 | out: pbBuffer=0x113e60e8) returned 1
	[0305.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1137c802 | out: pbBuffer=0x1137c802) returned 1
	[0305.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1137c809 | out: pbBuffer=0x1137c809) returned 1
	[0305.579] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6120 | out: pbBuffer=0x113e6120) returned 1
	[0305.580] GetFileType (hFile=0x1b4) returned 0x1
	[0305.580] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.581] WriteFile (in: hFile=0x1b4, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0xb9bf, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1102ddfc*=0xb9bf, lpOverlapped=0x1102de08) returned 1
	[0305.581] GetFileType (hFile=0x1b4) returned 0x1
	[0305.581] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xb9bf, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.581] GetFileType (hFile=0x1b4) returned 0x1
	[0305.581] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.582] WriteFile (in: hFile=0x1b4, lpBuffer=0x11370a80*, nNumberOfBytesToWrite=0x23f, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11370a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x23f, lpOverlapped=0x1102de08) returned 1
	[0305.582] GetFileType (hFile=0x1b4) returned 0x1
	[0305.582] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0xb9bf, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.582] CloseHandle (hObject=0x1b4) returned 1
	[0305.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg.tl30z")) returned 0x220
	[0305.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.588] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.592] SetEvent (hEvent=0x164) returned 1
	[0305.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png")) returned 0x220
	[0305.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG", dwFileAttributes=0x220) returned 1
	[0305.593] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png.tl30z"), dwFlags=0x1) returned 1
	[0305.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0305.905] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0305.906] ReadFile (in: hFile=0x1d4, lpBuffer=0x11104000, nNumberOfBytesToRead=0x9276, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11104000*, lpNumberOfBytesRead=0x11428e18*=0x9276, lpOverlapped=0x0) returned 1
	[0305.913] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0305.913] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e658 | out: pbBuffer=0x1104e658) returned 1
	[0305.913] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11208802 | out: pbBuffer=0x11208802) returned 1
	[0305.914] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11208823 | out: pbBuffer=0x11208823) returned 1
	[0305.914] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112088b1 | out: pbBuffer=0x112088b1) returned 1
	[0305.914] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112088d0 | out: pbBuffer=0x112088d0) returned 1
	[0305.914] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e690 | out: pbBuffer=0x1104e690) returned 1
	[0305.915] GetFileType (hFile=0x1d4) returned 0x1
	[0305.915] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.915] WriteFile (in: hFile=0x1d4, lpBuffer=0x11142000*, nNumberOfBytesToWrite=0x9276, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11142000*, lpNumberOfBytesWritten=0x1133fdfc*=0x9276, lpOverlapped=0x1133fe08) returned 1
	[0305.916] GetFileType (hFile=0x1d4) returned 0x1
	[0305.916] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x9276, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.916] GetFileType (hFile=0x1d4) returned 0x1
	[0305.917] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.917] WriteFile (in: hFile=0x1d4, lpBuffer=0x1146d500*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1146d500*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0305.917] GetFileType (hFile=0x1d4) returned 0x1
	[0305.917] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x9276, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0305.917] CloseHandle (hObject=0x1d4) returned 1
	[0305.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png.tl30z")) returned 0x220
	[0305.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG.tl30z", dwFileAttributes=0x221) returned 1
	[0305.920] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0305.924] SetEvent (hEvent=0x248) returned 1
	[0305.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf")) returned 0x220
	[0305.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF", dwFileAttributes=0x220) returned 1
	[0305.924] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
	[0306.059] GetConsoleMode (in: hConsoleHandle=0x250, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0306.059] ReadFile (in: hFile=0x250, lpBuffer=0x1138b800, nNumberOfBytesToRead=0x15f6, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1138b800*, lpNumberOfBytesRead=0x11428e18*=0x15f6, lpOverlapped=0x0) returned 1
	[0306.064] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332540 | out: pbBuffer=0x11332540) returned 1
	[0306.064] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332538 | out: pbBuffer=0x11332538) returned 1
	[0306.064] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1116bd02 | out: pbBuffer=0x1116bd02) returned 1
	[0306.065] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332570 | out: pbBuffer=0x11332570) returned 1
	[0306.065] GetFileType (hFile=0x250) returned 0x1
	[0306.065] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.065] WriteFile (in: hFile=0x250, lpBuffer=0x11364000*, nNumberOfBytesToWrite=0x15f6, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11364000*, lpNumberOfBytesWritten=0x1102ddfc*=0x15f6, lpOverlapped=0x1102de08) returned 1
	[0306.066] GetFileType (hFile=0x250) returned 0x1
	[0306.066] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x15f6, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.066] GetFileType (hFile=0x250) returned 0x1
	[0306.066] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.066] WriteFile (in: hFile=0x250, lpBuffer=0x112e2a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112e2a80*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0306.066] GetFileType (hFile=0x250) returned 0x1
	[0306.067] SetFilePointerEx (in: hFile=0x250, liDistanceToMove=0x15f6, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.067] CloseHandle (hObject=0x250) returned 1
	[0306.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf.tl30z")) returned 0x220
	[0306.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.069] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0306.072] SetEvent (hEvent=0x248) returned 1
	[0306.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf")) returned 0x220
	[0306.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF", dwFileAttributes=0x220) returned 1
	[0306.073] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0306.151] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0306.151] ReadFile (in: hFile=0x1b4, lpBuffer=0x1123e000, nNumberOfBytesToRead=0x2a42, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x1123e000*, lpNumberOfBytesRead=0x11428e18*=0x2a42, lpOverlapped=0x0) returned 1
	[0306.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e600 | out: pbBuffer=0x1104e600) returned 1
	[0306.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e5f8 | out: pbBuffer=0x1104e5f8) returned 1
	[0306.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11248702 | out: pbBuffer=0x11248702) returned 1
	[0306.157] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11248746 | out: pbBuffer=0x11248746) returned 1
	[0306.158] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0306.158] GetFileType (hFile=0x1b4) returned 0x1
	[0306.158] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.158] WriteFile (in: hFile=0x1b4, lpBuffer=0x11430000*, nNumberOfBytesToWrite=0x2a42, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11430000*, lpNumberOfBytesWritten=0x11339dfc*=0x2a42, lpOverlapped=0x11339e08) returned 1
	[0306.159] GetFileType (hFile=0x1b4) returned 0x1
	[0306.159] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2a42, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.159] GetFileType (hFile=0x1b4) returned 0x1
	[0306.159] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.159] WriteFile (in: hFile=0x1b4, lpBuffer=0x110b3500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x110b3500*, lpNumberOfBytesWritten=0x11339dfc*=0x227, lpOverlapped=0x11339e08) returned 1
	[0306.160] GetFileType (hFile=0x1b4) returned 0x1
	[0306.160] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x2a42, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0306.160] CloseHandle (hObject=0x1b4) returned 1
	[0306.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf.tl30z")) returned 0x220
	[0306.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.163] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0306.167] SetEvent (hEvent=0x24c) returned 1
	[0306.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf")) returned 0x220
	[0306.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF", dwFileAttributes=0x220) returned 1
	[0306.168] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.252] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0306.252] ReadFile (in: hFile=0x2a0, lpBuffer=0x11309900, nNumberOfBytesToRead=0x1172, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11309900*, lpNumberOfBytesRead=0x11428e18*=0x1172, lpOverlapped=0x0) returned 1
	[0306.258] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66c0 | out: pbBuffer=0x113e66c0) returned 1
	[0306.258] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e1102 | out: pbBuffer=0x111e1102) returned 1
	[0306.258] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e66f0 | out: pbBuffer=0x113e66f0) returned 1
	[0306.258] GetFileType (hFile=0x2a0) returned 0x1
	[0306.258] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.259] WriteFile (in: hFile=0x2a0, lpBuffer=0x110fa000*, nNumberOfBytesToWrite=0x1172, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110fa000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1172, lpOverlapped=0x1133fe08) returned 1
	[0306.259] GetFileType (hFile=0x2a0) returned 0x1
	[0306.259] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1172, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.259] GetFileType (hFile=0x2a0) returned 0x1
	[0306.259] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.260] WriteFile (in: hFile=0x2a0, lpBuffer=0x110f6380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110f6380*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0306.260] GetFileType (hFile=0x2a0) returned 0x1
	[0306.260] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x1172, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.260] CloseHandle (hObject=0x2a0) returned 1
	[0306.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf.tl30z")) returned 0x220
	[0306.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.263] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0306.267] SetEvent (hEvent=0x24c) returned 1
	[0306.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf")) returned 0x220
	[0306.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF", dwFileAttributes=0x220) returned 1
	[0306.268] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0306.412] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0306.412] ReadFile (in: hFile=0x1b4, lpBuffer=0x113d2000, nNumberOfBytesToRead=0x194a, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113d2000*, lpNumberOfBytesRead=0x11428e18*=0x194a, lpOverlapped=0x0) returned 1
	[0306.417] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4c0 | out: pbBuffer=0x1104e4c0) returned 1
	[0306.417] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111bdd02 | out: pbBuffer=0x111bdd02) returned 1
	[0306.418] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4f0 | out: pbBuffer=0x1104e4f0) returned 1
	[0306.419] GetFileType (hFile=0x1b4) returned 0x1
	[0306.419] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.419] WriteFile (in: hFile=0x1b4, lpBuffer=0x11144000*, nNumberOfBytesToWrite=0x194a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11144000*, lpNumberOfBytesWritten=0x1133fdfc*=0x194a, lpOverlapped=0x1133fe08) returned 1
	[0306.421] GetFileType (hFile=0x1b4) returned 0x1
	[0306.421] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x194a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.421] GetFileType (hFile=0x1b4) returned 0x1
	[0306.422] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.422] WriteFile (in: hFile=0x1b4, lpBuffer=0x11350a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11350a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0306.422] GetFileType (hFile=0x1b4) returned 0x1
	[0306.422] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x194a, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.423] CloseHandle (hObject=0x1b4) returned 1
	[0306.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf.tl30z")) returned 0x220
	[0306.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.425] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0306.429] SetEvent (hEvent=0x248) returned 1
	[0306.429] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf")) returned 0x220
	[0306.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF", dwFileAttributes=0x220) returned 1
	[0306.430] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0306.509] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0306.509] ReadFile (in: hFile=0x1d4, lpBuffer=0x113be000, nNumberOfBytesToRead=0x14bc, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x113be000*, lpNumberOfBytesRead=0x11428e18*=0x14bc, lpOverlapped=0x0) returned 1
	[0306.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f280 | out: pbBuffer=0x1140f280) returned 1
	[0306.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f278 | out: pbBuffer=0x1140f278) returned 1
	[0306.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113a3202 | out: pbBuffer=0x113a3202) returned 1
	[0306.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a3222 | out: pbBuffer=0x113a3222) returned 1
	[0306.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a3297 | out: pbBuffer=0x113a3297) returned 1
	[0306.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a32ad | out: pbBuffer=0x113a32ad) returned 1
	[0306.514] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113a32c6 | out: pbBuffer=0x113a32c6) returned 1
	[0306.515] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f2b0 | out: pbBuffer=0x1140f2b0) returned 1
	[0306.515] GetFileType (hFile=0x1d4) returned 0x1
	[0306.515] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.515] WriteFile (in: hFile=0x1d4, lpBuffer=0x11302000*, nNumberOfBytesToWrite=0x14bc, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11302000*, lpNumberOfBytesWritten=0x1102ddfc*=0x14bc, lpOverlapped=0x1102de08) returned 1
	[0306.516] GetFileType (hFile=0x1d4) returned 0x1
	[0306.516] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x14bc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.516] GetFileType (hFile=0x1d4) returned 0x1
	[0306.516] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.516] WriteFile (in: hFile=0x1d4, lpBuffer=0x110eb880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110eb880*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0306.516] GetFileType (hFile=0x1d4) returned 0x1
	[0306.516] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x14bc, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.517] CloseHandle (hObject=0x1d4) returned 1
	[0306.517] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf.tl30z")) returned 0x220
	[0306.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.519] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0306.522] SetEvent (hEvent=0x248) returned 1
	[0306.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf")) returned 0x220
	[0306.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF", dwFileAttributes=0x220) returned 1
	[0306.523] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0306.603] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0306.603] ReadFile (in: hFile=0x1fc, lpBuffer=0x11436000, nNumberOfBytesToRead=0x938, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11436000*, lpNumberOfBytesRead=0x11428e18*=0x938, lpOverlapped=0x0) returned 1
	[0306.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332760 | out: pbBuffer=0x11332760) returned 1
	[0306.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11307e02 | out: pbBuffer=0x11307e02) returned 1
	[0306.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11307e1f | out: pbBuffer=0x11307e1f) returned 1
	[0306.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11307e4d | out: pbBuffer=0x11307e4d) returned 1
	[0306.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332790 | out: pbBuffer=0x11332790) returned 1
	[0306.619] GetFileType (hFile=0x1fc) returned 0x1
	[0306.619] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.620] WriteFile (in: hFile=0x1fc, lpBuffer=0x11441000*, nNumberOfBytesToWrite=0x938, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11441000*, lpNumberOfBytesWritten=0x1133fdfc*=0x938, lpOverlapped=0x1133fe08) returned 1
	[0306.620] GetFileType (hFile=0x1fc) returned 0x1
	[0306.620] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x938, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.621] GetFileType (hFile=0x1fc) returned 0x1
	[0306.621] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.621] WriteFile (in: hFile=0x1fc, lpBuffer=0x11452000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11452000*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0306.621] GetFileType (hFile=0x1fc) returned 0x1
	[0306.621] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x938, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.621] CloseHandle (hObject=0x1fc) returned 1
	[0306.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf.tl30z")) returned 0x220
	[0306.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.627] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0306.631] SetEvent (hEvent=0x248) returned 1
	[0306.631] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf")) returned 0x220
	[0306.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF", dwFileAttributes=0x220) returned 1
	[0306.632] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0306.733] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0306.733] ReadFile (in: hFile=0x1fc, lpBuffer=0x111aa000, nNumberOfBytesToRead=0x530, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x111aa000*, lpNumberOfBytesRead=0x11428e18*=0x530, lpOverlapped=0x0) returned 1
	[0306.738] SetEvent (hEvent=0x248) returned 1
	[0306.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f9a0 | out: pbBuffer=0x1140f9a0) returned 1
	[0306.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f998 | out: pbBuffer=0x1140f998) returned 1
	[0306.739] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11bd4602 | out: pbBuffer=0x11bd4602) returned 1
	[0306.740] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f9d0 | out: pbBuffer=0x1140f9d0) returned 1
	[0306.740] GetFileType (hFile=0x1fc) returned 0x1
	[0306.740] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.740] WriteFile (in: hFile=0x1fc, lpBuffer=0x11be2000*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11be2000*, lpNumberOfBytesWritten=0x1102ddfc*=0x530, lpOverlapped=0x1102de08) returned 1
	[0306.741] GetFileType (hFile=0x1fc) returned 0x1
	[0306.741] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x530, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.741] GetFileType (hFile=0x1fc) returned 0x1
	[0306.741] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.741] WriteFile (in: hFile=0x1fc, lpBuffer=0x11be4000*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11be4000*, lpNumberOfBytesWritten=0x1102ddfc*=0x224, lpOverlapped=0x1102de08) returned 1
	[0306.741] GetFileType (hFile=0x1fc) returned 0x1
	[0306.741] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x530, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.742] CloseHandle (hObject=0x1fc) returned 1
	[0306.744] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf.tl30z")) returned 0x220
	[0306.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.747] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0306.748] SetEvent (hEvent=0x248) returned 1
	[0306.748] SetEvent (hEvent=0x24c) returned 1
	[0306.748] SwitchToThread () returned 1
	[0306.750] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0306.752] SetEvent (hEvent=0x24c) returned 1
	[0306.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf")) returned 0x220
	[0306.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF", dwFileAttributes=0x220) returned 1
	[0306.753] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0306.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0306.885] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0306.885] ReadFile (in: hFile=0x2a0, lpBuffer=0x113dc000, nNumberOfBytesToRead=0x788, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x113dc000*, lpNumberOfBytesRead=0x11316e18*=0x788, lpOverlapped=0x0) returned 1
	[0306.890] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6110 | out: pbBuffer=0x113e6110) returned 1
	[0306.890] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11254802 | out: pbBuffer=0x11254802) returned 1
	[0306.890] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11254842 | out: pbBuffer=0x11254842) returned 1
	[0306.890] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6140 | out: pbBuffer=0x113e6140) returned 1
	[0306.891] GetFileType (hFile=0x2a0) returned 0x1
	[0306.891] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.891] WriteFile (in: hFile=0x2a0, lpBuffer=0x11239000*, nNumberOfBytesToWrite=0x788, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11239000*, lpNumberOfBytesWritten=0x1124bdfc*=0x788, lpOverlapped=0x1124be08) returned 1
	[0306.891] GetFileType (hFile=0x2a0) returned 0x1
	[0306.891] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x788, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.892] GetFileType (hFile=0x2a0) returned 0x1
	[0306.892] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.892] WriteFile (in: hFile=0x2a0, lpBuffer=0x11228a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1124bdfc, lpOverlapped=0x1124be08 | out: lpBuffer=0x11228a80*, lpNumberOfBytesWritten=0x1124bdfc*=0x227, lpOverlapped=0x1124be08) returned 1
	[0306.892] GetFileType (hFile=0x2a0) returned 0x1
	[0306.892] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x788, lpNewFilePointer=0x0, dwMoveMethod=0x1124bde0 | out: lpNewFilePointer=0x0) returned 1
	[0306.892] CloseHandle (hObject=0x2a0) returned 1
	[0306.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf.tl30z")) returned 0x220
	[0306.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0306.896] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0306.900] SetEvent (hEvent=0x24c) returned 1
	[0306.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf")) returned 0x220
	[0306.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF", dwFileAttributes=0x220) returned 1
	[0306.900] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0307.048] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0307.048] ReadFile (in: hFile=0x1fc, lpBuffer=0x110a0000, nNumberOfBytesToRead=0x3210, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110a0000*, lpNumberOfBytesRead=0x11316e18*=0x3210, lpOverlapped=0x0) returned 1
	[0307.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324f0 | out: pbBuffer=0x113324f0) returned 1
	[0307.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11399d02 | out: pbBuffer=0x11399d02) returned 1
	[0307.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11399d91 | out: pbBuffer=0x11399d91) returned 1
	[0307.054] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332520 | out: pbBuffer=0x11332520) returned 1
	[0307.055] GetFileType (hFile=0x1fc) returned 0x1
	[0307.055] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.056] WriteFile (in: hFile=0x1fc, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x3210, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1102bdfc*=0x3210, lpOverlapped=0x1102be08) returned 1
	[0307.056] GetFileType (hFile=0x1fc) returned 0x1
	[0307.056] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3210, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.057] GetFileType (hFile=0x1fc) returned 0x1
	[0307.057] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.057] WriteFile (in: hFile=0x1fc, lpBuffer=0x110b8700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110b8700*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0307.057] GetFileType (hFile=0x1fc) returned 0x1
	[0307.057] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x3210, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.057] CloseHandle (hObject=0x1fc) returned 1
	[0307.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf.tl30z")) returned 0x220
	[0307.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.062] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.064] SetEvent (hEvent=0x24c) returned 1
	[0307.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf")) returned 0x220
	[0307.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF", dwFileAttributes=0x220) returned 1
	[0307.065] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0307.142] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0307.142] ReadFile (in: hFile=0x1fc, lpBuffer=0x1116e000, nNumberOfBytesToRead=0xb70, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1116e000*, lpNumberOfBytesRead=0x11316e18*=0xb70, lpOverlapped=0x0) returned 1
	[0307.149] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f850 | out: pbBuffer=0x1140f850) returned 1
	[0307.149] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11109d02 | out: pbBuffer=0x11109d02) returned 1
	[0307.149] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f880 | out: pbBuffer=0x1140f880) returned 1
	[0307.149] SetEvent (hEvent=0x24c) returned 1
	[0307.150] GetFileType (hFile=0x1fc) returned 0x1
	[0307.150] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.150] WriteFile (in: hFile=0x1fc, lpBuffer=0x11192000*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11192000*, lpNumberOfBytesWritten=0x1133bdfc*=0xb70, lpOverlapped=0x1133be08) returned 1
	[0307.151] GetFileType (hFile=0x1fc) returned 0x1
	[0307.151] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xb70, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.151] GetFileType (hFile=0x1fc) returned 0x1
	[0307.151] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.151] WriteFile (in: hFile=0x1fc, lpBuffer=0x1114fc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1114fc00*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0307.152] GetFileType (hFile=0x1fc) returned 0x1
	[0307.152] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0xb70, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.152] CloseHandle (hObject=0x1fc) returned 1
	[0307.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf.tl30z")) returned 0x220
	[0307.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.158] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.160] SetEvent (hEvent=0x24c) returned 1
	[0307.160] SetEvent (hEvent=0x248) returned 1
	[0307.160] SwitchToThread () returned 1
	[0307.163] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.187] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.205] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.226] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.245] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.263] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.282] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.309] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.331] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.354] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.371] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf")) returned 0x220
	[0307.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF", dwFileAttributes=0x220) returned 1
	[0307.378] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0307.491] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x1128ae08 | out: lpMode=0x1128ae08) returned 0
	[0307.491] ReadFile (in: hFile=0x1d4, lpBuffer=0x111da000, nNumberOfBytesToRead=0x1b74, lpNumberOfBytesRead=0x1128ae18, lpOverlapped=0x0 | out: lpBuffer=0x111da000*, lpNumberOfBytesRead=0x1128ae18*=0x1b74, lpOverlapped=0x0) returned 1
	[0307.497] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0307.497] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4d8 | out: pbBuffer=0x1104e4d8) returned 1
	[0307.497] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1124fe02 | out: pbBuffer=0x1124fe02) returned 1
	[0307.497] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e510 | out: pbBuffer=0x1104e510) returned 1
	[0307.499] SetEvent (hEvent=0x160) returned 1
	[0307.499] GetFileType (hFile=0x1d4) returned 0x1
	[0307.499] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11245de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.499] WriteFile (in: hFile=0x1d4, lpBuffer=0x11204000*, nNumberOfBytesToWrite=0x1b74, lpNumberOfBytesWritten=0x11245dfc, lpOverlapped=0x11245e08 | out: lpBuffer=0x11204000*, lpNumberOfBytesWritten=0x11245dfc*=0x1b74, lpOverlapped=0x11245e08) returned 1
	[0307.499] GetFileType (hFile=0x1d4) returned 0x1
	[0307.500] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1b74, lpNewFilePointer=0x0, dwMoveMethod=0x11245de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.500] GetFileType (hFile=0x1d4) returned 0x1
	[0307.500] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11245de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.500] WriteFile (in: hFile=0x1d4, lpBuffer=0x111ea700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11245dfc, lpOverlapped=0x11245e08 | out: lpBuffer=0x111ea700*, lpNumberOfBytesWritten=0x11245dfc*=0x230, lpOverlapped=0x11245e08) returned 1
	[0307.500] GetFileType (hFile=0x1d4) returned 0x1
	[0307.501] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x1b74, lpNewFilePointer=0x0, dwMoveMethod=0x11245de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.501] CloseHandle (hObject=0x1d4) returned 1
	[0307.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf.tl30z")) returned 0x220
	[0307.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.506] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.508] SetEvent (hEvent=0x160) returned 1
	[0307.508] SetEvent (hEvent=0x24c) returned 1
	[0307.508] SwitchToThread () returned 1
	[0307.510] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.512] SetEvent (hEvent=0x24c) returned 1
	[0307.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf")) returned 0x220
	[0307.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF", dwFileAttributes=0x220) returned 1
	[0307.513] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0307.610] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0307.610] ReadFile (in: hFile=0x1d4, lpBuffer=0x110a0000, nNumberOfBytesToRead=0x2028, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x110a0000*, lpNumberOfBytesRead=0x11319e18*=0x2028, lpOverlapped=0x0) returned 1
	[0307.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0307.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63f8 | out: pbBuffer=0x113e63f8) returned 1
	[0307.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1126dd02 | out: pbBuffer=0x1126dd02) returned 1
	[0307.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126dd3d | out: pbBuffer=0x1126dd3d) returned 1
	[0307.617] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126dd7d | out: pbBuffer=0x1126dd7d) returned 1
	[0307.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6430 | out: pbBuffer=0x113e6430) returned 1
	[0307.620] GetFileType (hFile=0x1d4) returned 0x1
	[0307.620] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.620] WriteFile (in: hFile=0x1d4, lpBuffer=0x110c0000*, nNumberOfBytesToWrite=0x2028, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x110c0000*, lpNumberOfBytesWritten=0x1102ddfc*=0x2028, lpOverlapped=0x1102de08) returned 1
	[0307.620] GetFileType (hFile=0x1d4) returned 0x1
	[0307.620] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2028, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.621] GetFileType (hFile=0x1d4) returned 0x1
	[0307.621] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.621] WriteFile (in: hFile=0x1d4, lpBuffer=0x1130ea80*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1130ea80*, lpNumberOfBytesWritten=0x1102ddfc*=0x221, lpOverlapped=0x1102de08) returned 1
	[0307.621] GetFileType (hFile=0x1d4) returned 0x1
	[0307.621] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x2028, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.621] CloseHandle (hObject=0x1d4) returned 1
	[0307.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf.tl30z")) returned 0x220
	[0307.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.625] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.628] SetEvent (hEvent=0x24c) returned 1
	[0307.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf")) returned 0x220
	[0307.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF", dwFileAttributes=0x220) returned 1
	[0307.628] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0307.704] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0307.705] ReadFile (in: hFile=0x1d4, lpBuffer=0x11456000, nNumberOfBytesToRead=0xc88, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x11456000*, lpNumberOfBytesRead=0x11319e18*=0xc88, lpOverlapped=0x0) returned 1
	[0307.713] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0307.713] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11135302 | out: pbBuffer=0x11135302) returned 1
	[0307.714] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11135336 | out: pbBuffer=0x11135336) returned 1
	[0307.714] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323d0 | out: pbBuffer=0x113323d0) returned 1
	[0307.714] GetFileType (hFile=0x1d4) returned 0x1
	[0307.714] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.714] WriteFile (in: hFile=0x1d4, lpBuffer=0x11470000*, nNumberOfBytesToWrite=0xc88, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11470000*, lpNumberOfBytesWritten=0x1133bdfc*=0xc88, lpOverlapped=0x1133be08) returned 1
	[0307.715] GetFileType (hFile=0x1d4) returned 0x1
	[0307.715] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xc88, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.715] GetFileType (hFile=0x1d4) returned 0x1
	[0307.715] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.715] WriteFile (in: hFile=0x1d4, lpBuffer=0x1143b880*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1143b880*, lpNumberOfBytesWritten=0x1133bdfc*=0x224, lpOverlapped=0x1133be08) returned 1
	[0307.715] GetFileType (hFile=0x1d4) returned 0x1
	[0307.716] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0xc88, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.716] CloseHandle (hObject=0x1d4) returned 1
	[0307.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf.tl30z")) returned 0x220
	[0307.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.719] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.721] SetEvent (hEvent=0x24c) returned 1
	[0307.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf")) returned 0x220
	[0307.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF", dwFileAttributes=0x220) returned 1
	[0307.722] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0307.803] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11319e08 | out: lpMode=0x11319e08) returned 0
	[0307.803] ReadFile (in: hFile=0x1b4, lpBuffer=0x1106f300, nNumberOfBytesToRead=0x10c8, lpNumberOfBytesRead=0x11319e18, lpOverlapped=0x0 | out: lpBuffer=0x1106f300*, lpNumberOfBytesRead=0x11319e18*=0x10c8, lpOverlapped=0x0) returned 1
	[0307.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0307.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0307.812] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11266802 | out: pbBuffer=0x11266802) returned 1
	[0307.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126683f | out: pbBuffer=0x1126683f) returned 1
	[0307.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0307.813] GetFileType (hFile=0x1b4) returned 0x1
	[0307.813] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.814] WriteFile (in: hFile=0x1b4, lpBuffer=0x11476000*, nNumberOfBytesToWrite=0x10c8, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11476000*, lpNumberOfBytesWritten=0x1102ddfc*=0x10c8, lpOverlapped=0x1102de08) returned 1
	[0307.814] GetFileType (hFile=0x1b4) returned 0x1
	[0307.814] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x10c8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.814] GetFileType (hFile=0x1b4) returned 0x1
	[0307.814] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.814] WriteFile (in: hFile=0x1b4, lpBuffer=0x1119ce00*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1119ce00*, lpNumberOfBytesWritten=0x1102ddfc*=0x224, lpOverlapped=0x1102de08) returned 1
	[0307.815] GetFileType (hFile=0x1b4) returned 0x1
	[0307.815] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x10c8, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0307.815] CloseHandle (hObject=0x1b4) returned 1
	[0307.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf.tl30z")) returned 0x220
	[0307.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0307.828] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.829] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.838] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.855] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.866] SetEvent (hEvent=0x248) returned 1
	[0307.866] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0307.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf")) returned 0x220
	[0307.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF", dwFileAttributes=0x220) returned 1
	[0307.868] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0307.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0307.956] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0307.956] ReadFile (in: hFile=0x1fc, lpBuffer=0x110a4000, nNumberOfBytesToRead=0x1fe8, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x110a4000*, lpNumberOfBytesRead=0x11316e18*=0x1fe8, lpOverlapped=0x0) returned 1
	[0307.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0307.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11419d02 | out: pbBuffer=0x11419d02) returned 1
	[0307.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0307.962] GetFileType (hFile=0x1fc) returned 0x1
	[0307.962] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.962] WriteFile (in: hFile=0x1fc, lpBuffer=0x112a2000*, nNumberOfBytesToWrite=0x1fe8, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x112a2000*, lpNumberOfBytesWritten=0x11339dfc*=0x1fe8, lpOverlapped=0x11339e08) returned 1
	[0307.963] GetFileType (hFile=0x1fc) returned 0x1
	[0307.963] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1fe8, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.963] GetFileType (hFile=0x1fc) returned 0x1
	[0307.963] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.963] WriteFile (in: hFile=0x1fc, lpBuffer=0x110b6700*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x110b6700*, lpNumberOfBytesWritten=0x11339dfc*=0x233, lpOverlapped=0x11339e08) returned 1
	[0307.965] GetFileType (hFile=0x1fc) returned 0x1
	[0307.965] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1fe8, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0307.965] CloseHandle (hObject=0x1fc) returned 1
	[0308.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf.tl30z")) returned 0x220
	[0308.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.010] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0308.015] SetEvent (hEvent=0x174) returned 1
	[0308.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf")) returned 0x220
	[0308.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF", dwFileAttributes=0x220) returned 1
	[0308.016] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4
	[0308.124] GetConsoleMode (in: hConsoleHandle=0x1b4, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0308.124] ReadFile (in: hFile=0x1b4, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x8e0, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11316e18*=0x8e0, lpOverlapped=0x0) returned 1
	[0308.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4b0 | out: pbBuffer=0x1104e4b0) returned 1
	[0308.130] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1104e4a8 | out: pbBuffer=0x1104e4a8) returned 1
	[0308.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11325e02 | out: pbBuffer=0x11325e02) returned 1
	[0308.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11325ed1 | out: pbBuffer=0x11325ed1) returned 1
	[0308.131] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e4e0 | out: pbBuffer=0x1104e4e0) returned 1
	[0308.131] GetFileType (hFile=0x1b4) returned 0x1
	[0308.131] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.132] WriteFile (in: hFile=0x1b4, lpBuffer=0x110fe000*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110fe000*, lpNumberOfBytesWritten=0x1102bdfc*=0x8e0, lpOverlapped=0x1102be08) returned 1
	[0308.132] GetFileType (hFile=0x1b4) returned 0x1
	[0308.132] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x8e0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.132] GetFileType (hFile=0x1b4) returned 0x1
	[0308.132] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.133] WriteFile (in: hFile=0x1b4, lpBuffer=0x110f8700*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110f8700*, lpNumberOfBytesWritten=0x1102bdfc*=0x224, lpOverlapped=0x1102be08) returned 1
	[0308.133] GetFileType (hFile=0x1b4) returned 0x1
	[0308.133] SetFilePointerEx (in: hFile=0x1b4, liDistanceToMove=0x8e0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.133] CloseHandle (hObject=0x1b4) returned 1
	[0308.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf.tl30z")) returned 0x220
	[0308.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.136] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0308.140] SetEvent (hEvent=0x174) returned 1
	[0308.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf")) returned 0x220
	[0308.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF", dwFileAttributes=0x220) returned 1
	[0308.140] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0308.251] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0308.252] ReadFile (in: hFile=0x1d8, lpBuffer=0x112e0000, nNumberOfBytesToRead=0xcec, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x112e0000*, lpNumberOfBytesRead=0x11316e18*=0xcec, lpOverlapped=0x0) returned 1
	[0308.256] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126240 | out: pbBuffer=0x11126240) returned 1
	[0308.256] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11102802 | out: pbBuffer=0x11102802) returned 1
	[0308.256] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1110284a | out: pbBuffer=0x1110284a) returned 1
	[0308.256] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11102858 | out: pbBuffer=0x11102858) returned 1
	[0308.257] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126270 | out: pbBuffer=0x11126270) returned 1
	[0308.257] GetFileType (hFile=0x1d8) returned 0x1
	[0308.257] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.257] WriteFile (in: hFile=0x1d8, lpBuffer=0x11266000*, nNumberOfBytesToWrite=0xcec, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11266000*, lpNumberOfBytesWritten=0x1102bdfc*=0xcec, lpOverlapped=0x1102be08) returned 1
	[0308.258] GetFileType (hFile=0x1d8) returned 0x1
	[0308.258] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcec, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.258] GetFileType (hFile=0x1d8) returned 0x1
	[0308.258] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.258] WriteFile (in: hFile=0x1d8, lpBuffer=0x1112f880*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1112f880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0308.258] GetFileType (hFile=0x1d8) returned 0x1
	[0308.259] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xcec, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.259] CloseHandle (hObject=0x1d8) returned 1
	[0308.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf.tl30z")) returned 0x220
	[0308.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.261] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0308.264] SetEvent (hEvent=0x174) returned 1
	[0308.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf")) returned 0x220
	[0308.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF", dwFileAttributes=0x220) returned 1
	[0308.264] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2a0
	[0308.386] GetConsoleMode (in: hConsoleHandle=0x2a0, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0308.387] ReadFile (in: hFile=0x2a0, lpBuffer=0x11383000, nNumberOfBytesToRead=0xe64, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11383000*, lpNumberOfBytesRead=0x11316e18*=0xe64, lpOverlapped=0x0) returned 1
	[0308.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111267f0 | out: pbBuffer=0x111267f0) returned 1
	[0308.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1140bc02 | out: pbBuffer=0x1140bc02) returned 1
	[0308.392] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126820 | out: pbBuffer=0x11126820) returned 1
	[0308.392] GetFileType (hFile=0x2a0) returned 0x1
	[0308.392] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.393] WriteFile (in: hFile=0x2a0, lpBuffer=0x11392000*, nNumberOfBytesToWrite=0xe64, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11392000*, lpNumberOfBytesWritten=0x1102bdfc*=0xe64, lpOverlapped=0x1102be08) returned 1
	[0308.393] GetFileType (hFile=0x2a0) returned 0x1
	[0308.393] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xe64, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.393] GetFileType (hFile=0x2a0) returned 0x1
	[0308.393] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.393] WriteFile (in: hFile=0x2a0, lpBuffer=0x1134f180*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1134f180*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0308.394] GetFileType (hFile=0x2a0) returned 0x1
	[0308.394] SetFilePointerEx (in: hFile=0x2a0, liDistanceToMove=0xe64, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.394] CloseHandle (hObject=0x2a0) returned 1
	[0308.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf.tl30z")) returned 0x220
	[0308.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.397] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0308.400] SetEvent (hEvent=0x174) returned 1
	[0308.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf")) returned 0x220
	[0308.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF", dwFileAttributes=0x220) returned 1
	[0308.401] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc
	[0308.495] GetConsoleMode (in: hConsoleHandle=0x1fc, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0308.495] ReadFile (in: hFile=0x1fc, lpBuffer=0x11310000, nNumberOfBytesToRead=0x1fc8, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11310000*, lpNumberOfBytesRead=0x11316e18*=0x1fc8, lpOverlapped=0x0) returned 1
	[0308.502] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e630 | out: pbBuffer=0x1104e630) returned 1
	[0308.502] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d8802 | out: pbBuffer=0x110d8802) returned 1
	[0308.503] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e660 | out: pbBuffer=0x1104e660) returned 1
	[0308.503] GetFileType (hFile=0x1fc) returned 0x1
	[0308.503] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.503] WriteFile (in: hFile=0x1fc, lpBuffer=0x113aa000*, nNumberOfBytesToWrite=0x1fc8, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113aa000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1fc8, lpOverlapped=0x1133be08) returned 1
	[0308.504] GetFileType (hFile=0x1fc) returned 0x1
	[0308.504] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1fc8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.504] GetFileType (hFile=0x1fc) returned 0x1
	[0308.504] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.504] WriteFile (in: hFile=0x1fc, lpBuffer=0x113a5500*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113a5500*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0308.505] GetFileType (hFile=0x1fc) returned 0x1
	[0308.505] SetFilePointerEx (in: hFile=0x1fc, liDistanceToMove=0x1fc8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.505] CloseHandle (hObject=0x1fc) returned 1
	[0308.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf.tl30z")) returned 0x220
	[0308.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.509] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0308.512] SetEvent (hEvent=0x174) returned 1
	[0308.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf")) returned 0x220
	[0308.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF", dwFileAttributes=0x220) returned 1
	[0308.513] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x294
	[0308.563] GetConsoleMode (in: hConsoleHandle=0x294, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0308.563] ReadFile (in: hFile=0x294, lpBuffer=0x11150000, nNumberOfBytesToRead=0x1948, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11150000*, lpNumberOfBytesRead=0x11316e18*=0x1948, lpOverlapped=0x0) returned 1
	[0308.568] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0308.568] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11164802 | out: pbBuffer=0x11164802) returned 1
	[0308.568] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11164838 | out: pbBuffer=0x11164838) returned 1
	[0308.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11164891 | out: pbBuffer=0x11164891) returned 1
	[0308.569] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0308.569] GetFileType (hFile=0x294) returned 0x1
	[0308.569] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0308.569] WriteFile (in: hFile=0x294, lpBuffer=0x112b0000*, nNumberOfBytesToWrite=0x1948, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x112b0000*, lpNumberOfBytesWritten=0x11339dfc*=0x1948, lpOverlapped=0x11339e08) returned 1
	[0308.570] GetFileType (hFile=0x294) returned 0x1
	[0308.570] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x1948, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0308.570] GetFileType (hFile=0x294) returned 0x1
	[0308.570] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0308.570] WriteFile (in: hFile=0x294, lpBuffer=0x11176a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11339dfc, lpOverlapped=0x11339e08 | out: lpBuffer=0x11176a80*, lpNumberOfBytesWritten=0x11339dfc*=0x227, lpOverlapped=0x11339e08) returned 1
	[0308.570] GetFileType (hFile=0x294) returned 0x1
	[0308.571] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x1948, lpNewFilePointer=0x0, dwMoveMethod=0x11339de0 | out: lpNewFilePointer=0x0) returned 1
	[0308.571] CloseHandle (hObject=0x294) returned 1
	[0308.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf.tl30z")) returned 0x220
	[0308.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0308.574] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0308.577] SetEvent (hEvent=0x27c) returned 1
	[0308.577] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf")) returned 0x220
	[0308.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF", dwFileAttributes=0x220) returned 1
	[0308.577] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0308.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0308.622] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11316e08 | out: lpMode=0x11316e08) returned 0
	[0308.622] ReadFile (in: hFile=0x204, lpBuffer=0x11098000, nNumberOfBytesToRead=0x55c, lpNumberOfBytesRead=0x11316e18, lpOverlapped=0x0 | out: lpBuffer=0x11098000*, lpNumberOfBytesRead=0x11316e18*=0x55c, lpOverlapped=0x0) returned 1
	[0308.878] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0309.078] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111266a0 | out: pbBuffer=0x111266a0) returned 1
	[0309.078] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126698 | out: pbBuffer=0x11126698) returned 1
	[0309.078] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1125bb02 | out: pbBuffer=0x1125bb02) returned 1
	[0309.078] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1125bbb1 | out: pbBuffer=0x1125bbb1) returned 1
	[0309.079] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111266d0 | out: pbBuffer=0x111266d0) returned 1
	[0309.079] GetFileType (hFile=0x204) returned 0x1
	[0309.079] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.079] WriteFile (in: hFile=0x204, lpBuffer=0x111a5000*, nNumberOfBytesToWrite=0x55c, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111a5000*, lpNumberOfBytesWritten=0x1133ddfc*=0x55c, lpOverlapped=0x1133de08) returned 1
	[0309.080] GetFileType (hFile=0x204) returned 0x1
	[0309.080] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x55c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.080] GetFileType (hFile=0x204) returned 0x1
	[0309.080] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.080] WriteFile (in: hFile=0x204, lpBuffer=0x111a0a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111a0a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0309.080] GetFileType (hFile=0x204) returned 0x1
	[0309.080] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x55c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0309.081] CloseHandle (hObject=0x204) returned 1
	[0309.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf.tl30z")) returned 0x220
	[0309.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.082] SetEvent (hEvent=0x134) returned 1
	[0309.082] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0309.111] SetEvent (hEvent=0x27c) returned 1
	[0309.111] SetEvent (hEvent=0x160) returned 1
	[0309.112] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0309.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf")) returned 0x220
	[0309.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF", dwFileAttributes=0x220) returned 1
	[0309.223] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0309.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0309.367] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11031e08 | out: lpMode=0x11031e08) returned 0
	[0309.367] ReadFile (in: hFile=0x298, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x8b4, lpNumberOfBytesRead=0x11031e18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x11031e18*=0x8b4, lpOverlapped=0x0) returned 1
	[0309.374] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126270 | out: pbBuffer=0x11126270) returned 1
	[0309.374] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11126268 | out: pbBuffer=0x11126268) returned 1
	[0309.374] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11413202 | out: pbBuffer=0x11413202) returned 1
	[0309.374] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x114132dd | out: pbBuffer=0x114132dd) returned 1
	[0309.375] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111262a0 | out: pbBuffer=0x111262a0) returned 1
	[0309.375] GetFileType (hFile=0x298) returned 0x1
	[0309.375] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.375] WriteFile (in: hFile=0x298, lpBuffer=0x1109e000*, nNumberOfBytesToWrite=0x8b4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1109e000*, lpNumberOfBytesWritten=0x11031dfc*=0x8b4, lpOverlapped=0x11031e08) returned 1
	[0309.376] GetFileType (hFile=0x298) returned 0x1
	[0309.376] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x8b4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.376] GetFileType (hFile=0x298) returned 0x1
	[0309.376] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.376] WriteFile (in: hFile=0x298, lpBuffer=0x113b9880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113b9880*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0309.376] GetFileType (hFile=0x298) returned 0x1
	[0309.376] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x8b4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0309.377] CloseHandle (hObject=0x298) returned 1
	[0309.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf.tl30z")) returned 0x220
	[0309.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0309.381] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0311.722] SetEvent (hEvent=0x1e8) returned 1
	[0311.722] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0311.726] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0313.653] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0313.655] SetEvent (hEvent=0x22c) returned 1
	[0313.655] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0313.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg")) returned 0x220
	[0313.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG", dwFileAttributes=0x220) returned 1
	[0313.657] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg.tl30z"), dwFlags=0x1) returned 1
	[0313.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x290
	[0313.709] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x11094e08 | out: lpMode=0x11094e08) returned 0
	[0313.709] ReadFile (in: hFile=0x290, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x6afc, lpNumberOfBytesRead=0x11094e18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x11094e18*=0x6afc, lpOverlapped=0x0) returned 1
	[0313.826] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0313.832] SetEvent (hEvent=0x164) returned 1
	[0313.832] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0317.642] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0317.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf")) returned 0x220
	[0317.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF", dwFileAttributes=0x220) returned 1
	[0317.646] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0317.786] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x1123be08 | out: lpMode=0x1123be08) returned 0
	[0317.786] ReadFile (in: hFile=0x204, lpBuffer=0x113ba000, nNumberOfBytesToRead=0x32f6, lpNumberOfBytesRead=0x1123be18, lpOverlapped=0x0 | out: lpBuffer=0x113ba000*, lpNumberOfBytesRead=0x1123be18*=0x32f6, lpOverlapped=0x0) returned 1
	[0317.856] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f840 | out: pbBuffer=0x1140f840) returned 1
	[0317.856] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11321c02 | out: pbBuffer=0x11321c02) returned 1
	[0317.856] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f870 | out: pbBuffer=0x1140f870) returned 1
	[0317.857] GetFileType (hFile=0x204) returned 0x1
	[0317.857] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.857] WriteFile (in: hFile=0x204, lpBuffer=0x11116000*, nNumberOfBytesToWrite=0x32f6, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11116000*, lpNumberOfBytesWritten=0x11031dfc*=0x32f6, lpOverlapped=0x11031e08) returned 1
	[0317.858] GetFileType (hFile=0x204) returned 0x1
	[0317.858] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x32f6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.858] GetFileType (hFile=0x204) returned 0x1
	[0317.858] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.858] WriteFile (in: hFile=0x204, lpBuffer=0x11106380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11106380*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0317.858] GetFileType (hFile=0x204) returned 0x1
	[0317.859] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x32f6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.859] CloseHandle (hObject=0x204) returned 1
	[0317.863] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0317.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf.tl30z")) returned 0x220
	[0317.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.886] SetEvent (hEvent=0x25c) returned 1
	[0317.886] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0317.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf.tl30z")) returned 0x220
	[0317.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.894] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0317.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf")) returned 0x220
	[0317.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF", dwFileAttributes=0x220) returned 1
	[0317.899] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0318.067] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0318.067] ReadFile (in: hFile=0x224, lpBuffer=0x112e4000, nNumberOfBytesToRead=0x283c, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x112e4000*, lpNumberOfBytesRead=0x11287e18*=0x283c, lpOverlapped=0x0) returned 1
	[0318.092] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0318.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11215302 | out: pbBuffer=0x11215302) returned 1
	[0318.093] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0318.094] GetFileType (hFile=0x224) returned 0x1
	[0318.094] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11213de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.095] WriteFile (in: hFile=0x224, lpBuffer=0x11462000*, nNumberOfBytesToWrite=0x283c, lpNumberOfBytesWritten=0x11213dfc, lpOverlapped=0x11213e08 | out: lpBuffer=0x11462000*, lpNumberOfBytesWritten=0x11213dfc*=0x283c, lpOverlapped=0x11213e08) returned 1
	[0318.095] GetFileType (hFile=0x224) returned 0x1
	[0318.095] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x283c, lpNewFilePointer=0x0, dwMoveMethod=0x11213de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.095] GetFileType (hFile=0x224) returned 0x1
	[0318.095] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11213de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.096] WriteFile (in: hFile=0x224, lpBuffer=0x113a1880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11213dfc, lpOverlapped=0x11213e08 | out: lpBuffer=0x113a1880*, lpNumberOfBytesWritten=0x11213dfc*=0x22a, lpOverlapped=0x11213e08) returned 1
	[0318.096] GetFileType (hFile=0x224) returned 0x1
	[0318.096] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x283c, lpNewFilePointer=0x0, dwMoveMethod=0x11213de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.097] CloseHandle (hObject=0x224) returned 1
	[0318.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf.tl30z")) returned 0x220
	[0318.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.107] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0318.113] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0318.321] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0318.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf")) returned 0x220
	[0318.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF", dwFileAttributes=0x220) returned 1
	[0318.331] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0318.615] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0318.615] ReadFile (in: hFile=0x204, lpBuffer=0x111ce000, nNumberOfBytesToRead=0x2ea0, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x111ce000*, lpNumberOfBytesRead=0x1131ae18*=0x2ea0, lpOverlapped=0x0) returned 1
	[0318.629] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0318.629] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f0f8 | out: pbBuffer=0x1140f0f8) returned 1
	[0318.630] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11368802 | out: pbBuffer=0x11368802) returned 1
	[0318.630] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0318.631] GetFileType (hFile=0x204) returned 0x1
	[0318.631] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.631] WriteFile (in: hFile=0x204, lpBuffer=0x11176000*, nNumberOfBytesToWrite=0x2ea0, lpNumberOfBytesWritten=0x11375dfc, lpOverlapped=0x11375e08 | out: lpBuffer=0x11176000*, lpNumberOfBytesWritten=0x11375dfc*=0x2ea0, lpOverlapped=0x11375e08) returned 1
	[0318.632] GetFileType (hFile=0x204) returned 0x1
	[0318.632] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x2ea0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.632] GetFileType (hFile=0x204) returned 0x1
	[0318.632] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.632] WriteFile (in: hFile=0x204, lpBuffer=0x1134ea80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11375dfc, lpOverlapped=0x11375e08 | out: lpBuffer=0x1134ea80*, lpNumberOfBytesWritten=0x11375dfc*=0x22a, lpOverlapped=0x11375e08) returned 1
	[0318.633] GetFileType (hFile=0x204) returned 0x1
	[0318.633] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x2ea0, lpNewFilePointer=0x0, dwMoveMethod=0x11375de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.633] CloseHandle (hObject=0x204) returned 1
	[0318.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf.tl30z")) returned 0x220
	[0318.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf")) returned 0x220
	[0318.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF", dwFileAttributes=0x220) returned 1
	[0318.645] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4
	[0318.769] GetConsoleMode (in: hConsoleHandle=0x1d4, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0318.769] ReadFile (in: hFile=0x1d4, lpBuffer=0x112d8000, nNumberOfBytesToRead=0x476e, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x112d8000*, lpNumberOfBytesRead=0x11022e18*=0x476e, lpOverlapped=0x0) returned 1
	[0318.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0318.803] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11310802 | out: pbBuffer=0x11310802) returned 1
	[0318.804] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0318.805] GetFileType (hFile=0x1d4) returned 0x1
	[0318.805] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.805] WriteFile (in: hFile=0x1d4, lpBuffer=0x1113e000*, nNumberOfBytesToWrite=0x476e, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x1113e000*, lpNumberOfBytesWritten=0x1133fdfc*=0x476e, lpOverlapped=0x1133fe08) returned 1
	[0318.805] GetFileType (hFile=0x1d4) returned 0x1
	[0318.805] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x476e, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.806] GetFileType (hFile=0x1d4) returned 0x1
	[0318.806] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.806] WriteFile (in: hFile=0x1d4, lpBuffer=0x112aaa80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112aaa80*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0318.806] GetFileType (hFile=0x1d4) returned 0x1
	[0318.806] SetFilePointerEx (in: hFile=0x1d4, liDistanceToMove=0x476e, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.806] CloseHandle (hObject=0x1d4) returned 1
	[0318.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf.tl30z")) returned 0x220
	[0318.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.814] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0318.817] SetEvent (hEvent=0x164) returned 1
	[0318.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf")) returned 0x220
	[0318.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF", dwFileAttributes=0x220) returned 1
	[0318.818] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0318.928] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0318.928] ReadFile (in: hFile=0x1cc, lpBuffer=0x1113a000, nNumberOfBytesToRead=0xbbe0, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x1113a000*, lpNumberOfBytesRead=0x11022e18*=0xbbe0, lpOverlapped=0x0) returned 1
	[0318.934] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0318.934] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e60f8 | out: pbBuffer=0x113e60f8) returned 1
	[0318.934] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11354802 | out: pbBuffer=0x11354802) returned 1
	[0318.934] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11354817 | out: pbBuffer=0x11354817) returned 1
	[0318.934] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11354875 | out: pbBuffer=0x11354875) returned 1
	[0318.935] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0318.936] GetFileType (hFile=0x1cc) returned 0x1
	[0318.936] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.937] WriteFile (in: hFile=0x1cc, lpBuffer=0x11396000*, nNumberOfBytesToWrite=0xbbe0, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11396000*, lpNumberOfBytesWritten=0x1133fdfc*=0xbbe0, lpOverlapped=0x1133fe08) returned 1
	[0318.937] GetFileType (hFile=0x1cc) returned 0x1
	[0318.937] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xbbe0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.938] GetFileType (hFile=0x1cc) returned 0x1
	[0318.938] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.938] WriteFile (in: hFile=0x1cc, lpBuffer=0x112b8a80*, nNumberOfBytesToWrite=0x236, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x112b8a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x236, lpOverlapped=0x1133fe08) returned 1
	[0318.938] GetFileType (hFile=0x1cc) returned 0x1
	[0318.938] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0xbbe0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0318.938] CloseHandle (hObject=0x1cc) returned 1
	[0318.940] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf.tl30z")) returned 0x220
	[0318.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.942] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0318.946] SetEvent (hEvent=0x27c) returned 1
	[0318.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf")) returned 0x220
	[0318.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF", dwFileAttributes=0x220) returned 1
	[0318.946] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0319.059] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0319.059] ReadFile (in: hFile=0x1c8, lpBuffer=0x111da000, nNumberOfBytesToRead=0x27f4, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x111da000*, lpNumberOfBytesRead=0x11022e18*=0x27f4, lpOverlapped=0x0) returned 1
	[0319.064] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f570 | out: pbBuffer=0x1140f570) returned 1
	[0319.064] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f568 | out: pbBuffer=0x1140f568) returned 1
	[0319.064] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113dd302 | out: pbBuffer=0x113dd302) returned 1
	[0319.064] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f5a0 | out: pbBuffer=0x1140f5a0) returned 1
	[0319.065] GetFileType (hFile=0x1c8) returned 0x1
	[0319.065] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.065] WriteFile (in: hFile=0x1c8, lpBuffer=0x110dc000*, nNumberOfBytesToWrite=0x27f4, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110dc000*, lpNumberOfBytesWritten=0x11031dfc*=0x27f4, lpOverlapped=0x11031e08) returned 1
	[0319.065] GetFileType (hFile=0x1c8) returned 0x1
	[0319.065] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x27f4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.065] GetFileType (hFile=0x1c8) returned 0x1
	[0319.066] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.066] WriteFile (in: hFile=0x1c8, lpBuffer=0x1143c380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1143c380*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0319.066] GetFileType (hFile=0x1c8) returned 0x1
	[0319.066] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x27f4, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.066] CloseHandle (hObject=0x1c8) returned 1
	[0319.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf.tl30z")) returned 0x220
	[0319.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.070] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0319.072] SetEvent (hEvent=0x27c) returned 1
	[0319.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf")) returned 0x220
	[0319.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF", dwFileAttributes=0x220) returned 1
	[0319.072] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0319.182] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0319.182] ReadFile (in: hFile=0x1cc, lpBuffer=0x11326000, nNumberOfBytesToRead=0x1544, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x11326000*, lpNumberOfBytesRead=0x11022e18*=0x1544, lpOverlapped=0x0) returned 1
	[0319.187] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0319.187] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261202 | out: pbBuffer=0x11261202) returned 1
	[0319.187] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1126128d | out: pbBuffer=0x1126128d) returned 1
	[0319.188] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0319.188] GetFileType (hFile=0x1cc) returned 0x1
	[0319.188] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.189] WriteFile (in: hFile=0x1cc, lpBuffer=0x11382000*, nNumberOfBytesToWrite=0x1544, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11382000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1544, lpOverlapped=0x1133de08) returned 1
	[0319.189] GetFileType (hFile=0x1cc) returned 0x1
	[0319.189] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x1544, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.189] GetFileType (hFile=0x1cc) returned 0x1
	[0319.189] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.189] WriteFile (in: hFile=0x1cc, lpBuffer=0x110b3c00*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110b3c00*, lpNumberOfBytesWritten=0x1133ddfc*=0x227, lpOverlapped=0x1133de08) returned 1
	[0319.190] GetFileType (hFile=0x1cc) returned 0x1
	[0319.190] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x1544, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.190] CloseHandle (hObject=0x1cc) returned 1
	[0319.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf.tl30z")) returned 0x220
	[0319.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.193] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0319.198] SetEvent (hEvent=0x1e8) returned 1
	[0319.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf")) returned 0x220
	[0319.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF", dwFileAttributes=0x220) returned 1
	[0319.198] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0319.286] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11022e08 | out: lpMode=0x11022e08) returned 0
	[0319.286] ReadFile (in: hFile=0x298, lpBuffer=0x110e8000, nNumberOfBytesToRead=0xfc0, lpNumberOfBytesRead=0x11022e18, lpOverlapped=0x0 | out: lpBuffer=0x110e8000*, lpNumberOfBytesRead=0x11022e18*=0xfc0, lpOverlapped=0x0) returned 1
	[0319.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332500 | out: pbBuffer=0x11332500) returned 1
	[0319.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11261d02 | out: pbBuffer=0x11261d02) returned 1
	[0319.625] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332530 | out: pbBuffer=0x11332530) returned 1
	[0319.626] GetFileType (hFile=0x298) returned 0x1
	[0319.626] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.626] WriteFile (in: hFile=0x298, lpBuffer=0x113cc000*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x113cc000*, lpNumberOfBytesWritten=0x1133ddfc*=0xfc0, lpOverlapped=0x1133de08) returned 1
	[0319.626] GetFileType (hFile=0x298) returned 0x1
	[0319.626] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0xfc0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.626] GetFileType (hFile=0x298) returned 0x1
	[0319.627] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.627] WriteFile (in: hFile=0x298, lpBuffer=0x113b4a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x113b4a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0319.627] GetFileType (hFile=0x298) returned 0x1
	[0319.627] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0xfc0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.627] CloseHandle (hObject=0x298) returned 1
	[0319.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf.tl30z")) returned 0x220
	[0319.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.651] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0319.657] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0319.674] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0319.691] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0319.718] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0319.735] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0319.753] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0319.769] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0319.790] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0319.798] SetEvent (hEvent=0x164) returned 1
	[0319.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf")) returned 0x220
	[0319.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF", dwFileAttributes=0x220) returned 1
	[0319.799] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0319.956] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0319.956] ReadFile (in: hFile=0x1c8, lpBuffer=0x11382000, nNumberOfBytesToRead=0x1652, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11382000*, lpNumberOfBytesRead=0x11428e18*=0x1652, lpOverlapped=0x0) returned 1
	[0319.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332390 | out: pbBuffer=0x11332390) returned 1
	[0319.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332388 | out: pbBuffer=0x11332388) returned 1
	[0319.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11373c02 | out: pbBuffer=0x11373c02) returned 1
	[0319.961] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11373c13 | out: pbBuffer=0x11373c13) returned 1
	[0319.962] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323c0 | out: pbBuffer=0x113323c0) returned 1
	[0319.962] GetFileType (hFile=0x1c8) returned 0x1
	[0319.962] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.962] WriteFile (in: hFile=0x1c8, lpBuffer=0x113a2000*, nNumberOfBytesToWrite=0x1652, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113a2000*, lpNumberOfBytesWritten=0x11031dfc*=0x1652, lpOverlapped=0x11031e08) returned 1
	[0319.963] GetFileType (hFile=0x1c8) returned 0x1
	[0319.963] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1652, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.963] GetFileType (hFile=0x1c8) returned 0x1
	[0319.963] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.963] WriteFile (in: hFile=0x1c8, lpBuffer=0x11398700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11398700*, lpNumberOfBytesWritten=0x11031dfc*=0x22a, lpOverlapped=0x11031e08) returned 1
	[0319.963] GetFileType (hFile=0x1c8) returned 0x1
	[0319.964] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1652, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.964] CloseHandle (hObject=0x1c8) returned 1
	[0319.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf.tl30z")) returned 0x220
	[0319.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.966] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0319.969] SetEvent (hEvent=0x164) returned 1
	[0319.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00704_.wmf")) returned 0x220
	[0319.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00704_.WMF", dwFileAttributes=0x220) returned 1
	[0319.970] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00704_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00704_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00704_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00704_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00704_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0320.077] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0320.077] ReadFile (in: hFile=0x298, lpBuffer=0x111d8000, nNumberOfBytesToRead=0x3636, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x111d8000*, lpNumberOfBytesRead=0x11428e18*=0x3636, lpOverlapped=0x0) returned 1
	[0320.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332670 | out: pbBuffer=0x11332670) returned 1
	[0320.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ef102 | out: pbBuffer=0x113ef102) returned 1
	[0320.083] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113ef19f | out: pbBuffer=0x113ef19f) returned 1
	[0320.084] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113326a0 | out: pbBuffer=0x113326a0) returned 1
	[0320.085] GetFileType (hFile=0x298) returned 0x1
	[0320.085] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.085] WriteFile (in: hFile=0x298, lpBuffer=0x1109e000*, nNumberOfBytesToWrite=0x3636, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x1109e000*, lpNumberOfBytesWritten=0x11031dfc*=0x3636, lpOverlapped=0x11031e08) returned 1
	[0320.085] GetFileType (hFile=0x298) returned 0x1
	[0320.086] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x3636, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.086] GetFileType (hFile=0x298) returned 0x1
	[0320.086] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.086] WriteFile (in: hFile=0x298, lpBuffer=0x113b8380*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113b8380*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0320.086] GetFileType (hFile=0x298) returned 0x1
	[0320.086] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x3636, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.087] CloseHandle (hObject=0x298) returned 1
	[0320.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00704_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00704_.wmf.tl30z")) returned 0x220
	[0320.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00704_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.090] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.094] SetEvent (hEvent=0x164) returned 1
	[0320.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00735_.wmf")) returned 0x220
	[0320.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00735_.WMF", dwFileAttributes=0x220) returned 1
	[0320.094] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00735_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00735_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00735_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00735_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00735_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.166] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0320.166] ReadFile (in: hFile=0x224, lpBuffer=0x11106c00, nNumberOfBytesToRead=0x5cc, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11106c00*, lpNumberOfBytesRead=0x11428e18*=0x5cc, lpOverlapped=0x0) returned 1
	[0320.171] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63d0 | out: pbBuffer=0x113e63d0) returned 1
	[0320.171] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63c8 | out: pbBuffer=0x113e63c8) returned 1
	[0320.172] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11101202 | out: pbBuffer=0x11101202) returned 1
	[0320.172] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11101205 | out: pbBuffer=0x11101205) returned 1
	[0320.172] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111012be | out: pbBuffer=0x111012be) returned 1
	[0320.172] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6400 | out: pbBuffer=0x113e6400) returned 1
	[0320.172] GetFileType (hFile=0x224) returned 0x1
	[0320.172] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.172] WriteFile (in: hFile=0x224, lpBuffer=0x11137000*, nNumberOfBytesToWrite=0x5cc, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11137000*, lpNumberOfBytesWritten=0x1102bdfc*=0x5cc, lpOverlapped=0x1102be08) returned 1
	[0320.173] GetFileType (hFile=0x224) returned 0x1
	[0320.173] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5cc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.173] GetFileType (hFile=0x224) returned 0x1
	[0320.173] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.173] WriteFile (in: hFile=0x224, lpBuffer=0x11113880*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11113880*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0320.174] GetFileType (hFile=0x224) returned 0x1
	[0320.174] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x5cc, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.174] CloseHandle (hObject=0x224) returned 1
	[0320.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00735_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00735_.wmf.tl30z")) returned 0x220
	[0320.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00735_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.176] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.179] SetEvent (hEvent=0x164) returned 1
	[0320.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00828_.wmf")) returned 0x220
	[0320.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00828_.WMF", dwFileAttributes=0x220) returned 1
	[0320.180] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00828_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00828_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00828_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00828_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00828_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0320.254] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0320.254] ReadFile (in: hFile=0x298, lpBuffer=0x11226a80, nNumberOfBytesToRead=0x28ae, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11226a80*, lpNumberOfBytesRead=0x11428e18*=0x28ae, lpOverlapped=0x0) returned 1
	[0320.259] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0320.259] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f258 | out: pbBuffer=0x1140f258) returned 1
	[0320.259] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1118d402 | out: pbBuffer=0x1118d402) returned 1
	[0320.259] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1118d436 | out: pbBuffer=0x1118d436) returned 1
	[0320.260] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0320.260] GetFileType (hFile=0x298) returned 0x1
	[0320.260] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.260] WriteFile (in: hFile=0x298, lpBuffer=0x11176000*, nNumberOfBytesToWrite=0x28ae, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11176000*, lpNumberOfBytesWritten=0x1102ddfc*=0x28ae, lpOverlapped=0x1102de08) returned 1
	[0320.261] GetFileType (hFile=0x298) returned 0x1
	[0320.261] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x28ae, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.261] GetFileType (hFile=0x298) returned 0x1
	[0320.261] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.261] WriteFile (in: hFile=0x298, lpBuffer=0x11368000*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x11368000*, lpNumberOfBytesWritten=0x1102ddfc*=0x22d, lpOverlapped=0x1102de08) returned 1
	[0320.261] GetFileType (hFile=0x298) returned 0x1
	[0320.261] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x28ae, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.262] CloseHandle (hObject=0x298) returned 1
	[0320.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00828_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00828_.wmf.tl30z")) returned 0x220
	[0320.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00828_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.265] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.268] SetEvent (hEvent=0x25c) returned 1
	[0320.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00913_.wmf")) returned 0x220
	[0320.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00913_.WMF", dwFileAttributes=0x220) returned 1
	[0320.269] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00913_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00913_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00913_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00913_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00913_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0320.353] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0320.353] ReadFile (in: hFile=0x204, lpBuffer=0x11126a80, nNumberOfBytesToRead=0x28b4, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11126a80*, lpNumberOfBytesRead=0x11428e18*=0x28b4, lpOverlapped=0x0) returned 1
	[0320.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0320.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332508 | out: pbBuffer=0x11332508) returned 1
	[0320.358] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ddd02 | out: pbBuffer=0x113ddd02) returned 1
	[0320.359] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332540 | out: pbBuffer=0x11332540) returned 1
	[0320.359] GetFileType (hFile=0x204) returned 0x1
	[0320.359] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.360] WriteFile (in: hFile=0x204, lpBuffer=0x111f8000*, nNumberOfBytesToWrite=0x28b4, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111f8000*, lpNumberOfBytesWritten=0x1133ddfc*=0x28b4, lpOverlapped=0x1133de08) returned 1
	[0320.360] GetFileType (hFile=0x204) returned 0x1
	[0320.360] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x28b4, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.360] GetFileType (hFile=0x204) returned 0x1
	[0320.360] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.360] WriteFile (in: hFile=0x204, lpBuffer=0x111ee700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111ee700*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0320.361] GetFileType (hFile=0x204) returned 0x1
	[0320.361] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x28b4, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.361] CloseHandle (hObject=0x204) returned 1
	[0320.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00913_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00913_.wmf.tl30z")) returned 0x220
	[0320.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00913_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.365] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.367] SetEvent (hEvent=0x25c) returned 1
	[0320.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00918_.wmf")) returned 0x220
	[0320.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00918_.WMF", dwFileAttributes=0x220) returned 1
	[0320.369] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00918_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00918_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00918_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00918_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00918_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0320.453] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11428e08 | out: lpMode=0x11428e08) returned 0
	[0320.453] ReadFile (in: hFile=0x1d8, lpBuffer=0x11242000, nNumberOfBytesToRead=0x1f5c, lpNumberOfBytesRead=0x11428e18, lpOverlapped=0x0 | out: lpBuffer=0x11242000*, lpNumberOfBytesRead=0x11428e18*=0x1f5c, lpOverlapped=0x0) returned 1
	[0320.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f850 | out: pbBuffer=0x1140f850) returned 1
	[0320.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111e5e02 | out: pbBuffer=0x111e5e02) returned 1
	[0320.466] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111e5e16 | out: pbBuffer=0x111e5e16) returned 1
	[0320.467] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f880 | out: pbBuffer=0x1140f880) returned 1
	[0320.467] GetFileType (hFile=0x1d8) returned 0x1
	[0320.467] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.467] WriteFile (in: hFile=0x1d8, lpBuffer=0x1125a000*, nNumberOfBytesToWrite=0x1f5c, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1125a000*, lpNumberOfBytesWritten=0x1102ddfc*=0x1f5c, lpOverlapped=0x1102de08) returned 1
	[0320.468] GetFileType (hFile=0x1d8) returned 0x1
	[0320.468] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1f5c, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.468] GetFileType (hFile=0x1d8) returned 0x1
	[0320.468] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.469] WriteFile (in: hFile=0x1d8, lpBuffer=0x112fb880*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x112fb880*, lpNumberOfBytesWritten=0x1102ddfc*=0x233, lpOverlapped=0x1102de08) returned 1
	[0320.469] GetFileType (hFile=0x1d8) returned 0x1
	[0320.469] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x1f5c, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.469] CloseHandle (hObject=0x1d8) returned 1
	[0320.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00918_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00918_.wmf.tl30z")) returned 0x220
	[0320.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00918_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.482] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.491] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.513] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.525] SetEvent (hEvent=0x164) returned 1
	[0320.526] SetEvent (hEvent=0x134) returned 1
	[0320.526] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x1) returned 0x102
	[0320.529] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.529] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x1) returned 0x0
	[0320.531] SetEvent (hEvent=0x27c) returned 1
	[0320.532] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x1) returned 0x102
	[0320.535] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.564] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.593] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.614] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.641] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.815] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.819] SetEvent (hEvent=0x1e8) returned 1
	[0320.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01566_.wmf")) returned 0x220
	[0320.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01566_.WMF", dwFileAttributes=0x220) returned 1
	[0320.819] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01566_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01566_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01566_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01566_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01566_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0320.897] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0320.897] ReadFile (in: hFile=0x1c8, lpBuffer=0x111dc000, nNumberOfBytesToRead=0x51a8, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x111dc000*, lpNumberOfBytesRead=0x1131ce18*=0x51a8, lpOverlapped=0x0) returned 1
	[0320.903] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f550 | out: pbBuffer=0x1140f550) returned 1
	[0320.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f548 | out: pbBuffer=0x1140f548) returned 1
	[0320.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x111cc902 | out: pbBuffer=0x111cc902) returned 1
	[0320.904] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f580 | out: pbBuffer=0x1140f580) returned 1
	[0320.905] GetFileType (hFile=0x1c8) returned 0x1
	[0320.905] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.905] WriteFile (in: hFile=0x1c8, lpBuffer=0x110f0000*, nNumberOfBytesToWrite=0x51a8, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110f0000*, lpNumberOfBytesWritten=0x1133bdfc*=0x51a8, lpOverlapped=0x1133be08) returned 1
	[0320.905] GetFileType (hFile=0x1c8) returned 0x1
	[0320.906] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x51a8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.906] GetFileType (hFile=0x1c8) returned 0x1
	[0320.906] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.906] WriteFile (in: hFile=0x1c8, lpBuffer=0x1120bc00*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1120bc00*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0320.906] GetFileType (hFile=0x1c8) returned 0x1
	[0320.906] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x51a8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.906] CloseHandle (hObject=0x1c8) returned 1
	[0320.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01566_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01566_.wmf.tl30z")) returned 0x220
	[0320.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01566_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.911] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0320.913] SetEvent (hEvent=0x1e8) returned 1
	[0320.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01785_.wmf")) returned 0x220
	[0320.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01785_.WMF", dwFileAttributes=0x220) returned 1
	[0320.914] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01785_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01785_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01785_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01785_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01785_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0321.089] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0321.089] ReadFile (in: hFile=0x204, lpBuffer=0x112ee000, nNumberOfBytesToRead=0x6ca8, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x112ee000*, lpNumberOfBytesRead=0x1131ce18*=0x6ca8, lpOverlapped=0x0) returned 1
	[0321.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0321.096] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11368802 | out: pbBuffer=0x11368802) returned 1
	[0321.097] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11368807 | out: pbBuffer=0x11368807) returned 1
	[0321.097] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11368860 | out: pbBuffer=0x11368860) returned 1
	[0321.097] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0321.098] GetFileType (hFile=0x204) returned 0x1
	[0321.099] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.099] WriteFile (in: hFile=0x204, lpBuffer=0x11bcc000*, nNumberOfBytesToWrite=0x6ca8, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11bcc000*, lpNumberOfBytesWritten=0x1102bdfc*=0x6ca8, lpOverlapped=0x1102be08) returned 1
	[0321.099] GetFileType (hFile=0x204) returned 0x1
	[0321.100] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x6ca8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.100] GetFileType (hFile=0x204) returned 0x1
	[0321.100] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.100] WriteFile (in: hFile=0x204, lpBuffer=0x1141ea80*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x1141ea80*, lpNumberOfBytesWritten=0x1102bdfc*=0x22d, lpOverlapped=0x1102be08) returned 1
	[0321.100] GetFileType (hFile=0x204) returned 0x1
	[0321.101] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x6ca8, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.101] CloseHandle (hObject=0x204) returned 1
	[0321.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01785_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01785_.wmf.tl30z")) returned 0x220
	[0321.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01785_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.105] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0321.109] SetEvent (hEvent=0x27c) returned 1
	[0321.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02022_.wmf")) returned 0x220
	[0321.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02022_.WMF", dwFileAttributes=0x220) returned 1
	[0321.110] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02022_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02022_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02022_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02022_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02022_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0321.191] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0321.191] ReadFile (in: hFile=0x298, lpBuffer=0x110e4000, nNumberOfBytesToRead=0x1d68, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110e4000*, lpNumberOfBytesRead=0x1131ce18*=0x1d68, lpOverlapped=0x0) returned 1
	[0321.196] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113324e0 | out: pbBuffer=0x113324e0) returned 1
	[0321.196] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11469d02 | out: pbBuffer=0x11469d02) returned 1
	[0321.196] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11469d53 | out: pbBuffer=0x11469d53) returned 1
	[0321.197] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332510 | out: pbBuffer=0x11332510) returned 1
	[0321.197] GetFileType (hFile=0x298) returned 0x1
	[0321.197] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.197] WriteFile (in: hFile=0x298, lpBuffer=0x113bc000*, nNumberOfBytesToWrite=0x1d68, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113bc000*, lpNumberOfBytesWritten=0x11031dfc*=0x1d68, lpOverlapped=0x11031e08) returned 1
	[0321.198] GetFileType (hFile=0x298) returned 0x1
	[0321.198] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x1d68, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.198] GetFileType (hFile=0x298) returned 0x1
	[0321.198] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.198] WriteFile (in: hFile=0x298, lpBuffer=0x113b2700*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113b2700*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0321.199] GetFileType (hFile=0x298) returned 0x1
	[0321.199] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x1d68, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.199] CloseHandle (hObject=0x298) returned 1
	[0321.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02022_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02022_.wmf.tl30z")) returned 0x220
	[0321.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02022_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.210] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0321.214] SetEvent (hEvent=0x27c) returned 1
	[0321.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02048_.wmf")) returned 0x220
	[0321.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02048_.WMF", dwFileAttributes=0x220) returned 1
	[0321.215] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02048_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02048_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02048_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02048_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02048_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0321.310] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0321.310] ReadFile (in: hFile=0x204, lpBuffer=0x110bc000, nNumberOfBytesToRead=0x1fde, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x110bc000*, lpNumberOfBytesRead=0x1131ce18*=0x1fde, lpOverlapped=0x0) returned 1
	[0321.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113327f0 | out: pbBuffer=0x113327f0) returned 1
	[0321.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113327e8 | out: pbBuffer=0x113327e8) returned 1
	[0321.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b9202 | out: pbBuffer=0x112b9202) returned 1
	[0321.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b9209 | out: pbBuffer=0x112b9209) returned 1
	[0321.316] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b92ad | out: pbBuffer=0x112b92ad) returned 1
	[0321.317] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332820 | out: pbBuffer=0x11332820) returned 1
	[0321.317] GetFileType (hFile=0x204) returned 0x1
	[0321.317] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.317] WriteFile (in: hFile=0x204, lpBuffer=0x111d2000*, nNumberOfBytesToWrite=0x1fde, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111d2000*, lpNumberOfBytesWritten=0x11031dfc*=0x1fde, lpOverlapped=0x11031e08) returned 1
	[0321.318] GetFileType (hFile=0x204) returned 0x1
	[0321.318] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1fde, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.318] GetFileType (hFile=0x204) returned 0x1
	[0321.318] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.318] WriteFile (in: hFile=0x204, lpBuffer=0x111c6380*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111c6380*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0321.319] GetFileType (hFile=0x204) returned 0x1
	[0321.319] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x1fde, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.319] CloseHandle (hObject=0x204) returned 1
	[0321.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02048_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02048_.wmf.tl30z")) returned 0x220
	[0321.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02048_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.322] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0321.325] SetEvent (hEvent=0x27c) returned 1
	[0321.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02094_.wmf")) returned 0x220
	[0321.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02094_.WMF", dwFileAttributes=0x220) returned 1
	[0321.326] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02094_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02094_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02094_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02094_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02094_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0321.405] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131ce08 | out: lpMode=0x1131ce08) returned 0
	[0321.405] ReadFile (in: hFile=0x1cc, lpBuffer=0x1113e000, nNumberOfBytesToRead=0x1b4a, lpNumberOfBytesRead=0x1131ce18, lpOverlapped=0x0 | out: lpBuffer=0x1113e000*, lpNumberOfBytesRead=0x1131ce18*=0x1b4a, lpOverlapped=0x0) returned 1
	[0321.410] SetEvent (hEvent=0x27c) returned 1
	[0321.411] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332980 | out: pbBuffer=0x11332980) returned 1
	[0321.412] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b9d02 | out: pbBuffer=0x112b9d02) returned 1
	[0321.412] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113329b0 | out: pbBuffer=0x113329b0) returned 1
	[0321.412] GetFileType (hFile=0x1cc) returned 0x1
	[0321.412] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.413] WriteFile (in: hFile=0x1cc, lpBuffer=0x11162000*, nNumberOfBytesToWrite=0x1b4a, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11162000*, lpNumberOfBytesWritten=0x11031dfc*=0x1b4a, lpOverlapped=0x11031e08) returned 1
	[0321.413] GetFileType (hFile=0x1cc) returned 0x1
	[0321.413] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x1b4a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.413] GetFileType (hFile=0x1cc) returned 0x1
	[0321.413] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.413] WriteFile (in: hFile=0x1cc, lpBuffer=0x111c7180*, nNumberOfBytesToWrite=0x22d, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111c7180*, lpNumberOfBytesWritten=0x11031dfc*=0x22d, lpOverlapped=0x11031e08) returned 1
	[0321.414] GetFileType (hFile=0x1cc) returned 0x1
	[0321.414] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x1b4a, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.414] CloseHandle (hObject=0x1cc) returned 1
	[0321.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02094_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02094_.wmf.tl30z")) returned 0x220
	[0321.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02094_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.420] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0
	[0321.422] SetEvent (hEvent=0x27c) returned 1
	[0321.422] SetEvent (hEvent=0x1e8) returned 1
	[0321.422] SwitchToThread () returned 1
	[0321.459] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) 

Thread:
	id = 49
	os_tid = 0xfdc

	[0300.439] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3373ff30, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3373ff30*=0x2a4) returned 1
	[0300.439] VirtualQuery (in: lpAddress=0x3373ff40, lpBuffer=0x3373ff40, dwLength=0x1c | out: lpBuffer=0x3373ff40*(BaseAddress=0x3373f000, AllocationBase=0x33640000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0300.439] SetEvent (hEvent=0x210) returned 1
	[0300.439] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2a8
	[0300.440] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0300.445] SetEvent (hEvent=0x210) returned 1
	[0300.446] SetEvent (hEvent=0x27c) returned 1
	[0300.446] SetEvent (hEvent=0x248) returned 1
	[0300.446] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0301.012] SetEvent (hEvent=0x26c) returned 1
	[0301.013] SetEvent (hEvent=0x234) returned 1
	[0301.013] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0308.751] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0308.766] SetEvent (hEvent=0x264) returned 1
	[0308.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid")) returned 0x220
	[0308.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID", dwFileAttributes=0x220) returned 1
	[0308.767] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid.tl30z"), dwFlags=0x1) returned 1
	[0308.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244
	[0308.787] GetConsoleMode (in: hConsoleHandle=0x244, lpMode=0x110aae08 | out: lpMode=0x110aae08) returned 0
	[0308.787] ReadFile (in: hFile=0x244, lpBuffer=0x1110b000, nNumberOfBytesToRead=0x1784, lpNumberOfBytesRead=0x110aae18, lpOverlapped=0x0 | out: lpBuffer=0x1110b000*, lpNumberOfBytesRead=0x110aae18*=0x1784, lpOverlapped=0x0) returned 1
	[0308.871] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0308.913] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111260f0 | out: pbBuffer=0x111260f0) returned 1
	[0308.913] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11164802 | out: pbBuffer=0x11164802) returned 1
	[0308.913] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111648d8 | out: pbBuffer=0x111648d8) returned 1
	[0308.914] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11126120 | out: pbBuffer=0x11126120) returned 1
	[0308.914] GetFileType (hFile=0x244) returned 0x1
	[0308.914] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.914] WriteFile (in: hFile=0x244, lpBuffer=0x1107a000*, nNumberOfBytesToWrite=0x1784, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x1107a000*, lpNumberOfBytesWritten=0x1133ddfc*=0x1784, lpOverlapped=0x1133de08) returned 1
	[0308.915] GetFileType (hFile=0x244) returned 0x1
	[0308.915] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x1784, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.915] GetFileType (hFile=0x244) returned 0x1
	[0308.915] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.915] WriteFile (in: hFile=0x244, lpBuffer=0x111cca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x111cca80*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0308.916] GetFileType (hFile=0x244) returned 0x1
	[0308.916] SetFilePointerEx (in: hFile=0x244, liDistanceToMove=0x1784, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0308.916] CloseHandle (hObject=0x244) returned 1
	[0308.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid.tl30z")) returned 0x220
	[0308.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID.tl30z", dwFileAttributes=0x221) returned 1
	[0308.917] SetEvent (hEvent=0x1bc) returned 1
	[0308.917] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0313.832] SetEvent (hEvent=0x27c) returned 1
	[0313.832] SetEvent (hEvent=0x118) returned 1
	[0313.832] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.649] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.656] SetEvent (hEvent=0x25c) returned 1
	[0317.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf")) returned 0x220
	[0317.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF", dwFileAttributes=0x220) returned 1
	[0317.656] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0317.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0317.813] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1123ce08 | out: lpMode=0x1123ce08) returned 0
	[0317.813] ReadFile (in: hFile=0x224, lpBuffer=0x112d4000, nNumberOfBytesToRead=0x7a80, lpNumberOfBytesRead=0x1123ce18, lpOverlapped=0x0 | out: lpBuffer=0x112d4000*, lpNumberOfBytesRead=0x1123ce18*=0x7a80, lpOverlapped=0x0) returned 1
	[0317.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263c0 | out: pbBuffer=0x111263c0) returned 1
	[0317.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x111263b8 | out: pbBuffer=0x111263b8) returned 1
	[0317.850] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11399102 | out: pbBuffer=0x11399102) returned 1
	[0317.851] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x111263f0 | out: pbBuffer=0x111263f0) returned 1
	[0317.852] SetEvent (hEvent=0x164) returned 1
	[0317.852] GetFileType (hFile=0x224) returned 0x1
	[0317.852] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.852] WriteFile (in: hFile=0x224, lpBuffer=0x110f8000*, nNumberOfBytesToWrite=0x7a80, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x110f8000*, lpNumberOfBytesWritten=0x11371dfc*=0x7a80, lpOverlapped=0x11371e08) returned 1
	[0317.853] GetFileType (hFile=0x224) returned 0x1
	[0317.853] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7a80, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.853] GetFileType (hFile=0x224) returned 0x1
	[0317.853] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.853] WriteFile (in: hFile=0x224, lpBuffer=0x112aa700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x11371dfc, lpOverlapped=0x11371e08 | out: lpBuffer=0x112aa700*, lpNumberOfBytesWritten=0x11371dfc*=0x22a, lpOverlapped=0x11371e08) returned 1
	[0317.853] GetFileType (hFile=0x224) returned 0x1
	[0317.853] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x7a80, lpNewFilePointer=0x0, dwMoveMethod=0x11371de0 | out: lpNewFilePointer=0x0) returned 1
	[0317.854] CloseHandle (hObject=0x224) returned 1
	[0317.863] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.867] SetEvent (hEvent=0x164) returned 1
	[0317.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf.tl30z")) returned 0x220
	[0317.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0317.883] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.890] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.905] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.918] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.970] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0317.991] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.098] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.347] SetEvent (hEvent=0x160) returned 1
	[0318.347] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.354] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.394] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.495] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.749] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.768] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf")) returned 0x220
	[0318.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF", dwFileAttributes=0x220) returned 1
	[0318.776] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0318.892] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0318.900] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0318.900] ReadFile (in: hFile=0x1c8, lpBuffer=0x1131e000, nNumberOfBytesToRead=0x8b96, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1131e000*, lpNumberOfBytesRead=0x1131de18*=0x8b96, lpOverlapped=0x0) returned 1
	[0318.906] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f100 | out: pbBuffer=0x1140f100) returned 1
	[0318.907] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11310802 | out: pbBuffer=0x11310802) returned 1
	[0318.907] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113108b8 | out: pbBuffer=0x113108b8) returned 1
	[0318.907] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f130 | out: pbBuffer=0x1140f130) returned 1
	[0318.908] GetFileType (hFile=0x1c8) returned 0x1
	[0318.908] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.909] WriteFile (in: hFile=0x1c8, lpBuffer=0x111f6000*, nNumberOfBytesToWrite=0x8b96, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x111f6000*, lpNumberOfBytesWritten=0x11031dfc*=0x8b96, lpOverlapped=0x11031e08) returned 1
	[0318.909] GetFileType (hFile=0x1c8) returned 0x1
	[0318.909] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8b96, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.909] GetFileType (hFile=0x1c8) returned 0x1
	[0318.910] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.910] WriteFile (in: hFile=0x1c8, lpBuffer=0x112aaa80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112aaa80*, lpNumberOfBytesWritten=0x11031dfc*=0x233, lpOverlapped=0x11031e08) returned 1
	[0318.910] GetFileType (hFile=0x1c8) returned 0x1
	[0318.910] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x8b96, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0318.910] CloseHandle (hObject=0x1c8) returned 1
	[0318.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf.tl30z")) returned 0x220
	[0318.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0318.914] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0318.917] SetEvent (hEvent=0x27c) returned 1
	[0318.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf")) returned 0x220
	[0318.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF", dwFileAttributes=0x220) returned 1
	[0318.917] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0319.042] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0319.042] ReadFile (in: hFile=0x1c8, lpBuffer=0x11110000, nNumberOfBytesToRead=0x3308, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11110000*, lpNumberOfBytesRead=0x1131de18*=0x3308, lpOverlapped=0x0) returned 1
	[0319.047] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6520 | out: pbBuffer=0x113e6520) returned 1
	[0319.048] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11355e02 | out: pbBuffer=0x11355e02) returned 1
	[0319.048] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11355e70 | out: pbBuffer=0x11355e70) returned 1
	[0319.048] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6550 | out: pbBuffer=0x113e6550) returned 1
	[0319.048] GetFileType (hFile=0x1c8) returned 0x1
	[0319.049] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.049] WriteFile (in: hFile=0x1c8, lpBuffer=0x111d6000*, nNumberOfBytesToWrite=0x3308, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x111d6000*, lpNumberOfBytesWritten=0x1133fdfc*=0x3308, lpOverlapped=0x1133fe08) returned 1
	[0319.049] GetFileType (hFile=0x1c8) returned 0x1
	[0319.049] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x3308, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.049] GetFileType (hFile=0x1c8) returned 0x1
	[0319.049] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.050] WriteFile (in: hFile=0x1c8, lpBuffer=0x11122700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11122700*, lpNumberOfBytesWritten=0x1133fdfc*=0x227, lpOverlapped=0x1133fe08) returned 1
	[0319.050] GetFileType (hFile=0x1c8) returned 0x1
	[0319.050] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x3308, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.050] CloseHandle (hObject=0x1c8) returned 1
	[0319.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf.tl30z")) returned 0x220
	[0319.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.053] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.056] SetEvent (hEvent=0x27c) returned 1
	[0319.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf")) returned 0x220
	[0319.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF", dwFileAttributes=0x220) returned 1
	[0319.057] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0319.162] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0319.162] ReadFile (in: hFile=0x1cc, lpBuffer=0x1137c000, nNumberOfBytesToRead=0x143c, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x1137c000*, lpNumberOfBytesRead=0x1131de18*=0x143c, lpOverlapped=0x0) returned 1
	[0319.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0319.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332208 | out: pbBuffer=0x11332208) returned 1
	[0319.167] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11260802 | out: pbBuffer=0x11260802) returned 1
	[0319.168] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11260838 | out: pbBuffer=0x11260838) returned 1
	[0319.168] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0319.168] GetFileType (hFile=0x1cc) returned 0x1
	[0319.168] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.169] WriteFile (in: hFile=0x1cc, lpBuffer=0x11472000*, nNumberOfBytesToWrite=0x143c, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x11472000*, lpNumberOfBytesWritten=0x1133ddfc*=0x143c, lpOverlapped=0x1133de08) returned 1
	[0319.169] GetFileType (hFile=0x1cc) returned 0x1
	[0319.169] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x143c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.169] GetFileType (hFile=0x1cc) returned 0x1
	[0319.169] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.170] WriteFile (in: hFile=0x1cc, lpBuffer=0x110b2a80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133ddfc, lpOverlapped=0x1133de08 | out: lpBuffer=0x110b2a80*, lpNumberOfBytesWritten=0x1133ddfc*=0x22a, lpOverlapped=0x1133de08) returned 1
	[0319.170] GetFileType (hFile=0x1cc) returned 0x1
	[0319.170] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x143c, lpNewFilePointer=0x0, dwMoveMethod=0x1133dde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.171] CloseHandle (hObject=0x1cc) returned 1
	[0319.172] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf.tl30z")) returned 0x220
	[0319.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.174] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.178] SetEvent (hEvent=0x1e8) returned 1
	[0319.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf")) returned 0x220
	[0319.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF", dwFileAttributes=0x220) returned 1
	[0319.179] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0319.265] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0319.265] ReadFile (in: hFile=0x1c8, lpBuffer=0x11457800, nNumberOfBytesToRead=0xac8, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x11457800*, lpNumberOfBytesRead=0x1131de18*=0xac8, lpOverlapped=0x0) returned 1
	[0319.271] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f3e0 | out: pbBuffer=0x1140f3e0) returned 1
	[0319.271] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f3d8 | out: pbBuffer=0x1140f3d8) returned 1
	[0319.271] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1139de02 | out: pbBuffer=0x1139de02) returned 1
	[0319.272] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f410 | out: pbBuffer=0x1140f410) returned 1
	[0319.272] GetFileType (hFile=0x1c8) returned 0x1
	[0319.272] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.272] WriteFile (in: hFile=0x1c8, lpBuffer=0x110e2000*, nNumberOfBytesToWrite=0xac8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110e2000*, lpNumberOfBytesWritten=0x11031dfc*=0xac8, lpOverlapped=0x11031e08) returned 1
	[0319.272] GetFileType (hFile=0x1c8) returned 0x1
	[0319.273] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xac8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.273] GetFileType (hFile=0x1c8) returned 0x1
	[0319.273] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.273] WriteFile (in: hFile=0x1c8, lpBuffer=0x110dc700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x110dc700*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0319.273] GetFileType (hFile=0x1c8) returned 0x1
	[0319.273] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xac8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0319.273] CloseHandle (hObject=0x1c8) returned 1
	[0319.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf.tl30z")) returned 0x220
	[0319.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.280] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.282] SetEvent (hEvent=0x1e8) returned 1
	[0319.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf")) returned 0x220
	[0319.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF", dwFileAttributes=0x220) returned 1
	[0319.282] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0319.719] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131de08 | out: lpMode=0x1131de08) returned 0
	[0319.719] ReadFile (in: hFile=0x1c8, lpBuffer=0x113c4c00, nNumberOfBytesToRead=0xaa4, lpNumberOfBytesRead=0x1131de18, lpOverlapped=0x0 | out: lpBuffer=0x113c4c00*, lpNumberOfBytesRead=0x1131de18*=0xaa4, lpOverlapped=0x0) returned 1
	[0319.725] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332af0 | out: pbBuffer=0x11332af0) returned 1
	[0319.725] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332ae8 | out: pbBuffer=0x11332ae8) returned 1
	[0319.725] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1129c802 | out: pbBuffer=0x1129c802) returned 1
	[0319.725] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1129c8c2 | out: pbBuffer=0x1129c8c2) returned 1
	[0319.725] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332b20 | out: pbBuffer=0x11332b20) returned 1
	[0319.725] GetFileType (hFile=0x1c8) returned 0x1
	[0319.725] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.726] WriteFile (in: hFile=0x1c8, lpBuffer=0x112b2000*, nNumberOfBytesToWrite=0xaa4, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112b2000*, lpNumberOfBytesWritten=0x1133bdfc*=0xaa4, lpOverlapped=0x1133be08) returned 1
	[0319.726] GetFileType (hFile=0x1c8) returned 0x1
	[0319.726] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xaa4, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.726] GetFileType (hFile=0x1c8) returned 0x1
	[0319.726] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.726] WriteFile (in: hFile=0x1c8, lpBuffer=0x112ae380*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112ae380*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0319.727] GetFileType (hFile=0x1c8) returned 0x1
	[0319.727] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0xaa4, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.727] CloseHandle (hObject=0x1c8) returned 1
	[0319.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf.tl30z")) returned 0x220
	[0319.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.729] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.730] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.733] SetEvent (hEvent=0x284) returned 1
	[0319.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf")) returned 0x220
	[0319.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF", dwFileAttributes=0x220) returned 1
	[0319.733] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8
	[0319.802] GetConsoleMode (in: hConsoleHandle=0x1d8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0319.802] ReadFile (in: hFile=0x1d8, lpBuffer=0x11234000, nNumberOfBytesToRead=0xfe6, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x11234000*, lpNumberOfBytesRead=0x11287e18*=0xfe6, lpOverlapped=0x0) returned 1
	[0319.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332c50 | out: pbBuffer=0x11332c50) returned 1
	[0319.813] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1129d202 | out: pbBuffer=0x1129d202) returned 1
	[0319.814] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332c80 | out: pbBuffer=0x11332c80) returned 1
	[0319.814] GetFileType (hFile=0x1d8) returned 0x1
	[0319.814] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.814] WriteFile (in: hFile=0x1d8, lpBuffer=0x11138000*, nNumberOfBytesToWrite=0xfe6, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11138000*, lpNumberOfBytesWritten=0x1133bdfc*=0xfe6, lpOverlapped=0x1133be08) returned 1
	[0319.814] GetFileType (hFile=0x1d8) returned 0x1
	[0319.814] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xfe6, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.815] GetFileType (hFile=0x1d8) returned 0x1
	[0319.815] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.815] WriteFile (in: hFile=0x1d8, lpBuffer=0x112af180*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112af180*, lpNumberOfBytesWritten=0x1133bdfc*=0x233, lpOverlapped=0x1133be08) returned 1
	[0319.815] GetFileType (hFile=0x1d8) returned 0x1
	[0319.815] SetFilePointerEx (in: hFile=0x1d8, liDistanceToMove=0xfe6, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.815] CloseHandle (hObject=0x1d8) returned 1
	[0319.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf.tl30z")) returned 0x220
	[0319.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.819] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.822] SetEvent (hEvent=0x25c) returned 1
	[0319.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf")) returned 0x220
	[0319.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF", dwFileAttributes=0x220) returned 1
	[0319.823] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0319.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0319.973] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11287e08 | out: lpMode=0x11287e08) returned 0
	[0319.973] ReadFile (in: hFile=0x1c8, lpBuffer=0x112dc000, nNumberOfBytesToRead=0x16c0, lpNumberOfBytesRead=0x11287e18, lpOverlapped=0x0 | out: lpBuffer=0x112dc000*, lpNumberOfBytesRead=0x11287e18*=0x16c0, lpOverlapped=0x0) returned 1
	[0319.978] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0319.978] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1138b302 | out: pbBuffer=0x1138b302) returned 1
	[0319.978] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1138b32a | out: pbBuffer=0x1138b32a) returned 1
	[0319.979] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0319.979] GetFileType (hFile=0x1c8) returned 0x1
	[0319.979] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.979] WriteFile (in: hFile=0x1c8, lpBuffer=0x113de000*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x113de000*, lpNumberOfBytesWritten=0x1133bdfc*=0x16c0, lpOverlapped=0x1133be08) returned 1
	[0319.980] GetFileType (hFile=0x1c8) returned 0x1
	[0319.980] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x16c0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.980] GetFileType (hFile=0x1c8) returned 0x1
	[0319.980] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.980] WriteFile (in: hFile=0x1c8, lpBuffer=0x11473880*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11473880*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0319.980] GetFileType (hFile=0x1c8) returned 0x1
	[0319.980] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x16c0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0319.981] CloseHandle (hObject=0x1c8) returned 1
	[0319.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf.tl30z")) returned 0x220
	[0319.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0319.983] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.984] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0319.987] SetEvent (hEvent=0x164) returned 1
	[0319.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00726_.wmf")) returned 0x220
	[0319.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00726_.WMF", dwFileAttributes=0x220) returned 1
	[0319.988] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00726_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00726_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00726_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00726_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00726_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0320.097] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0320.097] ReadFile (in: hFile=0x298, lpBuffer=0x110a2000, nNumberOfBytesToRead=0x8e96, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x110a2000*, lpNumberOfBytesRead=0x11023e18*=0x8e96, lpOverlapped=0x0) returned 1
	[0320.104] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6a0 | out: pbBuffer=0x1140f6a0) returned 1
	[0320.104] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1140f698 | out: pbBuffer=0x1140f698) returned 1
	[0320.104] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110d5202 | out: pbBuffer=0x110d5202) returned 1
	[0320.104] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x110d52e0 | out: pbBuffer=0x110d52e0) returned 1
	[0320.105] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f6d0 | out: pbBuffer=0x1140f6d0) returned 1
	[0320.105] GetFileType (hFile=0x298) returned 0x1
	[0320.105] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.106] WriteFile (in: hFile=0x298, lpBuffer=0x112b8000*, nNumberOfBytesToWrite=0x8e96, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112b8000*, lpNumberOfBytesWritten=0x1133bdfc*=0x8e96, lpOverlapped=0x1133be08) returned 1
	[0320.106] GetFileType (hFile=0x298) returned 0x1
	[0320.107] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x8e96, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.107] GetFileType (hFile=0x298) returned 0x1
	[0320.107] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.107] WriteFile (in: hFile=0x298, lpBuffer=0x110be380*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x110be380*, lpNumberOfBytesWritten=0x1133bdfc*=0x233, lpOverlapped=0x1133be08) returned 1
	[0320.108] GetFileType (hFile=0x298) returned 0x1
	[0320.108] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x8e96, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.108] CloseHandle (hObject=0x298) returned 1
	[0320.110] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00726_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00726_.wmf.tl30z")) returned 0x220
	[0320.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00726_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.113] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.115] SetEvent (hEvent=0x164) returned 1
	[0320.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00736_.wmf")) returned 0x220
	[0320.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00736_.WMF", dwFileAttributes=0x220) returned 1
	[0320.116] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00736_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00736_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00736_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00736_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00736_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.182] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0320.182] ReadFile (in: hFile=0x224, lpBuffer=0x1115a000, nNumberOfBytesToRead=0x184c, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1115a000*, lpNumberOfBytesRead=0x11023e18*=0x184c, lpOverlapped=0x0) returned 1
	[0320.186] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6540 | out: pbBuffer=0x113e6540) returned 1
	[0320.187] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11101d02 | out: pbBuffer=0x11101d02) returned 1
	[0320.187] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6570 | out: pbBuffer=0x113e6570) returned 1
	[0320.187] GetFileType (hFile=0x224) returned 0x1
	[0320.187] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.188] WriteFile (in: hFile=0x224, lpBuffer=0x11188000*, nNumberOfBytesToWrite=0x184c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11188000*, lpNumberOfBytesWritten=0x1102bdfc*=0x184c, lpOverlapped=0x1102be08) returned 1
	[0320.188] GetFileType (hFile=0x224) returned 0x1
	[0320.188] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x184c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.188] GetFileType (hFile=0x224) returned 0x1
	[0320.188] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.188] WriteFile (in: hFile=0x224, lpBuffer=0x11172700*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11172700*, lpNumberOfBytesWritten=0x1102bdfc*=0x227, lpOverlapped=0x1102be08) returned 1
	[0320.189] GetFileType (hFile=0x224) returned 0x1
	[0320.189] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x184c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.189] CloseHandle (hObject=0x224) returned 1
	[0320.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00736_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00736_.wmf.tl30z")) returned 0x220
	[0320.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00736_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.191] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.194] SetEvent (hEvent=0x164) returned 1
	[0320.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00834_.wmf")) returned 0x220
	[0320.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00834_.WMF", dwFileAttributes=0x220) returned 1
	[0320.194] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00834_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00834_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00834_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00834_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00834_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0320.271] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0320.271] ReadFile (in: hFile=0x298, lpBuffer=0x1118e000, nNumberOfBytesToRead=0x36da, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x1118e000*, lpNumberOfBytesRead=0x11023e18*=0x36da, lpOverlapped=0x0) returned 1
	[0320.277] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6100 | out: pbBuffer=0x113e6100) returned 1
	[0320.277] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134e802 | out: pbBuffer=0x1134e802) returned 1
	[0320.277] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6130 | out: pbBuffer=0x113e6130) returned 1
	[0320.278] GetFileType (hFile=0x298) returned 0x1
	[0320.278] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.278] WriteFile (in: hFile=0x298, lpBuffer=0x11358000*, nNumberOfBytesToWrite=0x36da, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11358000*, lpNumberOfBytesWritten=0x1133fdfc*=0x36da, lpOverlapped=0x1133fe08) returned 1
	[0320.278] GetFileType (hFile=0x298) returned 0x1
	[0320.278] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x36da, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.278] GetFileType (hFile=0x298) returned 0x1
	[0320.279] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.279] WriteFile (in: hFile=0x298, lpBuffer=0x11370a80*, nNumberOfBytesToWrite=0x233, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x11370a80*, lpNumberOfBytesWritten=0x1133fdfc*=0x233, lpOverlapped=0x1133fe08) returned 1
	[0320.279] GetFileType (hFile=0x298) returned 0x1
	[0320.279] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x36da, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.279] CloseHandle (hObject=0x298) returned 1
	[0320.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00834_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00834_.wmf.tl30z")) returned 0x220
	[0320.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00834_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.281] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.283] SetEvent (hEvent=0x25c) returned 1
	[0320.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00914_.wmf")) returned 0x220
	[0320.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00914_.WMF", dwFileAttributes=0x220) returned 1
	[0320.284] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00914_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00914_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00914_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00914_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00914_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0320.371] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11023e08 | out: lpMode=0x11023e08) returned 0
	[0320.371] ReadFile (in: hFile=0x1c8, lpBuffer=0x111fc000, nNumberOfBytesToRead=0x1b0c, lpNumberOfBytesRead=0x11023e18, lpOverlapped=0x0 | out: lpBuffer=0x111fc000*, lpNumberOfBytesRead=0x11023e18*=0x1b0c, lpOverlapped=0x0) returned 1
	[0320.383] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63f0 | out: pbBuffer=0x113e63f0) returned 1
	[0320.383] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63e8 | out: pbBuffer=0x113e63e8) returned 1
	[0320.383] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x1134fd02 | out: pbBuffer=0x1134fd02) returned 1
	[0320.383] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x1134fd60 | out: pbBuffer=0x1134fd60) returned 1
	[0320.384] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6420 | out: pbBuffer=0x113e6420) returned 1
	[0320.384] GetFileType (hFile=0x1c8) returned 0x1
	[0320.385] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.385] WriteFile (in: hFile=0x1c8, lpBuffer=0x110e2000*, nNumberOfBytesToWrite=0x1b0c, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110e2000*, lpNumberOfBytesWritten=0x1133fdfc*=0x1b0c, lpOverlapped=0x1133fe08) returned 1
	[0320.385] GetFileType (hFile=0x1c8) returned 0x1
	[0320.385] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1b0c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.385] GetFileType (hFile=0x1c8) returned 0x1
	[0320.386] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.386] WriteFile (in: hFile=0x1c8, lpBuffer=0x110d2700*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133fdfc, lpOverlapped=0x1133fe08 | out: lpBuffer=0x110d2700*, lpNumberOfBytesWritten=0x1133fdfc*=0x22a, lpOverlapped=0x1133fe08) returned 1
	[0320.386] GetFileType (hFile=0x1c8) returned 0x1
	[0320.386] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1b0c, lpNewFilePointer=0x0, dwMoveMethod=0x1133fde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.386] CloseHandle (hObject=0x1c8) returned 1
	[0320.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00914_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00914_.wmf.tl30z")) returned 0x220
	[0320.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00914_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.398] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.408] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.428] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.452] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.461] SetEvent (hEvent=0x164) returned 1
	[0320.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00943_.wmf")) returned 0x220
	[0320.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00943_.WMF", dwFileAttributes=0x220) returned 1
	[0320.462] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00943_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00943_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00943_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00943_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00943_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0320.594] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0320.595] ReadFile (in: hFile=0x1c8, lpBuffer=0x113e8000, nNumberOfBytesToRead=0x1d84, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x113e8000*, lpNumberOfBytesRead=0x11425e18*=0x1d84, lpOverlapped=0x0) returned 1
	[0320.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e160 | out: pbBuffer=0x1104e160) returned 1
	[0320.601] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11472902 | out: pbBuffer=0x11472902) returned 1
	[0320.602] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e190 | out: pbBuffer=0x1104e190) returned 1
	[0320.602] GetFileType (hFile=0x1c8) returned 0x1
	[0320.602] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.602] WriteFile (in: hFile=0x1c8, lpBuffer=0x1128e000*, nNumberOfBytesToWrite=0x1d84, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1128e000*, lpNumberOfBytesWritten=0x1133bdfc*=0x1d84, lpOverlapped=0x1133be08) returned 1
	[0320.603] GetFileType (hFile=0x1c8) returned 0x1
	[0320.603] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1d84, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.603] GetFileType (hFile=0x1c8) returned 0x1
	[0320.603] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.603] WriteFile (in: hFile=0x1c8, lpBuffer=0x1134ca80*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1134ca80*, lpNumberOfBytesWritten=0x1133bdfc*=0x22a, lpOverlapped=0x1133be08) returned 1
	[0320.604] GetFileType (hFile=0x1c8) returned 0x1
	[0320.604] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x1d84, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.604] CloseHandle (hObject=0x1c8) returned 1
	[0320.606] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00943_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00943_.wmf.tl30z")) returned 0x220
	[0320.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00943_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.609] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.612] SetEvent (hEvent=0x284) returned 1
	[0320.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01561_.wmf")) returned 0x220
	[0320.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01561_.WMF", dwFileAttributes=0x220) returned 1
	[0320.612] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01561_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01561_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01561_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01561_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01561_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0320.862] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0320.863] ReadFile (in: hFile=0x1c8, lpBuffer=0x113e0000, nNumberOfBytesToRead=0x59d8, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x113e0000*, lpNumberOfBytesRead=0x11425e18*=0x59d8, lpOverlapped=0x0) returned 1
	[0320.867] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f260 | out: pbBuffer=0x1140f260) returned 1
	[0320.868] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x110b3202 | out: pbBuffer=0x110b3202) returned 1
	[0320.868] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f290 | out: pbBuffer=0x1140f290) returned 1
	[0320.869] GetFileType (hFile=0x1c8) returned 0x1
	[0320.869] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.869] WriteFile (in: hFile=0x1c8, lpBuffer=0x112b6000*, nNumberOfBytesToWrite=0x59d8, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112b6000*, lpNumberOfBytesWritten=0x1133bdfc*=0x59d8, lpOverlapped=0x1133be08) returned 1
	[0320.869] GetFileType (hFile=0x1c8) returned 0x1
	[0320.869] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x59d8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.870] GetFileType (hFile=0x1c8) returned 0x1
	[0320.870] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.870] WriteFile (in: hFile=0x1c8, lpBuffer=0x1120a000*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1120a000*, lpNumberOfBytesWritten=0x1133bdfc*=0x230, lpOverlapped=0x1133be08) returned 1
	[0320.870] GetFileType (hFile=0x1c8) returned 0x1
	[0320.870] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x59d8, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0320.870] CloseHandle (hObject=0x1c8) returned 1
	[0320.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01561_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01561_.wmf.tl30z")) returned 0x220
	[0320.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01561_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.873] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.876] SetEvent (hEvent=0x1e8) returned 1
	[0320.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01575_.wmf")) returned 0x220
	[0320.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01575_.WMF", dwFileAttributes=0x220) returned 1
	[0320.876] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01575_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01575_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01575_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0320.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01575_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01575_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0320.966] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x11425e08 | out: lpMode=0x11425e08) returned 0
	[0320.967] ReadFile (in: hFile=0x224, lpBuffer=0x1117a000, nNumberOfBytesToRead=0xa8a6, lpNumberOfBytesRead=0x11425e18, lpOverlapped=0x0 | out: lpBuffer=0x1117a000*, lpNumberOfBytesRead=0x11425e18*=0xa8a6, lpOverlapped=0x0) returned 1
	[0320.974] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e530 | out: pbBuffer=0x1104e530) returned 1
	[0320.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11473f02 | out: pbBuffer=0x11473f02) returned 1
	[0320.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11473f93 | out: pbBuffer=0x11473f93) returned 1
	[0320.975] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1104e560 | out: pbBuffer=0x1104e560) returned 1
	[0320.977] SetEvent (hEvent=0x1e8) returned 1
	[0320.977] GetFileType (hFile=0x224) returned 0x1
	[0320.977] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.977] WriteFile (in: hFile=0x224, lpBuffer=0x11be0000*, nNumberOfBytesToWrite=0xa8a6, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11be0000*, lpNumberOfBytesWritten=0x11031dfc*=0xa8a6, lpOverlapped=0x11031e08) returned 1
	[0320.978] GetFileType (hFile=0x224) returned 0x1
	[0320.978] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa8a6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.978] GetFileType (hFile=0x224) returned 0x1
	[0320.978] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.979] WriteFile (in: hFile=0x224, lpBuffer=0x11194700*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11194700*, lpNumberOfBytesWritten=0x11031dfc*=0x230, lpOverlapped=0x11031e08) returned 1
	[0320.979] GetFileType (hFile=0x224) returned 0x1
	[0320.979] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0xa8a6, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0320.979] CloseHandle (hObject=0x224) returned 1
	[0320.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01575_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01575_.wmf.tl30z")) returned 0x220
	[0320.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01575_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0320.987] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0320.988] SetEvent (hEvent=0x1e8) returned 1
	[0320.988] SetEvent (hEvent=0x27c) returned 1
	[0320.989] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01954_.wmf")) returned 0x220
	[0320.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01954_.WMF", dwFileAttributes=0x220) returned 1
	[0320.989] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01954_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01954_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01954_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01954_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01954_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204
	[0321.153] GetConsoleMode (in: hConsoleHandle=0x204, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0321.153] ReadFile (in: hFile=0x204, lpBuffer=0x11458000, nNumberOfBytesToRead=0x3086, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11458000*, lpNumberOfBytesRead=0x1131ae18*=0x3086, lpOverlapped=0x0) returned 1
	[0321.158] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332210 | out: pbBuffer=0x11332210) returned 1
	[0321.158] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11468802 | out: pbBuffer=0x11468802) returned 1
	[0321.159] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332240 | out: pbBuffer=0x11332240) returned 1
	[0321.159] GetFileType (hFile=0x204) returned 0x1
	[0321.159] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.160] WriteFile (in: hFile=0x204, lpBuffer=0x11198000*, nNumberOfBytesToWrite=0x3086, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11198000*, lpNumberOfBytesWritten=0x11031dfc*=0x3086, lpOverlapped=0x11031e08) returned 1
	[0321.160] GetFileType (hFile=0x204) returned 0x1
	[0321.160] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x3086, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.160] GetFileType (hFile=0x204) returned 0x1
	[0321.160] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.161] WriteFile (in: hFile=0x204, lpBuffer=0x112e0a80*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x112e0a80*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0321.161] GetFileType (hFile=0x204) returned 0x1
	[0321.161] SetFilePointerEx (in: hFile=0x204, liDistanceToMove=0x3086, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.161] CloseHandle (hObject=0x204) returned 1
	[0321.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01954_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01954_.wmf.tl30z")) returned 0x220
	[0321.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01954_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.164] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0321.168] SetEvent (hEvent=0x27c) returned 1
	[0321.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02028_.wmf")) returned 0x220
	[0321.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02028_.WMF", dwFileAttributes=0x220) returned 1
	[0321.169] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02028_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02028_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02028_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02028_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02028_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224
	[0321.257] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0321.257] ReadFile (in: hFile=0x224, lpBuffer=0x11302500, nNumberOfBytesToRead=0x24c8, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11302500*, lpNumberOfBytesRead=0x1131ae18*=0x24c8, lpOverlapped=0x0) returned 1
	[0321.264] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332660 | out: pbBuffer=0x11332660) returned 1
	[0321.264] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332658 | out: pbBuffer=0x11332658) returned 1
	[0321.264] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112b8802 | out: pbBuffer=0x112b8802) returned 1
	[0321.264] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b8859 | out: pbBuffer=0x112b8859) returned 1
	[0321.264] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b886f | out: pbBuffer=0x112b886f) returned 1
	[0321.264] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112b8897 | out: pbBuffer=0x112b8897) returned 1
	[0321.265] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332690 | out: pbBuffer=0x11332690) returned 1
	[0321.265] GetFileType (hFile=0x224) returned 0x1
	[0321.265] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.266] WriteFile (in: hFile=0x224, lpBuffer=0x11092000*, nNumberOfBytesToWrite=0x24c8, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11092000*, lpNumberOfBytesWritten=0x11031dfc*=0x24c8, lpOverlapped=0x11031e08) returned 1
	[0321.266] GetFileType (hFile=0x224) returned 0x1
	[0321.266] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x24c8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.266] GetFileType (hFile=0x224) returned 0x1
	[0321.266] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.267] WriteFile (in: hFile=0x224, lpBuffer=0x113b3500*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113b3500*, lpNumberOfBytesWritten=0x11031dfc*=0x227, lpOverlapped=0x11031e08) returned 1
	[0321.267] GetFileType (hFile=0x224) returned 0x1
	[0321.267] SetFilePointerEx (in: hFile=0x224, liDistanceToMove=0x24c8, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.267] CloseHandle (hObject=0x224) returned 1
	[0321.268] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02028_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02028_.wmf.tl30z")) returned 0x220
	[0321.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02028_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.271] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0321.273] SetEvent (hEvent=0x27c) returned 1
	[0321.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02055_.wmf")) returned 0x220
	[0321.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02055_.WMF", dwFileAttributes=0x220) returned 1
	[0321.274] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02055_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02055_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02055_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02055_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02055_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0321.365] GetConsoleMode (in: hConsoleHandle=0x298, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0321.365] ReadFile (in: hFile=0x298, lpBuffer=0x1121d000, nNumberOfBytesToRead=0x4c4c, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1121d000*, lpNumberOfBytesRead=0x1131ae18*=0x4c4c, lpOverlapped=0x0) returned 1
	[0321.372] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6060 | out: pbBuffer=0x113e6060) returned 1
	[0321.372] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11237102 | out: pbBuffer=0x11237102) returned 1
	[0321.372] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112371ea | out: pbBuffer=0x112371ea) returned 1
	[0321.373] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6090 | out: pbBuffer=0x113e6090) returned 1
	[0321.374] GetFileType (hFile=0x298) returned 0x1
	[0321.374] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.374] WriteFile (in: hFile=0x298, lpBuffer=0x11110000*, nNumberOfBytesToWrite=0x4c4c, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x11110000*, lpNumberOfBytesWritten=0x1102bdfc*=0x4c4c, lpOverlapped=0x1102be08) returned 1
	[0321.375] GetFileType (hFile=0x298) returned 0x1
	[0321.375] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x4c4c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.375] GetFileType (hFile=0x298) returned 0x1
	[0321.375] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.375] WriteFile (in: hFile=0x298, lpBuffer=0x110fa380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102bdfc, lpOverlapped=0x1102be08 | out: lpBuffer=0x110fa380*, lpNumberOfBytesWritten=0x1102bdfc*=0x22a, lpOverlapped=0x1102be08) returned 1
	[0321.376] GetFileType (hFile=0x298) returned 0x1
	[0321.376] SetFilePointerEx (in: hFile=0x298, liDistanceToMove=0x4c4c, lpNewFilePointer=0x0, dwMoveMethod=0x1102bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.376] CloseHandle (hObject=0x298) returned 1
	[0321.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02055_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02055_.wmf.tl30z")) returned 0x220
	[0321.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02055_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.381] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0321.383] SetEvent (hEvent=0x27c) returned 1
	[0321.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02233_.wmf")) returned 0x220
	[0321.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02233_.WMF", dwFileAttributes=0x220) returned 1
	[0321.384] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02233_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02233_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02233_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02233_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02233_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.514] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0321.514] ReadFile (in: hFile=0x1c8, lpBuffer=0x1107c900, nNumberOfBytesToRead=0x900, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1107c900*, lpNumberOfBytesRead=0x1131ae18*=0x900, lpOverlapped=0x0) returned 1
	[0321.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e63e0 | out: pbBuffer=0x113e63e0) returned 1
	[0321.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e63d8 | out: pbBuffer=0x113e63d8) returned 1
	[0321.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11354702 | out: pbBuffer=0x11354702) returned 1
	[0321.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113547e8 | out: pbBuffer=0x113547e8) returned 1
	[0321.520] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6410 | out: pbBuffer=0x113e6410) returned 1
	[0321.521] GetFileType (hFile=0x1c8) returned 0x1
	[0321.521] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.521] WriteFile (in: hFile=0x1c8, lpBuffer=0x11387000*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x11387000*, lpNumberOfBytesWritten=0x1133bdfc*=0x900, lpOverlapped=0x1133be08) returned 1
	[0321.521] GetFileType (hFile=0x1c8) returned 0x1
	[0321.522] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x900, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.522] GetFileType (hFile=0x1c8) returned 0x1
	[0321.522] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.523] WriteFile (in: hFile=0x1c8, lpBuffer=0x1127b500*, nNumberOfBytesToWrite=0x21e, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1127b500*, lpNumberOfBytesWritten=0x1133bdfc*=0x21e, lpOverlapped=0x1133be08) returned 1
	[0321.523] GetFileType (hFile=0x1c8) returned 0x1
	[0321.523] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x900, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.523] CloseHandle (hObject=0x1c8) returned 1
	[0321.525] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02233_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02233_.wmf.tl30z")) returned 0x220
	[0321.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02233_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.526] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0321.530] SetEvent (hEvent=0x27c) returned 1
	[0321.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02265_.wmf")) returned 0x220
	[0321.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02265_.WMF", dwFileAttributes=0x220) returned 1
	[0321.530] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02265_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02265_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02265_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02265_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02265_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.613] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0321.613] ReadFile (in: hFile=0x1c8, lpBuffer=0x11083000, nNumberOfBytesToRead=0x38c, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11083000*, lpNumberOfBytesRead=0x1131ae18*=0x38c, lpOverlapped=0x0) returned 1
	[0321.618] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6820 | out: pbBuffer=0x113e6820) returned 1
	[0321.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113e6818 | out: pbBuffer=0x113e6818) returned 1
	[0321.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x112f2602 | out: pbBuffer=0x112f2602) returned 1
	[0321.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x112f26e0 | out: pbBuffer=0x112f26e0) returned 1
	[0321.619] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113e6850 | out: pbBuffer=0x113e6850) returned 1
	[0321.619] GetFileType (hFile=0x1c8) returned 0x1
	[0321.620] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.620] WriteFile (in: hFile=0x1c8, lpBuffer=0x112f5000*, nNumberOfBytesToWrite=0x38c, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x112f5000*, lpNumberOfBytesWritten=0x1133bdfc*=0x38c, lpOverlapped=0x1133be08) returned 1
	[0321.620] GetFileType (hFile=0x1c8) returned 0x1
	[0321.620] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x38c, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.620] GetFileType (hFile=0x1c8) returned 0x1
	[0321.620] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.621] WriteFile (in: hFile=0x1c8, lpBuffer=0x1135c000*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x1133bdfc, lpOverlapped=0x1133be08 | out: lpBuffer=0x1135c000*, lpNumberOfBytesWritten=0x1133bdfc*=0x227, lpOverlapped=0x1133be08) returned 1
	[0321.621] GetFileType (hFile=0x1c8) returned 0x1
	[0321.621] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x38c, lpNewFilePointer=0x0, dwMoveMethod=0x1133bde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.621] CloseHandle (hObject=0x1c8) returned 1
	[0321.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02265_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02265_.wmf.tl30z")) returned 0x220
	[0321.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02265_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.624] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0321.628] SetEvent (hEvent=0x27c) returned 1
	[0321.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02413_.wmf")) returned 0x220
	[0321.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02413_.WMF", dwFileAttributes=0x220) returned 1
	[0321.629] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02413_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02413_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02413_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02413_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02413_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc
	[0321.709] GetConsoleMode (in: hConsoleHandle=0x1cc, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0321.709] ReadFile (in: hFile=0x1cc, lpBuffer=0x1128e000, nNumberOfBytesToRead=0x973e, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x1128e000*, lpNumberOfBytesRead=0x1131ae18*=0x973e, lpOverlapped=0x0) returned 1
	[0321.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x11332370 | out: pbBuffer=0x11332370) returned 1
	[0321.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x11332368 | out: pbBuffer=0x11332368) returned 1
	[0321.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x113ad202 | out: pbBuffer=0x113ad202) returned 1
	[0321.716] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x1, pbBuffer=0x113ad240 | out: pbBuffer=0x113ad240) returned 1
	[0321.717] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x113323a0 | out: pbBuffer=0x113323a0) returned 1
	[0321.718] GetFileType (hFile=0x1cc) returned 0x1
	[0321.718] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.718] WriteFile (in: hFile=0x1cc, lpBuffer=0x11206000*, nNumberOfBytesToWrite=0x973e, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x11206000*, lpNumberOfBytesWritten=0x11031dfc*=0x973e, lpOverlapped=0x11031e08) returned 1
	[0321.719] GetFileType (hFile=0x1cc) returned 0x1
	[0321.719] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x973e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.719] GetFileType (hFile=0x1cc) returned 0x1
	[0321.719] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.719] WriteFile (in: hFile=0x1cc, lpBuffer=0x113c1880*, nNumberOfBytesToWrite=0x239, lpNumberOfBytesWritten=0x11031dfc, lpOverlapped=0x11031e08 | out: lpBuffer=0x113c1880*, lpNumberOfBytesWritten=0x11031dfc*=0x239, lpOverlapped=0x11031e08) returned 1
	[0321.720] GetFileType (hFile=0x1cc) returned 0x1
	[0321.720] SetFilePointerEx (in: hFile=0x1cc, liDistanceToMove=0x973e, lpNewFilePointer=0x0, dwMoveMethod=0x11031de0 | out: lpNewFilePointer=0x0) returned 1
	[0321.720] CloseHandle (hObject=0x1cc) returned 1
	[0321.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02413_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02413_.wmf.tl30z")) returned 0x220
	[0321.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02413_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.723] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) returned 0x0
	[0321.727] SetEvent (hEvent=0x27c) returned 1
	[0321.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02465_.wmf")) returned 0x220
	[0321.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02465_.WMF", dwFileAttributes=0x220) returned 1
	[0321.728] MoveFileExW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02465_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02465_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02465_.wmf.tl30z"), dwFlags=0x1) returned 1
	[0321.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02465_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02465_.wmf.tl30z"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8
	[0321.807] GetConsoleMode (in: hConsoleHandle=0x1c8, lpMode=0x1131ae08 | out: lpMode=0x1131ae08) returned 0
	[0321.808] ReadFile (in: hFile=0x1c8, lpBuffer=0x11234000, nNumberOfBytesToRead=0x574, lpNumberOfBytesRead=0x1131ae18, lpOverlapped=0x0 | out: lpBuffer=0x11234000*, lpNumberOfBytesRead=0x1131ae18*=0x574, lpOverlapped=0x0) returned 1
	[0321.814] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f040 | out: pbBuffer=0x1140f040) returned 1
	[0321.814] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0xea, pbBuffer=0x11325002 | out: pbBuffer=0x11325002) returned 1
	[0321.814] CryptGenRandom (in: hProv=0x7de7b0, dwLen=0x10, pbBuffer=0x1140f070 | out: pbBuffer=0x1140f070) returned 1
	[0321.815] GetFileType (hFile=0x1c8) returned 0x1
	[0321.815] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.815] WriteFile (in: hFile=0x1c8, lpBuffer=0x1123f000*, nNumberOfBytesToWrite=0x574, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1123f000*, lpNumberOfBytesWritten=0x1102ddfc*=0x574, lpOverlapped=0x1102de08) returned 1
	[0321.823] GetFileType (hFile=0x1c8) returned 0x1
	[0321.823] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x574, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.823] GetFileType (hFile=0x1c8) returned 0x1
	[0321.823] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.823] WriteFile (in: hFile=0x1c8, lpBuffer=0x1124a380*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x1102ddfc, lpOverlapped=0x1102de08 | out: lpBuffer=0x1124a380*, lpNumberOfBytesWritten=0x1102ddfc*=0x22a, lpOverlapped=0x1102de08) returned 1
	[0321.824] GetFileType (hFile=0x1c8) returned 0x1
	[0321.824] SetFilePointerEx (in: hFile=0x1c8, liDistanceToMove=0x574, lpNewFilePointer=0x0, dwMoveMethod=0x1102dde0 | out: lpNewFilePointer=0x0) returned 1
	[0321.824] CloseHandle (hObject=0x1c8) returned 1
	[0321.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02465_.WMF.tl30z" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02465_.wmf.tl30z")) returned 0x220
	[0321.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02465_.WMF.tl30z", dwFileAttributes=0x221) returned 1
	[0321.828] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) 

Process:
	id = "2"
	image_name = "sc.exe"
	filename = "c:\\windows\\syswow64\\sc.exe"
	page_root = "0x12227000"
	os_pid = "0xc48"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xcf0"
	cmd_line = "sc queryex type= service"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 8
	os_tid = 0xa84

	[0110.040] GetModuleHandleA (lpModuleName=0x0) returned 0xb0000
	[0110.040] __set_app_type (_Type=0x1) 
	[0110.042] __p__fmode () returned 0x77ae3c14
	[0110.042] __p__commode () returned 0x77ae49ec
	[0110.042] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xb5f00) returned 0x0
	[0110.043] __wgetmainargs (in: _Argc=0xbe028, _Argv=0xbe02c, _Env=0xbe030, _DoWildCard=0, _StartInfo=0xbe03c | out: _Argc=0xbe028, _Argv=0xbe02c, _Env=0xbe030) returned 0
	[0110.043] SetThreadUILanguage (LangId=0x0) returned 0x2ff0409
	[0110.177] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0110.177] GetStdHandle (nStdHandle=0xfffffff5) returned 0x170
	[0110.177] wcsncmp (_String1="qu", _String2="\\\\", _MaxCount=0x2) returned 21
	[0110.177] _wcsicmp (_String1="queryex", _String2="query") returned 101
	[0110.177] _wcsicmp (_String1="queryex", _String2="queryex") returned 0
	[0110.178] LocalAlloc (uFlags=0x0, uBytes=0x1000) returned 0x30158b8
	[0110.178] ResolveDelayLoadedAPI () returned 0x75fbc440
	[0110.179] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3016c60
	[0110.254] ResolveDelayLoadedAPI () returned 0x75fbbd40
	[0110.255] EnumServicesStatusExW (in: hSCManager=0x3016c60, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x30158b8, cbBufSize=0x1000, pcbBytesNeeded=0x2d0fa60, lpServicesReturned=0x2d0fa6c, lpResumeHandle=0x2d0fa68, pszGroupName=0x0 | out: lpServices=0x30158b8, pcbBytesNeeded=0x2d0fa60, lpServicesReturned=0x2d0fa6c, lpResumeHandle=0x2d0fa68) returned 0
	[0110.258] GetLastError () returned 0xea
	[0110.259] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.259] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.259] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.259] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.259] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.259] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.259] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.259] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.259] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.259] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1c2
	[0110.263] GetFileType (hFile=0x170) returned 0x3
	[0110.263] LocalAlloc (uFlags=0x0, uBytes=0x384) returned 0x301c6f0
	[0110.263] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Appinfo\r\nDISPLAY_NAME: Application Information\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=450, lpMultiByteStr=0x301c6f0, cbMultiByte=900, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Appinfo\r\nDISPLAY_NAME: Application Information\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 450
	[0110.263] WriteFile (in: hFile=0x170, lpBuffer=0x301c6f0*, nNumberOfBytesToWrite=0x1c2, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6f0*, lpNumberOfBytesWritten=0x2d0f914*=0x1c2, lpOverlapped=0x0) returned 1
	[0110.264] LocalFree (hMem=0x301c6f0) returned 0x0
	[0110.264] LocalFree (hMem=0x301c360) returned 0x0
	[0110.264] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.264] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.264] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.264] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.264] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.264] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.264] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.264] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.264] _ultow (in: _Dest=0x684, _Radix=47249760 | out: _Dest=0x684) returned="1668"
	[0110.264] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1cd
	[0110.264] GetFileType (hFile=0x170) returned 0x3
	[0110.264] LocalAlloc (uFlags=0x0, uBytes=0x39a) returned 0x301c708
	[0110.264] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: AppXSvc\r\nDISPLAY_NAME: AppX Deployment Service (AppXSVC)\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1668\r\n        FLAGS              : \r\n", cchWideChar=461, lpMultiByteStr=0x301c708, cbMultiByte=922, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: AppXSvc\r\nDISPLAY_NAME: AppX Deployment Service (AppXSVC)\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1668\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 461
	[0110.264] WriteFile (in: hFile=0x170, lpBuffer=0x301c708*, nNumberOfBytesToWrite=0x1cd, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c708*, lpNumberOfBytesWritten=0x2d0f914*=0x1cd, lpOverlapped=0x0) returned 1
	[0110.265] LocalFree (hMem=0x301c708) returned 0x0
	[0110.265] LocalFree (hMem=0x301c360) returned 0x0
	[0110.265] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.265] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.265] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.265] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.265] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.265] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.265] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.265] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.265] _ultow (in: _Dest=0x12c, _Radix=47249760 | out: _Dest=0x12c) returned="300"
	[0110.265] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1d6
	[0110.265] GetFileType (hFile=0x170) returned 0x3
	[0110.265] LocalAlloc (uFlags=0x0, uBytes=0x3ac) returned 0x301c718
	[0110.265] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: AudioEndpointBuilder\r\nDISPLAY_NAME: Windows Audio Endpoint Builder\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n", cchWideChar=470, lpMultiByteStr=0x301c718, cbMultiByte=940, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: AudioEndpointBuilder\r\nDISPLAY_NAME: Windows Audio Endpoint Builder\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 470
	[0110.266] WriteFile (in: hFile=0x170, lpBuffer=0x301c718*, nNumberOfBytesToWrite=0x1d6, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c718*, lpNumberOfBytesWritten=0x2d0f914*=0x1d6, lpOverlapped=0x0) returned 1
	[0110.266] LocalFree (hMem=0x301c718) returned 0x0
	[0110.266] LocalFree (hMem=0x301c360) returned 0x0
	[0110.266] _ultow (in: _Dest=0x10, _Radix=47249952 | out: _Dest=0x10) returned="10"
	[0110.266] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.266] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.266] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.266] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.266] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.266] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.266] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.266] _ultow (in: _Dest=0x4fc, _Radix=47249760 | out: _Dest=0x4fc) returned="1276"
	[0110.266] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1b8
	[0110.266] GetFileType (hFile=0x170) returned 0x3
	[0110.266] LocalAlloc (uFlags=0x0, uBytes=0x370) returned 0x301c6e0
	[0110.266] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Audiosrv\r\nDISPLAY_NAME: Windows Audio\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1276\r\n        FLAGS              : \r\n", cchWideChar=440, lpMultiByteStr=0x301c6e0, cbMultiByte=880, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Audiosrv\r\nDISPLAY_NAME: Windows Audio\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1276\r\n        FLAGS              : \r\nHINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 440
	[0110.267] WriteFile (in: hFile=0x170, lpBuffer=0x301c6e0*, nNumberOfBytesToWrite=0x1b8, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6e0*, lpNumberOfBytesWritten=0x2d0f914*=0x1b8, lpOverlapped=0x0) returned 1
	[0110.267] LocalFree (hMem=0x301c6e0) returned 0x0
	[0110.267] LocalFree (hMem=0x301c360) returned 0x0
	[0110.267] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.267] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.267] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.267] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.267] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.267] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.267] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.267] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.267] _ultow (in: _Dest=0x3d0, _Radix=47249760 | out: _Dest=0x3d0) returned="976"
	[0110.267] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1bc
	[0110.267] GetFileType (hFile=0x170) returned 0x3
	[0110.267] LocalAlloc (uFlags=0x0, uBytes=0x378) returned 0x301c6e8
	[0110.268] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: BFE\r\nDISPLAY_NAME: Base Filtering Engine\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 976\r\n        FLAGS              : \r\n", cchWideChar=444, lpMultiByteStr=0x301c6e8, cbMultiByte=888, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: BFE\r\nDISPLAY_NAME: Base Filtering Engine\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 976\r\n        FLAGS              : \r\n  : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 444
	[0110.268] WriteFile (in: hFile=0x170, lpBuffer=0x301c6e8*, nNumberOfBytesToWrite=0x1bc, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6e8*, lpNumberOfBytesWritten=0x2d0f914*=0x1bc, lpOverlapped=0x0) returned 1
	[0110.268] LocalFree (hMem=0x301c6e8) returned 0x0
	[0110.268] LocalFree (hMem=0x301c360) returned 0x0
	[0110.268] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.268] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.268] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.268] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.268] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.268] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.268] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.268] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.268] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.268] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1cf
	[0110.268] GetFileType (hFile=0x170) returned 0x3
	[0110.268] LocalAlloc (uFlags=0x0, uBytes=0x39e) returned 0x301c708
	[0110.269] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: BITS\r\nDISPLAY_NAME: Background Intelligent Transfer Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=463, lpMultiByteStr=0x301c708, cbMultiByte=926, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: BITS\r\nDISPLAY_NAME: Background Intelligent Transfer Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\nFLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 463
	[0110.269] WriteFile (in: hFile=0x170, lpBuffer=0x301c708*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c708*, lpNumberOfBytesWritten=0x2d0f914*=0x1cf, lpOverlapped=0x0) returned 1
	[0110.269] LocalFree (hMem=0x301c708) returned 0x0
	[0110.269] LocalFree (hMem=0x301c360) returned 0x0
	[0110.269] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.269] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.269] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.269] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.269] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.269] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.269] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.269] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.269] _ultow (in: _Dest=0x2b4, _Radix=47249760 | out: _Dest=0x2b4) returned="692"
	[0110.269] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1e3
	[0110.269] GetFileType (hFile=0x170) returned 0x3
	[0110.270] LocalAlloc (uFlags=0x0, uBytes=0x3c6) returned 0x301c730
	[0110.270] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: BrokerInfrastructure\r\nDISPLAY_NAME: Background Tasks Infrastructure Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 692\r\n        FLAGS              : \r\n", cchWideChar=483, lpMultiByteStr=0x301c730, cbMultiByte=966, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: BrokerInfrastructure\r\nDISPLAY_NAME: Background Tasks Infrastructure Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 483
	[0110.270] WriteFile (in: hFile=0x170, lpBuffer=0x301c730*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c730*, lpNumberOfBytesWritten=0x2d0f914*=0x1e3, lpOverlapped=0x0) returned 1
	[0110.270] LocalFree (hMem=0x301c730) returned 0x0
	[0110.270] LocalFree (hMem=0x301c360) returned 0x0
	[0110.270] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.270] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.270] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.270] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.270] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.270] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.270] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.270] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.270] _ultow (in: _Dest=0x170, _Radix=47249760 | out: _Dest=0x170) returned="368"
	[0110.270] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1cc
	[0110.271] GetFileType (hFile=0x170) returned 0x3
	[0110.271] LocalAlloc (uFlags=0x0, uBytes=0x398) returned 0x301c708
	[0110.271] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: CDPSvc\r\nDISPLAY_NAME: Connected Devices Platform Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n", cchWideChar=460, lpMultiByteStr=0x301c708, cbMultiByte=920, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: CDPSvc\r\nDISPLAY_NAME: Connected Devices Platform Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n      PID                : 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 460
	[0110.271] WriteFile (in: hFile=0x170, lpBuffer=0x301c708*, nNumberOfBytesToWrite=0x1cc, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c708*, lpNumberOfBytesWritten=0x2d0f914*=0x1cc, lpOverlapped=0x0) returned 1
	[0110.271] LocalFree (hMem=0x301c708) returned 0x0
	[0110.271] LocalFree (hMem=0x301c360) returned 0x0
	[0110.271] _ultow (in: _Dest=0x10, _Radix=47249952 | out: _Dest=0x10) returned="10"
	[0110.271] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.271] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.271] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.271] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.271] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.271] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.271] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.271] _ultow (in: _Dest=0x7f4, _Radix=47249760 | out: _Dest=0x7f4) returned="2036"
	[0110.272] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1d5
	[0110.272] GetFileType (hFile=0x170) returned 0x3
	[0110.272] LocalAlloc (uFlags=0x0, uBytes=0x3aa) returned 0x301c718
	[0110.272] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: ClickToRunSvc\r\nDISPLAY_NAME: Microsoft Office Click-to-Run Service\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 2036\r\n        FLAGS              : \r\n", cchWideChar=469, lpMultiByteStr=0x301c718, cbMultiByte=938, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: ClickToRunSvc\r\nDISPLAY_NAME: Microsoft Office Click-to-Run Service\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 2036\r\n        FLAGS              : \r\n: 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 469
	[0110.272] WriteFile (in: hFile=0x170, lpBuffer=0x301c718*, nNumberOfBytesToWrite=0x1d5, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c718*, lpNumberOfBytesWritten=0x2d0f914*=0x1d5, lpOverlapped=0x0) returned 1
	[0110.272] LocalFree (hMem=0x301c718) returned 0x0
	[0110.272] LocalFree (hMem=0x301c360) returned 0x0
	[0110.272] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.272] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.272] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.272] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.272] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.272] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.272] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.272] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.273] _ultow (in: _Dest=0x3d0, _Radix=47249760 | out: _Dest=0x3d0) returned="976"
	[0110.273] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1cb
	[0110.273] GetFileType (hFile=0x170) returned 0x3
	[0110.273] LocalAlloc (uFlags=0x0, uBytes=0x396) returned 0x301c700
	[0110.273] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: CoreMessagingRegistrar\r\nDISPLAY_NAME: CoreMessaging\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 976\r\n        FLAGS              : \r\n", cchWideChar=459, lpMultiByteStr=0x301c700, cbMultiByte=918, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: CoreMessagingRegistrar\r\nDISPLAY_NAME: CoreMessaging\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 976\r\n        FLAGS              : \r\n6\r\n        FLAGS              : \r\n: 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 459
	[0110.273] WriteFile (in: hFile=0x170, lpBuffer=0x301c700*, nNumberOfBytesToWrite=0x1cb, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c700*, lpNumberOfBytesWritten=0x2d0f914*=0x1cb, lpOverlapped=0x0) returned 1
	[0110.358] LocalFree (hMem=0x301c700) returned 0x0
	[0110.358] LocalFree (hMem=0x301c360) returned 0x0
	[0110.358] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.358] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.358] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.358] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.359] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.359] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.359] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.359] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.359] _ultow (in: _Dest=0x480, _Radix=47249760 | out: _Dest=0x480) returned="1152"
	[0110.359] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1c3
	[0110.360] GetFileType (hFile=0x170) returned 0x3
	[0110.361] LocalAlloc (uFlags=0x0, uBytes=0x386) returned 0x301c6f0
	[0110.361] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: CryptSvc\r\nDISPLAY_NAME: Cryptographic Services\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1152\r\n        FLAGS              : \r\n", cchWideChar=451, lpMultiByteStr=0x301c6f0, cbMultiByte=902, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: CryptSvc\r\nDISPLAY_NAME: Cryptographic Services\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1152\r\n        FLAGS              : \r\n FLAGS              : \r\n6\r\n        FLAGS              : \r\n: 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 451
	[0110.361] WriteFile (in: hFile=0x170, lpBuffer=0x301c6f0*, nNumberOfBytesToWrite=0x1c3, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6f0*, lpNumberOfBytesWritten=0x2d0f914*=0x1c3, lpOverlapped=0x0) returned 1
	[0110.361] LocalFree (hMem=0x301c6f0) returned 0x0
	[0110.361] LocalFree (hMem=0x301c360) returned 0x0
	[0110.361] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.361] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.361] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.361] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.362] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.362] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.362] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.362] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.362] _ultow (in: _Dest=0x2b4, _Radix=47249760 | out: _Dest=0x2b4) returned="692"
	[0110.362] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1ce
	[0110.362] GetFileType (hFile=0x170) returned 0x3
	[0110.362] LocalAlloc (uFlags=0x0, uBytes=0x39c) returned 0x301c708
	[0110.362] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: DcomLaunch\r\nDISPLAY_NAME: DCOM Server Process Launcher\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 692\r\n        FLAGS              : \r\n", cchWideChar=462, lpMultiByteStr=0x301c708, cbMultiByte=924, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: DcomLaunch\r\nDISPLAY_NAME: DCOM Server Process Launcher\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 692\r\n        FLAGS              : \r\nFLAGS              : \r\n: 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 462
	[0110.362] WriteFile (in: hFile=0x170, lpBuffer=0x301c708*, nNumberOfBytesToWrite=0x1ce, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c708*, lpNumberOfBytesWritten=0x2d0f914*=0x1ce, lpOverlapped=0x0) returned 1
	[0110.363] LocalFree (hMem=0x301c708) returned 0x0
	[0110.363] LocalFree (hMem=0x301c360) returned 0x0
	[0110.363] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.363] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.363] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.363] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.363] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.363] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.363] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.363] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.363] _ultow (in: _Dest=0x12c, _Radix=47249760 | out: _Dest=0x12c) returned="300"
	[0110.363] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1d6
	[0110.363] GetFileType (hFile=0x170) returned 0x3
	[0110.363] LocalAlloc (uFlags=0x0, uBytes=0x3ac) returned 0x301c718
	[0110.364] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: DeviceAssociationService\r\nDISPLAY_NAME: Device Association Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n", cchWideChar=470, lpMultiByteStr=0x301c718, cbMultiByte=940, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: DeviceAssociationService\r\nDISPLAY_NAME: Device Association Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 470
	[0110.364] WriteFile (in: hFile=0x170, lpBuffer=0x301c718*, nNumberOfBytesToWrite=0x1d6, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c718*, lpNumberOfBytesWritten=0x2d0f914*=0x1d6, lpOverlapped=0x0) returned 1
	[0110.364] LocalFree (hMem=0x301c718) returned 0x0
	[0110.365] LocalFree (hMem=0x301c360) returned 0x0
	[0110.365] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.365] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.365] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.365] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.365] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.365] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.365] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.365] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.365] _ultow (in: _Dest=0x3f4, _Radix=47249760 | out: _Dest=0x3f4) returned="1012"
	[0110.365] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1b4
	[0110.366] GetFileType (hFile=0x170) returned 0x3
	[0110.366] LocalAlloc (uFlags=0x0, uBytes=0x368) returned 0x301c6d8
	[0110.366] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Dhcp\r\nDISPLAY_NAME: DHCP Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1012\r\n        FLAGS              : \r\n", cchWideChar=436, lpMultiByteStr=0x301c6d8, cbMultiByte=872, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Dhcp\r\nDISPLAY_NAME: DHCP Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1012\r\n        FLAGS              : \r\n       WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 436
	[0110.366] WriteFile (in: hFile=0x170, lpBuffer=0x301c6d8*, nNumberOfBytesToWrite=0x1b4, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6d8*, lpNumberOfBytesWritten=0x2d0f914*=0x1b4, lpOverlapped=0x0) returned 1
	[0110.366] LocalFree (hMem=0x301c6d8) returned 0x0
	[0110.366] LocalFree (hMem=0x301c360) returned 0x0
	[0110.366] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.366] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.366] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.366] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.366] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.366] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.366] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.367] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.367] _ultow (in: _Dest=0x480, _Radix=47249760 | out: _Dest=0x480) returned="1152"
	[0110.367] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1b7
	[0110.367] GetFileType (hFile=0x170) returned 0x3
	[0110.367] LocalAlloc (uFlags=0x0, uBytes=0x36e) returned 0x301c6d8
	[0110.367] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Dnscache\r\nDISPLAY_NAME: DNS Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1152\r\n        FLAGS              : \r\n", cchWideChar=439, lpMultiByteStr=0x301c6d8, cbMultiByte=878, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Dnscache\r\nDISPLAY_NAME: DNS Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1152\r\n        FLAGS              : \r\n    WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 439
	[0110.367] WriteFile (in: hFile=0x170, lpBuffer=0x301c6d8*, nNumberOfBytesToWrite=0x1b7, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6d8*, lpNumberOfBytesWritten=0x2d0f914*=0x1b7, lpOverlapped=0x0) returned 1
	[0110.367] LocalFree (hMem=0x301c6d8) returned 0x0
	[0110.367] LocalFree (hMem=0x301c360) returned 0x0
	[0110.367] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.367] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.367] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.367] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.368] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.368] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.368] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.368] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.368] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.368] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1c1
	[0110.368] GetFileType (hFile=0x170) returned 0x3
	[0110.368] LocalAlloc (uFlags=0x0, uBytes=0x382) returned 0x301c6f0
	[0110.368] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: DoSvc\r\nDISPLAY_NAME: Delivery Optimization\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=449, lpMultiByteStr=0x301c6f0, cbMultiByte=898, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: DoSvc\r\nDISPLAY_NAME: Delivery Optimization\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n    PID                : 300\r\n        FLAGS              : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 449
	[0110.368] WriteFile (in: hFile=0x170, lpBuffer=0x301c6f0*, nNumberOfBytesToWrite=0x1c1, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6f0*, lpNumberOfBytesWritten=0x2d0f914*=0x1c1, lpOverlapped=0x0) returned 1
	[0110.368] LocalFree (hMem=0x301c6f0) returned 0x0
	[0110.368] LocalFree (hMem=0x301c360) returned 0x0
	[0110.368] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.369] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.369] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.373] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.373] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.374] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.374] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.374] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.374] _ultow (in: _Dest=0x3d0, _Radix=47249760 | out: _Dest=0x3d0) returned="976"
	[0110.374] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1c0
	[0110.374] GetFileType (hFile=0x170) returned 0x3
	[0110.374] LocalAlloc (uFlags=0x0, uBytes=0x380) returned 0x301c6f0
	[0110.374] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: DPS\r\nDISPLAY_NAME: Diagnostic Policy Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 976\r\n        FLAGS              : \r\n", cchWideChar=448, lpMultiByteStr=0x301c6f0, cbMultiByte=896, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: DPS\r\nDISPLAY_NAME: Diagnostic Policy Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 976\r\n        FLAGS              : \r\n\n    PID                : 300\r\n        FLAGS              : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 448
	[0110.374] WriteFile (in: hFile=0x170, lpBuffer=0x301c6f0*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6f0*, lpNumberOfBytesWritten=0x2d0f914*=0x1c0, lpOverlapped=0x0) returned 1
	[0110.375] LocalFree (hMem=0x301c6f0) returned 0x0
	[0110.375] LocalFree (hMem=0x301c360) returned 0x0
	[0110.376] _ultow (in: _Dest=0x10, _Radix=47249952 | out: _Dest=0x10) returned="10"
	[0110.376] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.376] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.376] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.376] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.376] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.376] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.376] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.376] _ultow (in: _Dest=0x530, _Radix=47249760 | out: _Dest=0x530) returned="1328"
	[0110.376] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1b4
	[0110.376] GetFileType (hFile=0x170) returned 0x3
	[0110.376] LocalAlloc (uFlags=0x0, uBytes=0x368) returned 0x301c6d8
	[0110.376] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: DusmSvc\r\nDISPLAY_NAME: Data Usage\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1328\r\n        FLAGS              : \r\n", cchWideChar=436, lpMultiByteStr=0x301c6d8, cbMultiByte=872, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: DusmSvc\r\nDISPLAY_NAME: Data Usage\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1328\r\n        FLAGS              : \r\n976\r\n        FLAGS              : \r\n\n    PID                : 300\r\n        FLAGS              : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 436
	[0110.376] WriteFile (in: hFile=0x170, lpBuffer=0x301c6d8*, nNumberOfBytesToWrite=0x1b4, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6d8*, lpNumberOfBytesWritten=0x2d0f914*=0x1b4, lpOverlapped=0x0) returned 1
	[0110.377] LocalFree (hMem=0x301c6d8) returned 0x0
	[0110.377] LocalFree (hMem=0x301c360) returned 0x0
	[0110.377] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.377] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.377] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.377] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.377] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.377] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.377] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.377] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.377] _ultow (in: _Dest=0x3f4, _Radix=47249760 | out: _Dest=0x3f4) returned="1012"
	[0110.377] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1be
	[0110.377] GetFileType (hFile=0x170) returned 0x3
	[0110.377] LocalAlloc (uFlags=0x0, uBytes=0x37c) returned 0x301c6e8
	[0110.377] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: EventLog\r\nDISPLAY_NAME: Windows Event Log\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1012\r\n        FLAGS              : \r\n", cchWideChar=446, lpMultiByteStr=0x301c6e8, cbMultiByte=892, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: EventLog\r\nDISPLAY_NAME: Windows Event Log\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1012\r\n        FLAGS              : \r\n      : \r\n\n    PID                : 300\r\n        FLAGS              : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 446
	[0110.378] WriteFile (in: hFile=0x170, lpBuffer=0x301c6e8*, nNumberOfBytesToWrite=0x1be, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6e8*, lpNumberOfBytesWritten=0x2d0f914*=0x1be, lpOverlapped=0x0) returned 1
	[0110.378] LocalFree (hMem=0x301c6e8) returned 0x0
	[0110.378] LocalFree (hMem=0x301c360) returned 0x0
	[0110.378] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.378] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.378] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.378] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.378] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.378] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.378] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.378] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.378] _ultow (in: _Dest=0x170, _Radix=47249760 | out: _Dest=0x170) returned="368"
	[0110.378] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1c0
	[0110.378] GetFileType (hFile=0x170) returned 0x3
	[0110.379] LocalAlloc (uFlags=0x0, uBytes=0x380) returned 0x301c6f0
	[0110.379] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: EventSystem\r\nDISPLAY_NAME: COM+ Event System\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n", cchWideChar=448, lpMultiByteStr=0x301c6f0, cbMultiByte=896, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: EventSystem\r\nDISPLAY_NAME: COM+ Event System\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n\n    PID                : 300\r\n        FLAGS              : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 448
	[0110.379] WriteFile (in: hFile=0x170, lpBuffer=0x301c6f0*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6f0*, lpNumberOfBytesWritten=0x2d0f914*=0x1c0, lpOverlapped=0x0) returned 1
	[0110.379] LocalFree (hMem=0x301c6f0) returned 0x0
	[0110.379] LocalFree (hMem=0x301c360) returned 0x0
	[0110.379] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.379] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.379] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.379] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.379] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.379] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.379] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.379] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.380] _ultow (in: _Dest=0x170, _Radix=47249760 | out: _Dest=0x170) returned="368"
	[0110.380] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1c7
	[0110.380] GetFileType (hFile=0x170) returned 0x3
	[0110.380] LocalAlloc (uFlags=0x0, uBytes=0x38e) returned 0x301c6f8
	[0110.380] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: FontCache\r\nDISPLAY_NAME: Windows Font Cache Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n", cchWideChar=455, lpMultiByteStr=0x301c6f8, cbMultiByte=910, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: FontCache\r\nDISPLAY_NAME: Windows Font Cache Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n         : 300\r\n        FLAGS              : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 455
	[0110.380] WriteFile (in: hFile=0x170, lpBuffer=0x301c6f8*, nNumberOfBytesToWrite=0x1c7, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6f8*, lpNumberOfBytesWritten=0x2d0f914*=0x1c7, lpOverlapped=0x0) returned 1
	[0110.380] LocalFree (hMem=0x301c6f8) returned 0x0
	[0110.380] LocalFree (hMem=0x301c360) returned 0x0
	[0110.380] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.380] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.380] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.380] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.380] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.381] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.381] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.381] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.381] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.381] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1bf
	[0110.381] GetFileType (hFile=0x170) returned 0x3
	[0110.381] LocalAlloc (uFlags=0x0, uBytes=0x37e) returned 0x301c6e8
	[0110.381] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: gpsvc\r\nDISPLAY_NAME: Group Policy Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=447, lpMultiByteStr=0x301c6e8, cbMultiByte=894, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: gpsvc\r\nDISPLAY_NAME: Group Policy Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n FLAGS              : \r\n         : 300\r\n        FLAGS              : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 447
	[0110.381] WriteFile (in: hFile=0x170, lpBuffer=0x301c6e8*, nNumberOfBytesToWrite=0x1bf, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6e8*, lpNumberOfBytesWritten=0x2d0f914*=0x1bf, lpOverlapped=0x0) returned 1
	[0110.381] LocalFree (hMem=0x301c6e8) returned 0x0
	[0110.381] LocalFree (hMem=0x301c360) returned 0x0
	[0110.381] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.381] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.381] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.381] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.382] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.382] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.382] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.382] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.382] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.382] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1b5
	[0110.382] GetFileType (hFile=0x170) returned 0x3
	[0110.382] LocalAlloc (uFlags=0x0, uBytes=0x36a) returned 0x301c6d8
	[0110.382] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: iphlpsvc\r\nDISPLAY_NAME: IP Helper\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=437, lpMultiByteStr=0x301c6d8, cbMultiByte=874, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: iphlpsvc\r\nDISPLAY_NAME: IP Helper\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n   FLAGS              : \r\n FLAGS              : \r\n         : 300\r\n        FLAGS              : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 437
	[0110.382] WriteFile (in: hFile=0x170, lpBuffer=0x301c6d8*, nNumberOfBytesToWrite=0x1b5, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c6d8*, lpNumberOfBytesWritten=0x2d0f914*=0x1b5, lpOverlapped=0x0) returned 1
	[0110.382] LocalFree (hMem=0x301c6d8) returned 0x0
	[0110.382] LocalFree (hMem=0x301c360) returned 0x0
	[0110.382] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.382] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.383] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.383] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.383] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.383] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.383] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.383] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.383] _ultow (in: _Dest=0x258, _Radix=47249760 | out: _Dest=0x258) returned="600"
	[0110.383] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1d1
	[0110.383] GetFileType (hFile=0x170) returned 0x3
	[0110.383] LocalAlloc (uFlags=0x0, uBytes=0x3a2) returned 0x301c710
	[0110.383] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: KeyIso\r\nDISPLAY_NAME: CNG Key Isolation\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 600\r\n        FLAGS              : RUNS_IN_SYSTEM_PROCESS\r\n", cchWideChar=465, lpMultiByteStr=0x301c710, cbMultiByte=930, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: KeyIso\r\nDISPLAY_NAME: CNG Key Isolation\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 600\r\n        FLAGS              : RUNS_IN_SYSTEM_PROCESS\r\n         : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 465
	[0110.383] WriteFile (in: hFile=0x170, lpBuffer=0x301c710*, nNumberOfBytesToWrite=0x1d1, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c710*, lpNumberOfBytesWritten=0x2d0f914*=0x1d1, lpOverlapped=0x0) returned 1
	[0110.383] LocalFree (hMem=0x301c710) returned 0x0
	[0110.383] LocalFree (hMem=0x301c360) returned 0x0
	[0110.384] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.384] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.384] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.384] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.384] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.384] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.384] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.384] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.384] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.384] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="썠́\x83") returned 0x1b6
	[0110.384] GetFileType (hFile=0x170) returned 0x3
	[0110.384] LocalAlloc (uFlags=0x0, uBytes=0x36c) returned 0x301d8a8
	[0110.387] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: LanmanServer\r\nDISPLAY_NAME: Server\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=438, lpMultiByteStr=0x301d8a8, cbMultiByte=876, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: LanmanServer\r\nDISPLAY_NAME: Server\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 438
	[0110.387] WriteFile (in: hFile=0x170, lpBuffer=0x301d8a8*, nNumberOfBytesToWrite=0x1b6, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301d8a8*, lpNumberOfBytesWritten=0x2d0f914*=0x1b6, lpOverlapped=0x0) returned 1
	[0110.387] LocalFree (hMem=0x301d8a8) returned 0x0
	[0110.387] LocalFree (hMem=0x301c360) returned 0x0
	[0110.387] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.387] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.387] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.388] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.388] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.388] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.388] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.388] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.388] _ultow (in: _Dest=0x480, _Radix=47249760 | out: _Dest=0x480) returned="1152"
	[0110.388] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="́\x83") returned 0x1bd
	[0110.388] GetFileType (hFile=0x170) returned 0x3
	[0110.388] LocalAlloc (uFlags=0x0, uBytes=0x37a) returned 0x301ea68
	[0110.388] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: LanmanWorkstation\r\nDISPLAY_NAME: Workstation\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1152\r\n        FLAGS              : \r\n", cchWideChar=445, lpMultiByteStr=0x301ea68, cbMultiByte=890, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: LanmanWorkstation\r\nDISPLAY_NAME: Workstation\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1152\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 445
	[0110.388] WriteFile (in: hFile=0x170, lpBuffer=0x301ea68*, nNumberOfBytesToWrite=0x1bd, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301ea68*, lpNumberOfBytesWritten=0x2d0f914*=0x1bd, lpOverlapped=0x0) returned 1
	[0110.388] LocalFree (hMem=0x301ea68) returned 0x0
	[0110.388] LocalFree (hMem=0x301e6e0) returned 0x0
	[0110.389] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.389] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.389] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.389] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.389] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.389] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.389] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.389] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.389] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.389] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="́\x83") returned 0x1bc
	[0110.389] GetFileType (hFile=0x170) returned 0x3
	[0110.389] LocalAlloc (uFlags=0x0, uBytes=0x378) returned 0x301ea68
	[0110.389] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: lfsvc\r\nDISPLAY_NAME: Geolocation Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=444, lpMultiByteStr=0x301ea68, cbMultiByte=888, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: lfsvc\r\nDISPLAY_NAME: Geolocation Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n\n", lpUsedDefaultChar=0x0) returned 444
	[0110.389] WriteFile (in: hFile=0x170, lpBuffer=0x301ea68*, nNumberOfBytesToWrite=0x1bc, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301ea68*, lpNumberOfBytesWritten=0x2d0f914*=0x1bc, lpOverlapped=0x0) returned 1
	[0110.390] LocalFree (hMem=0x301ea68) returned 0x0
	[0110.391] LocalFree (hMem=0x301e6e0) returned 0x0
	[0110.391] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.391] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.391] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.391] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.391] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.391] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.391] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.391] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.391] _ultow (in: _Dest=0x3f4, _Radix=47249760 | out: _Dest=0x3f4) returned="1012"
	[0110.391] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="́\x83") returned 0x1c1
	[0110.391] GetFileType (hFile=0x170) returned 0x3
	[0110.391] LocalAlloc (uFlags=0x0, uBytes=0x382) returned 0x301f938
	[0110.392] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: lmhosts\r\nDISPLAY_NAME: TCP/IP NetBIOS Helper\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1012\r\n        FLAGS              : \r\n", cchWideChar=449, lpMultiByteStr=0x301f938, cbMultiByte=898, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: lmhosts\r\nDISPLAY_NAME: TCP/IP NetBIOS Helper\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1012\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 449
	[0110.392] WriteFile (in: hFile=0x170, lpBuffer=0x301f938*, nNumberOfBytesToWrite=0x1c1, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301f938*, lpNumberOfBytesWritten=0x2d0f914*=0x1c1, lpOverlapped=0x0) returned 1
	[0110.392] LocalFree (hMem=0x301f938) returned 0x0
	[0110.392] LocalFree (hMem=0x301e6e0) returned 0x0
	[0110.392] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.392] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.392] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.393] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.393] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.393] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.393] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.393] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.393] _ultow (in: _Dest=0x2b4, _Radix=47249760 | out: _Dest=0x2b4) returned="692"
	[0110.393] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c0
	[0110.393] GetFileType (hFile=0x170) returned 0x3
	[0110.393] LocalAlloc (uFlags=0x0, uBytes=0x380) returned 0x301d8a8
	[0110.393] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: LSM\r\nDISPLAY_NAME: Local Session Manager\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 692\r\n        FLAGS              : \r\n", cchWideChar=448, lpMultiByteStr=0x301d8a8, cbMultiByte=896, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: LSM\r\nDISPLAY_NAME: Local Session Manager\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 448
	[0110.393] WriteFile (in: hFile=0x170, lpBuffer=0x301d8a8*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301d8a8*, lpNumberOfBytesWritten=0x2d0f914*=0x1c0, lpOverlapped=0x0) returned 1
	[0110.393] LocalFree (hMem=0x301d8a8) returned 0x0
	[0110.394] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.394] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.394] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.394] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.394] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.394] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.394] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.394] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.394] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.394] _ultow (in: _Dest=0x3d0, _Radix=47249760 | out: _Dest=0x3d0) returned="976"
	[0110.394] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1ba
	[0110.394] GetFileType (hFile=0x170) returned 0x3
	[0110.394] LocalAlloc (uFlags=0x0, uBytes=0x374) returned 0x301e6e0
	[0110.394] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: MpsSvc\r\nDISPLAY_NAME: Windows Firewall\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 976\r\n        FLAGS              : \r\n", cchWideChar=442, lpMultiByteStr=0x301e6e0, cbMultiByte=884, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: MpsSvc\r\nDISPLAY_NAME: Windows Firewall\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 976\r\n        FLAGS              : \r\nO", lpUsedDefaultChar=0x0) returned 442
	[0110.394] WriteFile (in: hFile=0x170, lpBuffer=0x301e6e0*, nNumberOfBytesToWrite=0x1ba, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301e6e0*, lpNumberOfBytesWritten=0x2d0f914*=0x1ba, lpOverlapped=0x0) returned 1
	[0110.395] LocalFree (hMem=0x301e6e0) returned 0x0
	[0110.395] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.395] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.395] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.395] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.395] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.395] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.395] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.395] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.395] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.395] _ultow (in: _Dest=0x12c, _Radix=47249760 | out: _Dest=0x12c) returned="300"
	[0110.395] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c7
	[0110.395] GetFileType (hFile=0x170) returned 0x3
	[0110.395] LocalAlloc (uFlags=0x0, uBytes=0x38e) returned 0x3020e10
	[0110.395] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: NcbService\r\nDISPLAY_NAME: Network Connection Broker\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n", cchWideChar=455, lpMultiByteStr=0x3020e10, cbMultiByte=910, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: NcbService\r\nDISPLAY_NAME: Network Connection Broker\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 455
	[0110.396] WriteFile (in: hFile=0x170, lpBuffer=0x3020e10*, nNumberOfBytesToWrite=0x1c7, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020e10*, lpNumberOfBytesWritten=0x2d0f914*=0x1c7, lpOverlapped=0x0) returned 1
	[0110.396] LocalFree (hMem=0x3020e10) returned 0x0
	[0110.396] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.396] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.396] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.396] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.396] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.396] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.396] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.396] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.396] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.396] _ultow (in: _Dest=0x170, _Radix=47249760 | out: _Dest=0x170) returned="368"
	[0110.396] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c0
	[0110.396] GetFileType (hFile=0x170) returned 0x3
	[0110.397] LocalAlloc (uFlags=0x0, uBytes=0x380) returned 0x301c700
	[0110.397] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: netprofm\r\nDISPLAY_NAME: Network List Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n", cchWideChar=448, lpMultiByteStr=0x301c700, cbMultiByte=896, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: netprofm\r\nDISPLAY_NAME: Network List Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n       : RUNS_IN_SYSTEM_PROCESS\r\n         : \r\n 692\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 448
	[0110.397] WriteFile (in: hFile=0x170, lpBuffer=0x301c700*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c700*, lpNumberOfBytesWritten=0x2d0f914*=0x1c0, lpOverlapped=0x0) returned 1
	[0110.397] LocalFree (hMem=0x301c700) returned 0x0
	[0110.397] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.397] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.397] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.397] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.397] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.397] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.397] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.397] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.397] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.397] _ultow (in: _Dest=0x480, _Radix=47249760 | out: _Dest=0x480) returned="1152"
	[0110.397] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c5
	[0110.398] GetFileType (hFile=0x170) returned 0x3
	[0110.398] LocalAlloc (uFlags=0x0, uBytes=0x38a) returned 0x3020e10
	[0110.398] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: NlaSvc\r\nDISPLAY_NAME: Network Location Awareness\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1152\r\n        FLAGS              : \r\n", cchWideChar=453, lpMultiByteStr=0x3020e10, cbMultiByte=906, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: NlaSvc\r\nDISPLAY_NAME: Network Location Awareness\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1152\r\n        FLAGS              : \r\n\r\n", lpUsedDefaultChar=0x0) returned 453
	[0110.398] WriteFile (in: hFile=0x170, lpBuffer=0x3020e10*, nNumberOfBytesToWrite=0x1c5, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020e10*, lpNumberOfBytesWritten=0x2d0f914*=0x1c5, lpOverlapped=0x0) returned 1
	[0110.398] LocalFree (hMem=0x3020e10) returned 0x0
	[0110.398] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.398] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.398] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.398] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.398] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.398] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.398] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.398] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.398] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.399] _ultow (in: _Dest=0x170, _Radix=47249760 | out: _Dest=0x170) returned="368"
	[0110.399] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c6
	[0110.399] GetFileType (hFile=0x170) returned 0x3
	[0110.399] LocalAlloc (uFlags=0x0, uBytes=0x38c) returned 0x3020088
	[0110.399] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: nsi\r\nDISPLAY_NAME: Network Store Interface Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n", cchWideChar=454, lpMultiByteStr=0x3020088, cbMultiByte=908, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: nsi\r\nDISPLAY_NAME: Network Store Interface Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 454
	[0110.399] WriteFile (in: hFile=0x170, lpBuffer=0x3020088*, nNumberOfBytesToWrite=0x1c6, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020088*, lpNumberOfBytesWritten=0x2d0f914*=0x1c6, lpOverlapped=0x0) returned 1
	[0110.399] LocalFree (hMem=0x3020088) returned 0x0
	[0110.399] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.399] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.399] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.399] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.399] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.399] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.399] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.400] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.400] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.400] _ultow (in: _Dest=0x12c, _Radix=47249760 | out: _Dest=0x12c) returned="300"
	[0110.400] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1d1
	[0110.400] GetFileType (hFile=0x170) returned 0x3
	[0110.400] LocalAlloc (uFlags=0x0, uBytes=0x3a2) returned 0x3020e28
	[0110.400] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: PcaSvc\r\nDISPLAY_NAME: Program Compatibility Assistant Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n", cchWideChar=465, lpMultiByteStr=0x3020e28, cbMultiByte=930, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: PcaSvc\r\nDISPLAY_NAME: Program Compatibility Assistant Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 465
	[0110.400] WriteFile (in: hFile=0x170, lpBuffer=0x3020e28*, nNumberOfBytesToWrite=0x1d1, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020e28*, lpNumberOfBytesWritten=0x2d0f914*=0x1d1, lpOverlapped=0x0) returned 1
	[0110.400] LocalFree (hMem=0x3020e28) returned 0x0
	[0110.400] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.400] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.401] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.401] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.401] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.401] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.401] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.401] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.401] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.401] _ultow (in: _Dest=0x2b4, _Radix=47249760 | out: _Dest=0x2b4) returned="692"
	[0110.401] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1b9
	[0110.401] GetFileType (hFile=0x170) returned 0x3
	[0110.401] LocalAlloc (uFlags=0x0, uBytes=0x372) returned 0x301e6e0
	[0110.401] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: PlugPlay\r\nDISPLAY_NAME: Plug and Play\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 692\r\n        FLAGS              : \r\n", cchWideChar=441, lpMultiByteStr=0x301e6e0, cbMultiByte=882, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: PlugPlay\r\nDISPLAY_NAME: Plug and Play\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 692\r\n        FLAGS              : \r\n\nO", lpUsedDefaultChar=0x0) returned 441
	[0110.401] WriteFile (in: hFile=0x170, lpBuffer=0x301e6e0*, nNumberOfBytesToWrite=0x1b9, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301e6e0*, lpNumberOfBytesWritten=0x2d0f914*=0x1b9, lpOverlapped=0x0) returned 1
	[0110.402] LocalFree (hMem=0x301e6e0) returned 0x0
	[0110.402] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.402] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.402] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.402] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.402] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.402] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.402] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.402] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.402] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.402] _ultow (in: _Dest=0x2b4, _Radix=47249760 | out: _Dest=0x2b4) returned="692"
	[0110.402] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1b2
	[0110.402] GetFileType (hFile=0x170) returned 0x3
	[0110.402] LocalAlloc (uFlags=0x0, uBytes=0x364) returned 0x301c360
	[0110.402] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Power\r\nDISPLAY_NAME: Power\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 692\r\n        FLAGS              : \r\n", cchWideChar=434, lpMultiByteStr=0x301c360, cbMultiByte=868, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Power\r\nDISPLAY_NAME: Power\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 692\r\n        FLAGS              : \r\nH", lpUsedDefaultChar=0x0) returned 434
	[0110.403] WriteFile (in: hFile=0x170, lpBuffer=0x301c360*, nNumberOfBytesToWrite=0x1b2, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c360*, lpNumberOfBytesWritten=0x2d0f914*=0x1b2, lpOverlapped=0x0) returned 1
	[0110.403] LocalFree (hMem=0x301c360) returned 0x0
	[0110.403] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.403] EnumServicesStatusExW (in: hSCManager=0x3016c60, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x30158b8, cbBufSize=0x1000, pcbBytesNeeded=0x2d0fa60, lpServicesReturned=0x2d0fa6c, lpResumeHandle=0x2d0fa68, pszGroupName=0x0 | out: lpServices=0x30158b8, pcbBytesNeeded=0x2d0fa60, lpServicesReturned=0x2d0fa6c, lpResumeHandle=0x2d0fa68) returned 1
	[0110.407] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.407] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.407] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.407] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.407] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.407] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.407] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.408] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.408] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.408] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1bf
	[0110.408] GetFileType (hFile=0x170) returned 0x3
	[0110.408] LocalAlloc (uFlags=0x0, uBytes=0x37e) returned 0x301d198
	[0110.408] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: ProfSvc\r\nDISPLAY_NAME: User Profile Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=447, lpMultiByteStr=0x301d198, cbMultiByte=894, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: ProfSvc\r\nDISPLAY_NAME: User Profile Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 447
	[0110.408] WriteFile (in: hFile=0x170, lpBuffer=0x301d198*, nNumberOfBytesToWrite=0x1bf, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301d198*, lpNumberOfBytesWritten=0x2d0f914*=0x1bf, lpOverlapped=0x0) returned 1
	[0110.408] LocalFree (hMem=0x301d198) returned 0x0
	[0110.408] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.408] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.408] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.408] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.408] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.408] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.409] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.409] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.409] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.409] _ultow (in: _Dest=0x318, _Radix=47249760 | out: _Dest=0x318) returned="792"
	[0110.409] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c7
	[0110.409] GetFileType (hFile=0x170) returned 0x3
	[0110.409] LocalAlloc (uFlags=0x0, uBytes=0x38e) returned 0x301f590
	[0110.409] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: RpcEptMapper\r\nDISPLAY_NAME: RPC Endpoint Mapper\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 792\r\n        FLAGS              : \r\n", cchWideChar=455, lpMultiByteStr=0x301f590, cbMultiByte=910, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: RpcEptMapper\r\nDISPLAY_NAME: RPC Endpoint Mapper\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 792\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 455
	[0110.409] WriteFile (in: hFile=0x170, lpBuffer=0x301f590*, nNumberOfBytesToWrite=0x1c7, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301f590*, lpNumberOfBytesWritten=0x2d0f914*=0x1c7, lpOverlapped=0x0) returned 1
	[0110.409] LocalFree (hMem=0x301f590) returned 0x0
	[0110.409] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.409] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.409] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.410] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.410] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.410] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.410] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.410] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.410] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.410] _ultow (in: _Dest=0x318, _Radix=47249760 | out: _Dest=0x318) returned="792"
	[0110.410] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c8
	[0110.410] GetFileType (hFile=0x170) returned 0x3
	[0110.410] LocalAlloc (uFlags=0x0, uBytes=0x390) returned 0x3020088
	[0110.410] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: RpcSs\r\nDISPLAY_NAME: Remote Procedure Call (RPC)\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 792\r\n        FLAGS              : \r\n", cchWideChar=456, lpMultiByteStr=0x3020088, cbMultiByte=912, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: RpcSs\r\nDISPLAY_NAME: Remote Procedure Call (RPC)\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 792\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 456
	[0110.410] WriteFile (in: hFile=0x170, lpBuffer=0x3020088*, nNumberOfBytesToWrite=0x1c8, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020088*, lpNumberOfBytesWritten=0x2d0f914*=0x1c8, lpOverlapped=0x0) returned 1
	[0110.411] LocalFree (hMem=0x3020088) returned 0x0
	[0110.411] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.411] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.411] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.411] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.411] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.411] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.411] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.411] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.411] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.411] _ultow (in: _Dest=0x258, _Radix=47249760 | out: _Dest=0x258) returned="600"
	[0110.412] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1dc
	[0110.412] GetFileType (hFile=0x170) returned 0x3
	[0110.412] LocalAlloc (uFlags=0x0, uBytes=0x3b8) returned 0x3020e40
	[0110.412] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: SamSs\r\nDISPLAY_NAME: Security Accounts Manager\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 600\r\n        FLAGS              : RUNS_IN_SYSTEM_PROCESS\r\n", cchWideChar=476, lpMultiByteStr=0x3020e40, cbMultiByte=952, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: SamSs\r\nDISPLAY_NAME: Security Accounts Manager\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 600\r\n        FLAGS              : RUNS_IN_SYSTEM_PROCESS\r\n", lpUsedDefaultChar=0x0) returned 476
	[0110.412] WriteFile (in: hFile=0x170, lpBuffer=0x3020e40*, nNumberOfBytesToWrite=0x1dc, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020e40*, lpNumberOfBytesWritten=0x2d0f914*=0x1dc, lpOverlapped=0x0) returned 1
	[0110.412] LocalFree (hMem=0x3020e40) returned 0x0
	[0110.412] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.412] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.412] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.412] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.413] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.413] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.413] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.413] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.413] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.413] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.413] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1ba
	[0110.413] GetFileType (hFile=0x170) returned 0x3
	[0110.413] LocalAlloc (uFlags=0x0, uBytes=0x374) returned 0x301e6e0
	[0110.413] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Schedule\r\nDISPLAY_NAME: Task Scheduler\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=442, lpMultiByteStr=0x301e6e0, cbMultiByte=884, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Schedule\r\nDISPLAY_NAME: Task Scheduler\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\nO", lpUsedDefaultChar=0x0) returned 442
	[0110.413] WriteFile (in: hFile=0x170, lpBuffer=0x301e6e0*, nNumberOfBytesToWrite=0x1ba, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301e6e0*, lpNumberOfBytesWritten=0x2d0f914*=0x1ba, lpOverlapped=0x0) returned 1
	[0110.414] LocalFree (hMem=0x301e6e0) returned 0x0
	[0110.414] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.414] _ultow (in: _Dest=0x10, _Radix=47249952 | out: _Dest=0x10) returned="10"
	[0110.414] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.414] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.414] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.414] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.414] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.414] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.414] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.414] _ultow (in: _Dest=0x55c, _Radix=47249760 | out: _Dest=0x55c) returned="1372"
	[0110.414] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1e0
	[0110.415] GetFileType (hFile=0x170) returned 0x3
	[0110.415] LocalAlloc (uFlags=0x0, uBytes=0x3c0) returned 0x3020e48
	[0110.415] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: SecurityHealthService\r\nDISPLAY_NAME: Windows Defender Security Center Service\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1372\r\n        FLAGS              : \r\n", cchWideChar=480, lpMultiByteStr=0x3020e48, cbMultiByte=960, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: SecurityHealthService\r\nDISPLAY_NAME: Windows Defender Security Center Service\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1372\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 480
	[0110.415] WriteFile (in: hFile=0x170, lpBuffer=0x3020e48*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020e48*, lpNumberOfBytesWritten=0x2d0f914*=0x1e0, lpOverlapped=0x0) returned 1
	[0110.415] LocalFree (hMem=0x3020e48) returned 0x0
	[0110.415] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.415] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.415] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.415] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.421] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.421] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.421] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.422] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.422] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.422] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.422] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c9
	[0110.422] GetFileType (hFile=0x170) returned 0x3
	[0110.422] LocalAlloc (uFlags=0x0, uBytes=0x392) returned 0x3020e18
	[0110.422] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: SENS\r\nDISPLAY_NAME: System Event Notification Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=457, lpMultiByteStr=0x3020e18, cbMultiByte=914, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: SENS\r\nDISPLAY_NAME: System Event Notification Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n0x0\r\n        PID                : 1372\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 457
	[0110.422] WriteFile (in: hFile=0x170, lpBuffer=0x3020e18*, nNumberOfBytesToWrite=0x1c9, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020e18*, lpNumberOfBytesWritten=0x2d0f914*=0x1c9, lpOverlapped=0x0) returned 1
	[0110.422] LocalFree (hMem=0x3020e18) returned 0x0
	[0110.422] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.423] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.423] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.423] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.423] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.423] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.423] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.423] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.423] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.423] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.423] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1cc
	[0110.423] GetFileType (hFile=0x170) returned 0x3
	[0110.424] LocalAlloc (uFlags=0x0, uBytes=0x398) returned 0x3020430
	[0110.424] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: ShellHWDetection\r\nDISPLAY_NAME: Shell Hardware Detection\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=460, lpMultiByteStr=0x3020430, cbMultiByte=920, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: ShellHWDetection\r\nDISPLAY_NAME: Shell Hardware Detection\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 460
	[0110.424] WriteFile (in: hFile=0x170, lpBuffer=0x3020430*, nNumberOfBytesToWrite=0x1cc, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020430*, lpNumberOfBytesWritten=0x2d0f914*=0x1cc, lpOverlapped=0x0) returned 1
	[0110.426] LocalFree (hMem=0x3020430) returned 0x0
	[0110.426] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.426] _ultow (in: _Dest=0x110, _Radix=47249952 | out: _Dest=0x110) returned="110"
	[0110.426] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.426] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.426] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.426] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.426] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.427] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.427] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.427] _ultow (in: _Dest=0x5c4, _Radix=47249760 | out: _Dest=0x5c4) returned="1476"
	[0110.427] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c5
	[0110.427] GetFileType (hFile=0x170) returned 0x3
	[0110.427] LocalAlloc (uFlags=0x0, uBytes=0x38a) returned 0x301fce0
	[0110.427] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Spooler\r\nDISPLAY_NAME: Print Spooler\r\n        TYPE               : 110  WIN32_OWN_PROCESS  (interactive)\r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1476\r\n        FLAGS              : \r\n", cchWideChar=453, lpMultiByteStr=0x301fce0, cbMultiByte=906, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Spooler\r\nDISPLAY_NAME: Print Spooler\r\n        TYPE               : 110  WIN32_OWN_PROCESS  (interactive)\r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1476\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 453
	[0110.427] WriteFile (in: hFile=0x170, lpBuffer=0x301fce0*, nNumberOfBytesToWrite=0x1c5, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301fce0*, lpNumberOfBytesWritten=0x2d0f914*=0x1c5, lpOverlapped=0x0) returned 1
	[0110.427] LocalFree (hMem=0x301fce0) returned 0x0
	[0110.427] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.428] _ultow (in: _Dest=0x10, _Radix=47249952 | out: _Dest=0x10) returned="10"
	[0110.428] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.428] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.428] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.428] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.428] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.428] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.428] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.428] _ultow (in: _Dest=0xf10, _Radix=47249760 | out: _Dest=0xf10) returned="3856"
	[0110.428] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1bc
	[0110.428] GetFileType (hFile=0x170) returned 0x3
	[0110.428] LocalAlloc (uFlags=0x0, uBytes=0x378) returned 0x301ce10
	[0110.429] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: sppsvc\r\nDISPLAY_NAME: Software Protection\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 3856\r\n        FLAGS              : \r\n", cchWideChar=444, lpMultiByteStr=0x301ce10, cbMultiByte=888, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: sppsvc\r\nDISPLAY_NAME: Software Protection\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 3856\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 444
	[0110.429] WriteFile (in: hFile=0x170, lpBuffer=0x301ce10*, nNumberOfBytesToWrite=0x1bc, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301ce10*, lpNumberOfBytesWritten=0x2d0f914*=0x1bc, lpOverlapped=0x0) returned 1
	[0110.429] LocalFree (hMem=0x301ce10) returned 0x0
	[0110.429] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.429] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.429] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.429] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.429] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.429] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.429] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.429] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.430] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.430] _ultow (in: _Dest=0xa98, _Radix=47249760 | out: _Dest=0xa98) returned="2712"
	[0110.430] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1ba
	[0110.430] GetFileType (hFile=0x170) returned 0x3
	[0110.430] LocalAlloc (uFlags=0x0, uBytes=0x374) returned 0x301ca88
	[0110.430] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: SSDPSRV\r\nDISPLAY_NAME: SSDP Discovery\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 2712\r\n        FLAGS              : \r\n", cchWideChar=442, lpMultiByteStr=0x301ca88, cbMultiByte=884, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: SSDPSRV\r\nDISPLAY_NAME: SSDP Discovery\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 2712\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 442
	[0110.430] WriteFile (in: hFile=0x170, lpBuffer=0x301ca88*, nNumberOfBytesToWrite=0x1ba, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301ca88*, lpNumberOfBytesWritten=0x2d0f914*=0x1ba, lpOverlapped=0x0) returned 1
	[0110.430] LocalFree (hMem=0x301ca88) returned 0x0
	[0110.430] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.430] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.430] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.431] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.431] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.431] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.431] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.431] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.431] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.431] _ultow (in: _Dest=0x5f0, _Radix=47249760 | out: _Dest=0x5f0) returned="1520"
	[0110.434] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1cc
	[0110.434] GetFileType (hFile=0x170) returned 0x3
	[0110.434] LocalAlloc (uFlags=0x0, uBytes=0x398) returned 0x301ea98
	[0110.434] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: StateRepository\r\nDISPLAY_NAME: State Repository Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1520\r\n        FLAGS              : \r\n", cchWideChar=460, lpMultiByteStr=0x301ea98, cbMultiByte=920, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: StateRepository\r\nDISPLAY_NAME: State Repository Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1520\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 460
	[0110.434] WriteFile (in: hFile=0x170, lpBuffer=0x301ea98*, nNumberOfBytesToWrite=0x1cc, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301ea98*, lpNumberOfBytesWritten=0x2d0f914*=0x1cc, lpOverlapped=0x0) returned 1
	[0110.435] LocalFree (hMem=0x301ea98) returned 0x0
	[0110.435] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.435] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.435] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.435] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.435] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.435] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.435] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.435] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.435] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.435] _ultow (in: _Dest=0x12c, _Radix=47249760 | out: _Dest=0x12c) returned="300"
	[0110.436] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1b5
	[0110.436] GetFileType (hFile=0x170) returned 0x3
	[0110.436] LocalAlloc (uFlags=0x0, uBytes=0x36a) returned 0x301d8a8
	[0110.436] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: SysMain\r\nDISPLAY_NAME: Superfetch\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n", cchWideChar=437, lpMultiByteStr=0x301d8a8, cbMultiByte=874, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: SysMain\r\nDISPLAY_NAME: Superfetch\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n       : \r\n", lpUsedDefaultChar=0x0) returned 437
	[0110.436] WriteFile (in: hFile=0x170, lpBuffer=0x301d8a8*, nNumberOfBytesToWrite=0x1b5, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301d8a8*, lpNumberOfBytesWritten=0x2d0f914*=0x1b5, lpOverlapped=0x0) returned 1
	[0110.436] LocalFree (hMem=0x301d8a8) returned 0x0
	[0110.436] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.436] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.436] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.436] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.436] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.437] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.437] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.437] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.437] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.437] _ultow (in: _Dest=0x2b4, _Radix=47249760 | out: _Dest=0x2b4) returned="692"
	[0110.437] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1ca
	[0110.437] GetFileType (hFile=0x170) returned 0x3
	[0110.437] LocalAlloc (uFlags=0x0, uBytes=0x394) returned 0x3020430
	[0110.437] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: SystemEventsBroker\r\nDISPLAY_NAME: System Events Broker\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 692\r\n        FLAGS              : \r\n", cchWideChar=458, lpMultiByteStr=0x3020430, cbMultiByte=916, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: SystemEventsBroker\r\nDISPLAY_NAME: System Events Broker\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 692\r\n        FLAGS              : \r\n\r\n", lpUsedDefaultChar=0x0) returned 458
	[0110.437] WriteFile (in: hFile=0x170, lpBuffer=0x3020430*, nNumberOfBytesToWrite=0x1ca, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020430*, lpNumberOfBytesWritten=0x2d0f914*=0x1ca, lpOverlapped=0x0) returned 1
	[0110.438] LocalFree (hMem=0x3020430) returned 0x0
	[0110.438] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.438] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.438] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.438] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.438] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.438] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.438] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.438] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.438] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.438] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.438] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1b0
	[0110.438] GetFileType (hFile=0x170) returned 0x3
	[0110.439] LocalAlloc (uFlags=0x0, uBytes=0x360) returned 0x301c360
	[0110.439] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Themes\r\nDISPLAY_NAME: Themes\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=432, lpMultiByteStr=0x301c360, cbMultiByte=864, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Themes\r\nDISPLAY_NAME: Themes\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n\r\nH", lpUsedDefaultChar=0x0) returned 432
	[0110.439] WriteFile (in: hFile=0x170, lpBuffer=0x301c360*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301c360*, lpNumberOfBytesWritten=0x2d0f914*=0x1b0, lpOverlapped=0x0) returned 1
	[0110.439] LocalFree (hMem=0x301c360) returned 0x0
	[0110.439] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.439] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.439] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.439] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.439] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.439] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.440] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.440] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.440] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.440] _ultow (in: _Dest=0x5f0, _Radix=47249760 | out: _Dest=0x5f0) returned="1520"
	[0110.440] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1ce
	[0110.440] GetFileType (hFile=0x170) returned 0x3
	[0110.440] LocalAlloc (uFlags=0x0, uBytes=0x39c) returned 0x301f590
	[0110.440] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: tiledatamodelsvc\r\nDISPLAY_NAME: Tile Data model server\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1520\r\n        FLAGS              : \r\n", cchWideChar=462, lpMultiByteStr=0x301f590, cbMultiByte=924, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: tiledatamodelsvc\r\nDISPLAY_NAME: Tile Data model server\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1520\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 462
	[0110.440] WriteFile (in: hFile=0x170, lpBuffer=0x301f590*, nNumberOfBytesToWrite=0x1ce, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301f590*, lpNumberOfBytesWritten=0x2d0f914*=0x1ce, lpOverlapped=0x0) returned 1
	[0110.440] LocalFree (hMem=0x301f590) returned 0x0
	[0110.440] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.440] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.440] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.440] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.441] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.441] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.441] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.441] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.441] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.441] _ultow (in: _Dest=0x3f4, _Radix=47249760 | out: _Dest=0x3f4) returned="1012"
	[0110.441] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1bd
	[0110.441] GetFileType (hFile=0x170) returned 0x3
	[0110.441] LocalAlloc (uFlags=0x0, uBytes=0x37a) returned 0x301d198
	[0110.441] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: TimeBrokerSvc\r\nDISPLAY_NAME: Time Broker\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1012\r\n        FLAGS              : \r\n", cchWideChar=445, lpMultiByteStr=0x301d198, cbMultiByte=890, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: TimeBrokerSvc\r\nDISPLAY_NAME: Time Broker\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1012\r\n        FLAGS              : \r\n\r\n", lpUsedDefaultChar=0x0) returned 445
	[0110.441] WriteFile (in: hFile=0x170, lpBuffer=0x301d198*, nNumberOfBytesToWrite=0x1bd, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301d198*, lpNumberOfBytesWritten=0x2d0f914*=0x1bd, lpOverlapped=0x0) returned 1
	[0110.441] LocalFree (hMem=0x301d198) returned 0x0
	[0110.441] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.442] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.442] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.442] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.442] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.442] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.442] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.442] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.442] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.442] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.442] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1ba
	[0110.442] GetFileType (hFile=0x170) returned 0x3
	[0110.442] LocalAlloc (uFlags=0x0, uBytes=0x374) returned 0x301ca88
	[0110.442] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: TokenBroker\r\nDISPLAY_NAME: TokenBroker\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=442, lpMultiByteStr=0x301ca88, cbMultiByte=884, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: TokenBroker\r\nDISPLAY_NAME: TokenBroker\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 442
	[0110.442] WriteFile (in: hFile=0x170, lpBuffer=0x301ca88*, nNumberOfBytesToWrite=0x1ba, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301ca88*, lpNumberOfBytesWritten=0x2d0f914*=0x1ba, lpOverlapped=0x0) returned 1
	[0110.443] LocalFree (hMem=0x301ca88) returned 0x0
	[0110.443] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.443] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.443] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.443] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.443] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.443] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.443] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.444] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.444] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.444] _ultow (in: _Dest=0x12c, _Radix=47249760 | out: _Dest=0x12c) returned="300"
	[0110.444] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1ca
	[0110.444] GetFileType (hFile=0x170) returned 0x3
	[0110.444] LocalAlloc (uFlags=0x0, uBytes=0x394) returned 0x301fce0
	[0110.444] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: TrkWks\r\nDISPLAY_NAME: Distributed Link Tracking Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n", cchWideChar=458, lpMultiByteStr=0x301fce0, cbMultiByte=916, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: TrkWks\r\nDISPLAY_NAME: Distributed Link Tracking Client\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 300\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 458
	[0110.444] WriteFile (in: hFile=0x170, lpBuffer=0x301fce0*, nNumberOfBytesToWrite=0x1ca, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301fce0*, lpNumberOfBytesWritten=0x2d0f914*=0x1ca, lpOverlapped=0x0) returned 1
	[0110.444] LocalFree (hMem=0x301fce0) returned 0x0
	[0110.444] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.444] _ultow (in: _Dest=0x10, _Radix=47249952 | out: _Dest=0x10) returned="10"
	[0110.444] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.444] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.445] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.445] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.445] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.445] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.445] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.445] _ultow (in: _Dest=0xc14, _Radix=47249760 | out: _Dest=0xc14) returned="3092"
	[0110.445] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1cf
	[0110.445] GetFileType (hFile=0x170) returned 0x3
	[0110.445] LocalAlloc (uFlags=0x0, uBytes=0x39e) returned 0x3020088
	[0110.445] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: TrustedInstaller\r\nDISPLAY_NAME: Windows Modules Installer\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 3092\r\n        FLAGS              : \r\n", cchWideChar=463, lpMultiByteStr=0x3020088, cbMultiByte=926, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: TrustedInstaller\r\nDISPLAY_NAME: Windows Modules Installer\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 3092\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 463
	[0110.445] WriteFile (in: hFile=0x170, lpBuffer=0x3020088*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020088*, lpNumberOfBytesWritten=0x2d0f914*=0x1cf, lpOverlapped=0x0) returned 1
	[0110.445] LocalFree (hMem=0x3020088) returned 0x0
	[0110.445] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.446] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.446] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.446] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.446] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.446] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.446] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.446] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.446] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.446] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.446] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1bb
	[0110.446] GetFileType (hFile=0x170) returned 0x3
	[0110.446] LocalAlloc (uFlags=0x0, uBytes=0x376) returned 0x301d8a8
	[0110.446] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: UserManager\r\nDISPLAY_NAME: User Manager\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=443, lpMultiByteStr=0x301d8a8, cbMultiByte=886, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: UserManager\r\nDISPLAY_NAME: User Manager\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n : \r\n", lpUsedDefaultChar=0x0) returned 443
	[0110.446] WriteFile (in: hFile=0x170, lpBuffer=0x301d8a8*, nNumberOfBytesToWrite=0x1bb, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301d8a8*, lpNumberOfBytesWritten=0x2d0f914*=0x1bb, lpOverlapped=0x0) returned 1
	[0110.447] LocalFree (hMem=0x301d8a8) returned 0x0
	[0110.447] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.447] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.447] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.448] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.448] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.448] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.448] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.448] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.448] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.448] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.448] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c5
	[0110.448] GetFileType (hFile=0x170) returned 0x3
	[0110.448] LocalAlloc (uFlags=0x0, uBytes=0x38a) returned 0x301f938
	[0110.448] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: UsoSvc\r\nDISPLAY_NAME: Update Orchestrator Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=453, lpMultiByteStr=0x301f938, cbMultiByte=906, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: UsoSvc\r\nDISPLAY_NAME: Update Orchestrator Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 453
	[0110.448] WriteFile (in: hFile=0x170, lpBuffer=0x301f938*, nNumberOfBytesToWrite=0x1c5, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301f938*, lpNumberOfBytesWritten=0x2d0f914*=0x1c5, lpOverlapped=0x0) returned 1
	[0110.448] LocalFree (hMem=0x301f938) returned 0x0
	[0110.448] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.449] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.449] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.449] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.449] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.449] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.449] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.449] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.449] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.449] _ultow (in: _Dest=0x258, _Radix=47249760 | out: _Dest=0x258) returned="600"
	[0110.449] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1d4
	[0110.449] GetFileType (hFile=0x170) returned 0x3
	[0110.449] LocalAlloc (uFlags=0x0, uBytes=0x3a8) returned 0x3020e30
	[0110.449] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: VaultSvc\r\nDISPLAY_NAME: Credential Manager\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 600\r\n        FLAGS              : RUNS_IN_SYSTEM_PROCESS\r\n", cchWideChar=468, lpMultiByteStr=0x3020e30, cbMultiByte=936, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: VaultSvc\r\nDISPLAY_NAME: Credential Manager\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 600\r\n        FLAGS              : RUNS_IN_SYSTEM_PROCESS\r\n372\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 468
	[0110.449] WriteFile (in: hFile=0x170, lpBuffer=0x3020e30*, nNumberOfBytesToWrite=0x1d4, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020e30*, lpNumberOfBytesWritten=0x2d0f914*=0x1d4, lpOverlapped=0x0) returned 1
	[0110.450] LocalFree (hMem=0x3020e30) returned 0x0
	[0110.450] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.450] _ultow (in: _Dest=0x10, _Radix=47249952 | out: _Dest=0x10) returned="10"
	[0110.450] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.450] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.450] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.450] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.450] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.450] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.450] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.450] _ultow (in: _Dest=0x538, _Radix=47249760 | out: _Dest=0x538) returned="1336"
	[0110.450] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c3
	[0110.450] GetFileType (hFile=0x170) returned 0x3
	[0110.450] LocalAlloc (uFlags=0x0, uBytes=0x386) returned 0x301ea98
	[0110.451] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Wcmsvc\r\nDISPLAY_NAME: Windows Connection Manager\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1336\r\n        FLAGS              : \r\n", cchWideChar=451, lpMultiByteStr=0x301ea98, cbMultiByte=902, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Wcmsvc\r\nDISPLAY_NAME: Windows Connection Manager\r\n        TYPE               : 10  WIN32_OWN_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1336\r\n        FLAGS              : \r\n     : \r\n", lpUsedDefaultChar=0x0) returned 451
	[0110.451] WriteFile (in: hFile=0x170, lpBuffer=0x301ea98*, nNumberOfBytesToWrite=0x1c3, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301ea98*, lpNumberOfBytesWritten=0x2d0f914*=0x1c3, lpOverlapped=0x0) returned 1
	[0110.451] LocalFree (hMem=0x301ea98) returned 0x0
	[0110.451] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.451] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.451] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.451] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.451] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.451] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.451] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.451] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.451] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.451] _ultow (in: _Dest=0x170, _Radix=47249760 | out: _Dest=0x170) returned="368"
	[0110.451] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c9
	[0110.452] GetFileType (hFile=0x170) returned 0x3
	[0110.452] LocalAlloc (uFlags=0x0, uBytes=0x392) returned 0x3020430
	[0110.452] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: WdiServiceHost\r\nDISPLAY_NAME: Diagnostic Service Host\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n", cchWideChar=457, lpMultiByteStr=0x3020430, cbMultiByte=914, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: WdiServiceHost\r\nDISPLAY_NAME: Diagnostic Service Host\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n\n\r\n", lpUsedDefaultChar=0x0) returned 457
	[0110.452] WriteFile (in: hFile=0x170, lpBuffer=0x3020430*, nNumberOfBytesToWrite=0x1c9, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020430*, lpNumberOfBytesWritten=0x2d0f914*=0x1c9, lpOverlapped=0x0) returned 1
	[0110.452] LocalFree (hMem=0x3020430) returned 0x0
	[0110.452] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.452] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.452] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.452] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.452] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.452] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.452] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.452] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.452] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.453] _ultow (in: _Dest=0x170, _Radix=47249760 | out: _Dest=0x170) returned="368"
	[0110.453] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1df
	[0110.453] GetFileType (hFile=0x170) returned 0x3
	[0110.453] LocalAlloc (uFlags=0x0, uBytes=0x3be) returned 0x3020e40
	[0110.453] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: WinHttpAutoProxySvc\r\nDISPLAY_NAME: WinHTTP Web Proxy Auto-Discovery Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n", cchWideChar=479, lpMultiByteStr=0x3020e40, cbMultiByte=958, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: WinHttpAutoProxySvc\r\nDISPLAY_NAME: WinHTTP Web Proxy Auto-Discovery Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 368\r\n        FLAGS              : \r\n     : \r\n", lpUsedDefaultChar=0x0) returned 479
	[0110.453] WriteFile (in: hFile=0x170, lpBuffer=0x3020e40*, nNumberOfBytesToWrite=0x1df, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3020e40*, lpNumberOfBytesWritten=0x2d0f914*=0x1df, lpOverlapped=0x0) returned 1
	[0110.453] LocalFree (hMem=0x3020e40) returned 0x0
	[0110.453] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.453] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.453] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.453] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.453] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.453] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.453] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.454] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.454] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.454] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.454] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1c9
	[0110.454] GetFileType (hFile=0x170) returned 0x3
	[0110.454] LocalAlloc (uFlags=0x0, uBytes=0x392) returned 0x301f1e8
	[0110.454] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: Winmgmt\r\nDISPLAY_NAME: Windows Management Instrumentation\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=457, lpMultiByteStr=0x301f1e8, cbMultiByte=914, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: Winmgmt\r\nDISPLAY_NAME: Windows Management Instrumentation\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 457
	[0110.454] WriteFile (in: hFile=0x170, lpBuffer=0x301f1e8*, nNumberOfBytesToWrite=0x1c9, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301f1e8*, lpNumberOfBytesWritten=0x2d0f914*=0x1c9, lpOverlapped=0x0) returned 1
	[0110.455] LocalFree (hMem=0x301f1e8) returned 0x0
	[0110.455] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.455] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.455] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.455] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.455] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.455] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.455] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.455] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.455] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.455] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.456] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="੸̂\x83") returned 0x1d7
	[0110.456] GetFileType (hFile=0x170) returned 0x3
	[0110.456] LocalAlloc (uFlags=0x0, uBytes=0x3ae) returned 0x30228d0
	[0110.456] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: WpnService\r\nDISPLAY_NAME: Windows Push Notifications System Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=471, lpMultiByteStr=0x30228d0, cbMultiByte=942, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: WpnService\r\nDISPLAY_NAME: Windows Push Notifications System Service\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 471
	[0110.456] WriteFile (in: hFile=0x170, lpBuffer=0x30228d0*, nNumberOfBytesToWrite=0x1d7, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x30228d0*, lpNumberOfBytesWritten=0x2d0f914*=0x1d7, lpOverlapped=0x0) returned 1
	[0110.456] LocalFree (hMem=0x30228d0) returned 0x0
	[0110.456] LocalFree (hMem=0x3020a78) returned 0x0
	[0110.456] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.456] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.456] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.456] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.456] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.456] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.456] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.457] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.457] _ultow (in: _Dest=0x3f4, _Radix=47249760 | out: _Dest=0x3f4) returned="1012"
	[0110.457] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="⸸̂\x83") returned 0x1be
	[0110.457] GetFileType (hFile=0x170) returned 0x3
	[0110.457] LocalAlloc (uFlags=0x0, uBytes=0x37c) returned 0x301ce10
	[0110.457] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: wscsvc\r\nDISPLAY_NAME: Security Center\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1012\r\n        FLAGS              : \r\n", cchWideChar=446, lpMultiByteStr=0x301ce10, cbMultiByte=892, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: wscsvc\r\nDISPLAY_NAME: Security Center\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1012\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 446
	[0110.457] WriteFile (in: hFile=0x170, lpBuffer=0x301ce10*, nNumberOfBytesToWrite=0x1be, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301ce10*, lpNumberOfBytesWritten=0x2d0f914*=0x1be, lpOverlapped=0x0) returned 1
	[0110.457] LocalFree (hMem=0x301ce10) returned 0x0
	[0110.458] LocalFree (hMem=0x3022e38) returned 0x0
	[0110.458] _ultow (in: _Dest=0x20, _Radix=47249952 | out: _Dest=0x20) returned="20"
	[0110.458] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.458] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.458] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.458] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.458] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.458] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.458] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.458] _ultow (in: _Dest=0x3c0, _Radix=47249760 | out: _Dest=0x3c0) returned="960"
	[0110.458] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="⸸̂\x83") returned 0x1ba
	[0110.458] GetFileType (hFile=0x170) returned 0x3
	[0110.458] LocalAlloc (uFlags=0x0, uBytes=0x374) returned 0x301ce10
	[0110.458] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: wuauserv\r\nDISPLAY_NAME: Windows Update\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n", cchWideChar=442, lpMultiByteStr=0x301ce10, cbMultiByte=884, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: wuauserv\r\nDISPLAY_NAME: Windows Update\r\n        TYPE               : 20  WIN32_SHARE_PROCESS  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 960\r\n        FLAGS              : \r\n: \r\n", lpUsedDefaultChar=0x0) returned 442
	[0110.458] WriteFile (in: hFile=0x170, lpBuffer=0x301ce10*, nNumberOfBytesToWrite=0x1ba, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301ce10*, lpNumberOfBytesWritten=0x2d0f914*=0x1ba, lpOverlapped=0x0) returned 1
	[0110.459] LocalFree (hMem=0x301ce10) returned 0x0
	[0110.459] LocalFree (hMem=0x3022e38) returned 0x0
	[0110.459] _ultow (in: _Dest=0xe0, _Radix=47249952 | out: _Dest=0xe0) returned="e0"
	[0110.459] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.459] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.459] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.459] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.459] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.459] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.459] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.459] _ultow (in: _Dest=0x718, _Radix=47249760 | out: _Dest=0x718) returned="1816"
	[0110.459] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="⸸̂\x83") returned 0x1cd
	[0110.459] GetFileType (hFile=0x170) returned 0x3
	[0110.459] LocalAlloc (uFlags=0x0, uBytes=0x39a) returned 0x301f1e8
	[0110.459] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: CDPUserSvc_13047\r\nDISPLAY_NAME: CDPUserSvc_13047\r\n        TYPE               : e0  USER_SHARE_PROCESS INSTANCE  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1816\r\n        FLAGS              : \r\n", cchWideChar=461, lpMultiByteStr=0x301f1e8, cbMultiByte=922, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: CDPUserSvc_13047\r\nDISPLAY_NAME: CDPUserSvc_13047\r\n        TYPE               : e0  USER_SHARE_PROCESS INSTANCE  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1816\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 461
	[0110.460] WriteFile (in: hFile=0x170, lpBuffer=0x301f1e8*, nNumberOfBytesToWrite=0x1cd, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x301f1e8*, lpNumberOfBytesWritten=0x2d0f914*=0x1cd, lpOverlapped=0x0) returned 1
	[0110.460] LocalFree (hMem=0x301f1e8) returned 0x0
	[0110.460] LocalFree (hMem=0x3022e38) returned 0x0
	[0110.460] _ultow (in: _Dest=0xe0, _Radix=47249952 | out: _Dest=0xe0) returned="e0"
	[0110.460] _ultow (in: _Dest=0x2, _Radix=47249928 | out: _Dest=0x2) returned="2"
	[0110.460] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.460] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.460] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.460] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.460] _ultow (in: _Dest=0x1, _Radix=47249808 | out: _Dest=0x1) returned="1"
	[0110.460] _ultow (in: _Dest=0xbb8, _Radix=47249784 | out: _Dest=0xbb8) returned="bb8"
	[0110.460] _ultow (in: _Dest=0x718, _Radix=47249760 | out: _Dest=0x718) returned="1816"
	[0110.460] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="⸸̂\x83") returned 0x1d9
	[0110.460] GetFileType (hFile=0x170) returned 0x3
	[0110.460] LocalAlloc (uFlags=0x0, uBytes=0x3b2) returned 0x30231f8
	[0110.461] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: OneSyncSvc_13047\r\nDISPLAY_NAME: OneSyncSvc_13047\r\n        TYPE               : e0  USER_SHARE_PROCESS INSTANCE  \r\n        STATE              : 2  START_PENDING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x1\r\n        WAIT_HINT          : 0xbb8\r\n        PID                : 1816\r\n        FLAGS              : \r\n", cchWideChar=473, lpMultiByteStr=0x30231f8, cbMultiByte=946, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: OneSyncSvc_13047\r\nDISPLAY_NAME: OneSyncSvc_13047\r\n        TYPE               : e0  USER_SHARE_PROCESS INSTANCE  \r\n        STATE              : 2  START_PENDING \r\n                                (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x1\r\n        WAIT_HINT          : 0xbb8\r\n        PID                : 1816\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 473
	[0110.461] WriteFile (in: hFile=0x170, lpBuffer=0x30231f8*, nNumberOfBytesToWrite=0x1d9, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x30231f8*, lpNumberOfBytesWritten=0x2d0f914*=0x1d9, lpOverlapped=0x0) returned 1
	[0110.461] LocalFree (hMem=0x30231f8) returned 0x0
	[0110.461] LocalFree (hMem=0x3022e38) returned 0x0
	[0110.461] _ultow (in: _Dest=0xe0, _Radix=47249952 | out: _Dest=0xe0) returned="e0"
	[0110.461] _ultow (in: _Dest=0x4, _Radix=47249928 | out: _Dest=0x4) returned="4"
	[0110.461] _ultow (in: _Dest=0x0, _Radix=47249904 | out: _Dest=0x0) returned="0"
	[0110.461] _ultow (in: _Dest=0x0, _Radix=47249880 | out: _Dest=0x0) returned="0"
	[0110.461] _ultow (in: _Dest=0x0, _Radix=47249856 | out: _Dest=0x0) returned="0"
	[0110.461] _ultow (in: _Dest=0x0, _Radix=47249832 | out: _Dest=0x0) returned="0"
	[0110.461] _ultow (in: _Dest=0x0, _Radix=47249808 | out: _Dest=0x0) returned="0"
	[0110.461] _ultow (in: _Dest=0x0, _Radix=47249784 | out: _Dest=0x0) returned="0"
	[0110.461] _ultow (in: _Dest=0x718, _Radix=47249760 | out: _Dest=0x718) returned="1816"
	[0110.461] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x32, dwLanguageId=0x0, lpBuffer=0x2d0f910, nSize=0x2, Arguments=0x2d0f918 | out: lpBuffer="⸸̂\x83") returned 0x1d8
	[0110.462] GetFileType (hFile=0x170) returned 0x3
	[0110.462] LocalAlloc (uFlags=0x0, uBytes=0x3b0) returned 0x3021d78
	[0110.462] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="\r\nSERVICE_NAME: WpnUserService_13047\r\nDISPLAY_NAME: WpnUserService_13047\r\n        TYPE               : e0  USER_SHARE_PROCESS INSTANCE  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1816\r\n        FLAGS              : \r\n", cchWideChar=472, lpMultiByteStr=0x3021d78, cbMultiByte=944, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nSERVICE_NAME: WpnUserService_13047\r\nDISPLAY_NAME: WpnUserService_13047\r\n        TYPE               : e0  USER_SHARE_PROCESS INSTANCE  \r\n        STATE              : 4  RUNNING \r\n                                (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)\r\n        WIN32_EXIT_CODE    : 0  (0x0)\r\n        SERVICE_EXIT_CODE  : 0  (0x0)\r\n        CHECKPOINT         : 0x0\r\n        WAIT_HINT          : 0x0\r\n        PID                : 1816\r\n        FLAGS              : \r\n", lpUsedDefaultChar=0x0) returned 472
	[0110.462] WriteFile (in: hFile=0x170, lpBuffer=0x3021d78*, nNumberOfBytesToWrite=0x1d8, lpNumberOfBytesWritten=0x2d0f914, lpOverlapped=0x0 | out: lpBuffer=0x3021d78*, lpNumberOfBytesWritten=0x2d0f914*=0x1d8, lpOverlapped=0x0) returned 1
	[0110.462] LocalFree (hMem=0x3021d78) returned 0x0
	[0110.462] LocalFree (hMem=0x3022e38) returned 0x0
	[0110.462] LocalFree (hMem=0x30158b8) returned 0x0
	[0110.462] CloseServiceHandle (hSCObject=0x3016c60) returned 1
	[0110.464] LocalFree (hMem=0x0) returned 0x0
	[0110.464] exit (_Code=0) 

Thread:
	id = 14
	os_tid = 0x504


Process:
	id = "3"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x13245000"
	os_pid = "0xe0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0xc48"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 9
	os_tid = 0xd4c


Thread:
	id = 10
	os_tid = 0x3d8


Thread:
	id = 11
	os_tid = 0xd38


Thread:
	id = 12
	os_tid = 0xf0c


Thread:
	id = 13
	os_tid = 0xfbc


Process:
	id = "4"
	image_name = "vssadmin.exe"
	filename = "c:\\windows\\syswow64\\vssadmin.exe"
	page_root = "0xd5a9000"
	os_pid = "0x824"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xcf0"
	cmd_line = "vssadmin delete shadows /all /quiet"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 15
	os_tid = 0xd30


Thread:
	id = 22
	os_tid = 0xeb0


Thread:
	id = 23
	os_tid = 0xff8


Thread:
	id = 25
	os_tid = 0x270


Thread:
	id = 26
	os_tid = 0xda4


Thread:
	id = 27
	os_tid = 0xa5c


Process:
	id = "5"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0xdaab000"
	os_pid = "0x9d8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "4"
	os_parent_pid = "0x824"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 16
	os_tid = 0x7bc


Thread:
	id = 17
	os_tid = 0x8f0


Thread:
	id = 19
	os_tid = 0x9fc


Thread:
	id = 20
	os_tid = 0x8e8


Thread:
	id = 21
	os_tid = 0xf7c